@rapidmx/web-client 0.36.0 → 0.37.1

package/dist/apps/shared/components/mail/MessageDetailPane.js

@@ -17,7 +17,7 @@ import { getUnlockedKeys, subscribeKeySession } from "../../../../lib/crypto/key
 import { extractAddresses } from "../../../../lib/crypto/mime.js";
 import { SignerKeyConflictError, signingKeyFingerprints, trustSigner } from "../../../../lib/crypto/keyvaultApi.js";
 import { isLikelyMailingList } from "../../../../lib/crypto/composeSecurity.js";
-import { clearPinnedSignerCache, getPinnedSignerFingerprints, getSignerKeyState } from "./pinnedSigners.js";
+import { clearPinnedSignerCache, getPinnedSigners, getSignerKeyState } from "./pinnedSigners.js";
 import { currentVerificationSeal, getVaultGeneration, sendVerificationSeal } from "./verificationSeals.js";
 import { getMyMailboxAccess } from "../../../../lib/mail/mailboxAccessApi.js";
 import { useApiClient } from "../../../../lib/util/apiClientContext.js";
@@ -369,7 +369,7 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
         // mailbox's own signing keys when it sent the message itself. A failed lookup means no pins, which can only
         // ever make a signature "signer not verified", never verified.
         const senderAddress = message.from.address;
-        const pinsPromise = getPinnedSignerFingerprints(message.mailboxUid, senderAddress, client).then((fingerprints) => ({ loaded: true, fingerprints }), () => ({ loaded: false, fingerprints: [] }));
+        const pinsPromise = getPinnedSigners(message.mailboxUid, senderAddress, client).then((signers) => ({ loaded: true, ...signers }), () => ({ loaded: false, fingerprints: [], openPgpKeys: [] }));
         // Verification seals (see `verificationSeals.ts`) need unlocked keys and the vault's current master key
         // generation; without either the message is evaluated exactly as before, with no seal. The sender's key records
         // are loaded alongside, so a seal can say when the signer key was later revoked as compromised.
@@ -392,7 +392,8 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
             const ownPins = signingKeyFingerprints(ownKeys);
             const [contactPins, sealContext] = await Promise.all([pinsPromise, sealContextPromise]);
             const pins = [...new Set([...contactPins.fingerprints, ...ownPins])];
-            const pinned = pins.length > 0 ? pins : undefined;
+            // An OpenPGP signature is checked against the sender's pinned OpenPGP certificates themselves (it names only a key ID).
+            const pinned = contactPins.openPgpKeys.length > 0 ? { fingerprints: pins, openPgpKeys: contactPins.openPgpKeys } : pins.length > 0 ? pins : undefined;
             // The raw content is a byte string - only ever handed to evaluateMessageSecurity(), never shown. Keys
             // are read after the pin lookup's await, so a lock that happened meanwhile is honored.
             const unlocked = getUnlockedKeys(message.mailboxUid);
@@ -429,7 +430,7 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
                 const viaAlias = await messageSecurity.evaluateMessageSecurity(rawMime, unlocked, pinned, alias);
                 result = { ...result, notAddressedToReader: viaAlias.notAddressedToReader };
             }
-            const unpinned = contactPins.loaded && pins.length === 0;
+            const unpinned = contactPins.loaded && pins.length === 0 && contactPins.openPgpKeys.length === 0;
             const keyChanged = signerKeyChanged(result);
             const [keyState, access] = await Promise.all([
                 keyChanged || (unpinned && UNVERIFIED_SIGNER_STATES.has(result.state)) ? loadKeyState() : undefined,
@@ -526,11 +527,11 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
     // Only ever invoked from the "Trust this signer" dialog, which only opens for an unverified-signer result carrying
     // `signerCertificate`. The pin goes on the contact in the mailbox the message belongs to; the evaluation is then
     // re-run against a fresh pinned-signer lookup, so the badge turns verified.
-    async function handleTrustSigner(address, certificate) {
+    async function handleTrustSigner(address, certificate, type) {
         setTrusting(true);
         setTrustError(null);
         try {
-            await trustSigner(message.mailboxUid, { address, certificate }, client);
+            await trustSigner(message.mailboxUid, { address, certificate, ...(type ? { type } : {}) }, client);
             clearPinnedSignerCache();
             setTrustConfirmOpen(false);
             setUnlockRefresh((n) => n + 1);
@@ -846,7 +847,10 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
         ? security.signerCertificate
         : undefined;
     const keyChanged = security && signerKeyChanged(security) ? security : undefined;
-    const pinnedSignerKey = senderKeyState?.pinned[0];
+    // An OpenPGP signer's key is pinned as the contact's OpenPGP certificate, not a signing certificate.
+    const openPgpSigner = keyChanged?.signerKeyType === "openpgp";
+    const pinnedSignerKey = openPgpSigner ? senderKeyState?.openPgp?.[0] : senderKeyState?.pinned[0];
+    const pinnedSignerSince = openPgpSigner ? senderKeyState?.openPgpPinnedSince : senderKeyState?.pinnedSince;
     const recordedConflict = keyChanged && sameFingerprint(senderKeyState?.conflict?.observedKey.fingerprint, keyChanged.signerFingerprint)
         ? senderKeyState.conflict
         : undefined;
@@ -879,7 +883,7 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
     // Registered while rendering, not in an effect: the invitation lookup below must find it the moment it is enabled. Writing the same
     // file for the same message again is a no-op.
     if (sealedCalendar !== undefined) {
-        rememberSealedInvite(message.uid, sealedCalendar);
+        rememberSealedInvite(message.uid, sealedCalendar, message.mailboxUid);
     }
     const mayHoldInvite = !message.encrypted &&
         !inOutbox &&
@@ -991,13 +995,13 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
                     : "This message can't be read, so it can't be printed";
     // In Junk Email the card's button is the way back (Not junk), which only needs the right to change the message.
     const reportReason = !writable ? "View-only mailbox" : undefined;
-    const card = (_jsxs(CardShell, { unread: cardUnread, children: [_jsxs("div", { className: ["flex flex-wrap items-start gap-x-3 gap-y-1 px-4 pt-3 pb-2", cardUnread ? "bg-primary/[0.07]" : ""].join(" "), children: [_jsx(SenderAvatar, { from: senderRecipient }), _jsxs("div", { className: "flex-1 min-w-[12rem]", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-x-2 gap-y-1", children: [threadHeader ? (_jsxs("h2", { className: "relative min-w-0 flex-1", style: BODY_FONT_STYLE, children: [_jsx("button", { type: "button", ref: threadHeader.buttonRef, onClick: threadHeader.onToggle, "aria-expanded": true, "aria-controls": threadHeader.bodyId, "aria-label": `${cardUnread ? "Unread. " : ""}${senderLabel}`, className: ["absolute inset-0 w-full rounded-sm", ROW_FOCUS_CLASS].join(" ") }), _jsx("span", { className: "pointer-events-none relative flex text-sm", children: _jsx(ParticipantLink, { participant: { address: senderAddress, displayName: senderName }, context: cardContext, label: `Contact card for ${senderLabel}`, className: "pointer-events-auto min-w-0 max-w-full", children: _jsx(MailAddress, { recipient: senderRecipient, className: senderClass(cardUnread) }) }) })] })) : (_jsxs("p", { className: "text-sm break-words min-w-0", children: ["From", " ", _jsx(ParticipantLink, { participant: { address: senderAddress, displayName: senderName }, context: cardContext, className: "font-semibold text-text", children: senderLabel })] })), security && _jsx(SecurityIndicator, { security: security, zeroAccess: !!message.zeroAccess })] }), senderNameCheck.misleading && (_jsxs("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-warning/15 text-text", children: ["The sender\u2019s name \u201C", senderName, "\u201D looks like an email address, but this message was sent from ", _jsx("span", { className: "font-medium", children: senderAddress }), ". Don\u2019t trust it based on the name."] })), _jsx(RecipientLine, { label: "To", recipients: message.recipients.filter((r) => r.type !== "cc" && r.type !== "bcc"), context: cardContext }), _jsx(RecipientLine, { label: "Cc", recipients: message.recipients.filter((r) => r.type === "cc"), context: cardContext }), _jsx(RecipientLine, { label: "Bcc", recipients: message.recipients.filter((r) => r.type === "bcc"), context: cardContext })] }), _jsxs("div", { className: "ml-auto flex flex-wrap items-center justify-end gap-1", children: [_jsx("time", { dateTime: message.receivedDate, className: ["text-xs mr-1", dateClass(cardUnread)].join(" "), children: new Date(message.receivedDate).toLocaleString() }), adaptable && (_jsx("button", { type: "button", "aria-label": "View original", "aria-pressed": viewOriginal, title: viewOriginal ? "Follow the theme" : "View original", onClick: () => setViewOriginal(!viewOriginal), className: [
+    const card = (_jsxs(CardShell, { unread: cardUnread, children: [_jsxs("div", { className: ["flex flex-wrap items-start gap-x-3 gap-y-1 px-4 pt-3 pb-2", cardUnread ? "bg-primary/[0.07]" : ""].join(" "), children: [_jsx(SenderAvatar, { from: senderRecipient }), _jsxs("div", { className: "flex-1 min-w-[12rem]", children: [_jsxs("div", { className: "flex flex-wrap items-center gap-x-2 gap-y-1", children: [threadHeader ? (_jsxs("h2", { className: "relative min-w-0 flex-1", style: BODY_FONT_STYLE, children: [_jsx("button", { type: "button", ref: threadHeader.buttonRef, onClick: threadHeader.onToggle, "aria-expanded": true, "aria-controls": threadHeader.bodyId, "aria-label": `${cardUnread ? "Unread. " : ""}${senderLabel}`, className: ["absolute inset-0 w-full rounded-sm", ROW_FOCUS_CLASS].join(" ") }), _jsx("span", { className: "pointer-events-none relative flex text-sm", children: _jsx(ParticipantLink, { participant: { address: senderAddress, displayName: senderName }, context: cardContext, label: `Contact card for ${senderLabel}`, className: "pointer-events-auto min-w-0 max-w-full", children: _jsx(MailAddress, { recipient: senderRecipient, className: senderClass(cardUnread) }) }) })] })) : (_jsxs("p", { className: "text-sm break-words min-w-0", children: ["From", " ", _jsx(ParticipantLink, { participant: { address: senderAddress, displayName: senderName }, context: cardContext, className: "font-semibold text-text", children: senderLabel })] })), security && _jsx(SecurityIndicator, { security: security, zeroAccess: !!message.zeroAccess })] }), security?.signerKeyUnknown && (_jsx("p", { role: "status", className: "mt-2 text-sm text-text-muted", children: "Signed with an OpenPGP key RapidMX doesn\u2019t have for this sender yet, so the signature couldn\u2019t be checked." })), senderNameCheck.misleading && (_jsxs("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-warning/15 text-text", children: ["The sender\u2019s name \u201C", senderName, "\u201D looks like an email address, but this message was sent from ", _jsx("span", { className: "font-medium", children: senderAddress }), ". Don\u2019t trust it based on the name."] })), _jsx(RecipientLine, { label: "To", recipients: message.recipients.filter((r) => r.type !== "cc" && r.type !== "bcc"), context: cardContext }), _jsx(RecipientLine, { label: "Cc", recipients: message.recipients.filter((r) => r.type === "cc"), context: cardContext }), _jsx(RecipientLine, { label: "Bcc", recipients: message.recipients.filter((r) => r.type === "bcc"), context: cardContext })] }), _jsxs("div", { className: "ml-auto flex flex-wrap items-center justify-end gap-1", children: [_jsx("time", { dateTime: message.receivedDate, className: ["text-xs mr-1", dateClass(cardUnread)].join(" "), children: new Date(message.receivedDate).toLocaleString() }), adaptable && (_jsx("button", { type: "button", "aria-label": "View original", "aria-pressed": viewOriginal, title: viewOriginal ? "Follow the theme" : "View original", onClick: () => setViewOriginal(!viewOriginal), className: [
                                     "inline-flex items-center justify-center p-1.5 rounded-md border border-border text-sm text-text hover:bg-surface-alt",
                                     viewOriginal ? "bg-primary/10" : "",
                                 ].join(" "), children: viewOriginal ? _jsx(HiOutlineMoon, { size: 16, "aria-hidden": "true" }) : _jsx(HiOutlineSun, { size: 16, "aria-hidden": "true" }) })), _jsx(IconAction, { icon: _jsx(HiOutlineArrowUturnLeft, { size: 16, "aria-hidden": "true" }), label: "Reply", shortcut: keyboard ? SHORTCUTS.mail.reply : undefined, disabled: preparingCompose, onPrefetch: prefetchReply, onClick: () => void handleReplyOrForward("reply") }), _jsx(IconAction, { icon: _jsxs("span", { className: "inline-flex items-center", "aria-hidden": "true", children: [_jsx(HiOutlineArrowUturnLeft, { size: 16 }), _jsx(HiOutlineArrowUturnLeft, { size: 16, className: "-ml-2.5" })] }), label: "Reply All", shortcut: keyboard ? SHORTCUTS.mail.replyAll : undefined, disabled: preparingCompose, onPrefetch: prefetchReply, onClick: () => void handleReplyOrForward("replyAll") }), _jsx(IconAction, { icon: _jsx(HiOutlineArrowUturnRight, { size: 16, "aria-hidden": "true" }), label: "Forward", shortcut: keyboard ? SHORTCUTS.mail.forward : undefined, disabled: preparingCompose, onPrefetch: prefetchReply, onClick: () => void handleReplyOrForward("forward") }), archivable && (_jsx(IconAction, { icon: _jsx(HiOutlineArchiveBox, { size: 16, "aria-hidden": "true" }), label: "Archive", shortcut: keyboard ? SHORTCUTS.mail.archive : undefined, busy: archiving, disabled: archiving, onClick: handleArchive })), movable && (_jsx(IconAction, { icon: _jsx(HiOutlineFolderArrowDown, { size: 16, "aria-hidden": "true" }), label: "Move to", shortcut: keyboard ? SHORTCUTS.mail.move : undefined, onClick: () => setMovePrompt(true) })), reportable && (_jsx(IconAction, { icon: inJunk ? _jsx(HiOutlineInboxArrowDown, { size: 16, "aria-hidden": "true" }) : _jsx(HiOutlineNoSymbol, { size: 16, "aria-hidden": "true" }), label: inJunk ? "Not junk" : "Report junk", busy: messageActions.busy, disabled: messageActions.busy || reportReason !== undefined, reason: reportReason, onClick: () => void (inJunk ? messageActions.notJunk() : messageActions.reportJunk()) })), labels && labels.length > 0 && (_jsx(LabelMenuButton, { "aria-label": "Labels", label: "Labels", className: "border border-border py-1.5", labels: labels, mailboxUid: message.mailboxUid, onLabelCreated: onLabelCreated, applied: currentLabelsMessage.labelUids ?? [], onCommit: (labelUids) => void handleApplyLabels(labelUids), busy: savingLabels, note: "Ticked labels are applied to this message and unticked ones removed.", emptyNote: "This mailbox has no labels yet.", commit: { label: "Apply" }, clear: { label: "Remove all labels" } })), archivable && (_jsx(MessageMoreMenu, { actions: menuActions, senderAddress: message.from.address, read: currentLabelsMessage.flags.read === true, flagged: currentLabelsMessage.flags.flagged === true, writable: writable, busy: messageActions.busy, inJunk: inJunk, inDeletedItems: inDeletedItems, sent: !!isSentItems, ownSender: readerOwnAddresses.includes(message.from.address.toLowerCase()), canTrustSender: writable, printReason: printReason, composing: preparingCompose, triggerClassName: ICON_BUTTON_CLASS }))] })] }), (answered || forwarded) && (_jsx("p", { className: "px-4 py-1.5 text-xs text-text-muted bg-surface-alt border-y border-border", children: answered && forwarded ? "You replied to and forwarded this message." : answered ? "You replied to this message." : "You forwarded this message." })), _jsxs("div", { id: threadHeader?.bodyId, className: "px-4 pb-3 flex flex-col gap-2", children: [inThread && (subjectDiffers || !sameSubject(shownSubject, threadSubject)) && (_jsx("h3", { className: "text-sm font-semibold break-words", children: shownSubject })), _jsx("div", { className: "flex flex-wrap items-center gap-2 empty:hidden", children: sendingStatus }), inOutbox && message.scheduledSendError && _jsxs(Alert, { children: ["This message wasn\u2019t sent: ", message.scheduledSendError] }), cancelError && _jsx(Alert, { children: cancelError }), keyChangeNotice && (_jsx("p", { role: "status", className: "py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: keyChangeNotice })), security && UNVERIFIED_SIGNER_STATES.has(security.state) && (_jsxs("p", { role: "status", className: "py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: ["Signed, but the signer isn\u2019t a trusted contact key, so the sender isn\u2019t verified.", security.signerEmails && security.signerEmails.length > 0 && _jsxs(_Fragment, { children: [" Certificate for ", security.signerEmails.join(", "), "."] }), security.signerFingerprint && (_jsxs(_Fragment, { children: [" ", "Fingerprint ", _jsx("span", { className: "font-mono text-xs break-all", children: security.signerFingerprint }), "."] }))] })), pendingConflict && (_jsxs("p", { role: "status", className: "py-2 px-3 rounded-sm text-sm bg-warning/15 text-text", children: ["This sender has a signing key change waiting for your review, so this signer can\u2019t be trusted from here.", " ", _jsx("a", { href: `/contacts/${encodeURIComponent(senderKeyState.contactUid)}`, className: "font-medium text-primary-dark hover:underline", children: "Review it in Contacts" })] })), trustableCertificate && (_jsx("div", { children: _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: trusting, onClick: () => {
                                 setTrustError(null);
                                 setTrustConfirmOpen(true);
-                            }, children: "Trust this signer" }) })), subjectDiffers && (_jsxs("p", { role: "status", className: "py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: ["The subject shown above is the one the sender signed. It differs from the subject this message was delivered with (\u201C", message.subject, "\u201D), which may have been changed on the way, e.g. by a mailing list."] })), security?.headerTamperDetected && (_jsx(Alert, { children: "This message's visible From/To/Cc/Date/Subject don't match what the sender actually signed or encrypted \u2014 an intermediary may have altered them after sending. Treat the fields shown above with caution." })), security?.state === "verified_at_first_open" && (_jsx("p", { role: "status", className: `py-2 px-3 rounded-sm text-sm text-text ${security.laterCompromised ? "bg-warning/15" : "bg-surface-alt"}`, children: verifiedAtFirstOpenMessage(security) })), keyChanged && (_jsxs("section", { "aria-label": "Signing key changed", className: "py-3 px-3 rounded-sm text-sm bg-warning/15 text-text flex flex-col gap-2", children: [_jsx("h2", { className: "font-semibold", children: "This sender\u2019s signing key changed" }), _jsxs("p", { children: ["The signature on this message is valid and its certificate names ", senderAddress, ", but it was made with a different key than the one you trust for this sender", keyChanged.state === "verified_at_first_open" ? "." : _jsx(_Fragment, { children: ", so it isn\u2019t verified." })] }), _jsx(KeyChangeReview, { mailboxUid: message.mailboxUid, address: senderAddress, useType: "sign", ownerName: "the sender", current: pinnedSignerKey && { fingerprint: pinnedSignerKey.fingerprint, since: senderKeyState.pinnedSince }, proposed: {
+                            }, children: "Trust this signer" }) })), subjectDiffers && (_jsxs("p", { role: "status", className: "py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: ["The subject shown above is the one the sender signed. It differs from the subject this message was delivered with (\u201C", message.subject, "\u201D), which may have been changed on the way, e.g. by a mailing list."] })), security?.headerTamperDetected && (_jsx(Alert, { children: "This message's visible From/To/Cc/Date/Subject don't match what the sender actually signed or encrypted \u2014 an intermediary may have altered them after sending. Treat the fields shown above with caution." })), security?.state === "verified_at_first_open" && (_jsx("p", { role: "status", className: `py-2 px-3 rounded-sm text-sm text-text ${security.laterCompromised ? "bg-warning/15" : "bg-surface-alt"}`, children: verifiedAtFirstOpenMessage(security) })), keyChanged && (_jsxs("section", { "aria-label": "Signing key changed", className: "py-3 px-3 rounded-sm text-sm bg-warning/15 text-text flex flex-col gap-2", children: [_jsx("h2", { className: "font-semibold", children: "This sender\u2019s signing key changed" }), _jsxs("p", { children: ["The signature on this message is valid and its certificate names ", senderAddress, ", but it was made with a different key than the one you trust for this sender", keyChanged.state === "verified_at_first_open" ? "." : _jsx(_Fragment, { children: ", so it isn\u2019t verified." })] }), _jsx(KeyChangeReview, { mailboxUid: message.mailboxUid, address: senderAddress, useType: openPgpSigner ? "encrypt" : "sign", ...(openPgpSigner ? { keyType: "openpgp" } : {}), ownerName: "the sender", current: pinnedSignerKey && { fingerprint: pinnedSignerKey.fingerprint, since: pinnedSignerSince }, proposed: {
                                     fingerprint: keyChanged.signerFingerprint,
                                     emails: keyChanged.signerEmails,
                                     observedAt: recordedConflict?.observedAt,
@@ -1012,5 +1016,5 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
                         .map((type) => (_jsxs("div", { className: "flex flex-wrap items-center gap-2 py-2 px-3 rounded-sm bg-surface-alt text-sm", children: [_jsxs("span", { children: [senderLabel, " requested a ", type, " receipt for this message."] }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: receiptBusy === type, disabled: receiptBusy !== null, onClick: () => handleReceipt(type, "approve"), children: "Send receipt" }), _jsx(Button, { type: "button", variant: "text", disabled: receiptBusy !== null, onClick: () => handleReceipt(type, "decline"), children: "Decline" })] }, type))), receiptError && _jsx(Alert, { children: receiptError }), mayHoldInvite && _jsx(InviteCard, { messageUid: message.uid, headingLevel: inThread ? 3 : 2 }), security?.state === "signature_failed" && innerAttachments && innerAttachments.length > 0 && (_jsx("p", { role: "status", className: "py-2 px-3 rounded-sm text-sm bg-warning/15 text-text", children: "These attachments come from a message whose signature couldn\u2019t be verified. Open them only if you trust the sender." })), innerAttachments
                         ? innerAttachments.length > 0 && (_jsx("ul", { className: "flex flex-wrap gap-2", children: innerAttachments.map((attachment, index) => (_jsx("li", { children: isVCardAttachment({ filename: attachment.filename, mimeType: attachment.contentType }) ? (_jsx(VCardAttachmentChip, { label: attachment.filename ?? `Unnamed ${attachment.contentType} attachment`, message: message, loadText: async () => new TextDecoder().decode(attachment.decode() ?? new Uint8Array(0)), onDownload: () => downloadMimeAttachment(attachment) })) : (_jsx("button", { type: "button", onClick: () => downloadMimeAttachment(attachment), className: "text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt text-text-muted hover:text-primary-dark", children: attachment.filename ?? `Unnamed ${attachment.contentType} attachment` })) }, `${index}:${attachment.filename ?? ""}`))) }))
                         : listedAttachments.length > 0 && (_jsx("ul", { className: "flex flex-wrap gap-2", children: listedAttachments.map((attachment) => (_jsx("li", { children: isVCardAttachment(attachment) ? (_jsx(VCardAttachmentChip, { label: `${attachment.filename} (${formatBytes(attachment.sizeBytes)})`, message: message, loadText: () => fetchVCardText(attachment.uid, client), onDownload: () => saveAttachment(attachment) })) : client ? (_jsxs("button", { type: "button", onClick: () => saveAttachment(attachment), className: "text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt text-text-muted hover:text-primary-dark", children: [attachment.filename, " (", formatBytes(attachment.sizeBytes), ")"] })) : (_jsxs("a", { href: attachmentContentUrl(attachment.uid), className: "text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt text-text-muted hover:text-primary-dark", children: [attachment.filename, " (", formatBytes(attachment.sizeBytes), ")"] })) }, attachment.uid))) })), _jsx("div", { ref: bodyRegionRef, tabIndex: -1, className: "outline-none", children: (message.encrypted || message.zeroAccess) && security === null ? (_jsx(BodySkeleton, {})) : security?.decryptError !== undefined ? (_jsx(EncryptedBody, { locked: lockedRef.current, reason: security.decryptError, unlocking: unlocking, onUnlock: () => void handleUnlockToView() })) : (_jsx(MessageBody, { messageUid: message.uid, messageVersion: message.version, title: bodyTitle, content: bodyContent, attachments: attachments, inlineParts: innerAttachments, original: viewOriginal, onAdaptable: setAdaptable })) })] }), showFooter && (_jsxs("div", { className: "flex flex-wrap gap-2 px-4 py-3 border-t border-border print:hidden", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": "Reply to this message", disabled: preparingCompose, onClick: () => void handleReplyOrForward("reply"), children: "Reply" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": "Reply all to this message", disabled: preparingCompose, onClick: () => void handleReplyOrForward("replyAll"), children: "Reply All" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", "aria-label": "Forward this message", disabled: preparingCompose, onClick: () => void handleReplyOrForward("forward"), children: "Forward" })] }))] }));
-    return (_jsxs("div", { className: inThread ? "min-w-0" : "flex-1 min-w-0 min-h-0 flex flex-col h-full", children: [inThread ? (card) : (_jsxs(_Fragment, { children: [backHref && (_jsx("a", { href: backHref, className: "text-sm text-primary-dark hover:underline block px-4 pt-3", children: "\u2190 Back to messages" })), _jsx(SubjectCard, { subject: shownSubject }), _jsx("div", { className: "flex-1 min-h-0 overflow-y-auto p-2 sm:p-3 flex flex-col gap-3", children: card })] })), _jsx(MoveToFolderDialog, { open: movePrompt, onClose: () => setMovePrompt(false), mailboxUid: message.mailboxUid, folders: folders ?? [], currentFolderUid: message.folderUid, onMove: handleMove, onFolderCreated: onFolderCreated }), messageActions.dialog, _jsx(MessageSourceDialog, { open: sourceView !== null, onClose: closeSource, mode: sourceView?.mode ?? "source", source: sourceView?.source ?? { status: "loading" }, encrypted: !!message.encrypted || !!message.zeroAccess }), _jsxs(Modal, { open: confirming, onClose: () => setConfirming(false), title: "Recall this message?", children: [_jsx("p", { className: "text-sm text-text-muted mb-4", children: "This asks every original recipient's mail system to delete their copy, but only if it's still unread there \u2014 there's no way to guarantee it, and no confirmation once it either succeeds or fails. Recipients who already read the message will keep it." }), error && _jsx(Alert, { children: error }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", loading: recalling, disabled: recalling, onClick: handleRecall, className: "!w-auto", children: "Recall message" }), _jsx(Button, { type: "button", variant: "secondary", disabled: recalling, onClick: () => setConfirming(false), className: "!w-auto", children: "Cancel" })] })] }), _jsx(Modal, { open: trustConfirmOpen && !!trustableCertificate, onClose: () => !trusting && setTrustConfirmOpen(false), title: "Trust this signer?", children: _jsxs("div", { className: "flex flex-col gap-3 text-sm", children: [_jsxs("p", { children: ["Mail from ", _jsx("span", { className: "font-medium", children: senderAddress }), " signed with this certificate will show as verified."] }), _jsxs("dl", { className: "flex flex-col gap-1", children: [_jsx("dt", { className: "text-xs text-text-muted", children: "Certificate issued to" }), _jsx("dd", { children: security?.signerEmails?.length ? security.signerEmails.join(", ") : "No email address" }), _jsx("dt", { className: "text-xs text-text-muted", children: "Fingerprint" }), _jsx("dd", { className: "font-mono text-xs break-all", children: security?.signerFingerprint ? formatFingerprint(security.signerFingerprint) : "Unknown" })] }), _jsx("p", { className: "text-text-muted", children: "Anyone can create a certificate naming any address. Before trusting it, confirm this fingerprint with the sender through another channel, such as a phone call." }), trustError && _jsx(Alert, { children: trustError }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", className: "!w-auto", loading: trusting, disabled: trusting, onClick: () => handleTrustSigner(senderAddress, trustableCertificate), children: "Trust" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: trusting, onClick: () => setTrustConfirmOpen(false), children: "Cancel" })] })] }) })] }));
+    return (_jsxs("div", { className: inThread ? "min-w-0" : "flex-1 min-w-0 min-h-0 flex flex-col h-full", children: [inThread ? (card) : (_jsxs(_Fragment, { children: [backHref && (_jsx("a", { href: backHref, className: "text-sm text-primary-dark hover:underline block px-4 pt-3", children: "\u2190 Back to messages" })), _jsx(SubjectCard, { subject: shownSubject }), _jsx("div", { className: "flex-1 min-h-0 overflow-y-auto p-2 sm:p-3 flex flex-col gap-3", children: card })] })), _jsx(MoveToFolderDialog, { open: movePrompt, onClose: () => setMovePrompt(false), mailboxUid: message.mailboxUid, folders: folders ?? [], currentFolderUid: message.folderUid, onMove: handleMove, onFolderCreated: onFolderCreated }), messageActions.dialog, _jsx(MessageSourceDialog, { open: sourceView !== null, onClose: closeSource, mode: sourceView?.mode ?? "source", source: sourceView?.source ?? { status: "loading" }, encrypted: !!message.encrypted || !!message.zeroAccess }), _jsxs(Modal, { open: confirming, onClose: () => setConfirming(false), title: "Recall this message?", children: [_jsx("p", { className: "text-sm text-text-muted mb-4", children: "This asks every original recipient's mail system to delete their copy, but only if it's still unread there \u2014 there's no way to guarantee it, and no confirmation once it either succeeds or fails. Recipients who already read the message will keep it." }), error && _jsx(Alert, { children: error }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", loading: recalling, disabled: recalling, onClick: handleRecall, className: "!w-auto", children: "Recall message" }), _jsx(Button, { type: "button", variant: "secondary", disabled: recalling, onClick: () => setConfirming(false), className: "!w-auto", children: "Cancel" })] })] }), _jsx(Modal, { open: trustConfirmOpen && !!trustableCertificate, onClose: () => !trusting && setTrustConfirmOpen(false), title: "Trust this signer?", children: _jsxs("div", { className: "flex flex-col gap-3 text-sm", children: [_jsxs("p", { children: ["Mail from ", _jsx("span", { className: "font-medium", children: senderAddress }), " signed with this certificate will show as verified."] }), _jsxs("dl", { className: "flex flex-col gap-1", children: [_jsx("dt", { className: "text-xs text-text-muted", children: "Certificate issued to" }), _jsx("dd", { children: security?.signerEmails?.length ? security.signerEmails.join(", ") : "No email address" }), _jsx("dt", { className: "text-xs text-text-muted", children: "Fingerprint" }), _jsx("dd", { className: "font-mono text-xs break-all", children: security?.signerFingerprint ? formatFingerprint(security.signerFingerprint) : "Unknown" })] }), _jsx("p", { className: "text-text-muted", children: "Anyone can create a certificate naming any address. Before trusting it, confirm this fingerprint with the sender through another channel, such as a phone call." }), trustError && _jsx(Alert, { children: trustError }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", className: "!w-auto", loading: trusting, disabled: trusting, onClick: () => handleTrustSigner(senderAddress, trustableCertificate, security?.signerKeyType), children: "Trust" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: trusting, onClick: () => setTrustConfirmOpen(false), children: "Cancel" })] })] }) })] }));
 }

package/dist/apps/shared/components/mail/compose/ComposeWindow.js

@@ -21,7 +21,7 @@ import { notify } from "../../../notifications/store.js";
 import { isFileDrag, isInlineImage } from "./dropFiles.js";
 import { evaluateEncryptionRequirement } from "./encryptionRequirement.js";
 import { decideSend } from "../../../mail/outbox/sendDecision.js";
-import { sendDecisionInput, startSend } from "../../../mail/outbox/sendJob.js";
+import { sendDecisionInput, senderCanUseOpenPgp, startSend } from "../../../mail/outbox/sendJob.js";
 import { useCompose } from "./ComposeContext.js";
 import { ariaKeyShortcuts, withHint } from "../../../keyboard/format.js";
 import { SHORTCUTS } from "../../../keyboard/keymap.js";
@@ -362,7 +362,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, inli
                     return;
                 }
                 lookupFailuresRef.current.delete(key);
-                const status = resolveRecipientEncryption(mailbox.primarySmtpAddress, ownPrefersMutual, encryptionPolicy, recipient.address, result.lookup);
+                const status = resolveRecipientEncryption(mailbox.primarySmtpAddress, ownPrefersMutual, encryptionPolicy, recipient.address, result.lookup, senderCanUseOpenPgp(getUnlockedKeys(mailbox.uid)));
                 setRecipientStatuses((prev) => ({ ...prev, [key]: status }));
             });
         }

package/dist/apps/shared/components/mail/compose/RecipientInput.js

@@ -6,7 +6,8 @@ import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
 import { useEffect, useLayoutEffect, useRef, useState } from "react";
 import { createPortal } from "react-dom";
 import { HiOutlineXMark } from "react-icons/hi2";
-import { fetchRecipientSuggestions, RECIPIENT_SUGGESTION_MIN_QUERY_LENGTH, } from "../../../../../lib/mail/directoryApi.js";
+import { fetchSuggestionsWithProtectedContacts } from "./protectedContactSuggestions.js";
+import { RECIPIENT_SUGGESTION_MIN_QUERY_LENGTH, } from "../../../../../lib/mail/directoryApi.js";
 import { formatRecipient, isValidRecipientAddress, parseRecipient, splitRecipientList, splitTypedRecipients } from "./recipients.js";
 /** How long typing must pause before suggestions are requested. */
 export const RECIPIENT_SUGGESTION_DEBOUNCE_MS = 150;
@@ -42,7 +43,7 @@ function dropdownPosition(anchor) {
  * least two characters, and a newer query aborts an older request. Arrow keys move through them, Enter or Tab picks
  * one (as `Name <address>`), Escape closes them, and Backspace in an empty input removes the last chip.
  */
-export default function RecipientInput({ id, label, value, onChange, onBlur, onCommit, mailboxUid, fetchSuggestions = fetchRecipientSuggestions, debounceMs = RECIPIENT_SUGGESTION_DEBOUNCE_MS, disabled, autoFocus, onEdit, initialPending = "", hideChip, placeholder, ariaLabel, listLabel, className, dropdownZIndex, }) {
+export default function RecipientInput({ id, label, value, onChange, onBlur, onCommit, mailboxUid, fetchSuggestions = fetchSuggestionsWithProtectedContacts, debounceMs = RECIPIENT_SUGGESTION_DEBOUNCE_MS, disabled, autoFocus, onEdit, initialPending = "", hideChip, placeholder, ariaLabel, listLabel, className, dropdownZIndex, }) {
     const [pending, setPending] = useState(initialPending);
     // With the query they were loaded for: a list for earlier text is not offered (Enter or Tab would put somebody else in place of what was typed).
     const [suggestionList, setSuggestionList] = useState({ query: "", items: [] });

package/dist/apps/shared/components/mail/compose/protectedContactSuggestions.d.ts

@@ -0,0 +1,14 @@
+import { type ContactSuggestionOptions, type RecipientSuggestion } from "../../../../../lib/mail/directoryApi.js";
+import type { ApiClient } from "../../../../../lib/util/api.js";
+/** How long a mailbox's protected contact names are kept: reading them is a crawl of the whole address book. */
+export declare const PROTECTED_NAMES_TTL_MS: number;
+/** How long suggestions wait, once the server's have arrived, for the protected contacts still being read. */
+export declare const PROTECTED_NAMES_WAIT_MS = 250;
+/** Forgets every mailbox's names (signing out, or the test seam). */
+export declare function clearProtectedContactNames(): void;
+/** Every address of the protected contacts of `mailboxUid` whose opened name contains `query` (case-insensitively). */
+export declare function searchProtectedContactNames(mailboxUid: string, query: string, client?: ApiClient): Promise<RecipientSuggestion[]>;
+/** `fetchRecipientSuggestions()` with the composing mailbox's protected contacts matched by name on the device, first - those read by the
+ * time the server's suggestions are in (plus `PROTECTED_NAMES_WAIT_MS`): a first search of a large address book shows the server's alone
+ * rather than waiting for the crawl, which goes on for the next keystroke. A failure to read them only leaves them out. */
+export declare function fetchSuggestionsWithProtectedContacts(query: string, options?: ContactSuggestionOptions, client?: ApiClient): Promise<RecipientSuggestion[]>;

package/dist/apps/shared/components/mail/compose/protectedContactSuggestions.js

@@ -0,0 +1,96 @@
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+/**
+ * Recipient suggestions that include contacts zero-access encryption protects. Their names are sealed (restapi `specs/search.md` §3 *What
+ * It Covers*), so the server's contact search finds them only by address; this matches their opened names on the device and puts them
+ * first. Names are opened only - never the rest of a contact - and kept for ten minutes, and only while the mailbox is unlocked: its lock
+ * (and signing out) forgets them, as does a search that finds it locked. Reading them never holds up the server's suggestions: what isn't read by the time those arrive (plus
+ * `PROTECTED_NAMES_WAIT_MS`) is left to the next keystroke.
+ */
+import { listContacts, PINNED_FINGERPRINT_PAGE_SIZE } from "../../../../../lib/contacts/contactsApi.js";
+import { getUnlockedKeys, subscribeKeySession } from "../../../../../lib/crypto/keySession.js";
+import { fetchRecipientSuggestions, mergeRecipientSuggestions, RECIPIENT_SUGGESTION_DEFAULT_LIMIT, } from "../../../../../lib/mail/directoryApi.js";
+import { listFolders } from "../../../../../lib/mail/mailApi.js";
+import { isProtectedRecord, openSealedRecords } from "../../../../../lib/zeroAccess/sealedRecords.js";
+import { onSigningOut } from "./composeFlushRegistry.js";
+/** How long a mailbox's protected contact names are kept: reading them is a crawl of the whole address book. */
+export const PROTECTED_NAMES_TTL_MS = 10 * 60000;
+/** How long suggestions wait, once the server's have arrived, for the protected contacts still being read. */
+export const PROTECTED_NAMES_WAIT_MS = 250;
+/** At most this many contacts are read per contacts folder. */
+const MAX_PAGES = 20;
+const cache = new Map();
+/** Forgets every mailbox's names (signing out, or the test seam). */
+export function clearProtectedContactNames() {
+    cache.clear();
+}
+onSigningOut(clearProtectedContactNames);
+let watchingKeys = false;
+/** A mailbox's names go the moment it locks, so nothing opened outlives its key session. Subscribed with the first crawl, not on import. */
+function forgetOnLock() {
+    if (watchingKeys) {
+        return;
+    }
+    watchingKeys = true;
+    subscribeKeySession(({ mailboxUid, state }) => {
+        if (state === "locked") {
+            cache.delete(mailboxUid);
+        }
+    });
+}
+/** `mailboxUid`'s protected contacts with their names opened. */
+async function loadProtectedContacts(mailboxUid, client) {
+    const found = [];
+    // The folders side by side, each one's pages in turn.
+    await Promise.all((await listFolders(mailboxUid, client))
+        .filter((f) => f.type === "contacts")
+        .map(async (folder) => {
+        for (let page = 0; page < MAX_PAGES; page++) {
+            const batch = await listContacts(folder.uid, { limit: PINNED_FINGERPRINT_PAGE_SIZE, page }, client);
+            found.push(...batch.filter((contact) => isProtectedRecord(contact)));
+            if (batch.length < PINNED_FINGERPRINT_PAGE_SIZE) {
+                break;
+            }
+        }
+    }));
+    return openSealedRecords(found, ["displayName"]);
+}
+function protectedContacts(mailboxUid, client) {
+    let entry = cache.get(mailboxUid);
+    if (!entry || Date.now() - entry.loadedAt > PROTECTED_NAMES_TTL_MS) {
+        forgetOnLock();
+        const created = { loadedAt: Date.now(), contacts: loadProtectedContacts(mailboxUid, client) };
+        created.contacts.catch(() => cache.delete(mailboxUid));
+        cache.set(mailboxUid, created);
+        entry = created;
+    }
+    return entry.contacts;
+}
+/** Every address of the protected contacts of `mailboxUid` whose opened name contains `query` (case-insensitively). */
+export async function searchProtectedContactNames(mailboxUid, query, client) {
+    const wanted = query.trim().toLowerCase();
+    if (wanted.length < 2) {
+        return [];
+    }
+    if (!getUnlockedKeys(mailboxUid)?.zeroAccessKeys?.length) {
+        // Locked: nothing opened is kept, and nothing could be opened now.
+        cache.delete(mailboxUid);
+        return [];
+    }
+    return (await protectedContacts(mailboxUid, client))
+        .filter((contact) => contact.displayName.toLowerCase().includes(wanted))
+        .flatMap((contact) => contact.emails.map((email) => ({ displayName: contact.displayName, address: email.address, kind: "contact" })));
+}
+/** `fetchRecipientSuggestions()` with the composing mailbox's protected contacts matched by name on the device, first - those read by the
+ * time the server's suggestions are in (plus `PROTECTED_NAMES_WAIT_MS`): a first search of a large address book shows the server's alone
+ * rather than waiting for the crawl, which goes on for the next keystroke. A failure to read them only leaves them out. */
+export async function fetchSuggestionsWithProtectedContacts(query, options = {}, client) {
+    const local = options.mailboxUid ? searchProtectedContactNames(options.mailboxUid, query, client).catch(() => []) : Promise.resolve([]);
+    const server = await fetchRecipientSuggestions(query, options, client);
+    let timer;
+    const ready = await Promise.race([local, new Promise((resolve) => (timer = setTimeout(() => resolve([]), PROTECTED_NAMES_WAIT_MS)))]);
+    clearTimeout(timer);
+    return mergeRecipientSuggestions(ready, server, options.limit ?? RECIPIENT_SUGGESTION_DEFAULT_LIMIT);
+}

package/dist/apps/shared/components/mail/invite/inviteStore.js

@@ -4,7 +4,7 @@
 ///////////////////////////////////////////////////////////////////////////////
 import { useCallback, useEffect, useReducer } from "react";
 import { getMessageInvite } from "../../../../../lib/calendar/inviteApi.js";
-import { clearSealedInvites, sealedInviteCalendar } from "../../../../../lib/calendar/sealedInvites.js";
+import { clearSealedInvites, onSealedInvitesForgotten, sealedInviteCalendar } from "../../../../../lib/calendar/sealedInvites.js";
 import { onSigningOut } from "../compose/composeFlushRegistry.js";
 import { useApiClient } from "../../../../../lib/util/apiClientContext.js";
 /**
@@ -105,3 +105,13 @@ export function useMessageInvite(uid, enabled = true) {
     return { invite: value ?? null, settled: value !== undefined, setInvite };
 }
 onSigningOut(clearSealedInvites);
+onSigningOut(clearInviteCache);
+// What the server read from a zero-access message's decrypted calendar file (its summary, description) goes with the file when the mailbox
+// locks: mounted cards, chips and popovers draw nothing until it is read again.
+onSealedInvitesForgotten((uids) => {
+    for (const uid of uids) {
+        if (entries.delete(uid)) {
+            notify(uid);
+        }
+    }
+});

package/dist/apps/shared/components/mail/pinnedSigners.d.ts

@@ -20,6 +20,7 @@
  */
 import { SignerKeyState } from "../../../../lib/contacts/contactsApi.js";
 import type { ApiClient } from "../../../../lib/util/api.js";
+import type { SignerPins } from "../../../../lib/crypto/messageSecurity.js";
 /** How long one mailbox's loaded contact list is reused before it is fetched again. */
 export declare const CONTACTS_CACHE_TTL_MS = 60000;
 /** Forgets every cached contact list for the default global path - on sign-out, a key-session lock, after the
@@ -28,12 +29,17 @@ export declare const CONTACTS_CACHE_TTL_MS = 60000;
 export declare function clearPinnedSignerCache(): void;
 /** The sender `address`'s pinned signing fingerprints from `mailboxUid`'s contacts. Rejects if they can't be loaded. */
 export declare function getPinnedSignerFingerprints(mailboxUid: string, address: string, client?: ApiClient): Promise<string[]>;
+/** The sender `address`'s pinned signing fingerprints and pinned OpenPGP certificates from `mailboxUid`'s contacts - what
+ * `evaluateMessageSecurity()` takes as `SignerPins`. Rejects if they can't be loaded. */
+export declare function getPinnedSigners(mailboxUid: string, address: string, client?: ApiClient): Promise<SignerPins>;
 /** A sender's signing-key state (`signerKeyStateFor()`) plus what a key-changed notice needs to show and link. */
 export interface SenderKeyState extends SignerKeyState {
     /** The contact holding the first pinned signing key, else the one holding the conflict, else the first match. */
     contactUid?: string;
     /** When the first pinned signing key started being trusted - see `keyPinnedSince()`. */
     pinnedSince?: number;
+    /** When the first pinned OpenPGP certificate (`openPgp[0]`) started being trusted. */
+    openPgpPinnedSince?: number;
 }
 /** The sender `address`'s signing-key state from `mailboxUid`'s (cached) contacts, for a "signing key changed" comparison
  * or to spot a recorded conflict. Reads stored contacts only. Rejects if they can't be loaded. */

package/dist/apps/shared/components/mail/pinnedSigners.js

@@ -22,7 +22,7 @@
  * `tauri-client` accounts must never answer each other's "who does this sender's key belong to" question from
  * one shared cache keyed only by `mailboxUid` (mailbox uids are not guaranteed unique across accounts/servers).
  */
-import { PINNED_FINGERPRINT_MAX_PAGES, PINNED_FINGERPRINT_PAGE_SIZE, listContacts, pinnedSigningFingerprintsFor, signerKeyStateFor, } from "../../../../lib/contacts/contactsApi.js";
+import { PINNED_FINGERPRINT_MAX_PAGES, PINNED_FINGERPRINT_PAGE_SIZE, listContacts, pinnedOpenPgpKeysFor, pinnedSigningFingerprintsFor, signerKeyStateFor, } from "../../../../lib/contacts/contactsApi.js";
 import { keyPinnedSince } from "../contacts/contactKeys.js";
 import { listFolders } from "../../../../lib/mail/mailApi.js";
 import { subscribeKeySession } from "../../../../lib/crypto/keySession.js";
@@ -96,6 +96,12 @@ function cachedMailboxContacts(mailboxUid, client) {
 export async function getPinnedSignerFingerprints(mailboxUid, address, client) {
     return pinnedSigningFingerprintsFor(await cachedMailboxContacts(mailboxUid, client), address);
 }
+/** The sender `address`'s pinned signing fingerprints and pinned OpenPGP certificates from `mailboxUid`'s contacts - what
+ * `evaluateMessageSecurity()` takes as `SignerPins`. Rejects if they can't be loaded. */
+export async function getPinnedSigners(mailboxUid, address, client) {
+    const contacts = await cachedMailboxContacts(mailboxUid, client);
+    return { fingerprints: pinnedSigningFingerprintsFor(contacts, address), openPgpKeys: pinnedOpenPgpKeysFor(contacts, address) };
+}
 /** The sender `address`'s signing-key state from `mailboxUid`'s (cached) contacts, for a "signing key changed" comparison
  * or to spot a recorded conflict. Reads stored contacts only. Rejects if they can't be loaded. */
 export async function getSignerKeyState(mailboxUid, address, client) {
@@ -109,9 +115,12 @@ export async function getSignerKeyState(mailboxUid, address, client) {
     const contact = holder ??
         matching.find((candidate) => (candidate.keyConflicts ?? []).some((conflict) => conflict.useType === "sign")) ??
         matching[0];
+    const openPgpKey = state.openPgp?.[0];
+    const openPgpHolder = openPgpKey && matching.find((candidate) => (candidate.keys ?? []).includes(openPgpKey));
     return {
         ...state,
         ...(contact ? { contactUid: contact.uid } : {}),
         ...(holder ? { pinnedSince: keyPinnedSince(holder, pinned) } : {}),
+        ...(openPgpHolder ? { openPgpPinnedSince: keyPinnedSince(openPgpHolder, openPgpKey) } : {}),
     };
 }

package/dist/apps/shared/components/mail/reading/conversationPrint.d.ts

@@ -9,8 +9,8 @@ export declare function printHeaders(message: Message, from: string): PrintableM
  */
 export declare function olderConversationMessages(message: Message, client?: ApiClient): Promise<Message[]>;
 /**
- * One earlier message of a conversation as it prints: the body the reading pane would show. An encrypted one is decrypted here when this device has
- * its mailbox's keys unlocked; when it can't be, it prints a line saying so rather than the ciphertext. `client` is the explicit `ApiClient` every
+ * One earlier message of a conversation as it prints: the body the reading pane would show. An encrypted one - end to end, or sealed to its mailbox's
+ * zero-access key, whose subject and body the server doesn't hold readable - is decrypted here when this device has its mailbox's keys unlocked; when it can't be, it prints a line saying so rather than the ciphertext. `client` is the explicit `ApiClient` every
  * request goes through when given (see `useApiClient()`); without one they are the cookie requests they always were.
  */
 export declare function printableOlderMessage(message: Message, client?: ApiClient): Promise<PrintableMessage>;

package/dist/apps/shared/components/mail/reading/conversationPrint.js

@@ -33,13 +33,13 @@ export async function olderConversationMessages(message, client) {
         .sort((a, b) => new Date(b.receivedDate).getTime() - new Date(a.receivedDate).getTime());
 }
 /**
- * One earlier message of a conversation as it prints: the body the reading pane would show. An encrypted one is decrypted here when this device has
- * its mailbox's keys unlocked; when it can't be, it prints a line saying so rather than the ciphertext. `client` is the explicit `ApiClient` every
+ * One earlier message of a conversation as it prints: the body the reading pane would show. An encrypted one - end to end, or sealed to its mailbox's
+ * zero-access key, whose subject and body the server doesn't hold readable - is decrypted here when this device has its mailbox's keys unlocked; when it can't be, it prints a line saying so rather than the ciphertext. `client` is the explicit `ApiClient` every
  * request goes through when given (see `useApiClient()`); without one they are the cookie requests they always were.
  */
 export async function printableOlderMessage(message, client) {
     const attachments = await listAttachments(message.folderUid, message.uid, client).catch(() => []);
-    if (message.encrypted) {
+    if (message.encrypted || message.zeroAccess) {
         const unlocked = getUnlockedKeys(message.mailboxUid);
         if (unlocked) {
             const { evaluateMessageSecurity } = await import("../../../../../lib/crypto/messageSecurity.js");

package/dist/apps/shared/components/settings/KeyExportSetting.js

@@ -12,6 +12,8 @@ import Button from "../../../../lib/components/buttons/Button.js";
 import { notifyApiError } from "../../notifications/apiErrors.js";
 import PolicyLockedNotice from "./PolicyLockedNotice.js";
 const INPUT_CLASS = "w-full text-sm border border-border rounded-sm py-1.5 px-2 bg-surface";
+/** How long the file's object URL is kept, since some browsers (WebKit, older Firefox) still read it after the click returns. */
+const DOWNLOAD_URL_LIFETIME_MS = 60000;
 /** Hands `bytes` to the browser as a file download. */
 function saveFile(bytes, filename) {
     const url = URL.createObjectURL(new Blob([bytes], { type: "application/x-pkcs12" }));
@@ -21,7 +23,7 @@ function saveFile(bytes, filename) {
     document.body.appendChild(link);
     link.click();
     link.remove();
-    URL.revokeObjectURL(url);
+    setTimeout(() => URL.revokeObjectURL(url), DOWNLOAD_URL_LIFETIME_MS);
 }
 /**
  * "Export keys for Outlook/phone" (`lib/crypto/keyExport.ts`): a passphrase-protected `.p12` with the mailbox's zero-access

package/dist/apps/shared/components/settings/OpenPgpKeySetting.d.ts

@@ -0,0 +1,13 @@
+import React from "react";
+import { type Mailbox } from "../../../../lib/mail/mailApi.js";
+export interface OpenPgpKeySettingProps {
+    mailbox: Mailbox;
+    /** The caller owns the mailbox and isn't impersonating: only the owner may export its secret key. */
+    canManage: boolean;
+}
+/**
+ * The mailbox's OpenPGP key (restapi `specs/end-to-end_encryption.md` *OpenPGP Interoperability*): what it is for, its
+ * fingerprint, a download of its public key (to give a correspondent by hand), and an export of its secret key, protected by a
+ * passphrase, for reading this mailbox's OpenPGP mail in another app. Shows nothing while the mailbox has no OpenPGP key.
+ */
+export default function OpenPgpKeySetting({ mailbox, canManage }: OpenPgpKeySettingProps): React.JSX.Element | null;

package/dist/apps/shared/components/settings/OpenPgpKeySetting.js

@@ -0,0 +1,143 @@
+import { jsx as _jsx, jsxs as _jsxs } from "react/jsx-runtime";
+///////////////////////////////////////////////////////////////////////////////
+// Copyright (C) 2026 Jean-Philippe Steinmetz
+// SPDX-License-Identifier: MPL-2.0
+///////////////////////////////////////////////////////////////////////////////
+import { useState } from "react";
+import { findActivePublicKey } from "../../../../lib/crypto/keyvaultApi.js";
+import { MIN_EXPORT_PASSPHRASE_LENGTH } from "../../../../lib/crypto/keyExport.js";
+import { exportOpenPgpSecretKey } from "../../../../lib/crypto/openPgpKey.js";
+import { getMailbox, updateMailbox } from "../../../../lib/mail/mailApi.js";
+import { ApiRequestError } from "../../../../lib/util/api.js";
+import { useApiClient } from "../../../../lib/util/apiClientContext.js";
+import Alert from "../../../../lib/components/feedback/Alert.js";
+import Button from "../../../../lib/components/buttons/Button.js";
+import { notifyApiError } from "../../notifications/apiErrors.js";
+import PolicyLockedNotice from "./PolicyLockedNotice.js";
+import { useSettingsShell } from "./layout/SettingsShell.js";
+const INPUT_CLASS = "w-full text-sm border border-border rounded-sm py-1.5 px-2 bg-surface";
+/** How long a download's object URL is kept, since some browsers (WebKit, older Firefox) still read it after the click returns. */
+const DOWNLOAD_URL_LIFETIME_MS = 60000;
+/** Hands `text` to the browser as a file download. */
+function saveText(text, filename) {
+    const url = URL.createObjectURL(new Blob([text], { type: "application/pgp-keys" }));
+    const link = document.createElement("a");
+    link.href = url;
+    link.download = filename;
+    document.body.appendChild(link);
+    link.click();
+    link.remove();
+    setTimeout(() => URL.revokeObjectURL(url), DOWNLOAD_URL_LIFETIME_MS);
+}
+/** `preference` advertising `format` - S/MIME is the default, so it is advertised by saying nothing. */
+function withPreferredFormat(preference, format) {
+    const { preferFormat: _previous, ...rest } = preference ?? { preferEncrypt: "nopreference" };
+    return format === "openpgp" ? { ...rest, preferFormat: "openpgp" } : rest;
+}
+/** A fingerprint in groups of four, for reading aloud. */
+function groupFingerprint(fingerprint) {
+    return fingerprint.toUpperCase().replace(/(.{4})/g, "$1 ").trim();
+}
+/**
+ * The mailbox's OpenPGP key (restapi `specs/end-to-end_encryption.md` *OpenPGP Interoperability*): what it is for, its
+ * fingerprint, a download of its public key (to give a correspondent by hand), and an export of its secret key, protected by a
+ * passphrase, for reading this mailbox's OpenPGP mail in another app. Shows nothing while the mailbox has no OpenPGP key.
+ */
+export default function OpenPgpKeySetting({ mailbox, canManage }) {
+    const client = useApiClient();
+    const { patchMailbox } = useSettingsShell();
+    const [open, setOpen] = useState(false);
+    const [password, setPassword] = useState("");
+    const [passphrase, setPassphrase] = useState("");
+    const [confirmPassphrase, setConfirmPassphrase] = useState("");
+    const [exporting, setExporting] = useState(false);
+    const [error, setError] = useState(null);
+    const [format, setFormat] = useState(mailbox.encryptPreference?.preferFormat === "openpgp" ? "openpgp" : "smime");
+    const [savingFormat, setSavingFormat] = useState(false);
+    const key = findActivePublicKey(mailbox.keys ?? [], "encrypt", "openpgp");
+    if (!key) {
+        return null;
+    }
+    const address = mailbox.primarySmtpAddress;
+    function reset() {
+        setOpen(false);
+        setPassword("");
+        setPassphrase("");
+        setConfirmPassphrase("");
+        setError(null);
+    }
+    /** Advertises `next` as the format this mailbox would rather receive (restapi *Choosing the format*), to RapidMX servers through
+     * key discovery and the `RapidMX-Key` header. */
+    async function saveFormat(next) {
+        const previous = format;
+        setFormat(next);
+        setSavingFormat(true);
+        try {
+            const write = async (current) => {
+                const encryptPreference = withPreferredFormat(current.encryptPreference, next);
+                const saved = await updateMailbox({ uid: mailbox.uid, version: current.version, encryptPreference }, client);
+                return { version: saved.version, encryptPreference: saved.encryptPreference ?? encryptPreference };
+            };
+            let saved;
+            try {
+                saved = await write(mailbox);
+            }
+            catch (err) {
+                // Enrolling a key moves the mailbox's version on: read it again and retry once.
+                if (!(err instanceof ApiRequestError && err.status === 409)) {
+                    throw err;
+                }
+                saved = await write(await getMailbox(mailbox.uid, {}, client));
+            }
+            // Kept in the settings shell's copy of the mailbox, which this page is mounted from again on a switch back to it.
+            patchMailbox?.(mailbox.uid, saved);
+        }
+        catch (err) {
+            setFormat(previous);
+            notifyApiError(err, "Couldn't save your preferred encryption format");
+        }
+        finally {
+            setSavingFormat(false);
+        }
+    }
+    async function downloadPublicKey() {
+        const { armorPublicKey, readPublicKey } = await import("../../../../lib/crypto/openpgp.js");
+        const certificate = await readPublicKey(key.publicKey);
+        if (certificate) {
+            saveText(armorPublicKey(certificate), `${address}-openpgp-public.asc`);
+        }
+    }
+    async function handleExport(e) {
+        e.preventDefault();
+        if (passphrase.length < MIN_EXPORT_PASSPHRASE_LENGTH) {
+            setError(`The file's passphrase must be at least ${MIN_EXPORT_PASSPHRASE_LENGTH} characters.`);
+            return;
+        }
+        if (passphrase !== confirmPassphrase) {
+            setError("The passphrases don't match.");
+            return;
+        }
+        setExporting(true);
+        setError(null);
+        try {
+            const { armored } = await exportOpenPgpSecretKey(mailbox.uid, password, passphrase, client);
+            saveText(armored, `${address}-openpgp-secret.asc`);
+            reset();
+        }
+        catch (err) {
+            if (err instanceof ApiRequestError) {
+                notifyApiError(err, "Couldn't export your OpenPGP key");
+            }
+            else {
+                setError("Incorrect password.");
+            }
+        }
+        finally {
+            setExporting(false);
+        }
+    }
+    return (_jsxs("div", { children: [_jsx("h2", { className: "text-sm font-semibold mb-2", children: "OpenPGP key" }), _jsx("p", { className: "text-sm text-text-muted mb-2", children: "People who use Proton Mail, Thunderbird or another OpenPGP app can send you encrypted mail with this key, and you can send it to them. RapidMX publishes it for you; you can also give it to someone yourself. RapidMX uses S/MIME whenever a recipient can receive it." }), _jsxs("p", { className: "text-sm mb-2", children: ["Fingerprint: ", _jsx("code", { className: "text-xs break-all", children: groupFingerprint(key.fingerprint) })] }), _jsxs("fieldset", { className: "mb-3", disabled: !canManage || savingFormat, children: [_jsx("legend", { className: "text-sm font-semibold mb-1", children: "Preferred format" }), _jsx("p", { className: "text-xs text-text-muted mb-1", children: "What other RapidMX servers use to encrypt to you when they could use either. Choose OpenPGP if you mostly read this mailbox in an OpenPGP app." }), [
+                        ["smime", "S/MIME (recommended)"],
+                        ["openpgp", "OpenPGP"],
+                    ].map(([value, label]) => (_jsxs("label", { className: "flex items-center gap-2 text-sm", children: [_jsx("input", { type: "radio", name: `preferred-format-${mailbox.uid}`, checked: format === value, onChange: () => void saveFormat(value) }), label] }, value)))] }), _jsxs("div", { className: "flex flex-wrap gap-2 mb-2", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => void downloadPublicKey(), children: "Download public key" }), canManage && !open && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setOpen(true), children: "Export secret key\u2026" }))] }), !canManage ? (_jsx(PolicyLockedNotice, { children: "Only this mailbox\u2019s owner, signed in as themselves, can export its secret key." })) : (open && (_jsxs("form", { onSubmit: (e) => void handleExport(e), className: "flex flex-col gap-2", children: [_jsx("p", { className: "text-sm text-text-muted", children: "Anyone with the exported file and its passphrase can read this mailbox\u2019s OpenPGP mail and sign as you." }), _jsx("input", { type: "password", "aria-label": "Encryption password", placeholder: "Encryption password", className: INPUT_CLASS, value: password, onChange: (e) => setPassword(e.target.value), disabled: exporting, autoComplete: "current-password" }), _jsx("input", { type: "password", "aria-label": "Key passphrase", placeholder: `Key passphrase (at least ${MIN_EXPORT_PASSPHRASE_LENGTH} characters)`, className: INPUT_CLASS, value: passphrase, onChange: (e) => setPassphrase(e.target.value), disabled: exporting, autoComplete: "new-password" }), _jsx("input", { type: "password", "aria-label": "Confirm key passphrase", placeholder: "Confirm key passphrase", className: INPUT_CLASS, value: confirmPassphrase, onChange: (e) => setConfirmPassphrase(e.target.value), disabled: exporting, autoComplete: "new-password" }), error && _jsx(Alert, { children: error }), _jsxs("div", { className: "flex gap-2", children: [_jsx(Button, { type: "submit", className: "!w-auto", loading: exporting, disabled: exporting || !password, children: "Export" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: reset, disabled: exporting, children: "Cancel" })] })] })))] }));
+}