@rapidmx/web-client 0.30.0 → 0.31.0

package/dist/apps/admin/transport-rules/[uid].js

@@ -4,14 +4,14 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useState } from "react";
-import { ApiRequestError } from "../../../lib/util/api.js";
 import { getTransportRule, updateTransportRule, } from "../../../lib/admin/transportRulesApi.js";
 import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
 import RuleBuilder from "../../shared/components/rules/RuleBuilder.js";
 import { checkRuleConditions, NO_CONDITIONS_BLOCKED_MESSAGE, NoConditionsConfirmModal, TRANSPORT_RULE_ACTION_TYPES, TRANSPORT_RULE_CONDITION_FIELDS, } from "./_transportRuleConfig.js";
-import Alert from "../../../lib/components/feedback/Alert.js";
+import Alert from "../../shared/components/admin/ActionAlert.js";
 import Button from "../../../lib/components/buttons/Button.js";
 import FormField from "../../../lib/components/forms/FormField.js";
+import { actionErrorMessage } from "../../shared/components/admin/elevation.js";
 const INPUT_CLASS = "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
 export default function TransportRuleDetailPage(props) {
     return (_jsx(AdminShell, { ...props, active: "transportRules", children: _jsx(TransportRuleDetailContent, { uid: props.params.uid }) }));
@@ -43,7 +43,7 @@ function TransportRuleDetailContent({ uid }) {
                 });
             }
         })
-            .catch((err) => setError(err instanceof ApiRequestError ? err.message : "Could not load this transport rule."))
+            .catch((err) => setError(actionErrorMessage(err, "Could not load this transport rule.")))
             .finally(() => setLoading(false));
     }, [uid]);
     // Only ever invoked from the form below, which itself only renders once `original`/`rule` are
@@ -84,7 +84,7 @@ function TransportRuleDetailContent({ uid }) {
             setSaved(true);
         }
         catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not save this transport rule.");
+            setError(actionErrorMessage(err, "Could not save this transport rule."));
         }
         finally {
             setSaving(false);

package/dist/apps/admin/transport-rules/index.js

@@ -4,11 +4,11 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useState } from "react";
-import { ApiRequestError } from "../../../lib/util/api.js";
 import { listTransportRules } from "../../../lib/admin/transportRulesApi.js";
 import AdminShell from "../../shared/components/admin/layout/AdminShell.js";
-import Alert from "../../../lib/components/feedback/Alert.js";
+import Alert from "../../shared/components/admin/ActionAlert.js";
 import Button from "../../../lib/components/buttons/Button.js";
+import { actionErrorMessage } from "../../shared/components/admin/elevation.js";
 const PAGE_SIZE = 25;
 /** The server's largest page (`limit` is capped at 1000). */
 const FETCH_PAGE_SIZE = 1000;
@@ -39,7 +39,7 @@ function TransportRulesContent() {
     useEffect(() => {
         listAllTransportRules()
             .then(setRules)
-            .catch((err) => setError(err instanceof ApiRequestError ? err.message : "Could not load transport rules."))
+            .catch((err) => setError(actionErrorMessage(err, "Could not load transport rules.")))
             .finally(() => setLoading(false));
     }, []);
     const hasNextPage = (page + 1) * PAGE_SIZE < rules.length;

package/dist/apps/admin/transport-rules/new/index.js

@@ -5,14 +5,14 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 ///////////////////////////////////////////////////////////////////////////////
 import { useState } from "react";
 import { useRouter } from "@rapidrest/react/client";
-import { ApiRequestError } from "../../../../lib/util/api.js";
 import { createTransportRule, } from "../../../../lib/admin/transportRulesApi.js";
 import AdminShell from "../../../shared/components/admin/layout/AdminShell.js";
 import RuleBuilder from "../../../shared/components/rules/RuleBuilder.js";
 import { checkRuleConditions, NO_CONDITIONS_BLOCKED_MESSAGE, NoConditionsConfirmModal, TRANSPORT_RULE_ACTION_TYPES, TRANSPORT_RULE_CONDITION_FIELDS, } from "../_transportRuleConfig.js";
-import Alert from "../../../../lib/components/feedback/Alert.js";
+import Alert from "../../../shared/components/admin/ActionAlert.js";
 import Button from "../../../../lib/components/buttons/Button.js";
 import FormField from "../../../../lib/components/forms/FormField.js";
+import { actionErrorMessage } from "../../../shared/components/admin/elevation.js";
 const INPUT_CLASS = "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
 export default function NewTransportRulePage(props) {
     return (_jsx(AdminShell, { ...props, active: "transportRules", children: _jsx(NewTransportRuleForm, {}) }));
@@ -58,7 +58,7 @@ function NewTransportRuleForm() {
             void navigate(`/admin/transport-rules/${encodeURIComponent(created.uid)}`);
         }
         catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not create the transport rule.");
+            setError(actionErrorMessage(err, "Could not create the transport rule."));
         }
         finally {
             setSaving(false);

package/dist/apps/escrow/matters/[uid].js

@@ -49,6 +49,8 @@ function MatterDetailContent({ uid }) {
     const [closing, setClosing] = useState(false);
     const [closeError, setCloseError] = useState(null);
     const [approveTarget, setApproveTarget] = useState(null);
+    // Denying cannot be undone - a denied request is never approved afterwards, only asked for again - so it is confirmed first.
+    const [denyTarget, setDenyTarget] = useState(null);
     const [showNewRequest, setShowNewRequest] = useState(false);
     const [newRequestMailboxUid, setNewRequestMailboxUid] = useState("");
     const [creatingRequest, setCreatingRequest] = useState(false);
@@ -151,7 +153,10 @@ function MatterDetailContent({ uid }) {
             setActingOn((prev) => ({ ...prev, [request.uid]: false }));
         }
     }
-    async function handleDeny(request) {
+    // Only ever invoked from the deny-confirmation modal below, which only renders once `denyTarget` is set.
+    async function handleDeny() {
+        const request = denyTarget;
+        setDenyTarget(null);
         setActingOn((prev) => ({ ...prev, [request.uid]: true }));
         setActionErrors((prev) => ({ ...prev, [request.uid]: "" }));
         try {
@@ -264,6 +269,6 @@ function MatterDetailContent({ uid }) {
                                                     : request.status === "pending"
                                                         ? "bg-surface-alt text-text-muted"
                                                         : "bg-success text-white",
-                                            ].join(" "), children: request.status })] }), actionErrors[request.uid] && _jsx(Alert, { children: actionErrors[request.uid] }), _jsxs("div", { className: "flex gap-3 mt-3", children: [!matter.closedAt && request.status === "pending" && (_jsxs(_Fragment, { children: [_jsx(Button, { type: "button", className: "!w-auto", loading: actingOn[request.uid], disabled: actingOn[request.uid], onClick: () => setApproveTarget(request), children: "Approve" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: actingOn[request.uid], disabled: actingOn[request.uid], onClick: () => handleDeny(request), children: "Deny" })] })), !matter.closedAt && (request.status === "approved" || request.status === "fulfilled") && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => handleGetMaterial(request), children: "Get material" }))] })] }, request.uid))) })), _jsx(LoadMoreButton, { list: requests, label: "Load more access requests" })] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsxs("div", { className: "flex items-center justify-between mb-3", children: [_jsx("h2", { className: "text-base font-bold uppercase tracking-wide", children: "Export this matter" }), !matter.closedAt && (_jsx(Button, { type: "button", className: "!w-auto", loading: creatingExport, disabled: creatingExport, onClick: handleCreateExport, children: "+ New export" }))] }), _jsx("p", { className: "text-xs text-text-muted mb-3", children: "Exports messages (narrowed to this matter\u2019s own date range), plus full contacts, calendar events, tasks, and notes, from every custodian mailbox actually assigned to this matter\u2019s escrow scope, as one combined NDJSON file." }), exportError && _jsx(Alert, { children: exportError }), exportRequests.loadError && _jsx(Alert, { children: exportRequests.loadError }), matterExportRequests.length === 0 ? (_jsx("p", { className: "text-sm text-text-muted", children: exportRequests.loading ? "Loading…" : "No export requests yet." })) : (_jsx("ul", { className: "flex flex-col gap-2", children: matterExportRequests.map((request) => (_jsxs("li", { className: "flex items-center justify-between gap-3 text-sm py-1.5 px-3 bg-surface-alt rounded-sm", children: [_jsxs("span", { children: [new Date(request.dateCreated).toLocaleString(), request.status === "failed" && request.errorMessage && (_jsxs("span", { className: "text-danger", children: [" \u2014 ", request.errorMessage] }))] }), _jsxs("span", { className: "flex items-center gap-3", children: [_jsx("span", { className: `text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill ${statusBadgeClass(request.status)}`, children: statusLabel(request.status) }), !matter.closedAt && request.status === "ready" && (_jsx("a", { href: matterExportRequestDownloadUrl(request.uid), className: "text-primary-dark hover:underline font-medium", children: "Download" }))] })] }, request.uid))) }))] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-base font-bold uppercase tracking-wide mb-3", children: "Search this matter\u2019s custodians" }), matter.closedAt ? (_jsx("p", { className: "text-sm text-text-muted", children: "This matter is closed, so its custodians can no longer be searched or exported." })) : (_jsxs("form", { onSubmit: handleSearch, className: "flex gap-3 mb-4", children: [_jsx("input", { "aria-label": "Search this matter", className: INPUT_CLASS, value: searchText, onChange: (e) => setSearchText(e.target.value), placeholder: "Free text or an operator filter, e.g. from:alice@example.com" }), _jsx(Button, { type: "submit", className: "!w-auto shrink-0", loading: searching, disabled: searching || !searchText.trim(), children: "Search" })] })), searchError && _jsx(Alert, { children: searchError }), searchResults &&
-                        (Object.keys(searchResults).length === 0 ? (_jsx("p", { className: "text-sm text-text-muted", children: "No custodian mailboxes could be searched." })) : (_jsx("div", { className: "flex flex-col gap-4", children: Object.entries(searchResults).map(([mailboxUid, page]) => (_jsxs("div", { children: [_jsx("h3", { className: "text-sm font-semibold mb-2", children: mailboxUid }), page.results.length === 0 ? (_jsx("p", { className: "text-xs text-text-muted", children: "No matches." })) : (_jsx("ul", { className: "flex flex-col gap-1", children: page.results.map((result) => (_jsxs("li", { className: "text-sm py-1 px-2 bg-surface-alt rounded-sm", children: [result.entityType, " \u00B7 ", result.entityUid, result.snippet && _jsxs("span", { className: "text-text-muted", children: [" \u2014 ", result.snippet] })] }, `${result.entityType}-${result.entityUid}`))) }))] }, mailboxUid))) })))] }), _jsxs(Modal, { open: confirmingClose, onClose: closeCloseModal, title: "Close matter", children: [_jsxs("p", { className: "text-sm mb-3", children: ["Close ", _jsx("strong", { children: matter.name }), "? Once closed, no new access requests, exports, searches, or key material reads are allowed under it. This cannot be reopened here."] }), _jsxs("dl", { className: "grid grid-cols-[auto_1fr] gap-x-4 gap-y-1 text-sm mb-4", children: [_jsx("dt", { className: "text-text-muted", children: "Custodians" }), _jsx("dd", { className: "break-all", children: matter.custodianMailboxUids.join(", ") }), _jsx("dt", { className: "text-text-muted", children: "Date range" }), _jsx("dd", { children: formatDateRange(matter) })] }), closeError && _jsx(Alert, { children: closeError }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: closing, onClick: closeCloseModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: closing, disabled: closing, onClick: handleClose, children: "Close matter" })] })] }), _jsxs(Modal, { open: approveTarget !== null, onClose: () => setApproveTarget(null), title: "Approve access request", children: [_jsx("p", { className: "text-sm mb-3", children: "Approving lets holders of this matter\u2019s escrow scope read the key material for this mailbox once enough holders have approved." }), _jsxs("dl", { className: "grid grid-cols-[auto_1fr] gap-x-4 gap-y-1 text-sm mb-4", children: [_jsx("dt", { className: "text-text-muted", children: "Matter" }), _jsx("dd", { children: matter.name }), _jsx("dt", { className: "text-text-muted", children: "Mailbox" }), _jsx("dd", { className: "break-all", children: approveTarget?.mailboxUid }), _jsx("dt", { className: "text-text-muted", children: "Date range" }), _jsx("dd", { children: formatDateRange(matter) }), _jsx("dt", { className: "text-text-muted", children: "Approvals" }), _jsxs("dd", { children: [approveTarget?.approvals.length, " of ", approveTarget?.requiredHoldersAtCreation, " so far, including requester ", approveTarget?.requestedByUserUid] })] }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setApproveTarget(null), children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto", onClick: () => void handleApprove(), children: "Approve request" })] })] }), _jsx(Modal, { open: showNewRequest, onClose: () => setShowNewRequest(false), title: "New access request", children: _jsxs("form", { onSubmit: handleCreateRequest, className: "flex flex-col gap-4", children: [newRequestError && _jsx(Alert, { children: newRequestError }), _jsx(FormField, { label: "Mailbox uid", htmlFor: "newRequestMailboxUid", children: _jsx("input", { id: "newRequestMailboxUid", type: "text", className: INPUT_CLASS, value: newRequestMailboxUid, onChange: (e) => setNewRequestMailboxUid(e.target.value) }) }), _jsx("p", { className: "text-xs text-text-muted", children: "Must be one of this matter's own custodian mailboxes, currently assigned to this matter's escrow scope. Your own creation counts as the first approval." }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: creatingRequest, onClick: () => setShowNewRequest(false), children: "Cancel" }), _jsx(Button, { type: "submit", className: "!w-auto", loading: creatingRequest, disabled: creatingRequest, children: "Create request" })] })] }) }), _jsx(Modal, { open: materialFor !== null, onClose: closeMaterialModal, title: "Escrow key material", children: loadingMaterial ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : materialError ? (_jsx(Alert, { children: materialError })) : (_jsxs(_Fragment, { children: [_jsxs("p", { className: "text-sm text-text-muted mb-3", children: ["Still-encrypted master key wraps for ", _jsx("strong", { children: materialFor?.mailboxUid }), " \u2014 this server cannot decrypt these either. Copy the JSON below into your own offline tooling."] }), _jsx("pre", { className: "text-xs font-mono bg-surface-alt border border-border rounded-sm p-3 overflow-x-auto whitespace-pre-wrap break-all", children: materialText })] })) })] }));
+                                            ].join(" "), children: request.status })] }), actionErrors[request.uid] && _jsx(Alert, { children: actionErrors[request.uid] }), _jsxs("div", { className: "flex gap-3 mt-3", children: [!matter.closedAt && request.status === "pending" && (_jsxs(_Fragment, { children: [_jsx(Button, { type: "button", className: "!w-auto", loading: actingOn[request.uid], disabled: actingOn[request.uid], onClick: () => setApproveTarget(request), children: "Approve" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: actingOn[request.uid], disabled: actingOn[request.uid], onClick: () => setDenyTarget(request), children: "Deny" })] })), !matter.closedAt && (request.status === "approved" || request.status === "fulfilled") && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => handleGetMaterial(request), children: "Get material" }))] })] }, request.uid))) })), _jsx(LoadMoreButton, { list: requests, label: "Load more access requests" })] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsxs("div", { className: "flex items-center justify-between mb-3", children: [_jsx("h2", { className: "text-base font-bold uppercase tracking-wide", children: "Export this matter" }), !matter.closedAt && (_jsx(Button, { type: "button", className: "!w-auto", loading: creatingExport, disabled: creatingExport, onClick: handleCreateExport, children: "+ New export" }))] }), _jsx("p", { className: "text-xs text-text-muted mb-3", children: "Exports messages (narrowed to this matter\u2019s own date range), plus full contacts, calendar events, tasks, and notes, from every custodian mailbox actually assigned to this matter\u2019s escrow scope, as one combined NDJSON file." }), exportError && _jsx(Alert, { children: exportError }), exportRequests.loadError && _jsx(Alert, { children: exportRequests.loadError }), matterExportRequests.length === 0 ? (_jsx("p", { className: "text-sm text-text-muted", children: exportRequests.loading ? "Loading…" : "No export requests yet." })) : (_jsx("ul", { className: "flex flex-col gap-2", children: matterExportRequests.map((request) => (_jsxs("li", { className: "flex items-center justify-between gap-3 text-sm py-1.5 px-3 bg-surface-alt rounded-sm", children: [_jsxs("span", { children: [new Date(request.dateCreated).toLocaleString(), request.status === "failed" && request.errorMessage && (_jsxs("span", { className: "text-danger", children: [" \u2014 ", request.errorMessage] }))] }), _jsxs("span", { className: "flex items-center gap-3", children: [_jsx("span", { className: `text-xs font-bold uppercase tracking-wide py-0.5 px-2 rounded-pill ${statusBadgeClass(request.status)}`, children: statusLabel(request.status) }), !matter.closedAt && request.status === "ready" && (_jsx("a", { href: matterExportRequestDownloadUrl(request.uid), className: "text-primary-dark hover:underline font-medium", children: "Download" }))] })] }, request.uid))) }))] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-base font-bold uppercase tracking-wide mb-3", children: "Search this matter\u2019s custodians" }), matter.closedAt ? (_jsx("p", { className: "text-sm text-text-muted", children: "This matter is closed, so its custodians can no longer be searched or exported." })) : (_jsxs("form", { onSubmit: handleSearch, className: "flex gap-3 mb-4", children: [_jsx("input", { "aria-label": "Search this matter", className: INPUT_CLASS, value: searchText, onChange: (e) => setSearchText(e.target.value), placeholder: "Free text or an operator filter, e.g. from:alice@example.com" }), _jsx(Button, { type: "submit", className: "!w-auto shrink-0", loading: searching, disabled: searching || !searchText.trim(), children: "Search" })] })), searchError && _jsx(Alert, { children: searchError }), searchResults &&
+                        (Object.keys(searchResults).length === 0 ? (_jsx("p", { className: "text-sm text-text-muted", children: "No custodian mailboxes could be searched." })) : (_jsx("div", { className: "flex flex-col gap-4", children: Object.entries(searchResults).map(([mailboxUid, page]) => (_jsxs("div", { children: [_jsx("h3", { className: "text-sm font-semibold mb-2", children: mailboxUid }), page.results.length === 0 ? (_jsx("p", { className: "text-xs text-text-muted", children: "No matches." })) : (_jsx("ul", { className: "flex flex-col gap-1", children: page.results.map((result) => (_jsxs("li", { className: "text-sm py-1 px-2 bg-surface-alt rounded-sm", children: [result.entityType, " \u00B7 ", result.entityUid, result.snippet && _jsxs("span", { className: "text-text-muted", children: [" \u2014 ", result.snippet] })] }, `${result.entityType}-${result.entityUid}`))) }))] }, mailboxUid))) })))] }), _jsxs(Modal, { open: confirmingClose, onClose: closeCloseModal, title: "Close matter", children: [_jsxs("p", { className: "text-sm mb-3", children: ["Close ", _jsx("strong", { children: matter.name }), "? Once closed, no new access requests, exports, searches, or key material reads are allowed under it. This cannot be reopened here."] }), _jsxs("dl", { className: "grid grid-cols-[auto_1fr] gap-x-4 gap-y-1 text-sm mb-4", children: [_jsx("dt", { className: "text-text-muted", children: "Custodians" }), _jsx("dd", { className: "break-all", children: matter.custodianMailboxUids.join(", ") }), _jsx("dt", { className: "text-text-muted", children: "Date range" }), _jsx("dd", { children: formatDateRange(matter) })] }), closeError && _jsx(Alert, { children: closeError }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: closing, onClick: closeCloseModal, children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", loading: closing, disabled: closing, onClick: handleClose, children: "Close matter" })] })] }), _jsxs(Modal, { open: approveTarget !== null, onClose: () => setApproveTarget(null), title: "Approve access request", children: [_jsx("p", { className: "text-sm mb-3", children: "Approving lets holders of this matter\u2019s escrow scope read the key material for this mailbox once enough holders have approved." }), _jsxs("dl", { className: "grid grid-cols-[auto_1fr] gap-x-4 gap-y-1 text-sm mb-4", children: [_jsx("dt", { className: "text-text-muted", children: "Matter" }), _jsx("dd", { children: matter.name }), _jsx("dt", { className: "text-text-muted", children: "Mailbox" }), _jsx("dd", { className: "break-all", children: approveTarget?.mailboxUid }), _jsx("dt", { className: "text-text-muted", children: "Date range" }), _jsx("dd", { children: formatDateRange(matter) }), _jsx("dt", { className: "text-text-muted", children: "Approvals" }), _jsxs("dd", { children: [approveTarget?.approvals.length, " of ", approveTarget?.requiredHoldersAtCreation, " so far, including requester ", approveTarget?.requestedByUserUid] })] }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setApproveTarget(null), children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto", onClick: () => void handleApprove(), children: "Approve request" })] })] }), _jsxs(Modal, { open: denyTarget !== null, onClose: () => setDenyTarget(null), title: "Deny access request", children: [_jsxs("p", { className: "text-sm mb-3", children: ["Denying refuses this request for good: it can\u2019t be approved afterwards, and holders can\u2019t read the key material for mailbox ", _jsx("span", { className: "break-all font-semibold", children: denyTarget?.mailboxUid }), " through it. A new request has to be made to ask again."] }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setDenyTarget(null), children: "Cancel" }), _jsx(Button, { type: "button", className: "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger", onClick: () => void handleDeny(), children: "Deny request" })] })] }), _jsx(Modal, { open: showNewRequest, onClose: () => setShowNewRequest(false), title: "New access request", children: _jsxs("form", { onSubmit: handleCreateRequest, className: "flex flex-col gap-4", children: [newRequestError && _jsx(Alert, { children: newRequestError }), _jsx(FormField, { label: "Mailbox uid", htmlFor: "newRequestMailboxUid", children: _jsx("input", { id: "newRequestMailboxUid", type: "text", className: INPUT_CLASS, value: newRequestMailboxUid, onChange: (e) => setNewRequestMailboxUid(e.target.value) }) }), _jsx("p", { className: "text-xs text-text-muted", children: "Must be one of this matter's own custodian mailboxes, currently assigned to this matter's escrow scope. Your own creation counts as the first approval." }), _jsxs("div", { className: "flex gap-3 justify-end", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: creatingRequest, onClick: () => setShowNewRequest(false), children: "Cancel" }), _jsx(Button, { type: "submit", className: "!w-auto", loading: creatingRequest, disabled: creatingRequest, children: "Create request" })] })] }) }), _jsx(Modal, { open: materialFor !== null, onClose: closeMaterialModal, title: "Escrow key material", children: loadingMaterial ? (_jsx("p", { className: "text-sm text-text-muted", children: "Loading\u2026" })) : materialError ? (_jsx(Alert, { children: materialError })) : (_jsxs(_Fragment, { children: [_jsxs("p", { className: "text-sm text-text-muted mb-3", children: ["Still-encrypted master key wraps for ", _jsx("strong", { children: materialFor?.mailboxUid }), " \u2014 this server cannot decrypt these either. Copy the JSON below into your own offline tooling."] }), _jsx("pre", { className: "text-xs font-mono bg-surface-alt border border-border rounded-sm p-3 overflow-x-auto whitespace-pre-wrap break-all", children: materialText })] })) })] }));
 }

package/dist/apps/escrow/matters/new/index.js

@@ -50,6 +50,10 @@ function NewMatterForm() {
             setError("At least one custodian mailbox is required.");
             return;
         }
+        if (Number.isNaN(new Date(dateRangeStart).getTime()) || Number.isNaN(new Date(dateRangeEnd).getTime())) {
+            setError("The date range start and end are both required.");
+            return;
+        }
         if (new Date(dateRangeStart).getTime() >= new Date(dateRangeEnd).getTime()) {
             setError("The date range start must be before its end.");
             return;

package/dist/apps/shared/calendar/calendarLiveUpdates.d.ts

@@ -1,11 +1,15 @@
-/** Pure helper behind the calendar page's live updates: which push events say "an event changed, and the payload is only a busy block". */
+/** Pure helper behind the calendar page's live updates: which push events say "an event changed". */
 import type { PushEvent } from "../../../lib/mail/pushClient.js";
 /**
- * The uid of the event a push event announces as a redacted busy block, or `undefined` for anything else the shared push connection delivers.
+ * The event a push event says was created, changed or deleted - its uid, and whether it is gone - or `undefined` for anything else the shared push connection
+ * delivers.
  *
- * When somebody creates or changes a private or confidential event, restapi publishes it on the calendar's channel once, for every subscriber - and that one
- * payload has to be safe for a read-only reader of a shared calendar, so it is the busy block (`redacted: true`, title "Busy", no details). It must not be
- * stored as the event by the calendar's owner (or anybody else who may see it in full): they fetch the event again by its uid, which answers with as
- * much as they may see.
+ * The payload is never stored as the event: when somebody creates or changes a private or confidential event, restapi publishes it on the calendar's channel
+ * once, for every subscriber, and that one payload has to be safe for a read-only reader of a shared calendar, so it is the busy block (`redacted: true`,
+ * title "Busy", no details). Whoever may see the event in full fetches it again by its uid, which answers with as much as they may see - so every created or
+ * changed event is handled that way, an ordinary one (an invitation arriving, an edit on another device) included.
  */
-export declare function redactedEventUidOf(event: PushEvent): string | undefined;
+export declare function changedEventOf(event: PushEvent): {
+    uid: string;
+    deleted: boolean;
+} | undefined;

package/dist/apps/shared/calendar/calendarLiveUpdates.js

@@ -2,22 +2,23 @@
 // Copyright (C) 2026 Jean-Philippe Steinmetz
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
-/** Pure helper behind the calendar page's live updates: which push events say "an event changed, and the payload is only a busy block". */
+/** Pure helper behind the calendar page's live updates: which push events say "an event changed". */
 /** The published model name of a calendar event on either database (`CalendarEventMongo`, `CalendarEventSQL`) - and not the reminder's `"CalendarEvent"`,
  * which has its own action. */
 const EVENT_MODEL = /^CalendarEvent(Mongo|SQL)$/;
 /**
- * The uid of the event a push event announces as a redacted busy block, or `undefined` for anything else the shared push connection delivers.
+ * The event a push event says was created, changed or deleted - its uid, and whether it is gone - or `undefined` for anything else the shared push connection
+ * delivers.
  *
- * When somebody creates or changes a private or confidential event, restapi publishes it on the calendar's channel once, for every subscriber - and that one
- * payload has to be safe for a read-only reader of a shared calendar, so it is the busy block (`redacted: true`, title "Busy", no details). It must not be
- * stored as the event by the calendar's owner (or anybody else who may see it in full): they fetch the event again by its uid, which answers with as
- * much as they may see.
+ * The payload is never stored as the event: when somebody creates or changes a private or confidential event, restapi publishes it on the calendar's channel
+ * once, for every subscriber, and that one payload has to be safe for a read-only reader of a shared calendar, so it is the busy block (`redacted: true`,
+ * title "Busy", no details). Whoever may see the event in full fetches it again by its uid, which answers with as much as they may see - so every created or
+ * changed event is handled that way, an ordinary one (an invitation arriving, an edit on another device) included.
  */
-export function redactedEventUidOf(event) {
-    if (!EVENT_MODEL.test(event.type) || (event.action !== "create" && event.action !== "update")) {
+export function changedEventOf(event) {
+    if (!EVENT_MODEL.test(event.type) || (event.action !== "create" && event.action !== "update" && event.action !== "delete")) {
         return undefined;
     }
     const data = event.data;
-    return data?.redacted === true && typeof data.uid === "string" ? data.uid : undefined;
+    return typeof data?.uid === "string" ? { uid: data.uid, deleted: event.action === "delete" } : undefined;
 }

package/dist/apps/shared/calendar/useCalendarReminders.js

@@ -35,6 +35,8 @@ export function useCalendarReminders({ userUid, enabled }) {
                 kind: "calendar",
                 title: notice.title,
                 message: reminderMessage(notice.startDate),
+                // Anyone who can invite you can put any address in an event's location: the button says where it goes.
+                hint: joinUrl ? `Join Meeting opens ${new URL(joinUrl).host}` : undefined,
                 href: CALENDAR_HREF,
                 sticky: true,
                 actions: [

package/dist/apps/shared/components/admin/ActionAlert.d.ts

@@ -0,0 +1,13 @@
+import React, { ReactNode } from "react";
+/**
+ * What `AdminShell` offers the page inside it: sends the browser to auth-server to confirm the user's identity again, then back to this page. `undefined`
+ * outside the shell, and in one with no auth-server to send the browser to.
+ */
+export declare const ReconfirmIdentityContext: React.Context<(() => void) | undefined>;
+/**
+ * `Alert` for the failure of an administrator action. When the failure is the server's refusal for want of a recently confirmed identity (see
+ * `actionErrorMessage()`), it also offers to confirm it again right there rather than leaving the user to work out that reloading the page does it.
+ */
+export default function ActionAlert({ children }: {
+    children: ReactNode;
+}): React.JSX.Element;

package/dist/apps/shared/components/admin/ActionAlert.js

@@ -0,0 +1,24 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { createContext, useContext } from "react";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import { isElevationMessage } from "./elevation.js";
+/**
+ * What `AdminShell` offers the page inside it: sends the browser to auth-server to confirm the user's identity again, then back to this page. `undefined`
+ * outside the shell, and in one with no auth-server to send the browser to.
+ */
+export const ReconfirmIdentityContext = createContext(undefined);
+/**
+ * `Alert` for the failure of an administrator action. When the failure is the server's refusal for want of a recently confirmed identity (see
+ * `actionErrorMessage()`), it also offers to confirm it again right there rather than leaving the user to work out that reloading the page does it.
+ */
+export default function ActionAlert({ children }) {
+    const reconfirm = useContext(ReconfirmIdentityContext);
+    if (!reconfirm || typeof children !== "string" || !isElevationMessage(children)) {
+        return _jsx(Alert, { children: children });
+    }
+    return (_jsxs(Alert, { children: [_jsx("span", { className: "flex-1", children: children }), _jsx("button", { type: "button", className: "shrink-0 font-semibold underline", onClick: reconfirm, children: "Confirm identity again" })] }));
+}

package/dist/apps/shared/components/admin/diagnostics/InformationPanel.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
-import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Alert from "../ActionAlert.js";
 import ComponentsTable from "./ComponentsTable.js";
 import InstalledPlugins from "./InstalledPlugins.js";
 import PackagesTable from "./PackagesTable.js";

package/dist/apps/shared/components/admin/diagnostics/InstalledPlugins.js

@@ -1,7 +1,7 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
 import { HiOutlineExclamationTriangle } from "react-icons/hi2";
 import { getPluginStatus, listPlugins } from "../../../../../lib/admin/pluginsApi.js";
-import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Alert from "../ActionAlert.js";
 import Badge from "./Badge.js";
 import { NO_VALUE } from "./format.js";
 /** Reads the plugins, and their load status. A status that cannot be read leaves the list without it, not without the list. */

package/dist/apps/shared/components/admin/diagnostics/LogsPanel.js

@@ -5,7 +5,7 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useMemo, useState } from "react";
 import { HiOutlineArrowDownTray, HiOutlineArrowPath, HiOutlineCheck, HiOutlineExclamationTriangle, HiOutlinePause, HiOutlinePlay, HiOutlineSignal, HiOutlineSignalSlash, HiOutlineStop, HiOutlineTrash, } from "react-icons/hi2";
-import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Alert from "../ActionAlert.js";
 import Button from "../../../../../lib/components/buttons/Button.js";
 import Badge from "./Badge.js";
 import { timestampedFilename } from "./download.js";

package/dist/apps/shared/components/admin/diagnostics/RuntimePanel.js

@@ -1,5 +1,5 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
-import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Alert from "../ActionAlert.js";
 import Badge from "./Badge.js";
 import KubernetesNotice from "./KubernetesNotice.js";
 import { formatDateTime, NO_VALUE } from "./format.js";

package/dist/apps/shared/components/admin/diagnostics/SystemPanel.js

@@ -1,6 +1,6 @@
 import { jsx as _jsx, Fragment as _Fragment, jsxs as _jsxs } from "react/jsx-runtime";
 import { HiOutlinePause, HiOutlinePlay } from "react-icons/hi2";
-import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Alert from "../ActionAlert.js";
 import Button from "../../../../../lib/components/buttons/Button.js";
 import { formatDateTime } from "./format.js";
 import HostCard from "./HostCard.js";

package/dist/apps/shared/components/admin/distributionLists/MemberListCard.js

@@ -4,10 +4,10 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useState } from "react";
-import { ApiRequestError } from "../../../../../lib/util/api.js";
 import { updateDistributionList } from "../../../../../lib/admin/distributionListsApi.js";
-import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Alert from "../ActionAlert.js";
 import Button from "../../../../../lib/components/buttons/Button.js";
+import { actionErrorMessage } from "../elevation.js";
 /**
  * Lets an admin view and edit a distribution list's members — same load/inline-add-row/per-row-remove
  * interaction shape as `ShareAccessCard`, but against a plain `memberAddresses: string[]` field on the
@@ -36,7 +36,7 @@ export default function MemberListCard({ list, onUpdate }) {
             onUpdate(updated);
         }
         catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not add this member.");
+            setError(actionErrorMessage(err, "Could not add this member."));
         }
         finally {
             setSaving(false);
@@ -54,7 +54,7 @@ export default function MemberListCard({ list, onUpdate }) {
             onUpdate(updated);
         }
         catch (err) {
-            setError(err instanceof ApiRequestError ? err.message : "Could not remove this member.");
+            setError(actionErrorMessage(err, "Could not remove this member."));
         }
         finally {
             setSaving(false);

package/dist/apps/shared/components/admin/elevation.d.ts

@@ -11,6 +11,15 @@ export declare const ELEVATION_ATTEMPT_KEY = "rapidmx-admin-elevation-attempt";
 export declare const ELEVATION_RETRY_WINDOW_MS: number;
 /** Whether `err` is a 403 from an elevation-gated endpoint for a caller whose token isn't elevated. */
 export declare function isElevationRequired(err: unknown): boolean;
+/** What an administrator action says when the server refuses it because the token isn't elevated (any longer). The console confirms the user's identity
+ * when a page opens (see `AdminShell`), so reloading is what sends them round auth-server's confirmation again. */
+export declare const ELEVATION_ACTION_MESSAGE = "This needs you to have recently confirmed your identity. Reload this page to confirm it again, then try once more.";
+/** Whether `text` is one of the messages that say an action needs the user's identity confirmed again (this one, a plugin's or the diagnostics'). */
+export declare function isElevationMessage(text: string): boolean;
+/** The text for an administrator action that failed: the elevation message when it only needed the user to confirm their identity (an action the
+ * server newly gates behind an elevated token - truncating or deleting a mailbox, a retention policy, an export of another mailbox, approving an
+ * erasure), else the server's own message, else `fallback`. */
+export declare function actionErrorMessage(err: unknown, fallback: string): string;
 /** auth-server's elevation page: it sends the browser back to `returnTo` once the user has confirmed their
  * identity, or to its own account page if they cancel. */
 export declare function elevationUrl(authServerUrl: string, returnTo: string): string;

package/dist/apps/shared/components/admin/elevation.js

@@ -18,6 +18,22 @@ export const ELEVATION_RETRY_WINDOW_MS = 2 * 60 * 1000;
 export function isElevationRequired(err) {
     return err instanceof ApiRequestError && err.status === 403 && err.code === ELEVATION_REQUIRED_CODE;
 }
+/** What an administrator action says when the server refuses it because the token isn't elevated (any longer). The console confirms the user's identity
+ * when a page opens (see `AdminShell`), so reloading is what sends them round auth-server's confirmation again. */
+export const ELEVATION_ACTION_MESSAGE = "This needs you to have recently confirmed your identity. Reload this page to confirm it again, then try once more.";
+/** Whether `text` is one of the messages that say an action needs the user's identity confirmed again (this one, a plugin's or the diagnostics'). */
+export function isElevationMessage(text) {
+    return text.includes("recently confirmed your identity");
+}
+/** The text for an administrator action that failed: the elevation message when it only needed the user to confirm their identity (an action the
+ * server newly gates behind an elevated token - truncating or deleting a mailbox, a retention policy, an export of another mailbox, approving an
+ * erasure), else the server's own message, else `fallback`. */
+export function actionErrorMessage(err, fallback) {
+    if (isElevationRequired(err)) {
+        return ELEVATION_ACTION_MESSAGE;
+    }
+    return err instanceof ApiRequestError ? err.message : fallback;
+}
 /** auth-server's elevation page: it sends the browser back to `returnTo` once the user has confirmed their
  * identity, or to its own account page if they cancel. */
 export function elevationUrl(authServerUrl, returnTo) {

package/dist/apps/shared/components/admin/escrowScopes/EscrowScopeKeyAndHoldersFields.d.ts

@@ -25,6 +25,8 @@ export interface EscrowScopeKeyAndHoldersFieldsProps {
 /** Builds an all-zeroes starting point for the "new" page — `notBefore`/`notAfter` default to "now" so an
  * admin pasting in a cert's own dates only has to touch what actually differs. */
 export declare function emptyEscrowScopeKeyAndHoldersValue(): EscrowScopeKeyAndHoldersValue;
+/** The message for a key validity date left empty (or not a date), which would otherwise be sent as nothing; `null` when both dates are there. */
+export declare function keyValidityError(value: Pick<EscrowScopeKeyAndHoldersValue, "notBefore" | "notAfter">): string | null;
 /** The message shown when an administrator tries to make themselves a holder: whoever configures a scope must not
  * also be able to approve access under it (separation of duties - the server refuses it too). Holders who were
  * already on the scope (`existingHolderUserUids`) aren't treated as newly added. */

package/dist/apps/shared/components/admin/escrowScopes/EscrowScopeKeyAndHoldersFields.js

@@ -1,4 +1,10 @@
 import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-runtime";
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { useEffect, useState } from "react";
+import { escrowPublicKeyFingerprint, normalizeFingerprint } from "../../../../../lib/crypto/escrowKeys.js";
 import { toDatetimeLocal } from "../../../../../lib/util/dateInput.js";
 import { resolveEscrowScopeHolder } from "../../../../../lib/admin/escrowScopesApi.js";
 import FormField from "../../../../../lib/components/forms/FormField.js";
@@ -19,6 +25,12 @@ export function emptyEscrowScopeKeyAndHoldersValue() {
         notifySubjectOnAccess: false,
     };
 }
+/** The message for a key validity date left empty (or not a date), which would otherwise be sent as nothing; `null` when both dates are there. */
+export function keyValidityError(value) {
+    return Number.isNaN(new Date(value.notBefore).getTime()) || Number.isNaN(new Date(value.notAfter).getTime())
+        ? "The key's validity dates, not before and not after, are both required."
+        : null;
+}
 /** The message shown when an administrator tries to make themselves a holder: whoever configures a scope must not
  * also be able to approve access under it (separation of duties - the server refuses it too). Holders who were
  * already on the scope (`existingHolderUserUids`) aren't treated as newly added. */
@@ -32,5 +44,33 @@ export default function EscrowScopeKeyAndHoldersFields({ value, onChange, disabl
     function set(key, next) {
         onChange({ ...value, [key]: next });
     }
-    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-base font-bold uppercase tracking-wide mb-1", children: "Public key" }), _jsx("p", { className: "text-sm text-text-muted mb-4", children: "The fields of an already-issued certificate \u2014 this server never generates or holds the corresponding private key." }), _jsx(FormField, { label: "Public key (base64)", htmlFor: "publicKey", children: _jsx("textarea", { id: "publicKey", className: `${INPUT_CLASS} font-mono text-xs`, rows: 4, value: value.publicKey, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("publicKey", e.target.value) }) }), _jsx(FormField, { label: "Key type", htmlFor: "keyType", children: _jsx("input", { id: "keyType", type: "text", className: INPUT_CLASS, value: value.keyType, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("keyType", e.target.value), placeholder: "x509" }) }), _jsx(FormField, { label: "Fingerprint (hex SHA-256)", htmlFor: "fingerprint", children: _jsx("input", { id: "fingerprint", type: "text", className: `${INPUT_CLASS} font-mono`, value: value.fingerprint, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("fingerprint", e.target.value) }) }), _jsxs("div", { className: "grid grid-cols-1 sm:grid-cols-2 gap-x-4", children: [_jsx(FormField, { label: "Not before", htmlFor: "notBefore", children: _jsx("input", { id: "notBefore", type: "datetime-local", className: INPUT_CLASS, value: value.notBefore, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("notBefore", e.target.value) }) }), _jsx(FormField, { label: "Not after", htmlFor: "notAfter", children: _jsx("input", { id: "notAfter", type: "datetime-local", className: INPUT_CLASS, value: value.notAfter, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("notAfter", e.target.value) }) })] })] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-base font-bold uppercase tracking-wide mb-1", children: "Holders & dual control" }), _jsx("p", { className: "text-sm text-text-muted mb-4", children: "Every uid below is granted the eDiscovery/compliance holder role for this scope \u2014 a deliberately separate role from server administration. At least one holder is required." }), _jsx(PrincipalListField, { label: "Holder user uids", values: value.holderUserUids, onChange: (holderUserUids) => set("holderUserUids", holderUserUids), resolve: resolveEscrowScopeHolder, emptyMessage: "No holders added yet.", disabled: disabled }), _jsx(FormField, { label: "Required holders (M-of-N dual control)", htmlFor: "requiredHolders", children: _jsx("input", { id: "requiredHolders", type: "number", className: INPUT_CLASS, value: value.requiredHolders, disabled: disabled, onChange: (e) => set("requiredHolders", Number(e.target.value) || 1) }) }), _jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx("input", { type: "checkbox", checked: value.notifySubjectOnAccess, disabled: disabled, onChange: (e) => set("notifySubjectOnAccess", e.target.checked) }), "Notify subject on access"] })] })] }));
+    // What is typed in the required-holders box, which may be empty meanwhile (to be typed over): the value is then 0, which the pages refuse on submit
+    // ("between 1 and the number of holders"), rather than snapping back to 1 under the cursor.
+    const [requiredText, setRequiredText] = useState(String(value.requiredHolders));
+    useEffect(() => {
+        setRequiredText((text) => (Number(text) === value.requiredHolders ? text : String(value.requiredHolders)));
+    }, [value.requiredHolders]);
+    // What the pasted key's own SHA-256 fingerprint is (`null`: it is no certificate), so the typed one - which the holders compare out of band -
+    // can be checked against it. `undefined` until worked out.
+    const [actualFingerprint, setActualFingerprint] = useState(undefined);
+    const checking = !keyReadOnly && value.publicKey.trim() !== "";
+    useEffect(() => {
+        if (!checking) {
+            return;
+        }
+        let cancelled = false;
+        setActualFingerprint(undefined);
+        void escrowPublicKeyFingerprint(value.publicKey).then((fingerprint) => {
+            if (!cancelled) {
+                setActualFingerprint(fingerprint);
+            }
+        });
+        return () => {
+            cancelled = true;
+        };
+    }, [checking, value.publicKey]);
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-base font-bold uppercase tracking-wide mb-1", children: "Public key" }), _jsx("p", { className: "text-sm text-text-muted mb-4", children: "The fields of an already-issued certificate \u2014 this server never generates or holds the corresponding private key." }), _jsx(FormField, { label: "Public key (base64)", htmlFor: "publicKey", children: _jsx("textarea", { id: "publicKey", className: `${INPUT_CLASS} font-mono text-xs`, rows: 4, value: value.publicKey, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("publicKey", e.target.value) }) }), _jsx(FormField, { label: "Key type", htmlFor: "keyType", children: _jsx("input", { id: "keyType", type: "text", className: INPUT_CLASS, value: value.keyType, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("keyType", e.target.value), placeholder: "x509" }) }), _jsxs(FormField, { label: "Fingerprint (hex SHA-256)", htmlFor: "fingerprint", children: [_jsx("input", { id: "fingerprint", type: "text", className: `${INPUT_CLASS} font-mono`, value: value.fingerprint, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("fingerprint", e.target.value) }), checking && actualFingerprint === null && (_jsx("p", { role: "alert", className: "text-xs text-danger mt-1.5", children: "This is not a base64-encoded certificate, so no fingerprint can be checked against it." })), checking && actualFingerprint && normalizeFingerprint(value.fingerprint) !== actualFingerprint && (_jsxs("p", { role: "alert", className: "text-xs text-danger mt-1.5", children: ["This fingerprint is not the one of the public key above, whose SHA-256 fingerprint is", " ", _jsx("code", { className: "font-mono break-all", children: actualFingerprint }), ".", " ", _jsx("button", { type: "button", className: "underline font-semibold", disabled: disabled, onClick: () => set("fingerprint", actualFingerprint), children: "Use it" })] })), checking && actualFingerprint && normalizeFingerprint(value.fingerprint) === actualFingerprint && (_jsx("p", { className: "text-xs text-text-muted mt-1.5", children: "This is the fingerprint of the public key above." }))] }), _jsxs("div", { className: "grid grid-cols-1 sm:grid-cols-2 gap-x-4", children: [_jsx(FormField, { label: "Not before", htmlFor: "notBefore", children: _jsx("input", { id: "notBefore", type: "datetime-local", className: INPUT_CLASS, value: value.notBefore, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("notBefore", e.target.value) }) }), _jsx(FormField, { label: "Not after", htmlFor: "notAfter", children: _jsx("input", { id: "notAfter", type: "datetime-local", className: INPUT_CLASS, value: value.notAfter, disabled: disabled, readOnly: keyReadOnly, onChange: (e) => set("notAfter", e.target.value) }) })] })] }), _jsxs("div", { className: "bg-surface border border-border rounded-md p-6", children: [_jsx("h2", { className: "text-base font-bold uppercase tracking-wide mb-1", children: "Holders & dual control" }), _jsx("p", { className: "text-sm text-text-muted mb-4", children: "Every uid below is granted the eDiscovery/compliance holder role for this scope \u2014 a deliberately separate role from server administration. At least one holder is required." }), _jsx(PrincipalListField, { label: "Holder user uids", values: value.holderUserUids, onChange: (holderUserUids) => set("holderUserUids", holderUserUids), resolve: resolveEscrowScopeHolder, emptyMessage: "No holders added yet.", disabled: disabled }), _jsx(FormField, { label: "Required holders (M-of-N dual control)", htmlFor: "requiredHolders", children: _jsx("input", { id: "requiredHolders", type: "number", className: INPUT_CLASS, value: requiredText, disabled: disabled, onChange: (e) => {
+                                setRequiredText(e.target.value);
+                                set("requiredHolders", Number(e.target.value) || 0);
+                            } }) }), _jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx("input", { type: "checkbox", checked: value.notifySubjectOnAccess, disabled: disabled, onChange: (e) => set("notifySubjectOnAccess", e.target.checked) }), "Notify subject on access"] })] })] }));
 }

package/dist/apps/shared/components/admin/layout/AdminShell.js

@@ -21,6 +21,7 @@ import AppearanceProvider from "../../../appearance/AppearanceProvider.js";
 import UserMenu from "../../layout/UserMenu.js";
 import { clearElevationAttempt, elevationAttemptedRecently, elevationUrl, isElevationRequired, recordElevationAttempt, } from "../elevation.js";
 import { signOutOfConsole } from "../signOut.js";
+import { ReconfirmIdentityContext } from "../ActionAlert.js";
 import { pluginIcon } from "../../../plugins/pluginIcons.js";
 import { mergePluginNavItems } from "../../../plugins/pluginNav.js";
 /** Sections shown in the persistent icon rail / mobile tab bar — every admin area reachable from
@@ -224,7 +225,7 @@ export default function AdminShell({ active, userUid, authServerUrl, pluginNav,
                                 ].join(" "), children: [railExpanded ? (_jsx(HiOutlineChevronDoubleLeft, { size: 20, "aria-hidden": "true", className: "shrink-0" })) : (_jsx(HiOutlineChevronDoubleRight, { size: 20, "aria-hidden": "true", className: "shrink-0" })), railExpanded && _jsx("span", { children: "Collapse" })] })] }), _jsx(Drawer, { open: menuOpen, onClose: () => setMenuOpen(false), title: "Admin", fullScreen: true, children: _jsx("nav", { "aria-label": "Admin menu", className: "flex flex-col gap-1 -mx-2", children: navItems.map(({ id, href, label, icon: Icon }) => (_jsxs("a", { href: href, "aria-current": id === active ? "page" : undefined, onClick: () => setMenuOpen(false), className: [
                                     "flex items-center gap-3 px-3 py-2.5 rounded-sm text-sm font-medium",
                                     id === active ? "bg-primary/10 text-primary-dark" : "text-text hover:bg-surface-alt",
-                                ].join(" "), children: [_jsx(Icon, { size: 20, "aria-hidden": "true" }), label] }, id))) }) }), _jsxs("div", { className: "flex-1 flex flex-col min-w-0", children: [_jsxs("header", { className: "rr-solid sticky top-0 z-30 h-16 shrink-0 bg-surface border-b border-border flex items-center justify-between gap-4 px-4 md:px-6", children: [_jsxs("div", { className: "flex items-center gap-2 min-w-0", children: [_jsx("button", { type: "button", className: "md:hidden shrink-0 w-9 h-9 flex items-center justify-center rounded-sm text-text-muted hover:bg-surface-alt hover:text-text", "aria-label": "Open menu", onClick: () => setMenuOpen(true), children: _jsx(HiOutlineBars3, { size: 20, "aria-hidden": "true" }) }), _jsx("span", { className: "font-display font-bold text-lg uppercase tracking-wide truncate", children: activeItem?.label })] }), _jsx(UserMenu, { userUid: userUid, authServerUrl: authServerUrl, onSignOut: handleSignOut, showMailLink: true })] }), _jsx("div", { id: "app-content", className: "flex-1", children: _jsx("main", { className: "max-w-6xl mx-auto px-6 py-8", children: children }) })] })] }) }));
+                                ].join(" "), children: [_jsx(Icon, { size: 20, "aria-hidden": "true" }), label] }, id))) }) }), _jsxs("div", { className: "flex-1 flex flex-col min-w-0", children: [_jsxs("header", { className: "rr-solid sticky top-0 z-30 h-16 shrink-0 bg-surface border-b border-border flex items-center justify-between gap-4 px-4 md:px-6", children: [_jsxs("div", { className: "flex items-center gap-2 min-w-0", children: [_jsx("button", { type: "button", className: "md:hidden shrink-0 w-9 h-9 flex items-center justify-center rounded-sm text-text-muted hover:bg-surface-alt hover:text-text", "aria-label": "Open menu", onClick: () => setMenuOpen(true), children: _jsx(HiOutlineBars3, { size: 20, "aria-hidden": "true" }) }), _jsx("span", { className: "font-display font-bold text-lg uppercase tracking-wide truncate", children: activeItem?.label })] }), _jsx(UserMenu, { userUid: userUid, authServerUrl: authServerUrl, onSignOut: handleSignOut, showMailLink: true })] }), _jsx("div", { id: "app-content", className: "flex-1", children: _jsx("main", { className: "max-w-6xl mx-auto px-6 py-8", children: _jsx(ReconfirmIdentityContext.Provider, { value: authServerUrl ? handleRetryElevation : undefined, children: children }) }) })] })] }) }));
     }
     // The user's own colours and background (`AppearanceProvider`), from what the last webmail page cached in this browser: the console never asks the server.
     return (_jsxs(AppearanceProvider, { userUid: userUid, lookUp: false, children: [content, _jsx(FrameBrandingFooter, { parsed: footer, appTitle: [...adminNavItems(pluginNav), ...OFF_RAIL_ITEMS].find((item) => item.id === active)?.label })] }));

package/dist/apps/shared/components/admin/mailboxes/EraseLeftoverDataDialog.js

@@ -4,13 +4,13 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useRef, useState } from "react";
-import { ApiRequestError } from "../../../../../lib/util/api.js";
 import { eraseLeftoverMailbox } from "../../../../../lib/admin/leftoverMailboxApi.js";
 import { getErasureRequest } from "../../../../../lib/mail/erasureRequestApi.js";
-import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Alert from "../ActionAlert.js";
 import Button from "../../../../../lib/components/buttons/Button.js";
 import Modal from "../../../../../lib/components/overlays/Modal.js";
 import { notify } from "../../../notifications/store.js";
+import { actionErrorMessage } from "../elevation.js";
 const INPUT_CLASS = "w-full text-sm py-2.5 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
 const DANGER_BUTTON_CLASS = "!w-auto !bg-none !bg-danger !border-danger hover:!bg-danger";
 /** How often the request is asked how far the erasure has got. */
@@ -53,7 +53,7 @@ export default function EraseLeftoverDataDialog({ address, counts, resume, doneL
         }
         catch (err) {
             // The server's own words: a legal hold names its matter, a mailbox that exists again says so.
-            setError(err instanceof ApiRequestError ? err.message : "Could not start the erasure.");
+            setError(actionErrorMessage(err, "Could not start the erasure."));
             setPhase("confirm");
         }
     }

package/dist/apps/shared/components/admin/mailboxes/EscrowScopeCard.js

@@ -4,13 +4,13 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useState } from "react";
-import { ApiRequestError } from "../../../../../lib/util/api.js";
 import { listEscrowScopes } from "../../../../../lib/admin/escrowScopesApi.js";
 import { updateMailbox } from "../../../../../lib/mail/mailApi.js";
 import { useApiClient } from "../../../../../lib/util/apiClientContext.js";
-import Alert from "../../../../../lib/components/feedback/Alert.js";
+import Alert from "../ActionAlert.js";
 import Button from "../../../../../lib/components/buttons/Button.js";
 import Modal from "../../../../../lib/components/overlays/Modal.js";
+import { actionErrorMessage } from "../elevation.js";
 const SELECT_CLASS = "text-sm py-2 px-3 border border-border rounded-sm bg-surface text-text focus:outline-none focus:border-primary";
 /** Enough for any realistic deployment's scopes in one list. */
 const SCOPE_LIST_LIMIT = 200;
@@ -30,7 +30,7 @@ export default function EscrowScopeCard({ mailbox, onUpdate }) {
     useEffect(() => {
         listEscrowScopes({ limit: SCOPE_LIST_LIMIT }, client)
             .then(setScopes)
-            .catch((err) => setLoadError(err instanceof ApiRequestError ? err.message : "Could not load escrow scopes."));
+            .catch((err) => setLoadError(actionErrorMessage(err, "Could not load escrow scopes.")));
     }, []);
     // Changing the scope changes who can recover this mailbox's encrypted mail, so it's confirmed first.
     function handleSubmit(e) {
@@ -48,7 +48,7 @@ export default function EscrowScopeCard({ mailbox, onUpdate }) {
             setSaved(true);
         }
         catch (err) {
-            setSaveError(err instanceof ApiRequestError ? err.message : "Could not save the escrow scope.");
+            setSaveError(actionErrorMessage(err, "Could not save the escrow scope."));
         }
         finally {
             setSaving(false);