@rapidmx/web-client 0.24.0 → 0.26.0

package/dist/apps/shared/components/settings/layout/SettingsShell.js

@@ -4,7 +4,7 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { createContext, useContext, useEffect, useMemo, useState } from "react";
-import { HiOutlineBars3 } from "react-icons/hi2";
+import { HiOutlineArrowUturnLeft, HiOutlineBars3, HiOutlineEnvelopeOpen, HiOutlineFunnel, HiOutlineLockClosed, HiOutlineNoSymbol, HiOutlinePaintBrush, HiOutlinePencilSquare, HiOutlinePuzzlePiece, HiOutlineShieldCheck, HiOutlineTag, HiOutlineUserCircle, HiOutlineUsers, } from "react-icons/hi2";
 import { ApiRequestError } from "../../../../../lib/util/api.js";
 import Drawer from "../../../../../lib/components/overlays/Drawer.js";
 import { listMailboxes } from "../../../../../lib/mail/mailApi.js";
@@ -18,17 +18,17 @@ import { orderMailboxes, primaryMailboxUid } from "../../../mail/primaryMailbox.
 import { mergePluginNavItems } from "../../../plugins/pluginNav.js";
 /** Every settings section with its own sidebar entry. */
 export const SETTINGS_SECTIONS = [
-    { id: "profile", href: "/settings/profile", label: "Profile" },
-    { id: "appearance", href: "/settings/appearance", label: "Appearance" },
-    { id: "auto-reply", href: "/settings/auto-reply", label: "Automatic Replies" },
-    { id: "filters", href: "/settings/filters", label: "Mail Filters" },
-    { id: "blocked-senders", href: "/settings/blocked-senders", label: "Blocked & Safe Senders" },
-    { id: "signatures", href: "/settings/signatures", label: "Signatures" },
-    { id: "labels", href: "/settings/labels", label: "Labels" },
-    { id: "read-receipts", href: "/settings/read-receipts", label: "Read Receipts" },
-    { id: "encryption", href: "/settings/encryption", label: "Encryption" },
-    { id: "sharing", href: "/settings/sharing", label: "Sharing" },
-    { id: "privacy", href: "/settings/privacy", label: "Privacy & Data" },
+    { id: "profile", href: "/settings/profile", label: "Profile", icon: HiOutlineUserCircle },
+    { id: "appearance", href: "/settings/appearance", label: "Appearance", icon: HiOutlinePaintBrush },
+    { id: "auto-reply", href: "/settings/auto-reply", label: "Automatic Replies", icon: HiOutlineArrowUturnLeft },
+    { id: "filters", href: "/settings/filters", label: "Mail Filters", icon: HiOutlineFunnel },
+    { id: "blocked-senders", href: "/settings/blocked-senders", label: "Blocked & Safe Senders", icon: HiOutlineNoSymbol },
+    { id: "signatures", href: "/settings/signatures", label: "Signatures", icon: HiOutlinePencilSquare },
+    { id: "labels", href: "/settings/labels", label: "Labels", icon: HiOutlineTag },
+    { id: "read-receipts", href: "/settings/read-receipts", label: "Read Receipts", icon: HiOutlineEnvelopeOpen },
+    { id: "encryption", href: "/settings/encryption", label: "Encryption", icon: HiOutlineLockClosed },
+    { id: "sharing", href: "/settings/sharing", label: "Sharing", icon: HiOutlineUsers },
+    { id: "privacy", href: "/settings/privacy", label: "Privacy & Data", icon: HiOutlineShieldCheck },
 ];
 /** `SETTINGS_SECTIONS` followed by the plugins' `settingsSections` items, core ids winning - see
  * `mergePluginNavItems`. */
@@ -37,6 +37,7 @@ export function settingsSections(pluginNav) {
         id,
         href,
         label,
+        icon: HiOutlinePuzzlePiece,
     }));
 }
 const SettingsShellContext = createContext({ mailboxes: [] });
@@ -111,7 +112,7 @@ export default function SettingsShell({ active, userUid, authServerUrl, imperson
                                 // server didn't send its nav item, so that falls back to the current path.
                                 const href = sections.find((s) => s.id === active)?.href ?? window.location.pathname;
                                 navigate(`${href}?mailboxUid=${encodeURIComponent(e.target.value)}`);
-                            }, children: mailboxes.map((mb) => (_jsxs("option", { value: mb.uid, children: [mb.displayName, mb.ownerUserUid ? "" : " (shared)"] }, mb.uid))) })] })), _jsx("nav", { "aria-label": "Settings sections", className: "flex flex-col gap-0.5", children: sections.map((section) => (_jsx("a", { 
+                            }, children: mailboxes.map((mb) => (_jsxs("option", { value: mb.uid, children: [mb.displayName, mb.ownerUserUid ? "" : " (shared)"] }, mb.uid))) })] })), _jsx("nav", { "aria-label": "Settings sections", className: "flex flex-col gap-0.5", children: sections.map((section) => (_jsxs("a", { 
                         // `inner` (this whole branch) is only ever computed once `status === "ready"`
                         // and `mailboxUid` has already resolved truthy — a falsy `mailboxUid` returns
                         // `<MailboxProvisioning />` above instead (which is what the `!` below records,
@@ -120,9 +121,9 @@ export default function SettingsShell({ active, userUid, authServerUrl, imperson
                         // structurally can't trigger" removal precedent (e.g.
                         // `DomainDetailContent.handleVerify`).
                         href: `${section.href}?mailboxUid=${encodeURIComponent(mailboxUid)}`, "aria-current": section.id === active ? "page" : undefined, className: [
-                            "block px-2.5 py-1.5 rounded-sm text-sm",
+                            "flex items-center gap-2.5 px-2.5 py-1.5 rounded-sm text-sm",
                             section.id === active ? "bg-primary/10 text-primary-dark font-medium" : "text-text hover:bg-surface-alt",
-                        ].join(" "), children: section.label }, section.id))) })] }));
+                        ].join(" "), children: [_jsx(section.icon, { size: 18, "aria-hidden": "true", className: "shrink-0" }), section.label] }, section.id))) })] }));
         inner = (_jsxs(_Fragment, { children: [_jsx("aside", { className: "hidden md:flex w-56 shrink-0 bg-surface border-r border-border flex-col p-3 gap-3", children: sidebarContent("desktop") }), _jsx(Drawer, { open: drawerOpen, onClose: () => setDrawerOpen(false), title: "Settings", fullScreen: true, children: _jsx("div", { className: "flex flex-col gap-3", children: sidebarContent("mobile") }) }), _jsxs("main", { className: "flex-1 min-w-0 flex flex-col", children: [_jsx("button", { type: "button", className: "md:hidden m-3 self-start w-9 h-9 flex items-center justify-center rounded-sm text-text-muted hover:bg-surface-alt hover:text-text", "aria-label": "Open settings menu", onClick: () => setDrawerOpen(true), children: _jsx(HiOutlineBars3, { size: 20, "aria-hidden": "true" }) }), _jsx(SettingsShellContext.Provider, { value: contextValue, children: children })] })] }));
     }
     return (_jsx(AppShell, { active: "settings", userUid: userUid, authServerUrl: authServerUrl, impersonating: impersonating, impersonationBaseUrl: impersonationBaseUrl, trusted: trusted, trustedRoles: trustedRoles, pluginNav: pluginNav, children: inner }));

package/dist/apps/shared/navigation/appHrefs.d.ts

@@ -6,9 +6,9 @@ export declare const APP_HREFS: {
     readonly tasks: "/tasks";
 };
 /**
- * Settings is reached from the account menu, not the rail. It links straight to the first settings section, the only one that always
- * exists - repoint this at a real `/settings` landing page once there is one.
+ * Settings is reached from the account menu, not the rail. It links straight to the Profile section, the first of them and the one that
+ * always exists - repoint this at a real `/settings` landing page once there is one.
  */
-export declare const SETTINGS_HREF = "/settings/auto-reply";
+export declare const SETTINGS_HREF = "/settings/profile";
 /** Whether `pathname` is a page of Settings (any section), which is what "already there" means for it. */
 export declare function isSettingsPath(pathname: string): boolean;

package/dist/apps/shared/navigation/appHrefs.js

@@ -10,10 +10,10 @@ export const APP_HREFS = {
     tasks: "/tasks",
 };
 /**
- * Settings is reached from the account menu, not the rail. It links straight to the first settings section, the only one that always
- * exists - repoint this at a real `/settings` landing page once there is one.
+ * Settings is reached from the account menu, not the rail. It links straight to the Profile section, the first of them and the one that
+ * always exists - repoint this at a real `/settings` landing page once there is one.
  */
-export const SETTINGS_HREF = "/settings/auto-reply";
+export const SETTINGS_HREF = "/settings/profile";
 /** Whether `pathname` is a page of Settings (any section), which is what "already there" means for it. */
 export function isSettingsPath(pathname) {
     return pathname === "/settings" || pathname.startsWith("/settings/");

package/dist/lib/components/pickers/TimeZonePicker.js

@@ -4,7 +4,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useId, useMemo, useRef, useState } from "react";
-import { compareTimeZones, describeTimeZone } from "../../util/timeZone.js";
+import { describeTimeZone, sortTimeZones } from "../../util/timeZone.js";
 /**
  * A time zone chooser that lists zones as "Los Angeles, America (GMT-07:00)", west to east and then by city, and has a search box in the list: typing narrows it to the zones whose
  * name or offset contains every word typed ("berlin", "gmt+9", "america indiana"). A button showing the chosen zone opens it; the arrow keys move
@@ -19,10 +19,19 @@ export default function TimeZonePicker({ id, "aria-label": label, "aria-describe
     const [open, setOpen] = useState(false);
     const [query, setQuery] = useState("");
     const [active, setActive] = useState(-1);
-    // Listed by the offsets shown (which move with daylight saving): west to east, then by city.
-    const entries = useMemo(() => [...zones]
-        .sort((a, b) => compareTimeZones(a, b, at))
-        .map((zone) => ({ zone, text: describeTimeZone(zone, at), haystack: `${describeTimeZone(zone, at)} ${zone.replace(/_/g, " ")}`.toLowerCase() })), [zones, at]);
+    // Listed by the offsets shown (which move with daylight saving): west to east, then by city. Worked out only while the list is open - naming several
+    // hundred zones is the costly part, and a closed picker (most renders) shows one - and keyed on the date's value, since a caller may hand over a new `Date` each render.
+    const atTime = at?.getTime();
+    const entries = useMemo(() => {
+        if (!open) {
+            return [];
+        }
+        const on = new Date(atTime ?? Date.now());
+        return sortTimeZones(zones, on).map((zone) => {
+            const text = describeTimeZone(zone, on);
+            return { zone, text, haystack: `${text} ${zone.replace(/_/g, " ")}`.toLowerCase() };
+        });
+    }, [open, zones, atTime]);
     const shown = useMemo(() => {
         const words = query.toLowerCase().replace(/_/g, " ").split(/\s+/).filter(Boolean);
         return words.length === 0 ? entries : entries.filter((entry) => words.every((word) => entry.haystack.includes(word)));

package/dist/lib/contacts/contactsApi.d.ts

@@ -77,6 +77,9 @@ export declare function pinnedSigningFingerprintsFor(contacts: Contact[], addres
  * `limit` cap). */
 export declare const PINNED_FINGERPRINT_PAGE_SIZE = 500;
 export declare const PINNED_FINGERPRINT_MAX_PAGES = 20;
+/** Every contact in `folderUids`, paged (`PINNED_FINGERPRINT_PAGE_SIZE`, at most `PINNED_FINGERPRINT_MAX_PAGES` pages
+ * per folder). A plain contacts read - never a Discovery lookup. */
+export declare function listContactsInFolders(folderUids: string[], client?: ApiClient): Promise<Contact[]>;
 /**
  * Fetches the trusted signing-key fingerprints (pinned and previous - see `pinnedSigningFingerprintsFor()`) for a
  * message sender's `address` from the contacts in `folderUids` (the reader's contacts folders), for

package/dist/lib/contacts/contactsApi.js

@@ -29,7 +29,7 @@ export const PINNED_FINGERPRINT_PAGE_SIZE = 500;
 export const PINNED_FINGERPRINT_MAX_PAGES = 20;
 /** Every contact in `folderUids`, paged (`PINNED_FINGERPRINT_PAGE_SIZE`, at most `PINNED_FINGERPRINT_MAX_PAGES` pages
  * per folder). A plain contacts read - never a Discovery lookup. */
-async function listContactsInFolders(folderUids, client) {
+export async function listContactsInFolders(folderUids, client) {
     const contacts = [];
     for (const folderUid of folderUids) {
         for (let page = 0; page < PINNED_FINGERPRINT_MAX_PAGES; page++) {

package/dist/lib/mail/directoryApi.d.ts

@@ -1,12 +1,14 @@
 /**
  * Typed wrappers over `@rapidmx/restapi`'s `BaseDirectoryRoute` - recipient suggestions for compose. `GET
  * /mail/directory` searches the server's mailboxes (people, shared mailboxes, rooms and equipment) and distribution
- * lists; `GET /mail/directory/contacts` searches the caller's own contacts. Both match every word of the query against
- * the start of a name word or of an address, and return only a display name, an address and a kind.
+ * lists; `GET /mail/directory/contacts` searches the caller's own contacts; `GET /mail/directory/correspondents` searches
+ * everyone the caller's mailboxes have exchanged mail or shared an event with, address book or not. All match every word of
+ * the query against the start of a name word or of an address, and return only a display name, an address and a kind.
  */
 import { ApiClient } from "../util/api.js";
-/** What a suggestion names. `"contact"` comes from the caller's contacts, everything else from the server directory. */
-export type RecipientSuggestionKind = "user" | "shared" | "room" | "equipment" | "list" | "contact";
+/** What a suggestion names. `"contact"` comes from the caller's contacts, `"correspondent"` from the people they have written to, heard from or
+ * met with, everything else from the server directory. */
+export type RecipientSuggestionKind = "user" | "shared" | "room" | "equipment" | "list" | "contact" | "correspondent";
 export interface RecipientSuggestion {
     displayName: string;
     address: string;
@@ -38,12 +40,16 @@ export interface ContactSuggestionOptions extends RecipientSuggestionOptions {
 export declare function searchDirectory(query: string, options?: RecipientSuggestionOptions, client?: ApiClient): Promise<RecipientSuggestion[]>;
 /** Searches the caller's contacts (every address of a contact whose name matches, or the addresses that match). */
 export declare function searchContactSuggestions(query: string, options?: ContactSuggestionOptions, client?: ApiClient): Promise<RecipientSuggestion[]>;
-/** Contacts first, then directory entries, without repeating an address (compared case-insensitively; the first
- * occurrence wins), at most `limit`. */
-export declare function mergeRecipientSuggestions(contacts: RecipientSuggestion[], directory: RecipientSuggestion[], limit?: number): RecipientSuggestion[];
+/** Searches the people the caller's mailboxes have exchanged mail or shared an event with, whether or not they are in the address book. Rejects like
+ * `searchDirectory()`; a server that predates the endpoint answers 404, which `fetchRecipientSuggestions()` treats as "none". */
+export declare function searchCorrespondents(query: string, options?: ContactSuggestionOptions, client?: ApiClient): Promise<RecipientSuggestion[]>;
+/** Contacts first, then directory entries, then the people the caller has corresponded with, without repeating an address (compared
+ * case-insensitively; the first occurrence wins), at most `limit`. */
+export declare function mergeRecipientSuggestions(contacts: RecipientSuggestion[], directory: RecipientSuggestion[], limit?: number, correspondents?: RecipientSuggestion[]): RecipientSuggestion[];
 /**
- * Contacts and directory suggestions for `query`, merged by `mergeRecipientSuggestions()`. Either source failing (a 403
- * directory for a caller with no mailbox here, a 429, a network error) still returns the other's entries; only when
- * both fail does this reject, with the contacts error. An aborted `signal` always rejects with the `AbortError`.
+ * Contacts, directory and correspondent suggestions for `query`, merged by `mergeRecipientSuggestions()`. Any source failing (a 403
+ * directory for a caller with no mailbox here, a 429, a network error, a server without the correspondents endpoint) still returns
+ * the others' entries; only when the contacts and the directory both fail does this reject, with the contacts error - the
+ * correspondents are a bonus and never turn a working search into an error. An aborted `signal` always rejects with the `AbortError`.
  */
 export declare function fetchRecipientSuggestions(query: string, options?: ContactSuggestionOptions, client?: ApiClient): Promise<RecipientSuggestion[]>;

package/dist/lib/mail/directoryApi.js

@@ -5,8 +5,9 @@
 /**
  * Typed wrappers over `@rapidmx/restapi`'s `BaseDirectoryRoute` - recipient suggestions for compose. `GET
  * /mail/directory` searches the server's mailboxes (people, shared mailboxes, rooms and equipment) and distribution
- * lists; `GET /mail/directory/contacts` searches the caller's own contacts. Both match every word of the query against
- * the start of a name word or of an address, and return only a display name, an address and a kind.
+ * lists; `GET /mail/directory/contacts` searches the caller's own contacts; `GET /mail/directory/correspondents` searches
+ * everyone the caller's mailboxes have exchanged mail or shared an event with, address book or not. All match every word of
+ * the query against the start of a name word or of an address, and return only a display name, an address and a kind.
  */
 import { ApiRequestError, withClient } from "../util/api.js";
 /** The shortest trimmed query the server searches for - shorter ones resolve to `[]` without a request. */
@@ -58,12 +59,17 @@ export function searchDirectory(query, options = {}, client) {
 export function searchContactSuggestions(query, options = {}, client) {
     return fetchSuggestions("/mail/directory/contacts", query, { limit: options.limit?.toString(), mailboxUid: options.mailboxUid }, options.signal, client);
 }
-/** Contacts first, then directory entries, without repeating an address (compared case-insensitively; the first
- * occurrence wins), at most `limit`. */
-export function mergeRecipientSuggestions(contacts, directory, limit = RECIPIENT_SUGGESTION_DEFAULT_LIMIT) {
+/** Searches the people the caller's mailboxes have exchanged mail or shared an event with, whether or not they are in the address book. Rejects like
+ * `searchDirectory()`; a server that predates the endpoint answers 404, which `fetchRecipientSuggestions()` treats as "none". */
+export function searchCorrespondents(query, options = {}, client) {
+    return fetchSuggestions("/mail/directory/correspondents", query, { limit: options.limit?.toString(), mailboxUid: options.mailboxUid }, options.signal, client);
+}
+/** Contacts first, then directory entries, then the people the caller has corresponded with, without repeating an address (compared
+ * case-insensitively; the first occurrence wins), at most `limit`. */
+export function mergeRecipientSuggestions(contacts, directory, limit = RECIPIENT_SUGGESTION_DEFAULT_LIMIT, correspondents = []) {
     const seen = new Set();
     const result = [];
-    for (const entry of [...contacts, ...directory]) {
+    for (const entry of [...contacts, ...directory, ...correspondents]) {
         const key = entry.address.trim().toLowerCase();
         if (result.length >= limit) {
             break;
@@ -79,17 +85,19 @@ function isAbort(error) {
     return error?.name === "AbortError";
 }
 /**
- * Contacts and directory suggestions for `query`, merged by `mergeRecipientSuggestions()`. Either source failing (a 403
- * directory for a caller with no mailbox here, a 429, a network error) still returns the other's entries; only when
- * both fail does this reject, with the contacts error. An aborted `signal` always rejects with the `AbortError`.
+ * Contacts, directory and correspondent suggestions for `query`, merged by `mergeRecipientSuggestions()`. Any source failing (a 403
+ * directory for a caller with no mailbox here, a 429, a network error, a server without the correspondents endpoint) still returns
+ * the others' entries; only when the contacts and the directory both fail does this reject, with the contacts error - the
+ * correspondents are a bonus and never turn a working search into an error. An aborted `signal` always rejects with the `AbortError`.
  */
 export async function fetchRecipientSuggestions(query, options = {}, client) {
     const limit = options.limit ?? RECIPIENT_SUGGESTION_DEFAULT_LIMIT;
-    const [contacts, directory] = await Promise.allSettled([
+    const [contacts, directory, correspondents] = await Promise.allSettled([
         searchContactSuggestions(query, { ...options, limit }, client),
         searchDirectory(query, { limit, signal: options.signal }, client),
+        searchCorrespondents(query, { ...options, limit }, client),
     ]);
-    for (const outcome of [contacts, directory]) {
+    for (const outcome of [contacts, directory, correspondents]) {
         if (outcome.status === "rejected" && isAbort(outcome.reason)) {
             throw outcome.reason;
         }
@@ -97,5 +105,5 @@ export async function fetchRecipientSuggestions(query, options = {}, client) {
     if (contacts.status === "rejected" && directory.status === "rejected") {
         throw contacts.reason instanceof Error ? contacts.reason : new ApiRequestError("Suggestions couldn't be loaded.", 0);
     }
-    return mergeRecipientSuggestions(contacts.status === "fulfilled" ? contacts.value : [], directory.status === "fulfilled" ? directory.value : [], limit);
+    return mergeRecipientSuggestions(contacts.status === "fulfilled" ? contacts.value : [], directory.status === "fulfilled" ? directory.value : [], limit, correspondents.status === "fulfilled" ? correspondents.value : []);
 }

package/dist/lib/util/timeZone.d.ts

@@ -22,7 +22,7 @@ export declare function describeTimeZone(zone: string, at?: Date): string;
  * Orders zones for a list: by how far their clocks are from UTC at `at` (the westernmost first), then by city, then by id. A zone the runtime
  * doesn't know comes last.
  */
-export declare function compareTimeZones(a: string, b: string, at?: Date): number;
+export declare function sortTimeZones(zones: readonly string[], at?: Date): string[];
 /**
  * Every time zone the browser can name, for a picker (sorted by offset from UTC as it is now, then by city): `Intl.supportedValuesOf("timeZone")` where there is one (it leaves out `UTC`,
  * which is added), else just `extra` - the zones the caller already holds, such as a mailbox's current one.

package/dist/lib/util/timeZone.js

@@ -22,13 +22,25 @@ export function deviceTimeZone() {
  */
 export function zoneClock(zone, at = new Date()) {
     try {
-        const part = (style) => new Intl.DateTimeFormat("en-US", { timeZone: zone, timeZoneName: style }).formatToParts(at).find((p) => p.type === "timeZoneName").value;
+        const part = (style) => formatterFor(zone, style).formatToParts(at).find((p) => p.type === "timeZoneName").value;
         return { abbreviation: part("short"), offset: part("longOffset").replace("GMT", "") || "+00:00" };
     }
     catch {
         return null;
     }
 }
+/** Building an `Intl.DateTimeFormat` is by far the costly part of naming a zone's clock, and a list names hundreds: each is made once. */
+const formatters = new Map();
+function formatterFor(zone, style) {
+    const key = `${style}|${zone}`;
+    let formatter = formatters.get(key);
+    if (!formatter) {
+        // Throws for a zone the runtime doesn't know, which is then not remembered.
+        formatter = new Intl.DateTimeFormat("en-US", { timeZone: zone, timeZoneName: style });
+        formatters.set(key, formatter);
+    }
+    return formatter;
+}
 /** A zone id split into its city and the region it is in: "America/Argentina/Buenos_Aires" is "Buenos Aires" in "America/Argentina"; "UTC" is in none. */
 function zoneNames(zone) {
     const parts = zone.split("/");
@@ -51,13 +63,15 @@ export function describeTimeZone(zone, at = new Date()) {
  * Orders zones for a list: by how far their clocks are from UTC at `at` (the westernmost first), then by city, then by id. A zone the runtime
  * doesn't know comes last.
  */
-export function compareTimeZones(a, b, at = new Date()) {
-    const minutes = (zone) => {
+export function sortTimeZones(zones, at = new Date()) {
+    // Each zone's offset is read once, not once per comparison.
+    const keyed = zones.map((zone) => {
         const offset = zoneClock(zone, at)?.offset;
-        return offset ? (offset.startsWith("-") ? -1 : 1) * (Number(offset.slice(1, 3)) * 60 + Number(offset.slice(4, 6))) : Number.POSITIVE_INFINITY;
-    };
-    const byOffset = minutes(a) - minutes(b);
-    return (Number.isNaN(byOffset) ? 0 : byOffset) || zoneNames(a).city.localeCompare(zoneNames(b).city) || a.localeCompare(b);
+        const minutes = offset ? (offset.startsWith("-") ? -1 : 1) * (Number(offset.slice(1, 3)) * 60 + Number(offset.slice(4, 6))) : Number.POSITIVE_INFINITY;
+        return { zone, minutes, city: zoneNames(zone).city };
+    });
+    keyed.sort((a, b) => (a.minutes === b.minutes ? 0 : a.minutes < b.minutes ? -1 : 1) || a.city.localeCompare(b.city) || a.zone.localeCompare(b.zone));
+    return keyed.map((entry) => entry.zone);
 }
 /**
  * Every time zone the browser can name, for a picker (sorted by offset from UTC as it is now, then by city): `Intl.supportedValuesOf("timeZone")` where there is one (it leaves out `UTC`,
@@ -71,6 +85,5 @@ export function timeZoneOptions(...extra) {
     catch {
         zones = [];
     }
-    const now = new Date();
-    return [...new Set([DEFAULT_TIME_ZONE, ...zones, ...extra.filter(Boolean)])].sort((a, b) => compareTimeZones(a, b, now));
+    return sortTimeZones([...new Set([DEFAULT_TIME_ZONE, ...zones, ...extra.filter(Boolean)])]);
 }

package/lib/components/pickers/TimeZonePicker.tsx

@@ -3,7 +3,7 @@
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import React, { KeyboardEvent, useEffect, useId, useMemo, useRef, useState } from "react";
-import { compareTimeZones, describeTimeZone } from "../../util/timeZone.js";
+import { describeTimeZone, sortTimeZones } from "../../util/timeZone.js";
 
 export interface TimeZonePickerProps {
     id?: string;
@@ -34,14 +34,19 @@ export default function TimeZonePicker({ id, "aria-label": label, "aria-describe
     const [query, setQuery] = useState("");
     const [active, setActive] = useState(-1);
 
-    // Listed by the offsets shown (which move with daylight saving): west to east, then by city.
-    const entries = useMemo(
-        () =>
-            [...zones]
-                .sort((a, b) => compareTimeZones(a, b, at))
-                .map((zone) => ({ zone, text: describeTimeZone(zone, at), haystack: `${describeTimeZone(zone, at)} ${zone.replace(/_/g, " ")}`.toLowerCase() })),
-        [zones, at],
-    );
+    // Listed by the offsets shown (which move with daylight saving): west to east, then by city. Worked out only while the list is open - naming several
+    // hundred zones is the costly part, and a closed picker (most renders) shows one - and keyed on the date's value, since a caller may hand over a new `Date` each render.
+    const atTime = at?.getTime();
+    const entries = useMemo(() => {
+        if (!open) {
+            return [];
+        }
+        const on = new Date(atTime ?? Date.now());
+        return sortTimeZones(zones, on).map((zone) => {
+            const text = describeTimeZone(zone, on);
+            return { zone, text, haystack: `${text} ${zone.replace(/_/g, " ")}`.toLowerCase() };
+        });
+    }, [open, zones, atTime]);
     const shown = useMemo(() => {
         const words = query.toLowerCase().replace(/_/g, " ").split(/\s+/).filter(Boolean);
         return words.length === 0 ? entries : entries.filter((entry) => words.every((word) => entry.haystack.includes(word)));

package/lib/contacts/contactsApi.ts

@@ -109,7 +109,7 @@ export const PINNED_FINGERPRINT_MAX_PAGES = 20;
 
 /** Every contact in `folderUids`, paged (`PINNED_FINGERPRINT_PAGE_SIZE`, at most `PINNED_FINGERPRINT_MAX_PAGES` pages
  * per folder). A plain contacts read - never a Discovery lookup. */
-async function listContactsInFolders(folderUids: string[], client?: ApiClient): Promise<Contact[]> {
+export async function listContactsInFolders(folderUids: string[], client?: ApiClient): Promise<Contact[]> {
     const contacts: Contact[] = [];
     for (const folderUid of folderUids) {
         for (let page = 0; page < PINNED_FINGERPRINT_MAX_PAGES; page++) {

package/lib/mail/directoryApi.ts

@@ -5,13 +5,15 @@
 /**
  * Typed wrappers over `@rapidmx/restapi`'s `BaseDirectoryRoute` - recipient suggestions for compose. `GET
  * /mail/directory` searches the server's mailboxes (people, shared mailboxes, rooms and equipment) and distribution
- * lists; `GET /mail/directory/contacts` searches the caller's own contacts. Both match every word of the query against
- * the start of a name word or of an address, and return only a display name, an address and a kind.
+ * lists; `GET /mail/directory/contacts` searches the caller's own contacts; `GET /mail/directory/correspondents` searches
+ * everyone the caller's mailboxes have exchanged mail or shared an event with, address book or not. All match every word of
+ * the query against the start of a name word or of an address, and return only a display name, an address and a kind.
  */
 import { ApiClient, ApiRequestError, withClient } from "../util/api.js";
 
-/** What a suggestion names. `"contact"` comes from the caller's contacts, everything else from the server directory. */
-export type RecipientSuggestionKind = "user" | "shared" | "room" | "equipment" | "list" | "contact";
+/** What a suggestion names. `"contact"` comes from the caller's contacts, `"correspondent"` from the people they have written to, heard from or
+ * met with, everything else from the server directory. */
+export type RecipientSuggestionKind = "user" | "shared" | "room" | "equipment" | "list" | "contact" | "correspondent";
 
 export interface RecipientSuggestion {
     displayName: string;
@@ -104,16 +106,29 @@ export function searchContactSuggestions(
     );
 }
 
-/** Contacts first, then directory entries, without repeating an address (compared case-insensitively; the first
- * occurrence wins), at most `limit`. */
+/** Searches the people the caller's mailboxes have exchanged mail or shared an event with, whether or not they are in the address book. Rejects like
+ * `searchDirectory()`; a server that predates the endpoint answers 404, which `fetchRecipientSuggestions()` treats as "none". */
+export function searchCorrespondents(query: string, options: ContactSuggestionOptions = {}, client?: ApiClient): Promise<RecipientSuggestion[]> {
+    return fetchSuggestions(
+        "/mail/directory/correspondents",
+        query,
+        { limit: options.limit?.toString(), mailboxUid: options.mailboxUid },
+        options.signal,
+        client,
+    );
+}
+
+/** Contacts first, then directory entries, then the people the caller has corresponded with, without repeating an address (compared
+ * case-insensitively; the first occurrence wins), at most `limit`. */
 export function mergeRecipientSuggestions(
     contacts: RecipientSuggestion[],
     directory: RecipientSuggestion[],
     limit: number = RECIPIENT_SUGGESTION_DEFAULT_LIMIT,
+    correspondents: RecipientSuggestion[] = [],
 ): RecipientSuggestion[] {
     const seen = new Set<string>();
     const result: RecipientSuggestion[] = [];
-    for (const entry of [...contacts, ...directory]) {
+    for (const entry of [...contacts, ...directory, ...correspondents]) {
         const key = entry.address.trim().toLowerCase();
         if (result.length >= limit) {
             break;
@@ -131,9 +146,10 @@ function isAbort(error: unknown): boolean {
 }
 
 /**
- * Contacts and directory suggestions for `query`, merged by `mergeRecipientSuggestions()`. Either source failing (a 403
- * directory for a caller with no mailbox here, a 429, a network error) still returns the other's entries; only when
- * both fail does this reject, with the contacts error. An aborted `signal` always rejects with the `AbortError`.
+ * Contacts, directory and correspondent suggestions for `query`, merged by `mergeRecipientSuggestions()`. Any source failing (a 403
+ * directory for a caller with no mailbox here, a 429, a network error, a server without the correspondents endpoint) still returns
+ * the others' entries; only when the contacts and the directory both fail does this reject, with the contacts error - the
+ * correspondents are a bonus and never turn a working search into an error. An aborted `signal` always rejects with the `AbortError`.
  */
 export async function fetchRecipientSuggestions(
     query: string,
@@ -141,11 +157,12 @@ export async function fetchRecipientSuggestions(
     client?: ApiClient,
 ): Promise<RecipientSuggestion[]> {
     const limit = options.limit ?? RECIPIENT_SUGGESTION_DEFAULT_LIMIT;
-    const [contacts, directory] = await Promise.allSettled([
+    const [contacts, directory, correspondents] = await Promise.allSettled([
         searchContactSuggestions(query, { ...options, limit }, client),
         searchDirectory(query, { limit, signal: options.signal }, client),
+        searchCorrespondents(query, { ...options, limit }, client),
     ]);
-    for (const outcome of [contacts, directory]) {
+    for (const outcome of [contacts, directory, correspondents]) {
         if (outcome.status === "rejected" && isAbort(outcome.reason)) {
             throw outcome.reason;
         }
@@ -157,5 +174,6 @@ export async function fetchRecipientSuggestions(
         contacts.status === "fulfilled" ? contacts.value : [],
         directory.status === "fulfilled" ? directory.value : [],
         limit,
+        correspondents.status === "fulfilled" ? correspondents.value : [],
     );
 }

package/lib/util/timeZone.ts

@@ -25,13 +25,27 @@ export function deviceTimeZone(): string {
 export function zoneClock(zone: string, at: Date = new Date()): { abbreviation: string; offset: string } | null {
     try {
         const part = (style: "short" | "longOffset") =>
-            new Intl.DateTimeFormat("en-US", { timeZone: zone, timeZoneName: style }).formatToParts(at).find((p) => p.type === "timeZoneName")!.value;
+            formatterFor(zone, style).formatToParts(at).find((p) => p.type === "timeZoneName")!.value;
         return { abbreviation: part("short"), offset: part("longOffset").replace("GMT", "") || "+00:00" };
     } catch {
         return null;
     }
 }
 
+/** Building an `Intl.DateTimeFormat` is by far the costly part of naming a zone's clock, and a list names hundreds: each is made once. */
+const formatters = new Map<string, Intl.DateTimeFormat>();
+
+function formatterFor(zone: string, style: "short" | "longOffset"): Intl.DateTimeFormat {
+    const key = `${style}|${zone}`;
+    let formatter = formatters.get(key);
+    if (!formatter) {
+        // Throws for a zone the runtime doesn't know, which is then not remembered.
+        formatter = new Intl.DateTimeFormat("en-US", { timeZone: zone, timeZoneName: style });
+        formatters.set(key, formatter);
+    }
+    return formatter;
+}
+
 /** A zone id split into its city and the region it is in: "America/Argentina/Buenos_Aires" is "Buenos Aires" in "America/Argentina"; "UTC" is in none. */
 function zoneNames(zone: string): { city: string; region: string } {
     const parts = zone.split("/");
@@ -56,13 +70,15 @@ export function describeTimeZone(zone: string, at: Date = new Date()): string {
  * Orders zones for a list: by how far their clocks are from UTC at `at` (the westernmost first), then by city, then by id. A zone the runtime
  * doesn't know comes last.
  */
-export function compareTimeZones(a: string, b: string, at: Date = new Date()): number {
-    const minutes = (zone: string) => {
+export function sortTimeZones(zones: readonly string[], at: Date = new Date()): string[] {
+    // Each zone's offset is read once, not once per comparison.
+    const keyed = zones.map((zone) => {
         const offset = zoneClock(zone, at)?.offset;
-        return offset ? (offset.startsWith("-") ? -1 : 1) * (Number(offset.slice(1, 3)) * 60 + Number(offset.slice(4, 6))) : Number.POSITIVE_INFINITY;
-    };
-    const byOffset = minutes(a) - minutes(b);
-    return (Number.isNaN(byOffset) ? 0 : byOffset) || zoneNames(a).city.localeCompare(zoneNames(b).city) || a.localeCompare(b);
+        const minutes = offset ? (offset.startsWith("-") ? -1 : 1) * (Number(offset.slice(1, 3)) * 60 + Number(offset.slice(4, 6))) : Number.POSITIVE_INFINITY;
+        return { zone, minutes, city: zoneNames(zone).city };
+    });
+    keyed.sort((a, b) => (a.minutes === b.minutes ? 0 : a.minutes < b.minutes ? -1 : 1) || a.city.localeCompare(b.city) || a.zone.localeCompare(b.zone));
+    return keyed.map((entry) => entry.zone);
 }
 
 /**
@@ -76,6 +92,5 @@ export function timeZoneOptions(...extra: string[]): string[] {
     } catch {
         zones = [];
     }
-    const now = new Date();
-    return [...new Set([DEFAULT_TIME_ZONE, ...zones, ...extra.filter(Boolean)])].sort((a, b) => compareTimeZones(a, b, now));
+    return sortTimeZones([...new Set([DEFAULT_TIME_ZONE, ...zones, ...extra.filter(Boolean)])]);
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@rapidmx/web-client",
-  "version": "0.24.0",
+  "version": "0.26.0",
   "description": "RapidMX's webmail and admin console React UI for web-based clients.",
   "type": "module",
   "repository": "https://github.com/rapidmx/web-client",