@rapidmx/web-client 0.20.0 → 0.22.0

package/apps/escrow/matters/[uid].tsx

@@ -1,621 +1,621 @@
-///////////////////////////////////////////////////////////////////////////////
-// Copyright (C) 2026 Jean-Philippe Steinmetz
-// SPDX-License-Identifier: MPL-2.0
-///////////////////////////////////////////////////////////////////////////////
-import React, { FormEvent, useEffect, useRef, useState } from "react";
-import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { closeMatter, getMatter, Matter } from "@rapidmx/react-shared/admin/mattersApi.js";
-import {
-    approveAccessRequest,
-    createAccessRequest,
-    denyAccessRequest,
-    EscrowAccessRequest,
-    getAccessRequestMaterial,
-    listAccessRequests,
-} from "@rapidmx/react-shared/admin/escrowAccessRequestsApi.js";
-import {
-    createMatterExportRequest,
-    listMatterExportRequests,
-    matterExportRequestDownloadUrl,
-} from "@rapidmx/react-shared/admin/matterExportApi.js";
-import { searchMatter, SearchResultPage } from "@rapidmx/react-shared/admin/matterSearchApi.js";
-import { parseSearchQuery } from "@rapidmx/react-shared/search/queryGrammar.js";
-import EscrowShell, { EscrowShellProps } from "../../shared/components/escrow/layout/EscrowShell.js";
-import { LoadMoreButton, usePagedList } from "../../shared/components/admin/usePagedList.js";
-import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
-import Button from "@rapidmx/react-shared/components/buttons/Button.js";
-import FormField from "@rapidmx/react-shared/components/forms/FormField.js";
-import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
-
-const INPUT_CLASS =
-    "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
-
-/** Request statuses still waiting or running - shown as a neutral in-progress badge, never as success. Includes
- * restapi's `processing` (exports/imports) and `in_progress` (an erasure that is running). */
-const IN_PROGRESS_STATUSES = new Set(["pending", "processing", "in_progress"]);
-
-function statusBadgeClass(status: string): string {
-    if (status === "failed" || status === "denied") return "bg-danger-bg text-danger";
-    if (IN_PROGRESS_STATUSES.has(status)) return "bg-surface-alt text-text-muted";
-    return "bg-success text-white";
-}
-
-/** A status as shown on its badge (`in_progress` -> `in progress`). */
-function statusLabel(status: string): string {
-    return status.replace(/_/g, " ");
-}
-
-export default function MatterDetailPage(props: Omit<EscrowShellProps, "active"> & { params: { uid: string } }) {
-    return (
-        <EscrowShell {...props} active="matters">
-            <MatterDetailContent uid={props.params.uid} />
-        </EscrowShell>
-    );
-}
-
-function formatDateRange(matter: Matter): string {
-    return `${new Date(matter.dateRangeStart).toLocaleDateString()} – ${new Date(matter.dateRangeEnd).toLocaleDateString()}`;
-}
-
-function MatterDetailContent({ uid }: { uid: string }) {
-    const [matter, setMatter] = useState<Matter | null>(null);
-    const [loading, setLoading] = useState(true);
-    const [error, setError] = useState<string | null>(null);
-
-    // Both lists are fetched for this matter only (`matterId`), newest first, a page at a time. Rows are still
-    // checked against this matter in case an older server ignores the filter.
-    const requests = usePagedList(
-        (params) => listAccessRequests({ ...params, matterId: uid }),
-        "Could not load this matter's access requests.",
-    );
-    const exportRequests = usePagedList(
-        (params) => listMatterExportRequests({ ...params, matterId: uid }),
-        "Could not load this matter's export requests.",
-    );
-
-    const [confirmingClose, setConfirmingClose] = useState(false);
-    const [closing, setClosing] = useState(false);
-    const [closeError, setCloseError] = useState<string | null>(null);
-    const [approveTarget, setApproveTarget] = useState<EscrowAccessRequest | null>(null);
-
-    const [showNewRequest, setShowNewRequest] = useState(false);
-    const [newRequestMailboxUid, setNewRequestMailboxUid] = useState("");
-    const [creatingRequest, setCreatingRequest] = useState(false);
-    const [newRequestError, setNewRequestError] = useState<string | null>(null);
-
-    // Keyed by request uid — several rows can be independently mid-action at once.
-    const [actionErrors, setActionErrors] = useState<Record<string, string>>({});
-    const [actingOn, setActingOn] = useState<Record<string, boolean>>({});
-
-    const [materialFor, setMaterialFor] = useState<EscrowAccessRequest | null>(null);
-    const [materialText, setMaterialText] = useState("");
-    const [materialError, setMaterialError] = useState<string | null>(null);
-    const [loadingMaterial, setLoadingMaterial] = useState(false);
-    // Bumped whenever the material modal closes (or the matter does), so a slow "Get material" response for a
-    // modal that's already gone - or for an earlier request - is never shown.
-    const materialSeq = useRef(0);
-
-    const [creatingExport, setCreatingExport] = useState(false);
-    const [exportError, setExportError] = useState<string | null>(null);
-
-    const [searchText, setSearchText] = useState("");
-    const [searching, setSearching] = useState(false);
-    const [searchError, setSearchError] = useState<string | null>(null);
-    const [searchResults, setSearchResults] = useState<Record<string, SearchResultPage> | null>(null);
-    // Bumped by every search and by closing the matter, so a search still in flight when the matter closes (or
-    // superseded by a newer search) never shows its results.
-    const searchSeq = useRef(0);
-
-    useEffect(() => {
-        setLoading(true);
-        setError(null);
-        getMatter(uid)
-            .then(setMatter)
-            .catch((err) => setError(err instanceof ApiRequestError ? err.message : "Could not load this matter."))
-            .finally(() => setLoading(false));
-        void requests.reload();
-        void exportRequests.reload();
-    }, [uid]);
-
-    // Only ever invoked from the close-confirmation modal below, which itself only renders once `matter` is
-    // resolved (children only render once loaded — see the early returns further down) — the non-null
-    // assertion reflects that real invariant, not an unchecked assumption.
-    async function handleClose() {
-        setClosing(true);
-        setCloseError(null);
-        try {
-            const updated = await closeMatter(matter!.uid);
-            setMatter(updated);
-            setConfirmingClose(false);
-            // Nothing more may be read under a closed matter - drop any material or search results already on
-            // screen, including a search still in flight, and any approval still being confirmed.
-            closeMaterialModal();
-            searchSeq.current++;
-            setSearchResults(null);
-            setSearching(false);
-        } catch (err) {
-            setCloseError(err instanceof ApiRequestError ? err.message : "Could not close this matter.");
-        } finally {
-            setClosing(false);
-        }
-    }
-
-    function closeCloseModal() {
-        setConfirmingClose(false);
-        setCloseError(null);
-    }
-
-    async function handleCreateRequest(e: FormEvent) {
-        e.preventDefault();
-        setNewRequestError(null);
-        if (!newRequestMailboxUid.trim()) {
-            setNewRequestError("A mailbox uid is required.");
-            return;
-        }
-        setCreatingRequest(true);
-        try {
-            await createAccessRequest({ matterId: uid, mailboxUid: newRequestMailboxUid.trim() });
-            setShowNewRequest(false);
-            setNewRequestMailboxUid("");
-            void requests.reload();
-        } catch (err) {
-            setNewRequestError(err instanceof ApiRequestError ? err.message : "Could not create this access request.");
-        } finally {
-            setCreatingRequest(false);
-        }
-    }
-
-    // Only ever invoked from the approve-confirmation modal below, which only renders once `approveTarget` is set.
-    async function handleApprove() {
-        const request = approveTarget!;
-        setApproveTarget(null);
-        setActingOn((prev) => ({ ...prev, [request.uid]: true }));
-        setActionErrors((prev) => ({ ...prev, [request.uid]: "" }));
-        try {
-            const updated = await approveAccessRequest(request.uid);
-            requests.replaceItem(updated);
-        } catch (err) {
-            setActionErrors((prev) => ({
-                ...prev,
-                [request.uid]: err instanceof ApiRequestError ? err.message : "Could not approve this request.",
-            }));
-        } finally {
-            setActingOn((prev) => ({ ...prev, [request.uid]: false }));
-        }
-    }
-
-    async function handleDeny(request: EscrowAccessRequest) {
-        setActingOn((prev) => ({ ...prev, [request.uid]: true }));
-        setActionErrors((prev) => ({ ...prev, [request.uid]: "" }));
-        try {
-            const updated = await denyAccessRequest(request.uid);
-            requests.replaceItem(updated);
-        } catch (err) {
-            setActionErrors((prev) => ({
-                ...prev,
-                [request.uid]: err instanceof ApiRequestError ? err.message : "Could not deny this request.",
-            }));
-        } finally {
-            setActingOn((prev) => ({ ...prev, [request.uid]: false }));
-        }
-    }
-
-    async function handleGetMaterial(request: EscrowAccessRequest) {
-        const seq = ++materialSeq.current;
-        setMaterialFor(request);
-        setMaterialText("");
-        setMaterialError(null);
-        setLoadingMaterial(true);
-        try {
-            const material = await getAccessRequestMaterial(request.uid);
-            if (seq === materialSeq.current) setMaterialText(JSON.stringify(material.masterKeyWraps, null, 2));
-        } catch (err) {
-            if (seq === materialSeq.current) {
-                setMaterialError(err instanceof ApiRequestError ? err.message : "Could not read this request's material.");
-            }
-        } finally {
-            if (seq === materialSeq.current) setLoadingMaterial(false);
-        }
-    }
-
-    function closeMaterialModal() {
-        materialSeq.current++;
-        setMaterialFor(null);
-        setMaterialText("");
-        setMaterialError(null);
-        setLoadingMaterial(false);
-    }
-
-    async function handleCreateExport() {
-        setExportError(null);
-        setCreatingExport(true);
-        try {
-            await createMatterExportRequest(uid);
-            void exportRequests.reload();
-        } catch (err) {
-            setExportError(err instanceof ApiRequestError ? err.message : "Could not start this export.");
-        } finally {
-            setCreatingExport(false);
-        }
-    }
-
-    async function handleSearch(e: FormEvent) {
-        e.preventDefault();
-        const seq = ++searchSeq.current;
-        setSearchError(null);
-        setSearching(true);
-        try {
-            // Same "parse the operator grammar once, client-side, before hitting the server" convention
-            // apps/www/index.tsx's own inbox search already establishes - searchMatter()/buildSearchParams()
-            // expect the caller to have already extracted operators into discrete params, not embedded in
-            // the raw `q` text (see queryGrammar.ts's own doc comment). Passing the unparsed box text
-            // straight through, as this previously did, silently treated e.g. "from:alice@example.com" as
-            // four literal free-text words instead of a sender filter.
-            const parsed = parseSearchQuery(searchText);
-            const results = await searchMatter(uid, parsed.text, {
-                types: parsed.entityTypes,
-                from: parsed.from,
-                to: parsed.to,
-                cc: parsed.cc,
-                subject: parsed.subject,
-                hasAttachment: parsed.hasAttachment,
-                before: parsed.before,
-                after: parsed.after,
-                folderUid: parsed.folderUid,
-                flags: parsed.flags,
-                labels: parsed.labels,
-            });
-            if (seq === searchSeq.current) setSearchResults(results);
-        } catch (err) {
-            if (seq === searchSeq.current) {
-                setSearchError(err instanceof ApiRequestError ? err.message : "Could not search this matter.");
-            }
-        } finally {
-            if (seq === searchSeq.current) setSearching(false);
-        }
-    }
-
-    if (loading) {
-        return <p className="text-sm text-text-muted">Loading&hellip;</p>;
-    }
-    if (error || !matter) {
-        return <Alert>{error ?? "Matter not found."}</Alert>;
-    }
-
-    const matterRequests = requests.items.filter((request) => request.matterId === uid);
-    const matterExportRequests = exportRequests.items.filter((request) => request.matterId === uid);
-
-    return (
-        <div className="max-w-4xl flex flex-col gap-5">
-            <div className="flex items-start justify-between gap-4">
-                <div>
-                    <a href="/escrow" className="text-sm text-primary-dark hover:underline">
-                        &larr; All matters
-                    </a>
-                    <h1 className="text-xl font-bold tracking-tight mt-1">{matter.name}</h1>
-                </div>
-                {!matter.closedAt && (
-                    <Button
-                        type="button"
-                        variant="secondary"
-                        className="!w-auto shrink-0"
-                        onClick={() => setConfirmingClose(true)}
-                    >
-                        Close matter
-                    </Button>
-                )}
-            </div>
-
-            <div className="bg-surface border border-border rounded-md p-6">
-                <dl className="grid grid-cols-1 sm:grid-cols-2 gap-x-6 gap-y-3 text-sm">
-                    <dt className="text-text-muted">Description</dt>
-                    <dd>{matter.description ?? "None"}</dd>
-                    <dt className="text-text-muted">Escrow scope</dt>
-                    <dd className="font-mono text-xs">{matter.escrowScopeId}</dd>
-                    <dt className="text-text-muted">Custodian mailboxes</dt>
-                    <dd>{matter.custodianMailboxUids.join(", ")}</dd>
-                    <dt className="text-text-muted">Date range</dt>
-                    <dd>{formatDateRange(matter)}</dd>
-                    <dt className="text-text-muted">Status</dt>
-                    <dd>{matter.closedAt ? `Closed ${new Date(matter.closedAt).toLocaleString()}` : "Open"}</dd>
-                </dl>
-            </div>
-
-            <div className="bg-surface border border-border rounded-md p-6">
-                <div className="flex items-center justify-between mb-3">
-                    <h2 className="text-base font-bold uppercase tracking-wide">Access requests</h2>
-                    {!matter.closedAt && (
-                        <Button type="button" className="!w-auto" onClick={() => setShowNewRequest(true)}>
-                            + New access request
-                        </Button>
-                    )}
-                </div>
-
-                {requests.loadError && <Alert>{requests.loadError}</Alert>}
-                {matterRequests.length === 0 ? (
-                    <p className="text-sm text-text-muted">{requests.loading ? "Loading…" : "No access requests yet."}</p>
-                ) : (
-                    <ul className="flex flex-col gap-3">
-                        {matterRequests.map((request) => (
-                            <li key={request.uid} className="border border-border rounded-sm p-4">
-                                <div className="flex items-center justify-between gap-3 flex-wrap">
-                                    <div>
-                                        <div className="text-sm font-semibold">{request.mailboxUid}</div>
-                                        <div className="text-xs text-text-muted">
-                                            {request.approvals.length} of {request.requiredHoldersAtCreation} approvals
-                                            &middot; requested by {request.requestedByUserUid}
-                                        </div>
-                                    </div>
-                                    <span
-                                        className={[
-                                            "text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill",
-                                            request.status === "denied"
-                                                ? "bg-danger-bg text-danger"
-                                                : request.status === "pending"
-                                                  ? "bg-surface-alt text-text-muted"
-                                                  : "bg-success text-white",
-                                        ].join(" ")}
-                                    >
-                                        {request.status}
-                                    </span>
-                                </div>
-
-                                {actionErrors[request.uid] && <Alert>{actionErrors[request.uid]}</Alert>}
-
-                                <div className="flex gap-3 mt-3">
-                                    {/* A closed matter refuses approvals and denials - don't offer them. */}
-                                    {!matter.closedAt && request.status === "pending" && (
-                                        <>
-                                            <Button
-                                                type="button"
-                                                className="!w-auto"
-                                                loading={actingOn[request.uid]}
-                                                disabled={actingOn[request.uid]}
-                                                onClick={() => setApproveTarget(request)}
-                                            >
-                                                Approve
-                                            </Button>
-                                            <Button
-                                                type="button"
-                                                variant="secondary"
-                                                className="!w-auto"
-                                                loading={actingOn[request.uid]}
-                                                disabled={actingOn[request.uid]}
-                                                onClick={() => handleDeny(request)}
-                                            >
-                                                Deny
-                                            </Button>
-                                        </>
-                                    )}
-                                    {!matter.closedAt && (request.status === "approved" || request.status === "fulfilled") && (
-                                        <Button
-                                            type="button"
-                                            variant="secondary"
-                                            className="!w-auto"
-                                            onClick={() => handleGetMaterial(request)}
-                                        >
-                                            Get material
-                                        </Button>
-                                    )}
-                                </div>
-                            </li>
-                        ))}
-                    </ul>
-                )}
-                <LoadMoreButton list={requests} label="Load more access requests" />
-            </div>
-
-            <div className="bg-surface border border-border rounded-md p-6">
-                <div className="flex items-center justify-between mb-3">
-                    <h2 className="text-base font-bold uppercase tracking-wide">Export this matter</h2>
-                    {!matter.closedAt && (
-                        <Button type="button" className="!w-auto" loading={creatingExport} disabled={creatingExport} onClick={handleCreateExport}>
-                            + New export
-                        </Button>
-                    )}
-                </div>
-                <p className="text-xs text-text-muted mb-3">
-                    Exports messages (narrowed to this matter&rsquo;s own date range), plus full contacts,
-                    calendar events, tasks, and notes, from every custodian mailbox actually assigned to this
-                    matter&rsquo;s escrow scope, as one combined NDJSON file.
-                </p>
-                {exportError && <Alert>{exportError}</Alert>}
-                {exportRequests.loadError && <Alert>{exportRequests.loadError}</Alert>}
-                {matterExportRequests.length === 0 ? (
-                    <p className="text-sm text-text-muted">{exportRequests.loading ? "Loading…" : "No export requests yet."}</p>
-                ) : (
-                    <ul className="flex flex-col gap-2">
-                        {matterExportRequests.map((request) => (
-                            <li
-                                key={request.uid}
-                                className="flex items-center justify-between gap-3 text-sm py-1.5 px-3 bg-surface-alt rounded-sm"
-                            >
-                                <span>
-                                    {new Date(request.dateCreated).toLocaleString()}
-                                    {request.status === "failed" && request.errorMessage && (
-                                        <span className="text-danger"> — {request.errorMessage}</span>
-                                    )}
-                                </span>
-                                <span className="flex items-center gap-3">
-                                    <span
-                                        className={`text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill ${statusBadgeClass(request.status)}`}
-                                    >
-                                        {statusLabel(request.status)}
-                                    </span>
-                                    {/* The server refuses downloads once the matter is closed. */}
-                                    {!matter.closedAt && request.status === "ready" && (
-                                        <a
-                                            href={matterExportRequestDownloadUrl(request.uid)}
-                                            className="text-primary-dark hover:underline font-medium"
-                                        >
-                                            Download
-                                        </a>
-                                    )}
-                                </span>
-                            </li>
-                        ))}
-                    </ul>
-                )}
-            </div>
-
-            <div className="bg-surface border border-border rounded-md p-6">
-                <h2 className="text-base font-bold uppercase tracking-wide mb-3">Search this matter&rsquo;s custodians</h2>
-                {matter.closedAt ? (
-                    <p className="text-sm text-text-muted">This matter is closed, so its custodians can no longer be searched or exported.</p>
-                ) : (
-                    <form onSubmit={handleSearch} className="flex gap-3 mb-4">
-                        <input
-                            aria-label="Search this matter"
-                            className={INPUT_CLASS}
-                            value={searchText}
-                            onChange={(e) => setSearchText(e.target.value)}
-                            placeholder="Free text or an operator filter, e.g. from:alice@example.com"
-                        />
-                        <Button type="submit" className="!w-auto shrink-0" loading={searching} disabled={searching || !searchText.trim()}>
-                            Search
-                        </Button>
-                    </form>
-                )}
-                {searchError && <Alert>{searchError}</Alert>}
-                {searchResults &&
-                    (Object.keys(searchResults).length === 0 ? (
-                        <p className="text-sm text-text-muted">No custodian mailboxes could be searched.</p>
-                    ) : (
-                        <div className="flex flex-col gap-4">
-                            {Object.entries(searchResults).map(([mailboxUid, page]) => (
-                                <div key={mailboxUid}>
-                                    <h3 className="text-sm font-semibold mb-2">{mailboxUid}</h3>
-                                    {page.results.length === 0 ? (
-                                        <p className="text-xs text-text-muted">No matches.</p>
-                                    ) : (
-                                        <ul className="flex flex-col gap-1">
-                                            {page.results.map((result) => (
-                                                <li
-                                                    key={`${result.entityType}-${result.entityUid}`}
-                                                    className="text-sm py-1 px-2 bg-surface-alt rounded-sm"
-                                                >
-                                                    {result.entityType} &middot; {result.entityUid}
-                                                    {result.snippet && <span className="text-text-muted"> — {result.snippet}</span>}
-                                                </li>
-                                            ))}
-                                        </ul>
-                                    )}
-                                </div>
-                            ))}
-                        </div>
-                    ))}
-            </div>
-
-            <Modal open={confirmingClose} onClose={closeCloseModal} title="Close matter">
-                <p className="text-sm mb-3">
-                    Close <strong>{matter.name}</strong>? Once closed, no new access requests, exports, searches, or key
-                    material reads are allowed under it. This cannot be reopened here.
-                </p>
-                <dl className="grid grid-cols-[auto_1fr] gap-x-4 gap-y-1 text-sm mb-4">
-                    <dt className="text-text-muted">Custodians</dt>
-                    <dd className="break-all">{matter.custodianMailboxUids.join(", ")}</dd>
-                    <dt className="text-text-muted">Date range</dt>
-                    <dd>{formatDateRange(matter)}</dd>
-                </dl>
-                {closeError && <Alert>{closeError}</Alert>}
-                <div className="flex gap-3 justify-end">
-                    <Button type="button" variant="secondary" className="!w-auto" disabled={closing} onClick={closeCloseModal}>
-                        Cancel
-                    </Button>
-                    <Button
-                        type="button"
-                        className="!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger"
-                        loading={closing}
-                        disabled={closing}
-                        onClick={handleClose}
-                    >
-                        Close matter
-                    </Button>
-                </div>
-            </Modal>
-
-            <Modal open={approveTarget !== null} onClose={() => setApproveTarget(null)} title="Approve access request">
-                <p className="text-sm mb-3">
-                    Approving lets holders of this matter&rsquo;s escrow scope read the key material for this mailbox once
-                    enough holders have approved.
-                </p>
-                <dl className="grid grid-cols-[auto_1fr] gap-x-4 gap-y-1 text-sm mb-4">
-                    <dt className="text-text-muted">Matter</dt>
-                    <dd>{matter.name}</dd>
-                    <dt className="text-text-muted">Mailbox</dt>
-                    <dd className="break-all">{approveTarget?.mailboxUid}</dd>
-                    <dt className="text-text-muted">Date range</dt>
-                    <dd>{formatDateRange(matter)}</dd>
-                    <dt className="text-text-muted">Approvals</dt>
-                    <dd>
-                        {approveTarget?.approvals.length} of {approveTarget?.requiredHoldersAtCreation} so far, including
-                        requester {approveTarget?.requestedByUserUid}
-                    </dd>
-                </dl>
-                <div className="flex gap-3 justify-end">
-                    <Button type="button" variant="secondary" className="!w-auto" onClick={() => setApproveTarget(null)}>
-                        Cancel
-                    </Button>
-                    <Button type="button" className="!w-auto" onClick={() => void handleApprove()}>
-                        Approve request
-                    </Button>
-                </div>
-            </Modal>
-
-            <Modal open={showNewRequest} onClose={() => setShowNewRequest(false)} title="New access request">
-                <form onSubmit={handleCreateRequest} className="flex flex-col gap-4">
-                    {newRequestError && <Alert>{newRequestError}</Alert>}
-                    <FormField label="Mailbox uid" htmlFor="newRequestMailboxUid">
-                        <input
-                            id="newRequestMailboxUid"
-                            type="text"
-                            className={INPUT_CLASS}
-                            value={newRequestMailboxUid}
-                            onChange={(e) => setNewRequestMailboxUid(e.target.value)}
-                        />
-                    </FormField>
-                    <p className="text-xs text-text-muted">
-                        Must be one of this matter's own custodian mailboxes, currently assigned to this matter's
-                        escrow scope. Your own creation counts as the first approval.
-                    </p>
-                    <div className="flex gap-3 justify-end">
-                        <Button
-                            type="button"
-                            variant="secondary"
-                            className="!w-auto"
-                            disabled={creatingRequest}
-                            onClick={() => setShowNewRequest(false)}
-                        >
-                            Cancel
-                        </Button>
-                        <Button type="submit" className="!w-auto" loading={creatingRequest} disabled={creatingRequest}>
-                            Create request
-                        </Button>
-                    </div>
-                </form>
-            </Modal>
-
-            <Modal open={materialFor !== null} onClose={closeMaterialModal} title="Escrow key material">
-                {/* Deliberately raw JSON, not a decrypt/viewer UI: this console never attempts to decrypt
-                    anything, per specs/end-to-end_encryption.md's "this server never holds the scope's
-                    private key" - the holder is expected to copy this into their own offline tooling. See
-                    this session's own report for this documented scope trim. */}
-                {loadingMaterial ? (
-                    <p className="text-sm text-text-muted">Loading&hellip;</p>
-                ) : materialError ? (
-                    <Alert>{materialError}</Alert>
-                ) : (
-                    <>
-                        <p className="text-sm text-text-muted mb-3">
-                            Still-encrypted master key wraps for <strong>{materialFor?.mailboxUid}</strong> — this
-                            server cannot decrypt these either. Copy the JSON below into your own offline tooling.
-                        </p>
-                        <pre className="text-xs font-mono bg-surface-alt border border-border rounded-sm p-3 overflow-x-auto whitespace-pre-wrap break-all">
-                            {materialText}
-                        </pre>
-                    </>
-                )}
-            </Modal>
-        </div>
-    );
-}
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import React, { FormEvent, useEffect, useRef, useState } from "react";
+import { ApiRequestError } from "../../../lib/util/api.js";
+import { closeMatter, getMatter, Matter } from "../../../lib/admin/mattersApi.js";
+import {
+    approveAccessRequest,
+    createAccessRequest,
+    denyAccessRequest,
+    EscrowAccessRequest,
+    getAccessRequestMaterial,
+    listAccessRequests,
+} from "../../../lib/admin/escrowAccessRequestsApi.js";
+import {
+    createMatterExportRequest,
+    listMatterExportRequests,
+    matterExportRequestDownloadUrl,
+} from "../../../lib/admin/matterExportApi.js";
+import { searchMatter, SearchResultPage } from "../../../lib/admin/matterSearchApi.js";
+import { parseSearchQuery } from "../../../lib/search/queryGrammar.js";
+import EscrowShell, { EscrowShellProps } from "../../shared/components/escrow/layout/EscrowShell.js";
+import { LoadMoreButton, usePagedList } from "../../shared/components/admin/usePagedList.js";
+import Alert from "../../../lib/components/feedback/Alert.js";
+import Button from "../../../lib/components/buttons/Button.js";
+import FormField from "../../../lib/components/forms/FormField.js";
+import Modal from "../../../lib/components/overlays/Modal.js";
+
+const INPUT_CLASS =
+    "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
+
+/** Request statuses still waiting or running - shown as a neutral in-progress badge, never as success. Includes
+ * restapi's `processing` (exports/imports) and `in_progress` (an erasure that is running). */
+const IN_PROGRESS_STATUSES = new Set(["pending", "processing", "in_progress"]);
+
+function statusBadgeClass(status: string): string {
+    if (status === "failed" || status === "denied") return "bg-danger-bg text-danger";
+    if (IN_PROGRESS_STATUSES.has(status)) return "bg-surface-alt text-text-muted";
+    return "bg-success text-white";
+}
+
+/** A status as shown on its badge (`in_progress` -> `in progress`). */
+function statusLabel(status: string): string {
+    return status.replace(/_/g, " ");
+}
+
+export default function MatterDetailPage(props: Omit<EscrowShellProps, "active"> & { params: { uid: string } }) {
+    return (
+        <EscrowShell {...props} active="matters">
+            <MatterDetailContent uid={props.params.uid} />
+        </EscrowShell>
+    );
+}
+
+function formatDateRange(matter: Matter): string {
+    return `${new Date(matter.dateRangeStart).toLocaleDateString()} – ${new Date(matter.dateRangeEnd).toLocaleDateString()}`;
+}
+
+function MatterDetailContent({ uid }: { uid: string }) {
+    const [matter, setMatter] = useState<Matter | null>(null);
+    const [loading, setLoading] = useState(true);
+    const [error, setError] = useState<string | null>(null);
+
+    // Both lists are fetched for this matter only (`matterId`), newest first, a page at a time. Rows are still
+    // checked against this matter in case an older server ignores the filter.
+    const requests = usePagedList(
+        (params) => listAccessRequests({ ...params, matterId: uid }),
+        "Could not load this matter's access requests.",
+    );
+    const exportRequests = usePagedList(
+        (params) => listMatterExportRequests({ ...params, matterId: uid }),
+        "Could not load this matter's export requests.",
+    );
+
+    const [confirmingClose, setConfirmingClose] = useState(false);
+    const [closing, setClosing] = useState(false);
+    const [closeError, setCloseError] = useState<string | null>(null);
+    const [approveTarget, setApproveTarget] = useState<EscrowAccessRequest | null>(null);
+
+    const [showNewRequest, setShowNewRequest] = useState(false);
+    const [newRequestMailboxUid, setNewRequestMailboxUid] = useState("");
+    const [creatingRequest, setCreatingRequest] = useState(false);
+    const [newRequestError, setNewRequestError] = useState<string | null>(null);
+
+    // Keyed by request uid — several rows can be independently mid-action at once.
+    const [actionErrors, setActionErrors] = useState<Record<string, string>>({});
+    const [actingOn, setActingOn] = useState<Record<string, boolean>>({});
+
+    const [materialFor, setMaterialFor] = useState<EscrowAccessRequest | null>(null);
+    const [materialText, setMaterialText] = useState("");
+    const [materialError, setMaterialError] = useState<string | null>(null);
+    const [loadingMaterial, setLoadingMaterial] = useState(false);
+    // Bumped whenever the material modal closes (or the matter does), so a slow "Get material" response for a
+    // modal that's already gone - or for an earlier request - is never shown.
+    const materialSeq = useRef(0);
+
+    const [creatingExport, setCreatingExport] = useState(false);
+    const [exportError, setExportError] = useState<string | null>(null);
+
+    const [searchText, setSearchText] = useState("");
+    const [searching, setSearching] = useState(false);
+    const [searchError, setSearchError] = useState<string | null>(null);
+    const [searchResults, setSearchResults] = useState<Record<string, SearchResultPage> | null>(null);
+    // Bumped by every search and by closing the matter, so a search still in flight when the matter closes (or
+    // superseded by a newer search) never shows its results.
+    const searchSeq = useRef(0);
+
+    useEffect(() => {
+        setLoading(true);
+        setError(null);
+        getMatter(uid)
+            .then(setMatter)
+            .catch((err) => setError(err instanceof ApiRequestError ? err.message : "Could not load this matter."))
+            .finally(() => setLoading(false));
+        void requests.reload();
+        void exportRequests.reload();
+    }, [uid]);
+
+    // Only ever invoked from the close-confirmation modal below, which itself only renders once `matter` is
+    // resolved (children only render once loaded — see the early returns further down) — the non-null
+    // assertion reflects that real invariant, not an unchecked assumption.
+    async function handleClose() {
+        setClosing(true);
+        setCloseError(null);
+        try {
+            const updated = await closeMatter(matter!.uid);
+            setMatter(updated);
+            setConfirmingClose(false);
+            // Nothing more may be read under a closed matter - drop any material or search results already on
+            // screen, including a search still in flight, and any approval still being confirmed.
+            closeMaterialModal();
+            searchSeq.current++;
+            setSearchResults(null);
+            setSearching(false);
+        } catch (err) {
+            setCloseError(err instanceof ApiRequestError ? err.message : "Could not close this matter.");
+        } finally {
+            setClosing(false);
+        }
+    }
+
+    function closeCloseModal() {
+        setConfirmingClose(false);
+        setCloseError(null);
+    }
+
+    async function handleCreateRequest(e: FormEvent) {
+        e.preventDefault();
+        setNewRequestError(null);
+        if (!newRequestMailboxUid.trim()) {
+            setNewRequestError("A mailbox uid is required.");
+            return;
+        }
+        setCreatingRequest(true);
+        try {
+            await createAccessRequest({ matterId: uid, mailboxUid: newRequestMailboxUid.trim() });
+            setShowNewRequest(false);
+            setNewRequestMailboxUid("");
+            void requests.reload();
+        } catch (err) {
+            setNewRequestError(err instanceof ApiRequestError ? err.message : "Could not create this access request.");
+        } finally {
+            setCreatingRequest(false);
+        }
+    }
+
+    // Only ever invoked from the approve-confirmation modal below, which only renders once `approveTarget` is set.
+    async function handleApprove() {
+        const request = approveTarget!;
+        setApproveTarget(null);
+        setActingOn((prev) => ({ ...prev, [request.uid]: true }));
+        setActionErrors((prev) => ({ ...prev, [request.uid]: "" }));
+        try {
+            const updated = await approveAccessRequest(request.uid);
+            requests.replaceItem(updated);
+        } catch (err) {
+            setActionErrors((prev) => ({
+                ...prev,
+                [request.uid]: err instanceof ApiRequestError ? err.message : "Could not approve this request.",
+            }));
+        } finally {
+            setActingOn((prev) => ({ ...prev, [request.uid]: false }));
+        }
+    }
+
+    async function handleDeny(request: EscrowAccessRequest) {
+        setActingOn((prev) => ({ ...prev, [request.uid]: true }));
+        setActionErrors((prev) => ({ ...prev, [request.uid]: "" }));
+        try {
+            const updated = await denyAccessRequest(request.uid);
+            requests.replaceItem(updated);
+        } catch (err) {
+            setActionErrors((prev) => ({
+                ...prev,
+                [request.uid]: err instanceof ApiRequestError ? err.message : "Could not deny this request.",
+            }));
+        } finally {
+            setActingOn((prev) => ({ ...prev, [request.uid]: false }));
+        }
+    }
+
+    async function handleGetMaterial(request: EscrowAccessRequest) {
+        const seq = ++materialSeq.current;
+        setMaterialFor(request);
+        setMaterialText("");
+        setMaterialError(null);
+        setLoadingMaterial(true);
+        try {
+            const material = await getAccessRequestMaterial(request.uid);
+            if (seq === materialSeq.current) setMaterialText(JSON.stringify(material.masterKeyWraps, null, 2));
+        } catch (err) {
+            if (seq === materialSeq.current) {
+                setMaterialError(err instanceof ApiRequestError ? err.message : "Could not read this request's material.");
+            }
+        } finally {
+            if (seq === materialSeq.current) setLoadingMaterial(false);
+        }
+    }
+
+    function closeMaterialModal() {
+        materialSeq.current++;
+        setMaterialFor(null);
+        setMaterialText("");
+        setMaterialError(null);
+        setLoadingMaterial(false);
+    }
+
+    async function handleCreateExport() {
+        setExportError(null);
+        setCreatingExport(true);
+        try {
+            await createMatterExportRequest(uid);
+            void exportRequests.reload();
+        } catch (err) {
+            setExportError(err instanceof ApiRequestError ? err.message : "Could not start this export.");
+        } finally {
+            setCreatingExport(false);
+        }
+    }
+
+    async function handleSearch(e: FormEvent) {
+        e.preventDefault();
+        const seq = ++searchSeq.current;
+        setSearchError(null);
+        setSearching(true);
+        try {
+            // Same "parse the operator grammar once, client-side, before hitting the server" convention
+            // apps/www/index.tsx's own inbox search already establishes - searchMatter()/buildSearchParams()
+            // expect the caller to have already extracted operators into discrete params, not embedded in
+            // the raw `q` text (see queryGrammar.ts's own doc comment). Passing the unparsed box text
+            // straight through, as this previously did, silently treated e.g. "from:alice@example.com" as
+            // four literal free-text words instead of a sender filter.
+            const parsed = parseSearchQuery(searchText);
+            const results = await searchMatter(uid, parsed.text, {
+                types: parsed.entityTypes,
+                from: parsed.from,
+                to: parsed.to,
+                cc: parsed.cc,
+                subject: parsed.subject,
+                hasAttachment: parsed.hasAttachment,
+                before: parsed.before,
+                after: parsed.after,
+                folderUid: parsed.folderUid,
+                flags: parsed.flags,
+                labels: parsed.labels,
+            });
+            if (seq === searchSeq.current) setSearchResults(results);
+        } catch (err) {
+            if (seq === searchSeq.current) {
+                setSearchError(err instanceof ApiRequestError ? err.message : "Could not search this matter.");
+            }
+        } finally {
+            if (seq === searchSeq.current) setSearching(false);
+        }
+    }
+
+    if (loading) {
+        return <p className="text-sm text-text-muted">Loading&hellip;</p>;
+    }
+    if (error || !matter) {
+        return <Alert>{error ?? "Matter not found."}</Alert>;
+    }
+
+    const matterRequests = requests.items.filter((request) => request.matterId === uid);
+    const matterExportRequests = exportRequests.items.filter((request) => request.matterId === uid);
+
+    return (
+        <div className="max-w-4xl flex flex-col gap-5">
+            <div className="flex items-start justify-between gap-4">
+                <div>
+                    <a href="/escrow" className="text-sm text-primary-dark hover:underline">
+                        &larr; All matters
+                    </a>
+                    <h1 className="text-xl font-bold tracking-tight mt-1">{matter.name}</h1>
+                </div>
+                {!matter.closedAt && (
+                    <Button
+                        type="button"
+                        variant="secondary"
+                        className="!w-auto shrink-0"
+                        onClick={() => setConfirmingClose(true)}
+                    >
+                        Close matter
+                    </Button>
+                )}
+            </div>
+
+            <div className="bg-surface border border-border rounded-md p-6">
+                <dl className="grid grid-cols-1 sm:grid-cols-2 gap-x-6 gap-y-3 text-sm">
+                    <dt className="text-text-muted">Description</dt>
+                    <dd>{matter.description ?? "None"}</dd>
+                    <dt className="text-text-muted">Escrow scope</dt>
+                    <dd className="font-mono text-xs">{matter.escrowScopeId}</dd>
+                    <dt className="text-text-muted">Custodian mailboxes</dt>
+                    <dd>{matter.custodianMailboxUids.join(", ")}</dd>
+                    <dt className="text-text-muted">Date range</dt>
+                    <dd>{formatDateRange(matter)}</dd>
+                    <dt className="text-text-muted">Status</dt>
+                    <dd>{matter.closedAt ? `Closed ${new Date(matter.closedAt).toLocaleString()}` : "Open"}</dd>
+                </dl>
+            </div>
+
+            <div className="bg-surface border border-border rounded-md p-6">
+                <div className="flex items-center justify-between mb-3">
+                    <h2 className="text-base font-bold uppercase tracking-wide">Access requests</h2>
+                    {!matter.closedAt && (
+                        <Button type="button" className="!w-auto" onClick={() => setShowNewRequest(true)}>
+                            + New access request
+                        </Button>
+                    )}
+                </div>
+
+                {requests.loadError && <Alert>{requests.loadError}</Alert>}
+                {matterRequests.length === 0 ? (
+                    <p className="text-sm text-text-muted">{requests.loading ? "Loading…" : "No access requests yet."}</p>
+                ) : (
+                    <ul className="flex flex-col gap-3">
+                        {matterRequests.map((request) => (
+                            <li key={request.uid} className="border border-border rounded-sm p-4">
+                                <div className="flex items-center justify-between gap-3 flex-wrap">
+                                    <div>
+                                        <div className="text-sm font-semibold">{request.mailboxUid}</div>
+                                        <div className="text-xs text-text-muted">
+                                            {request.approvals.length} of {request.requiredHoldersAtCreation} approvals
+                                            &middot; requested by {request.requestedByUserUid}
+                                        </div>
+                                    </div>
+                                    <span
+                                        className={[
+                                            "text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill",
+                                            request.status === "denied"
+                                                ? "bg-danger-bg text-danger"
+                                                : request.status === "pending"
+                                                  ? "bg-surface-alt text-text-muted"
+                                                  : "bg-success text-white",
+                                        ].join(" ")}
+                                    >
+                                        {request.status}
+                                    </span>
+                                </div>
+
+                                {actionErrors[request.uid] && <Alert>{actionErrors[request.uid]}</Alert>}
+
+                                <div className="flex gap-3 mt-3">
+                                    {/* A closed matter refuses approvals and denials - don't offer them. */}
+                                    {!matter.closedAt && request.status === "pending" && (
+                                        <>
+                                            <Button
+                                                type="button"
+                                                className="!w-auto"
+                                                loading={actingOn[request.uid]}
+                                                disabled={actingOn[request.uid]}
+                                                onClick={() => setApproveTarget(request)}
+                                            >
+                                                Approve
+                                            </Button>
+                                            <Button
+                                                type="button"
+                                                variant="secondary"
+                                                className="!w-auto"
+                                                loading={actingOn[request.uid]}
+                                                disabled={actingOn[request.uid]}
+                                                onClick={() => handleDeny(request)}
+                                            >
+                                                Deny
+                                            </Button>
+                                        </>
+                                    )}
+                                    {!matter.closedAt && (request.status === "approved" || request.status === "fulfilled") && (
+                                        <Button
+                                            type="button"
+                                            variant="secondary"
+                                            className="!w-auto"
+                                            onClick={() => handleGetMaterial(request)}
+                                        >
+                                            Get material
+                                        </Button>
+                                    )}
+                                </div>
+                            </li>
+                        ))}
+                    </ul>
+                )}
+                <LoadMoreButton list={requests} label="Load more access requests" />
+            </div>
+
+            <div className="bg-surface border border-border rounded-md p-6">
+                <div className="flex items-center justify-between mb-3">
+                    <h2 className="text-base font-bold uppercase tracking-wide">Export this matter</h2>
+                    {!matter.closedAt && (
+                        <Button type="button" className="!w-auto" loading={creatingExport} disabled={creatingExport} onClick={handleCreateExport}>
+                            + New export
+                        </Button>
+                    )}
+                </div>
+                <p className="text-xs text-text-muted mb-3">
+                    Exports messages (narrowed to this matter&rsquo;s own date range), plus full contacts,
+                    calendar events, tasks, and notes, from every custodian mailbox actually assigned to this
+                    matter&rsquo;s escrow scope, as one combined NDJSON file.
+                </p>
+                {exportError && <Alert>{exportError}</Alert>}
+                {exportRequests.loadError && <Alert>{exportRequests.loadError}</Alert>}
+                {matterExportRequests.length === 0 ? (
+                    <p className="text-sm text-text-muted">{exportRequests.loading ? "Loading…" : "No export requests yet."}</p>
+                ) : (
+                    <ul className="flex flex-col gap-2">
+                        {matterExportRequests.map((request) => (
+                            <li
+                                key={request.uid}
+                                className="flex items-center justify-between gap-3 text-sm py-1.5 px-3 bg-surface-alt rounded-sm"
+                            >
+                                <span>
+                                    {new Date(request.dateCreated).toLocaleString()}
+                                    {request.status === "failed" && request.errorMessage && (
+                                        <span className="text-danger"> — {request.errorMessage}</span>
+                                    )}
+                                </span>
+                                <span className="flex items-center gap-3">
+                                    <span
+                                        className={`text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill ${statusBadgeClass(request.status)}`}
+                                    >
+                                        {statusLabel(request.status)}
+                                    </span>
+                                    {/* The server refuses downloads once the matter is closed. */}
+                                    {!matter.closedAt && request.status === "ready" && (
+                                        <a
+                                            href={matterExportRequestDownloadUrl(request.uid)}
+                                            className="text-primary-dark hover:underline font-medium"
+                                        >
+                                            Download
+                                        </a>
+                                    )}
+                                </span>
+                            </li>
+                        ))}
+                    </ul>
+                )}
+            </div>
+
+            <div className="bg-surface border border-border rounded-md p-6">
+                <h2 className="text-base font-bold uppercase tracking-wide mb-3">Search this matter&rsquo;s custodians</h2>
+                {matter.closedAt ? (
+                    <p className="text-sm text-text-muted">This matter is closed, so its custodians can no longer be searched or exported.</p>
+                ) : (
+                    <form onSubmit={handleSearch} className="flex gap-3 mb-4">
+                        <input
+                            aria-label="Search this matter"
+                            className={INPUT_CLASS}
+                            value={searchText}
+                            onChange={(e) => setSearchText(e.target.value)}
+                            placeholder="Free text or an operator filter, e.g. from:alice@example.com"
+                        />
+                        <Button type="submit" className="!w-auto shrink-0" loading={searching} disabled={searching || !searchText.trim()}>
+                            Search
+                        </Button>
+                    </form>
+                )}
+                {searchError && <Alert>{searchError}</Alert>}
+                {searchResults &&
+                    (Object.keys(searchResults).length === 0 ? (
+                        <p className="text-sm text-text-muted">No custodian mailboxes could be searched.</p>
+                    ) : (
+                        <div className="flex flex-col gap-4">
+                            {Object.entries(searchResults).map(([mailboxUid, page]) => (
+                                <div key={mailboxUid}>
+                                    <h3 className="text-sm font-semibold mb-2">{mailboxUid}</h3>
+                                    {page.results.length === 0 ? (
+                                        <p className="text-xs text-text-muted">No matches.</p>
+                                    ) : (
+                                        <ul className="flex flex-col gap-1">
+                                            {page.results.map((result) => (
+                                                <li
+                                                    key={`${result.entityType}-${result.entityUid}`}
+                                                    className="text-sm py-1 px-2 bg-surface-alt rounded-sm"
+                                                >
+                                                    {result.entityType} &middot; {result.entityUid}
+                                                    {result.snippet && <span className="text-text-muted"> — {result.snippet}</span>}
+                                                </li>
+                                            ))}
+                                        </ul>
+                                    )}
+                                </div>
+                            ))}
+                        </div>
+                    ))}
+            </div>
+
+            <Modal open={confirmingClose} onClose={closeCloseModal} title="Close matter">
+                <p className="text-sm mb-3">
+                    Close <strong>{matter.name}</strong>? Once closed, no new access requests, exports, searches, or key
+                    material reads are allowed under it. This cannot be reopened here.
+                </p>
+                <dl className="grid grid-cols-[auto_1fr] gap-x-4 gap-y-1 text-sm mb-4">
+                    <dt className="text-text-muted">Custodians</dt>
+                    <dd className="break-all">{matter.custodianMailboxUids.join(", ")}</dd>
+                    <dt className="text-text-muted">Date range</dt>
+                    <dd>{formatDateRange(matter)}</dd>
+                </dl>
+                {closeError && <Alert>{closeError}</Alert>}
+                <div className="flex gap-3 justify-end">
+                    <Button type="button" variant="secondary" className="!w-auto" disabled={closing} onClick={closeCloseModal}>
+                        Cancel
+                    </Button>
+                    <Button
+                        type="button"
+                        className="!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger"
+                        loading={closing}
+                        disabled={closing}
+                        onClick={handleClose}
+                    >
+                        Close matter
+                    </Button>
+                </div>
+            </Modal>
+
+            <Modal open={approveTarget !== null} onClose={() => setApproveTarget(null)} title="Approve access request">
+                <p className="text-sm mb-3">
+                    Approving lets holders of this matter&rsquo;s escrow scope read the key material for this mailbox once
+                    enough holders have approved.
+                </p>
+                <dl className="grid grid-cols-[auto_1fr] gap-x-4 gap-y-1 text-sm mb-4">
+                    <dt className="text-text-muted">Matter</dt>
+                    <dd>{matter.name}</dd>
+                    <dt className="text-text-muted">Mailbox</dt>
+                    <dd className="break-all">{approveTarget?.mailboxUid}</dd>
+                    <dt className="text-text-muted">Date range</dt>
+                    <dd>{formatDateRange(matter)}</dd>
+                    <dt className="text-text-muted">Approvals</dt>
+                    <dd>
+                        {approveTarget?.approvals.length} of {approveTarget?.requiredHoldersAtCreation} so far, including
+                        requester {approveTarget?.requestedByUserUid}
+                    </dd>
+                </dl>
+                <div className="flex gap-3 justify-end">
+                    <Button type="button" variant="secondary" className="!w-auto" onClick={() => setApproveTarget(null)}>
+                        Cancel
+                    </Button>
+                    <Button type="button" className="!w-auto" onClick={() => void handleApprove()}>
+                        Approve request
+                    </Button>
+                </div>
+            </Modal>
+
+            <Modal open={showNewRequest} onClose={() => setShowNewRequest(false)} title="New access request">
+                <form onSubmit={handleCreateRequest} className="flex flex-col gap-4">
+                    {newRequestError && <Alert>{newRequestError}</Alert>}
+                    <FormField label="Mailbox uid" htmlFor="newRequestMailboxUid">
+                        <input
+                            id="newRequestMailboxUid"
+                            type="text"
+                            className={INPUT_CLASS}
+                            value={newRequestMailboxUid}
+                            onChange={(e) => setNewRequestMailboxUid(e.target.value)}
+                        />
+                    </FormField>
+                    <p className="text-xs text-text-muted">
+                        Must be one of this matter's own custodian mailboxes, currently assigned to this matter's
+                        escrow scope. Your own creation counts as the first approval.
+                    </p>
+                    <div className="flex gap-3 justify-end">
+                        <Button
+                            type="button"
+                            variant="secondary"
+                            className="!w-auto"
+                            disabled={creatingRequest}
+                            onClick={() => setShowNewRequest(false)}
+                        >
+                            Cancel
+                        </Button>
+                        <Button type="submit" className="!w-auto" loading={creatingRequest} disabled={creatingRequest}>
+                            Create request
+                        </Button>
+                    </div>
+                </form>
+            </Modal>
+
+            <Modal open={materialFor !== null} onClose={closeMaterialModal} title="Escrow key material">
+                {/* Deliberately raw JSON, not a decrypt/viewer UI: this console never attempts to decrypt
+                    anything, per specs/end-to-end_encryption.md's "this server never holds the scope's
+                    private key" - the holder is expected to copy this into their own offline tooling. See
+                    this session's own report for this documented scope trim. */}
+                {loadingMaterial ? (
+                    <p className="text-sm text-text-muted">Loading&hellip;</p>
+                ) : materialError ? (
+                    <Alert>{materialError}</Alert>
+                ) : (
+                    <>
+                        <p className="text-sm text-text-muted mb-3">
+                            Still-encrypted master key wraps for <strong>{materialFor?.mailboxUid}</strong> — this
+                            server cannot decrypt these either. Copy the JSON below into your own offline tooling.
+                        </p>
+                        <pre className="text-xs font-mono bg-surface-alt border border-border rounded-sm p-3 overflow-x-auto whitespace-pre-wrap break-all">
+                            {materialText}
+                        </pre>
+                    </>
+                )}
+            </Modal>
+        </div>
+    );
+}