@rapidmx/web-client 0.6.0 → 0.8.0

package/dist/apps/shared/components/mail/MessageDetailPane.d.ts

@@ -1,5 +1,5 @@
 import React from "react";
-import { Attachment, Message } from "@rapidmx/react-shared/mail/mailApi.js";
+import { Attachment, Folder, Message } from "@rapidmx/react-shared/mail/mailApi.js";
 import { Label } from "@rapidmx/react-shared/mail/labelsApi.js";
 import { MessageSecurityResult } from "@rapidmx/react-shared/crypto/messageSecurity.js";
 /** The detail line under a `verified_at_first_open` badge. */
@@ -24,10 +24,8 @@ export declare function trustSignerErrorMessage(err: unknown): string;
 /** Groups a fingerprint into 4-character blocks (`AB12 CD34 ...`), ignoring any separators it came with, so it can be
  * read out and compared with the sender over another channel. */
 export declare function formatFingerprint(fingerprint: string): string;
-/** Decodes CSS escapes first (so an escaped `u\72l(` can't hide from the checks below), then drops every
- * `@import` and neutralizes every `url()`/`image-set()` reference that isn't a `data:`/`cid:` URI. */
-export declare function stripRemoteCssUrls(css: string): string;
-/** Sanitizes a client-rendered body for `srcDoc`, with the CSP meta as its very first element. */
+/** Sanitizes a client-rendered body for `srcDoc` (DOMPurify plus every remote resource reference stripped - see
+ * react-shared's `messageBodySanitizer.ts`), with the CSP meta as its very first element. */
 export declare function buildSecureSrcDoc(html: string): string;
 export interface MessageDetailPaneProps {
     message: Message | null;
@@ -55,18 +53,21 @@ export interface MessageDetailPaneProps {
     /** Called with the server's updated copy (now back in Drafts, `scheduledSendTime` cleared) after
      * successfully canceling a scheduled send. */
     onScheduledSendCanceled?: (updated: Message) => void;
-    /** Whether `message` currently lives in the Inbox — Focused/Other classification is an Inbox-only
-     * concept (`FocusedInboxUtils.classifyMessage()` short-circuits to Focused for every other folder), so
-     * the "Move to Other"/"Move to Focused" control below only renders here, the same
-     * each-caller-computes-its-own-folder-type pattern `isSentItems`/`isOutbox` already use. */
-    isInbox?: boolean;
-    /** Called with the server's updated copy (carrying the new `inferenceClassification`) after a
-     * successful classify — mirrors `onRecalled`'s identical shape. */
-    onClassified?: (updated: Message) => void;
+    /** Every folder of this message's own mailbox, for the Move to prompt's destination list. Absent or
+     * empty simply hides the control — there is nowhere to move to. Each caller already resolves this to
+     * work out `isSentItems`/`isOutbox`/`draftsFolderUid`, so nothing new is fetched for it. */
+    folders?: Folder[];
+    /** Called with the server's updated copy (now in the chosen folder) after a successful Move to. A move
+     * takes the message out of whichever folder is being listed, so callers remove it from their list
+     * rather than patching it — unlike `onClassified`, which this replaces. */
+    onMoved?: (updated: Message) => void;
+    /** A folder created from the Move to prompt, so the caller's own list and the folder sidebar pick it up
+     * without a page load. */
+    onFolderCreated?: (folder: Folder) => void;
     /** Called with the server's updated copy after approving/declining a pending delivery/read receipt —
-     * mirrors `onRecalled`'s identical shape. No gating prop needed (unlike `isSentItems`/`isOutbox`/
-     * `isInbox`): `deliveryReceiptPending`/`readReceiptPending` already live directly on `message` and are
-     * only ever `true` on a real delivered copy, so the banner below is self-gating. */
+     * mirrors `onRecalled`'s identical shape. No gating prop needed (unlike `isSentItems`/`isOutbox`):
+     * `deliveryReceiptPending`/`readReceiptPending` already live directly on `message` and are only ever
+     * `true` on a real delivered copy, so the banner below is self-gating. */
     onReceiptHandled?: (updated: Message) => void;
     /** Called with the server's updated copy (now filed under the mailbox's Archive folder) after a
      * successful archive — mirrors `onRecalled`'s identical shape. Archiving itself is offered for any
@@ -82,12 +83,19 @@ export interface MessageDetailPaneProps {
      * a label — always patches in place, never removes from a caller's list (unlike `onArchived`):
      * changing labels never moves a message between folders. */
     onLabelsChanged?: (updated: Message) => void;
+    /** Handed a label created from the Labels menu, for the caller to add to `labels`. Without it the menu
+     * offers no "New label" row, only the link to where labels are managed. */
+    onLabelCreated?: (label: Label) => void;
+    /** Rendered as one message of a thread (`ConversationThreadPane`) rather than as the pane itself: the
+     * subject becomes a heading under the thread's own, since a document has one `h1` and the thread's is
+     * the conversation. Everything else - the badges, the actions, the body - is identical. */
+    inThread?: boolean;
 }
 /**
  * A message's reading pane — header (subject/from/to/attachments) plus a sandboxed iframe for the body.
  * Shared by the desktop inline pane (`apps/www/index.tsx`, always visible alongside the message list),
- * the mobile detail route (`apps/www/messages/[uid].tsx`, a full page on its own reached by tapping
- * a message row), and `ConversationThreadPane` (one per expanded message in a thread) — see each call
- * site for how `message`/`attachments`/`isSentItems` are sourced.
+ * and the mobile detail route (`apps/www/messages/[uid].tsx`, a full page on its own reached by tapping
+ * a message row) — see each call site for how `message`/`attachments`/`isSentItems` are sourced. The
+ * desktop pane shows whichever message the list opened, including one opened from a conversation row.
  */
 export default function MessageDetailPane(props: MessageDetailPaneProps): React.JSX.Element;

package/dist/apps/shared/components/mail/MessageDetailPane.js

@@ -4,11 +4,12 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 // SPDX-License-Identifier: MPL-2.0
 ///////////////////////////////////////////////////////////////////////////////
 import { useEffect, useRef, useState } from "react";
-import { HiOutlineCheck, HiOutlineExclamationTriangle, HiOutlineLockClosed } from "react-icons/hi2";
-import DOMPurify from "dompurify";
+import { HiOutlineArchiveBox, HiOutlineArrowUturnLeft, HiOutlineArrowUturnRight, HiOutlineCheck, HiOutlineExclamationTriangle, HiOutlineFolderArrowDown, HiOutlineLockClosed, } from "react-icons/hi2";
 import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { approveReceipt, archiveMessage, attachmentContentUrl, cancelScheduledSend, classifyMessage, declineReceipt, getMessage, getMessageRawContent, recallMessage, setMessageLabels, } from "@rapidmx/react-shared/mail/mailApi.js";
-import { buildForwardQuote, buildReplyQuote, forwardSubject, replySubject } from "@rapidmx/react-shared/mail/compose/composeQuoting.js";
+import { approveReceipt, archiveMessage, attachmentContentUrl, cancelScheduledSend, declineReceipt, getMailbox, getMessage, getMessageRawContent, moveMessage, recallMessage, setMessageLabels, } from "@rapidmx/react-shared/mail/mailApi.js";
+import { buildForwardQuote, buildReplyQuote, buildReplyRecipients, buildReplyThreading, forwardSubject, replySubject, } from "@rapidmx/react-shared/mail/compose/composeQuoting.js";
+import { sanitizeMessageBodyHtml } from "@rapidmx/react-shared/mail/messageBodySanitizer.js";
+import MoveToFolderDialog from "./MoveToFolderDialog.js";
 import { getUnlockedKeys, subscribeKeySession } from "@rapidmx/react-shared/crypto/keySession.js";
 import { evaluateMessageSecurity, evaluateMessageSecurityWithSeal, } from "@rapidmx/react-shared/crypto/messageSecurity.js";
 import { extractAddresses } from "@rapidmx/react-shared/crypto/mime.js";
@@ -20,11 +21,14 @@ import { getMyMailboxAccess } from "@rapidmx/react-shared/mail/mailboxAccessApi.
 import KeyChangeReview from "../contacts/KeyChangeReview.js";
 import { KEY_CHANGE_STALE_MESSAGE, sameFingerprint } from "../contacts/contactKeys.js";
 import { useCompose } from "./compose/ComposeContext.js";
+import { loadOriginalMessage } from "./compose/quotedBody.js";
+import { formatRecipient } from "./compose/recipients.js";
 import { useMailShell } from "./layout/MailShell.js";
 import { useUnlockPrompt } from "../layout/UnlockPromptProvider.js";
 import { moveLocalEntity } from "../../search/localIndexRpcClient.js";
 import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
+import LabelMenuButton from "./labelMenu.js";
 import Button from "@rapidmx/react-shared/components/buttons/Button.js";
 /** Labels/styling for `specs/end-to-end_encryption.md`'s "Message Security Indicators" table - kept as
  * plain data (not JSX) so `SecurityIndicator` below stays a trivial lookup. "Signature failed" MUST NOT
@@ -115,6 +119,19 @@ function downloadMimeAttachment(attachment) {
     // Some browsers are still reading the blob after `click()` returns.
     setTimeout(() => URL.revokeObjectURL(url), 60000);
 }
+/**
+ * One of the reading pane's own actions - Reply, Reply All, Forward, Archive, Move to Other - as an icon
+ * button. The action's name is its `aria-label` *and* its tooltip, so it has the same accessible name a
+ * labelled button had, and is never drawn beside the icon at any width: the row is icon-only everywhere,
+ * the way Outlook's own reading-pane command bar is, so it reads the same in the ~396px pane beside the
+ * message list and in a maximised window rather than changing shape at a breakpoint.
+ *
+ * A plain `<button>` rather than react-shared's `Button`, whose padding and minimum width are sized for a
+ * text label. Ordinary DOM order, so the keyboard reaches these in the order they are read.
+ */
+function IconAction({ icon, label, onClick, disabled, busy, }) {
+    return (_jsx("button", { type: "button", "aria-label": label, title: label, "aria-busy": busy || undefined, disabled: disabled, onClick: onClick, className: "inline-flex items-center justify-center p-1.5 rounded-md border border-border text-sm text-text hover:bg-surface-alt disabled:opacity-50 disabled:hover:bg-transparent", children: icon }));
+}
 function SecurityIndicator({ security }) {
     const { label, className } = SECURITY_INDICATOR[security.state];
     if (security.state !== "verified_at_first_open") {
@@ -141,52 +158,10 @@ const ENCRYPTED_LOAD_ERROR = "Couldn't load this message's encrypted content.";
  * backstop behind the sanitizer below: nothing in the document may load any remote resource at all, only
  * inline styles and `data:`/`cid:` images. */
 const BODY_CSP_META = "<meta http-equiv=\"Content-Security-Policy\" content=\"default-src 'none'; img-src data: cid:; style-src 'unsafe-inline'\">";
-const EMBEDDED_URI = /^\s*(?:data|cid):/i;
-/** Attributes whose value makes the browser fetch a resource (as opposed to a user-clicked link). */
-const RESOURCE_URI_ATTRIBUTES = new Set(["src", "srcset", "background", "poster", "lowsrc", "dynsrc", "xlink:href", "action", "formaction"]);
-/** Decodes CSS escapes first (so an escaped `u\72l(` can't hide from the checks below), then drops every
- * `@import` and neutralizes every `url()`/`image-set()` reference that isn't a `data:`/`cid:` URI. */
-export function stripRemoteCssUrls(css) {
-    return css
-        .replace(/\\([0-9a-f]{1,6})\s?/gi, (_match, hex) => String.fromCodePoint(Math.min(parseInt(hex, 16), 0x10ffff)))
-        .replace(/\\(.)/g, "$1")
-        .replace(/@import[^;]*;?/gi, "")
-        .replace(/(?:-webkit-)?image-set\((?:[^()]|\([^()]*\))*\)/gi, (match) => [...match.matchAll(/(["'])(.*?)\1/g)].every(([, , uri]) => EMBEDDED_URI.test(uri)) ? match : "none")
-        .replace(/url\(\s*(["']?)(.*?)\1\s*\)/gi, (match, _quote, uri) => (EMBEDDED_URI.test(uri) ? match : "none"));
-}
-let bodyPurifier;
-/** A dedicated DOMPurify instance (hooks registered here never leak into any other DOMPurify caller)
- * that additionally strips every remote resource reference - see `stripRemoteCssUrls()`. */
-function getBodyPurifier() {
-    if (!bodyPurifier) {
-        bodyPurifier = DOMPurify(window);
-        bodyPurifier.addHook("uponSanitizeElement", (node, data) => {
-            if (data.tagName === "style") {
-                // An element's `textContent` is always a string (only documents/doctypes yield null).
-                node.textContent = stripRemoteCssUrls(node.textContent);
-            }
-        });
-        bodyPurifier.addHook("uponSanitizeAttribute", (node, data) => {
-            const name = data.attrName.toLowerCase();
-            if (name === "style") {
-                data.attrValue = stripRemoteCssUrls(data.attrValue);
-                return;
-            }
-            const isNavigationLink = name === "href" && ["a", "area"].includes(node.nodeName.toLowerCase());
-            if (RESOURCE_URI_ATTRIBUTES.has(name) || (name === "href" && !isNavigationLink)) {
-                const candidates = name === "srcset" ? data.attrValue.split(/,\s+/) : [data.attrValue];
-                if (!candidates.every((candidate) => EMBEDDED_URI.test(candidate))) {
-                    data.keepAttr = false;
-                }
-            }
-        });
-    }
-    return bodyPurifier;
-}
-/** Sanitizes a client-rendered body for `srcDoc`, with the CSP meta as its very first element. */
+/** Sanitizes a client-rendered body for `srcDoc` (DOMPurify plus every remote resource reference stripped - see
+ * react-shared's `messageBodySanitizer.ts`), with the CSP meta as its very first element. */
 export function buildSecureSrcDoc(html) {
-    const sanitized = getBodyPurifier().sanitize(html, { FORBID_TAGS: ["link", "meta", "base"] });
-    return BODY_CSP_META + sanitized;
+    return BODY_CSP_META + sanitizeMessageBodyHtml(html);
 }
 function formatBytes(bytes) {
     if (bytes >= 1000000)
@@ -198,9 +173,9 @@ function formatBytes(bytes) {
 /**
  * A message's reading pane — header (subject/from/to/attachments) plus a sandboxed iframe for the body.
  * Shared by the desktop inline pane (`apps/www/index.tsx`, always visible alongside the message list),
- * the mobile detail route (`apps/www/messages/[uid].tsx`, a full page on its own reached by tapping
- * a message row), and `ConversationThreadPane` (one per expanded message in a thread) — see each call
- * site for how `message`/`attachments`/`isSentItems` are sourced.
+ * and the mobile detail route (`apps/www/messages/[uid].tsx`, a full page on its own reached by tapping
+ * a message row) — see each call site for how `message`/`attachments`/`isSentItems` are sourced. The
+ * desktop pane shows whichever message the list opened, including one opened from a conversation row.
  */
 export default function MessageDetailPane(props) {
     if (!props.message) {
@@ -218,7 +193,7 @@ export default function MessageDetailPane(props) {
 function needsRawSecurityEvaluation(message) {
     return !!message.encrypted || message.hasAttachments;
 }
-function MessageDetailContent({ message: messageProp, attachments, backHref, isSentItems, onRecalled, isOutbox, draftsFolderUid, onScheduledSendCanceled, isInbox, onClassified, onReceiptHandled, onArchived, labels, onLabelsChanged, }) {
+function MessageDetailContent({ message: messageProp, attachments, backHref, isSentItems, onRecalled, isOutbox, draftsFolderUid, onScheduledSendCanceled, folders, onMoved, onFolderCreated, onReceiptHandled, onArchived, labels, onLabelsChanged, onLabelCreated, inThread, }) {
     // A copy re-read from the server after an Outbox action was refused (409/403) or a send lease ran out - see
     // `reloadMessage()`. A prop copy newer by `version` wins; an equal-version reload is kept, since claiming a send
     // lease need not bump `version`.
@@ -232,16 +207,13 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
     const [canceling, setCanceling] = useState(false);
     const [archiving, setArchiving] = useState(false);
     const [archiveError, setArchiveError] = useState(null);
-    const [labelsOpen, setLabelsOpen] = useState(false);
-    const [togglingLabelUid, setTogglingLabelUid] = useState(null);
+    const [savingLabels, setSavingLabels] = useState(false);
     const [labelsError, setLabelsError] = useState(null);
     const [error, setError] = useState(null);
     // Kept separate from `error` (the Recall flow's own state) since this renders inline in the main
     // pane rather than inside a confirmation modal — the two flows never need to share one message.
     const [cancelError, setCancelError] = useState(null);
-    const [classifying, setClassifying] = useState(false);
-    const [classifyError, setClassifyError] = useState(null);
-    const [alwaysForSender, setAlwaysForSender] = useState(false);
+    const [movePrompt, setMovePrompt] = useState(false);
     // Names which pending receipt (`"delivery"`/`"read"`) is currently being approved/declined, if any —
     // `deliveryReceiptPending`/`readReceiptPending` can both be true independently, so a single boolean
     // wouldn't distinguish which row's buttons should show a loading state.
@@ -458,38 +430,60 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
         clearPinnedSignerCache();
         setUnlockRefresh((n) => n + 1);
     }
-    // Only ever invoked from the Reply/Reply All/Forward buttons below, which themselves only render
-    // once `message` is loaded (the early return above covers the only other state) — the non-null
-    // assertions reflect that real invariant, matching `handleRecall`'s identical pattern just below.
-    function handleReply() {
-        openCompose({
-            mailboxUid: message.mailboxUid,
-            to: message.from.address,
-            subject: replySubject(message.subject),
-            quotedHtml: buildReplyQuote(message),
-            signatureContext: "reply_forward",
-            suppressSigning: isLikelyMailingList({ listUnsubscribe: message.listUnsubscribeHeader }),
-        });
-    }
-    function handleReplyAll() {
-        const cc = message.recipients.filter((r) => r.type !== "bcc").map((r) => r.address);
-        openCompose({
-            mailboxUid: message.mailboxUid,
-            to: message.from.address,
-            cc: cc.join(", "),
-            subject: replySubject(message.subject),
-            quotedHtml: buildReplyQuote(message),
-            signatureContext: "reply_forward",
-            suppressSigning: isLikelyMailingList({ listUnsubscribe: message.listUnsubscribeHeader }),
-        });
+    // Reply, Reply All and Forward first load the full body to quote (see `loadQuotedBody()`), so the buttons are
+    // disabled meanwhile - a second click would open a second window. An encrypted original keeps its reply
+    // encrypted, since the quote may carry its decrypted content.
+    const [preparingCompose, setPreparingCompose] = useState(false);
+    /** The replying mailbox's own addresses (primary and aliases), which a reply never goes to - from the mail shell's
+     * mailbox list, else fetched; none when neither is available. */
+    async function ownAddresses() {
+        const mailbox = readerMailbox ?? (await getMailbox(message.mailboxUid).catch(() => undefined));
+        return mailbox ? [mailbox.primarySmtpAddress, ...(mailbox.aliasAddresses ?? [])] : [];
     }
-    function handleForward() {
-        openCompose({
-            mailboxUid: message.mailboxUid,
-            subject: forwardSubject(message.subject),
-            quotedHtml: buildForwardQuote(message),
-            signatureContext: "reply_forward",
-        });
+    async function handleReplyOrForward(kind) {
+        setPreparingCompose(true);
+        try {
+            const [original, own] = await Promise.all([
+                loadOriginalMessage(message, security, { recipients: kind === "replyAll" }),
+                kind === "forward" ? [] : ownAddresses(),
+            ]);
+            const encrypt = !!message.encrypted;
+            // What makes the new message part of this one's thread rather than a conversation of its own:
+            // the server composes the MIME from the recipients, subject and HTML alone, so nothing else
+            // recovers what is being replied to. A forward carries it for the same reason - it continues
+            // the thread it came from, which is where its recipient will file the reply to it.
+            const threading = buildReplyThreading(message);
+            if (kind === "forward") {
+                openCompose({
+                    mailboxUid: message.mailboxUid,
+                    subject: forwardSubject(message.subject),
+                    quotedHtml: buildForwardQuote(message, original.body),
+                    signatureContext: "reply_forward",
+                    encrypt,
+                    threading,
+                });
+                return;
+            }
+            // The message's own recipients are only the envelope recipient of a delivered message, so Reply All
+            // answers whoever its headers actually name, with anything the record holds that they don't.
+            const known = new Set((original.recipients ?? []).map((r) => r.address.trim().toLowerCase()));
+            const recipients = buildReplyRecipients({ ...message, recipients: [...(original.recipients ?? []), ...message.recipients.filter((r) => !known.has(r.address.trim().toLowerCase()))] }, own, kind === "replyAll");
+            const format = (list) => list.map((r) => formatRecipient(r)).join(", ");
+            openCompose({
+                mailboxUid: message.mailboxUid,
+                to: format(recipients.to),
+                cc: recipients.cc.length > 0 ? format(recipients.cc) : undefined,
+                subject: replySubject(message.subject),
+                quotedHtml: buildReplyQuote(message, original.body),
+                signatureContext: "reply_forward",
+                suppressSigning: isLikelyMailingList({ listUnsubscribe: message.listUnsubscribeHeader }),
+                encrypt,
+                threading,
+            });
+        }
+        finally {
+            setPreparingCompose(false);
+        }
     }
     async function handleRecall() {
         // Only ever invoked from the confirmation modal below, which itself only renders once `message`
@@ -554,26 +548,19 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
             setArchiving(false);
         }
     }
-    // Only ever invoked from a checkbox in the Labels popover below, which itself only renders once
-    // `message` is loaded — auto-saves on every toggle (no separate "Save" step), computing the full
-    // new `labelUids` set from the message's current one since `setMessageLabels()` replaces the whole
-    // list rather than patching a single entry.
+    // Only ever invoked from the Labels menu below, which itself only renders once `message` is loaded.
+    // Several labels are ticked in the menu and saved together here, in one `setMessageLabels()` call:
+    // that call replaces the whole `labelUids` list rather than patching one entry, so a menu that saved
+    // per tick would send a request (and burn an optimistic-lock `version`) for every single tick.
     //
-    // Toggles are serialized (every checkbox is disabled while one is in flight - React flushes a
-    // discrete input event's state update synchronously, so a second change can't slip in first), and
-    // each one reads the latest known copy (`latestLabelsMessageRef`, never a stale render closure) - so
-    // two quick toggles can never compute their full list, or send their optimistic-lock `version`, from
-    // the same stale snapshot.
-    async function handleToggleLabel(labelUid) {
-        setTogglingLabelUid(labelUid);
+    // The list is computed from the newest copy known (`latestLabelsMessageRef`, never a stale render
+    // closure), so a save that follows another still carries the `version` the server last handed back.
+    async function handleApplyLabels(labelUids) {
+        setSavingLabels(true);
         setLabelsError(null);
         try {
-            // Read through the ref (not this render's closure) so a toggle fired from a not-yet-re-rendered
-            // handler still sees the previous toggle's server response.
             const base = message.version >= latestLabelsMessageRef.current.version ? message : latestLabelsMessageRef.current;
-            const current = base.labelUids ?? [];
-            const next = current.includes(labelUid) ? current.filter((uid) => uid !== labelUid) : [...current, labelUid];
-            const updated = await setMessageLabels(base, next);
+            const updated = await setMessageLabels(base, labelUids);
             latestLabelsMessageRef.current = updated;
             setLabelsMessage(updated);
             onLabelsChanged?.(updated);
@@ -582,25 +569,21 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
             setLabelsError(err instanceof ApiRequestError ? err.message : "Could not update this message's labels.");
         }
         finally {
-            setTogglingLabelUid(null);
+            setSavingLabels(false);
         }
     }
-    // Only ever invoked from the classification button below, which itself only renders once `message`
-    // is loaded and `isInbox` is true — the non-null assertion reflects the same real invariant as
-    // `handleRecall`/`handleCancelScheduledSend` above.
-    async function handleClassify(classifyAs) {
-        setClassifying(true);
-        setClassifyError(null);
-        try {
-            const updated = await classifyMessage(message.uid, classifyAs, alwaysForSender);
-            onClassified?.(updated);
-        }
-        catch (err) {
-            setClassifyError(err instanceof ApiRequestError ? err.message : "Could not reclassify this message.");
-        }
-        finally {
-            setClassifying(false);
-        }
+    /**
+     * Moves this message into the folder picked in the Move to prompt. Deliberately *not* caught here:
+     * `MoveToFolderDialog` shows a failure beside the destination that would retry it, and closes only
+     * once the move has actually landed.
+     *
+     * The move is awaited on its own line rather than written as `onMoved?.(await moveMessage(...))` -
+     * an optional call whose callee is absent never evaluates its arguments at all, so a caller that
+     * passes no `onMoved` would have had nothing moved while the prompt closed as if it had.
+     */
+    async function handleMove(folderUid) {
+        const updated = await moveMessage(message, folderUid);
+        onMoved?.(updated);
     }
     // Only ever invoked from the pending-receipt banner below, which itself only renders once `message`
     // is loaded — same real invariant as every other handler above.
@@ -657,7 +640,24 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
     const recordedConflict = keyChanged && sameFingerprint(senderKeyState?.conflict?.observedKey.fingerprint, keyChanged.signerFingerprint)
         ? senderKeyState.conflict
         : undefined;
-    return (_jsxs("div", { className: "flex-1 min-w-0 flex flex-col", children: [_jsxs("div", { className: "border-b border-border p-4", children: [backHref && (_jsx("a", { href: backHref, className: "text-sm text-primary-dark hover:underline block mb-2", children: "\u2190 Back to messages" })), _jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "flex items-center gap-2 min-w-0", children: [_jsx("h1", { className: "text-lg font-bold tracking-tight truncate", children: (protectedSubject ?? message.subject) || "(no subject)" }), security && _jsx(SecurityIndicator, { security: security })] }), sendInProgress && (_jsx("span", { className: "text-xs font-medium text-text-muted shrink-0 py-1 px-2.5 rounded-pill bg-surface-alt", children: "Sending\u2026" })), isSentItems &&
+    const shownSubject = (protectedSubject ?? message.subject) || "(no subject)";
+    /**
+     * How tall the message body is - the one thing on this pane worth every pixel it can have.
+     *
+     * The same rule in both places: the pane is a full-height flex column and the body is its one growing
+     * child, so it fills whatever the header leaves (`min-h-0` on both, or a tall body would stretch the
+     * column past the pane instead of scrolling inside it). Inside a thread that height comes from the
+     * message's own row, which `ConversationThreadPane` gives `min-h-full` of its scrolling list - so the
+     * height is still the window's, resolved down the flex chain rather than written here as a `vh`
+     * number, and it follows a resize with no breakpoint to cross.
+     *
+     * Why not size it to its content: that would need the document *inside* the frame to measure and
+     * report itself, and these frames are `sandbox=""` - scripts off - because they render mail from
+     * strangers. So a message longer than the pane keeps its own scrollbar, and everything shorter shows
+     * whole with the frame reaching the bottom of the pane either way.
+     */
+    const bodyClassName = "flex-1 min-h-0 w-full";
+    return (_jsxs("div", { className: `flex-1 min-w-0 min-h-0 flex flex-col${inThread ? "" : " h-full"}`, children: [_jsxs("div", { className: "border-b border-border p-4", children: [backHref && (_jsx("a", { href: backHref, className: "text-sm text-primary-dark hover:underline block mb-2", children: "\u2190 Back to messages" })), _jsxs("div", { className: "flex items-start justify-between gap-3", children: [_jsxs("div", { className: "flex items-center gap-2 min-w-0", children: [inThread ? (_jsx("h3", { className: "text-sm font-semibold truncate", children: shownSubject })) : (_jsx("h1", { className: "text-lg font-bold tracking-tight truncate", children: shownSubject })), security && _jsx(SecurityIndicator, { security: security })] }), sendInProgress && (_jsx("span", { className: "text-xs font-medium text-text-muted shrink-0 py-1 px-2.5 rounded-pill bg-surface-alt", children: "Sending\u2026" })), isSentItems &&
                                 (message.recallRequestedAt ? (_jsx("span", { className: "text-xs font-medium text-text-muted shrink-0 py-1 px-2.5 rounded-pill bg-surface-alt", children: "Recall requested" })) : (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto shrink-0", onClick: () => setConfirming(true), children: "Recall this message" }))), inOutbox && !sendInProgress && message.scheduledSendTime && (_jsxs("div", { className: "flex items-center gap-2 shrink-0", children: [_jsxs("span", { className: "text-xs font-medium text-text-muted py-1 px-2.5 rounded-pill bg-surface-alt", children: ["Scheduled for ", new Date(message.scheduledSendTime).toLocaleString()] }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: canceling, disabled: canceling, onClick: handleCancelScheduledSend, children: "Cancel" })] })), inOutbox && !sendInProgress && !message.scheduledSendTime && draftsFolderUid && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto shrink-0", loading: canceling, disabled: canceling, onClick: handleCancelScheduledSend, children: "Move to Drafts" }))] }), inOutbox && message.scheduledSendError && (_jsx("div", { className: "mt-2", children: _jsxs(Alert, { children: ["This message wasn\u2019t sent: ", message.scheduledSendError] }) })), cancelError && (_jsx("div", { className: "mt-2", children: _jsx(Alert, { children: cancelError }) })), keyChangeNotice && (_jsx("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: keyChangeNotice })), security && UNVERIFIED_SIGNER_STATES.has(security.state) && (_jsxs("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: ["Signed, but the signer isn\u2019t a trusted contact key, so the sender isn\u2019t verified.", security.signerEmails && security.signerEmails.length > 0 && _jsxs(_Fragment, { children: [" Certificate for ", security.signerEmails.join(", "), "."] }), security.signerFingerprint && (_jsxs(_Fragment, { children: [" ", "Fingerprint ", _jsx("span", { className: "font-mono text-xs break-all", children: security.signerFingerprint }), "."] }))] })), pendingConflict && (_jsxs("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-warning/15 text-text", children: ["This sender has a signing key change waiting for your review, so this signer can\u2019t be trusted from here.", " ", _jsx("a", { href: `/contacts/${encodeURIComponent(senderKeyState.contactUid)}`, className: "font-medium text-primary-dark hover:underline", children: "Review it in Contacts" })] })), trustableCertificate && (_jsx("div", { className: "mt-1.5", children: _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: trusting, onClick: () => {
                                 setTrustError(null);
                                 setTrustConfirmOpen(true);
@@ -668,15 +668,12 @@ function MessageDetailContent({ message: messageProp, attachments, backHref, isS
                                     source: recordedConflict?.source,
                                 }, certificate: keyChanged.signerCertificate, canReject: recordedConflict !== undefined, canResolve: canUpdateMailbox, onResolved: (action) => refreshAfterKeyChange(action === "reject" ? KEPT_CURRENT_SIGNING_KEY_MESSAGE : null), onPinnedKeyChanged: () => refreshAfterKeyChange(KEY_CHANGE_STALE_MESSAGE) })] })), security?.state === "signature_failed" && !keyChanged && (_jsx("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: security.signatureFailureReason
                             ? SIGNATURE_FAILURE_MESSAGE[security.signatureFailureReason]
-                            : GENERIC_SIGNATURE_FAILURE_MESSAGE })), verifiedOrSealed && !security.protectedHeaders && (_jsx("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: "The signature covers this message\u2019s content and attachments only. Its Subject, To and Cc weren\u2019t signed, so they could have been changed after it was sent." })), security?.notAddressedToReader && (_jsx("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: "The recipients this message was signed or encrypted for don\u2019t include this mailbox - it may have been forwarded or re-sent to you unchanged, or you were Bcc\u2019d." })), _jsxs("p", { className: "text-sm text-text-muted mt-1", children: ["From ", senderLabel, " \u00B7 ", new Date(message.receivedDate).toLocaleString()] }), senderNameCheck.misleading && (_jsxs("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-warning/15 text-text", children: ["The sender\u2019s name \u201C", senderName, "\u201D looks like an email address, but this message was sent from ", _jsx("span", { className: "font-medium", children: senderAddress }), ". Don\u2019t trust it based on the name."] })), _jsxs("p", { className: "text-sm text-text-muted", children: ["To ", message.recipients.map((r) => r.displayName || r.address).join(", ")] }), _jsxs("div", { className: "flex gap-2 mt-3", children: [_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: handleReply, children: "Reply" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: handleReplyAll, children: "Reply All" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: handleForward, children: "Forward" }), !inOutbox && message.folderUid !== draftsFolderUid && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: archiving, disabled: archiving, onClick: handleArchive, children: "Archive" })), labels && labels.length > 0 && (_jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: () => setLabelsOpen(true), children: "Labels" }))] }), archiveError && (_jsx("div", { className: "mt-2", children: _jsx(Alert, { children: archiveError }) })), labels && (currentLabelsMessage.labelUids?.length ?? 0) > 0 && (_jsx("div", { className: "flex flex-wrap items-center gap-1.5 mt-2", children: currentLabelsMessage
+                            : GENERIC_SIGNATURE_FAILURE_MESSAGE })), verifiedOrSealed && !security.protectedHeaders && (_jsx("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: "The signature covers this message\u2019s content and attachments only. Its Subject, To and Cc weren\u2019t signed, so they could have been changed after it was sent." })), security?.notAddressedToReader && (_jsx("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-surface-alt text-text", children: "The recipients this message was signed or encrypted for don\u2019t include this mailbox - it may have been forwarded or re-sent to you unchanged, or you were Bcc\u2019d." })), _jsxs("p", { className: "text-sm text-text-muted mt-1", children: ["From ", senderLabel, " \u00B7 ", new Date(message.receivedDate).toLocaleString()] }), senderNameCheck.misleading && (_jsxs("p", { role: "status", className: "mt-2 py-2 px-3 rounded-sm text-sm bg-warning/15 text-text", children: ["The sender\u2019s name \u201C", senderName, "\u201D looks like an email address, but this message was sent from ", _jsx("span", { className: "font-medium", children: senderAddress }), ". Don\u2019t trust it based on the name."] })), _jsxs("p", { className: "text-sm text-text-muted", children: ["To ", message.recipients.map((r) => r.displayName || r.address).join(", ")] }), _jsxs("div", { className: "flex flex-wrap gap-1 mt-3", children: [_jsx(IconAction, { icon: _jsx(HiOutlineArrowUturnLeft, { size: 16, "aria-hidden": "true" }), label: "Reply", disabled: preparingCompose, onClick: () => void handleReplyOrForward("reply") }), _jsx(IconAction, { icon: _jsxs("span", { className: "inline-flex items-center", "aria-hidden": "true", children: [_jsx(HiOutlineArrowUturnLeft, { size: 16 }), _jsx(HiOutlineArrowUturnLeft, { size: 16, className: "-ml-2.5" })] }), label: "Reply All", disabled: preparingCompose, onClick: () => void handleReplyOrForward("replyAll") }), _jsx(IconAction, { icon: _jsx(HiOutlineArrowUturnRight, { size: 16, "aria-hidden": "true" }), label: "Forward", disabled: preparingCompose, onClick: () => void handleReplyOrForward("forward") }), !inOutbox && message.folderUid !== draftsFolderUid && (_jsx(IconAction, { icon: _jsx(HiOutlineArchiveBox, { size: 16, "aria-hidden": "true" }), label: "Archive", busy: archiving, disabled: archiving, onClick: handleArchive })), folders && folders.length > 0 && (_jsx(IconAction, { icon: _jsx(HiOutlineFolderArrowDown, { size: 16, "aria-hidden": "true" }), label: "Move to", onClick: () => setMovePrompt(true) })), labels && labels.length > 0 && (_jsx(LabelMenuButton, { "aria-label": "Labels", label: "Labels", className: "border border-border py-1.5", labels: labels, mailboxUid: message.mailboxUid, onLabelCreated: onLabelCreated, applied: currentLabelsMessage.labelUids ?? [], onCommit: (labelUids) => void handleApplyLabels(labelUids), busy: savingLabels, note: "Ticked labels are applied to this message and unticked ones removed.", emptyNote: "This mailbox has no labels yet.", commit: { label: "Apply" }, clear: { label: "Remove all labels" } }))] }), archiveError && (_jsx("div", { className: "mt-2", children: _jsx(Alert, { children: archiveError }) })), labelsError && (_jsx("div", { className: "mt-2", children: _jsx(Alert, { children: labelsError }) })), labels && (currentLabelsMessage.labelUids?.length ?? 0) > 0 && (_jsx("div", { className: "flex flex-wrap items-center gap-1.5 mt-2", children: currentLabelsMessage
                             .labelUids.map((uid) => labels.find((l) => l.uid === uid))
                             .filter((l) => !!l)
-                            .map((l) => (_jsxs("span", { className: "inline-flex items-center gap-1.5 text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt", children: [_jsx("span", { className: "w-2 h-2 rounded-full shrink-0", style: { backgroundColor: l.color ?? "#6366f1" } }), l.name] }, l.uid))) })), isInbox && (_jsxs("div", { className: "flex flex-wrap items-center gap-2 mt-2", children: [_jsx(Button, { type: "button", variant: "text", loading: classifying, disabled: classifying, onClick: () => handleClassify(message.inferenceClassification === "other" ? "focused" : "other"), children: message.inferenceClassification === "other" ? "Move to Focused" : "Move to Other" }), _jsxs("label", { className: "flex items-center gap-1.5 text-xs text-text-muted", children: [_jsx("input", { type: "checkbox", checked: alwaysForSender, onChange: (e) => setAlwaysForSender(e.target.checked) }), "Always for this sender"] })] })), classifyError && (_jsx("div", { className: "mt-2", children: _jsx(Alert, { children: classifyError }) })), ["delivery", "read"]
+                            .map((l) => (_jsxs("span", { className: "inline-flex items-center gap-1.5 text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt", children: [_jsx("span", { className: "w-2 h-2 rounded-full shrink-0", style: { backgroundColor: l.color ?? "#6366f1" } }), l.name] }, l.uid))) })), ["delivery", "read"]
                         .filter((type) => (type === "delivery" ? message.deliveryReceiptPending : message.readReceiptPending))
                         .map((type) => (_jsxs("div", { className: "flex flex-wrap items-center gap-2 mt-2 py-2 px-3 rounded-sm bg-surface-alt text-sm", children: [_jsxs("span", { children: [senderLabel, " requested a ", type, " receipt for this message."] }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", loading: receiptBusy === type, disabled: receiptBusy !== null, onClick: () => handleReceipt(type, "approve"), children: "Send receipt" }), _jsx(Button, { type: "button", variant: "text", disabled: receiptBusy !== null, onClick: () => handleReceipt(type, "decline"), children: "Decline" })] }, type))), receiptError && (_jsx("div", { className: "mt-2", children: _jsx(Alert, { children: receiptError }) })), security?.state === "signature_failed" && innerAttachments && innerAttachments.length > 0 && (_jsx("p", { role: "status", className: "mt-3 py-2 px-3 rounded-sm text-sm bg-warning/15 text-text", children: "These attachments come from a message whose signature couldn\u2019t be verified. Open them only if you trust the sender." })), innerAttachments
                         ? innerAttachments.length > 0 && (_jsx("ul", { className: "flex flex-wrap gap-2 mt-3", children: innerAttachments.map((attachment, index) => (_jsx("li", { children: _jsx("button", { type: "button", onClick: () => downloadMimeAttachment(attachment), className: "text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt text-text-muted hover:text-primary-dark", children: attachment.filename ?? `Unnamed ${attachment.contentType} attachment` }) }, `${index}:${attachment.filename ?? ""}`))) }))
-                        : attachments.length > 0 && (_jsx("ul", { className: "flex flex-wrap gap-2 mt-3", children: attachments.map((attachment) => (_jsx("li", { children: _jsxs("a", { href: attachmentContentUrl(attachment.uid), className: "text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt text-text-muted hover:text-primary-dark", children: [attachment.filename, " (", formatBytes(attachment.sizeBytes), ")"] }) }, attachment.uid))) }))] }), security?.decryptError && (_jsxs("div", { className: "px-4 pt-2", children: [_jsx(Alert, { children: security.decryptError }), !getUnlockedKeys(message.mailboxUid) && (_jsxs("button", { type: "button", onClick: handleUnlockToView, className: "mt-1.5 inline-flex items-center gap-1 text-xs font-medium text-primary-dark hover:underline", children: [_jsx(HiOutlineLockClosed, { size: 12, "aria-hidden": "true" }), "Unlock to view this message"] }))] })), security?.text !== undefined ? (_jsx("pre", { "aria-label": message.subject || "Message content", className: "flex-1 w-full overflow-auto p-4 m-0 text-sm font-sans whitespace-pre-wrap break-words", children: security.text })) : security?.html !== undefined ? (_jsx("iframe", { title: message.subject || "Message content", srcDoc: buildSecureSrcDoc(security.html), sandbox: "", className: "flex-1 w-full border-0" }, message.uid)) : (_jsx("iframe", { title: message.subject || "Message content", src: `/api/mail/messages/${encodeURIComponent(message.uid)}/content`, sandbox: "", className: "flex-1 w-full border-0" }, message.uid)), _jsxs(Modal, { open: confirming, onClose: () => setConfirming(false), title: "Recall this message?", children: [_jsx("p", { className: "text-sm text-text-muted mb-4", children: "This asks every original recipient's mail system to delete their copy, but only if it's still unread there \u2014 there's no way to guarantee it, and no confirmation once it either succeeds or fails. Recipients who already read the message will keep it." }), error && _jsx(Alert, { children: error }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", loading: recalling, disabled: recalling, onClick: handleRecall, className: "!w-auto", children: "Recall message" }), _jsx(Button, { type: "button", variant: "secondary", disabled: recalling, onClick: () => setConfirming(false), className: "!w-auto", children: "Cancel" })] })] }), _jsx(Modal, { open: trustConfirmOpen && !!trustableCertificate, onClose: () => !trusting && setTrustConfirmOpen(false), title: "Trust this signer?", children: _jsxs("div", { className: "flex flex-col gap-3 text-sm", children: [_jsxs("p", { children: ["Mail from ", _jsx("span", { className: "font-medium", children: senderAddress }), " signed with this certificate will show as verified."] }), _jsxs("dl", { className: "flex flex-col gap-1", children: [_jsx("dt", { className: "text-xs text-text-muted", children: "Certificate issued to" }), _jsx("dd", { children: security?.signerEmails?.length ? security.signerEmails.join(", ") : "No email address" }), _jsx("dt", { className: "text-xs text-text-muted", children: "Fingerprint" }), _jsx("dd", { className: "font-mono text-xs break-all", children: security?.signerFingerprint ? formatFingerprint(security.signerFingerprint) : "Unknown" })] }), _jsx("p", { className: "text-text-muted", children: "Anyone can create a certificate naming any address. Before trusting it, confirm this fingerprint with the sender through another channel, such as a phone call." }), trustError && _jsx(Alert, { children: trustError }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", className: "!w-auto", loading: trusting, disabled: trusting, onClick: () => handleTrustSigner(senderAddress, trustableCertificate), children: "Trust" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: trusting, onClick: () => setTrustConfirmOpen(false), children: "Cancel" })] })] }) }), _jsxs(Modal, { open: labelsOpen, onClose: () => setLabelsOpen(false), title: "Labels", children: [labelsError && _jsx(Alert, { children: labelsError }), _jsx("ul", { className: "flex flex-col gap-1", children: (labels ?? []).map((l) => {
-                            const checked = currentLabelsMessage.labelUids?.includes(l.uid) ?? false;
-                            return (_jsx("li", { children: _jsxs("label", { className: "flex items-center gap-2 py-1.5 px-1 text-sm rounded-sm hover:bg-surface-alt", children: [_jsx("input", { type: "checkbox", checked: checked, disabled: togglingLabelUid !== null, onChange: () => handleToggleLabel(l.uid) }), _jsx("span", { className: "w-2.5 h-2.5 rounded-full shrink-0", style: { backgroundColor: l.color ?? "#6366f1" } }), l.name] }) }, l.uid));
-                        }) })] })] }));
+                        : attachments.length > 0 && (_jsx("ul", { className: "flex flex-wrap gap-2 mt-3", children: attachments.map((attachment) => (_jsx("li", { children: _jsxs("a", { href: attachmentContentUrl(attachment.uid), className: "text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt text-text-muted hover:text-primary-dark", children: [attachment.filename, " (", formatBytes(attachment.sizeBytes), ")"] }) }, attachment.uid))) }))] }), security?.decryptError && (_jsxs("div", { className: "px-4 pt-2", children: [_jsx(Alert, { children: security.decryptError }), !getUnlockedKeys(message.mailboxUid) && (_jsxs("button", { type: "button", onClick: handleUnlockToView, className: "mt-1.5 inline-flex items-center gap-1 text-xs font-medium text-primary-dark hover:underline", children: [_jsx(HiOutlineLockClosed, { size: 12, "aria-hidden": "true" }), "Unlock to view this message"] }))] })), security?.text !== undefined ? (_jsx("pre", { "aria-label": message.subject || "Message content", className: `${bodyClassName} overflow-auto p-4 m-0 text-sm font-sans whitespace-pre-wrap break-words`, children: security.text })) : security?.html !== undefined ? (_jsx("iframe", { title: message.subject || "Message content", srcDoc: buildSecureSrcDoc(security.html), sandbox: "", className: `${bodyClassName} border-0` }, message.uid)) : (_jsx("iframe", { title: message.subject || "Message content", src: `/api/mail/messages/${encodeURIComponent(message.uid)}/content`, sandbox: "", className: `${bodyClassName} border-0` }, message.uid)), _jsx(MoveToFolderDialog, { open: movePrompt, onClose: () => setMovePrompt(false), mailboxUid: message.mailboxUid, folders: folders ?? [], currentFolderUid: message.folderUid, onMove: handleMove, onFolderCreated: onFolderCreated }), _jsxs(Modal, { open: confirming, onClose: () => setConfirming(false), title: "Recall this message?", children: [_jsx("p", { className: "text-sm text-text-muted mb-4", children: "This asks every original recipient's mail system to delete their copy, but only if it's still unread there \u2014 there's no way to guarantee it, and no confirmation once it either succeeds or fails. Recipients who already read the message will keep it." }), error && _jsx(Alert, { children: error }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", loading: recalling, disabled: recalling, onClick: handleRecall, className: "!w-auto", children: "Recall message" }), _jsx(Button, { type: "button", variant: "secondary", disabled: recalling, onClick: () => setConfirming(false), className: "!w-auto", children: "Cancel" })] })] }), _jsx(Modal, { open: trustConfirmOpen && !!trustableCertificate, onClose: () => !trusting && setTrustConfirmOpen(false), title: "Trust this signer?", children: _jsxs("div", { className: "flex flex-col gap-3 text-sm", children: [_jsxs("p", { children: ["Mail from ", _jsx("span", { className: "font-medium", children: senderAddress }), " signed with this certificate will show as verified."] }), _jsxs("dl", { className: "flex flex-col gap-1", children: [_jsx("dt", { className: "text-xs text-text-muted", children: "Certificate issued to" }), _jsx("dd", { children: security?.signerEmails?.length ? security.signerEmails.join(", ") : "No email address" }), _jsx("dt", { className: "text-xs text-text-muted", children: "Fingerprint" }), _jsx("dd", { className: "font-mono text-xs break-all", children: security?.signerFingerprint ? formatFingerprint(security.signerFingerprint) : "Unknown" })] }), _jsx("p", { className: "text-text-muted", children: "Anyone can create a certificate naming any address. Before trusting it, confirm this fingerprint with the sender through another channel, such as a phone call." }), trustError && _jsx(Alert, { children: trustError }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", className: "!w-auto", loading: trusting, disabled: trusting, onClick: () => handleTrustSigner(senderAddress, trustableCertificate), children: "Trust" }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", disabled: trusting, onClick: () => setTrustConfirmOpen(false), children: "Cancel" })] })] }) })] }));
 }

package/dist/apps/shared/components/mail/MoveToFolderDialog.d.ts

@@ -0,0 +1,57 @@
+import React from "react";
+import { Folder } from "@rapidmx/react-shared/mail/mailApi.js";
+/**
+ * The folder types a message can be moved *into* - Outbox is a transient send queue the server owns, and
+ * the non-mail folders (`calendar`/`contacts`/`tasks`/`notes`) aren't message folders at all, so neither is
+ * offered. Shared by the reading pane's Move to and select mode's bulk Move to, which is the whole point of
+ * this component: one destination list, one set of rules.
+ */
+export declare const MOVE_TARGET_TYPES: Set<string>;
+/** Above this many destinations the dialog offers a filter box - below it, one is just another thing to
+ * skip past on the way to a list that already fits on screen. */
+export declare const FOLDER_FILTER_THRESHOLD = 8;
+/** What `@rapidmx/restapi` accepts as a folder name, so a name it would refuse is refused here, next to the
+ * field, rather than as a 400 after a round trip. */
+export declare const MAX_FOLDER_NAME_LENGTH = 255;
+/**
+ * Why a name can't be used, or `null` when it can. Folders are a real tree (`Folder.parentFolderUid`), not
+ * paths, so a separator in a name would be a character in the name rather than a nesting instruction -
+ * which is exactly why it is refused: it would read as a hierarchy this app never created.
+ */
+export declare function folderNameError(name: string, existing: Folder[]): string | null;
+export interface MoveToFolderDialogProps {
+    open: boolean;
+    onClose: () => void;
+    /** The mailbox whose folders are offered, and the one a new folder is created in. */
+    mailboxUid: string;
+    /** Every folder of that mailbox - filtered to the movable types here, so callers hand over the list
+     * they already hold rather than pre-filtering it each time. */
+    folders: Folder[];
+    /** Where the message(s) are now: offered, but disabled, so the list doesn't change shape per folder. */
+    currentFolderUid?: string;
+    /** What is being moved, for the dialog's own title ("Move 3 messages to"). Defaults to one message. */
+    count?: number;
+    /**
+     * Performs the move, resolving once it has settled. A rejection is shown in this dialog, beside the
+     * destination that would retry it; the dialog closes on success. The bulk caller resolves either way
+     * and reports its own outcome in the selection bar, which is where a partly-applied bulk update has to
+     * be explained (see `runBulkAction()`).
+     */
+    onMove: (folderUid: string) => Promise<void>;
+    /** A folder this dialog created, so the caller's own folder list - and the sidebar - pick it up without
+     * a page load. Called before the move, so a failed move still leaves the folder that was created. */
+    onFolderCreated?: (folder: Folder) => void;
+}
+/**
+ * Outlook's "Move to" prompt: pick a destination folder for the open message or the selection, or create a
+ * folder and move into it in one step.
+ *
+ * A `Modal` rather than a `MenuButton` because creating a folder needs a text field, and a `role="menu"`
+ * has nowhere to put one (the same reason `NewLabelDialog` exists) - and because a destination list can be
+ * as long as the mailbox has folders, which wants a filter box rather than a scrolling popup.
+ *
+ * A new folder is created at the **top level of the mailbox**, typed `user`, never as a child of the folder
+ * being moved out of: this app's sidebar lists folders flat (`MailShell`'s own `FOLDER_ORDER`), so a
+ * subfolder would be created into a hierarchy nothing here renders.
+ */
+export default function MoveToFolderDialog({ open, onClose, mailboxUid, folders, currentFolderUid, count, onMove, onFolderCreated, }: MoveToFolderDialogProps): React.JSX.Element;