@rapidmx/web-client 0.9.0 → 0.11.0

package/dist/apps/shared/components/mail/compose/ComposeWindow.js

@@ -6,65 +6,49 @@ import { jsx as _jsx, jsxs as _jsxs, Fragment as _Fragment } from "react/jsx-run
 import { useEffect, useRef, useState } from "react";
 import { HiOutlineArrowsPointingIn, HiOutlineArrowsPointingOut, HiOutlineChevronDown, HiOutlineLockClosed, HiOutlineMinus, HiOutlinePaperClip, HiOutlineTrash, HiOutlineXMark, } from "react-icons/hi2";
 import { ApiRequestError } from "@rapidmx/react-shared/util/api.js";
-import { assembleDraft, assembleDraftRaw, attachmentContentUrl, createDraft, deleteMessage, getMailbox, getMessage, listFolders, listMailboxes, sendMessage, setMessageRequestReceipt, uploadAttachment, } from "@rapidmx/react-shared/mail/mailApi.js";
+import { assembleDraft, attachmentContentUrl, createDraft, deleteMessage, getMailbox, getMessage, listFolders, listMailboxes, uploadAttachment, } from "@rapidmx/react-shared/mail/mailApi.js";
 import { listMailSignatures } from "@rapidmx/react-shared/mail/mailSignaturesApi.js";
-import { describeSendFailure } from "@rapidmx/react-shared/mail/sendFailure.js";
 import { buildComposeBodyHtml } from "@rapidmx/react-shared/mail/compose/composeQuoting.js";
 import { peekMailboxWritability, useMailboxWritability } from "../writableMailboxes.js";
-import { decideMessageEncryption, resolveRecipientEncryption } from "@rapidmx/react-shared/crypto/composeSecurity.js";
+import { resolveRecipientEncryption } from "@rapidmx/react-shared/crypto/composeSecurity.js";
 import { getUnlockedKeys, subscribeKeySession } from "@rapidmx/react-shared/crypto/keySession.js";
 import { findActivePublicKey, getEncryptionPolicy, lookupKeys } from "@rapidmx/react-shared/crypto/keyvaultApi.js";
 import { useUnlockPrompt } from "../../layout/UnlockPromptProvider.js";
-import { fromBase64 } from "@rapidmx/react-shared/crypto/encoding.js";
-import { applyBaselineOuterHeaders, assembleOutboundMime, buildEncryptedMessage, buildSignedOnlyMessage } from "@rapidmx/react-shared/crypto/smimeMessage.js";
 import useIsMobile from "@rapidmx/react-shared/util/useIsMobile.js";
+import { notify } from "../../../notifications/store.js";
+import { evaluateEncryptionRequirement } from "./encryptionRequirement.js";
+import { decideSend } from "../../../mail/outbox/sendDecision.js";
+import { sendDecisionInput, startSend } from "../../../mail/outbox/sendJob.js";
+import { useCompose } from "./ComposeContext.js";
+import { ariaKeyShortcuts, withHint } from "../../../keyboard/format.js";
+import { SHORTCUTS } from "../../../keyboard/keymap.js";
+import { useKeyEnvironment } from "../../../keyboard/ShortcutProvider.js";
+import { useShortcut } from "../../../keyboard/useShortcut.js";
 import { isSigningOut, registerComposeFlush } from "./composeFlushRegistry.js";
+import { markComposePhase } from "./composePerf.js";
 import RecipientInput from "./RecipientInput.js";
 import { parseRecipientList } from "./recipients.js";
 import RichTextEditor from "./RichTextEditor.js";
 import ScheduleSendPicker from "./ScheduleSendPicker.js";
-import SendFailureAlert from "./SendFailureAlert.js";
 import Alert from "@rapidmx/react-shared/components/feedback/Alert.js";
 import Button from "@rapidmx/react-shared/components/buttons/Button.js";
 import Modal from "@rapidmx/react-shared/components/overlays/Modal.js";
 /** Debounce between the last edit and the draft autosave. */
 export const DEFAULT_AUTOSAVE_DELAY_MS = 2000;
-/** Automatic retries of a failed mailbox/encryption-policy load; after the last one only "Retry" tries again. */
-export const DEFAULT_CRYPTO_RETRY_DELAYS_MS = [1000, 2000, 4000, 8000];
-/** Signed/encrypted bodies are built client-side from the editor's HTML verbatim, so an inline image
- * (an uploaded attachment previewed via its content URL, or a `cid:` reference) would never be carried -
- * only `assembleDraft()`'s server-side plaintext path rewrites those into real MIME parts. */
-const INLINE_IMAGE_PATTERN = /<img\b[^>]*\bsrc\s*=\s*["']?(?:cid:|[^"'\s>]*\/mail\/attachments\/[^"'\s>]+\/content)/i;
-const KEYS_LOCKED_SIGN_MESSAGE = "This message can't be signed right now - your signing key is locked or your mailbox details couldn't be loaded. Unlock and send again, or send it without signing.";
-const KEYS_LOCKED_ENCRYPT_MESSAGE = "This message can't be encrypted right now - your encryption key is locked. Unlock and send again, or send it without encryption.";
-const POLICY_UNAVAILABLE_MESSAGE = "Your encryption settings couldn't be loaded, so this message can't be encrypted right now. Try again, or send it without encryption.";
-const BCC_ENCRYPTED_MESSAGE = "Bcc recipients can't be used with encrypted messages. Remove Bcc recipients or turn off encryption.";
-const LOOKUP_UNAVAILABLE_MESSAGE = "Your recipients' encryption keys couldn't be checked, so this message might go out unencrypted when it should be encrypted. Try again, or send it without encryption.";
+/** Automatic, silent retries of a failed mailbox/encryption-policy (or recipient key) load, one entry per retry - a flapping gateway is waited out
+ * in the background, without a word to the user. */
+export const DEFAULT_CRYPTO_RETRY_DELAYS_MS = [1000, 2000, 4000, 8000, 15000, 30000, 60000];
 /** Thrown by `deleteDraft()` when the server copy is no longer this window's draft (sent or scheduled elsewhere). */
 const NO_LONGER_A_DRAFT_MESSAGE = "This message was already sent or scheduled from another window, so it wasn't deleted.";
-/** The server refuses signed/encrypted mail whose From display name differs from its own safe form, which drops a
- * name containing `@` (or a look-alike) or a line break. */
-const UNSAFE_DISPLAY_NAME_PATTERN = /[@＠﹫\r\n]/;
 /** Whether `fresh` (a re-read of a draft) is still an unsent draft in `folderUid`: never delete a message another
  * window has since sent, scheduled, or started sending. */
 function isStillDraft(fresh, folderUid) {
     return fresh.folderUid === folderUid && !fresh.scheduledSendTime && !fresh.scheduledSendLeaseExpiresAt && !fresh.scheduledSendRelayedAt;
 }
-/** Any tier of `policy` auto-encrypts - only then can a message with recipients still to be added turn out encrypted
- * without the user asking. */
-function policyCanAutoEncrypt(policy) {
-    return [policy.encryptSameOrg, policy.encryptFederated, policy.encryptExternal].includes("automatic");
-}
 const SAVE_STATUS_LABEL = { idle: "", saving: "Saving…", saved: "Draft saved", error: "Couldn't save draft" };
 const DISCARD_TITLE = "Discard this draft?";
+/** Shown only for a message that is actually headed for encryption (asked for, or applied by the loaded policy) - see `encryptionRequirement.ts`. */
 const ENCRYPTED_CLOSE_MESSAGE = "Encrypted messages aren't saved as drafts, so closing this window discards what you've written.";
-const CHECKING_CLOSE_MESSAGE = "This message may be encrypted, and that's still being checked, so it can't be saved as a draft yet. Keep editing and close again in a moment, or discard it.";
-const CRYPTO_UNAVAILABLE_MESSAGE = "Your encryption settings couldn't be checked, so this draft isn't being saved - it might be a message that must be encrypted.";
-const NO_RECIPIENTS_CLOSE_MESSAGE = "This message may be encrypted once its recipients are known, so it isn't saved as a draft until you add them. Add a recipient and close again, or discard it.";
-const SEND_FAILED_TITLE = "This message wasn't sent";
-function sendFailedCloseMessage(reason) {
-    return `Sending it failed (${reason.replace(/\.$/, "")}). Closing keeps it as a draft, unsent. Keep editing to try again, or discard it.`;
-}
 const FIELD_ROW = "flex items-center gap-2 px-3 py-1.5 border-b border-border";
 const FIELD_INPUT = "flex-1 min-w-0 text-sm bg-transparent outline-none";
 const MIN_WIDTH = 320;
@@ -80,8 +64,9 @@ const VIEWPORT_MARGIN = 24;
 function parseAddresses(value) {
     return parseRecipientList(value);
 }
-function HeaderButton({ label, onClick, icon: Icon, disabled, }) {
-    return (_jsx("button", { type: "button", "aria-label": label, title: label, onClick: onClick, disabled: disabled, className: "w-6 h-6 flex items-center justify-center rounded-sm text-white/80 hover:bg-white/15 hover:text-white disabled:opacity-40 disabled:cursor-not-allowed", children: _jsx(Icon, { size: 14 }) }));
+function HeaderButton({ label, onClick, icon: Icon, disabled, shortcut, }) {
+    const env = useKeyEnvironment();
+    return (_jsx("button", { type: "button", "aria-label": label, title: shortcut ? withHint(label, shortcut, env) : label, "aria-keyshortcuts": shortcut ? ariaKeyShortcuts(shortcut, env) : undefined, onClick: onClick, disabled: disabled, className: "w-6 h-6 flex items-center justify-center rounded-sm text-white/80 hover:bg-white/15 hover:text-white disabled:opacity-40 disabled:cursor-not-allowed", children: _jsx(Icon, { size: 14 }) }));
 }
 /**
  * A floating, Gmail-style compose window — overlays whatever app is currently showing instead of
@@ -98,7 +83,15 @@ function HeaderButton({ label, onClick, icon: Icon, disabled, }) {
  * once.
  */
 export default function ComposeWindow({ session, onClose, onToggleMinimize, userUid, trusted, autosaveDelayMs = DEFAULT_AUTOSAVE_DELAY_MS, cryptoRetryDelaysMs = DEFAULT_CRYPTO_RETRY_DELAYS_MS, }) {
-    const { id, initialTo, initialCc, initialSubject, initialQuotedHtml, initialEncrypt, signatureContext, suppressSigning, minimized } = session;
+    const { id, initialTo, initialCc, initialSubject, initialQuotedHtml, initialEncrypt, signatureContext, suppressSigning, minimized, quotePending, late, resume } = session;
+    // What a reply worked out after this window opened (see `OpenComposeInput.pending`): better recipients, applied below
+    // only to fields still exactly as they opened - so these, not `initialTo`/`initialCc`, are what "untouched" is measured against.
+    const baselineTo = late?.to ?? initialTo;
+    const baselineCc = late?.cc ?? initialCc;
+    useEffect(() => {
+        markComposePhase(id, "shell");
+        markComposePhase(id, "chunk");
+    }, []);
     // The sending ("From") mailbox. A reply/forward session names the original message's mailbox; a fresh
     // compose leaves it unset and defaults to the caller's own mailbox once `listMailboxes()` resolves.
     // Everything mailbox-scoped below (Drafts folder, draft, signatures, crypto context) keys off this.
@@ -107,35 +100,40 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     const [mailboxes, setMailboxes] = useState([]);
     // Attachments and inline images upload onto the current draft's uid, which lives in one mailbox's
     // Drafts folder - so once anything has been uploaded the sender can no longer be switched.
-    const [hasUploads, setHasUploads] = useState(false);
+    const [hasUploads, setHasUploads] = useState(!!resume && resume.attachments.length > 0);
     const isMobile = useIsMobile();
     const { requestUnlock } = useUnlockPrompt();
+    const { openCompose } = useCompose();
+    const keyEnv = useKeyEnvironment();
     // Bumped after a successful on-demand unlock to force a re-render - `getUnlockedKeys()` below is a
     // plain read from a module-level store, not React state, so nothing else would pick up the change.
     const [, setUnlockRefresh] = useState(0);
     const windowRef = useRef(null);
     const [draftsFolderUid, setDraftsFolderUid] = useState();
     const [folderError, setFolderError] = useState(null);
-    const [draft, setDraft] = useState(null);
+    // A window re-opened around a message that was already composed (a failed send's "Open draft") continues that server draft and starts with
+    // every field as it was typed; its body is not seeded from a signature or a quote.
+    const [draft, setDraft] = useState(resume?.draft ?? null);
     // Drafts replaced by a From switch, awaiting deletion until their replacement has actually been created.
     const supersededDraftsRef = useRef([]);
     const [draftError, setDraftError] = useState(null);
     const [expanded, setExpanded] = useState(false);
     const [manualSize, setManualSize] = useState(null);
-    const [to, setTo] = useState(initialTo ?? "");
-    const [cc, setCc] = useState(initialCc ?? "");
-    const [bcc, setBcc] = useState("");
-    const [showCcBcc, setShowCcBcc] = useState(!!initialCc);
-    const [subject, setSubject] = useState(initialSubject ?? "");
-    const [html, setHtml] = useState("");
-    const [contentReady, setContentReady] = useState(false);
-    const [attachments, setAttachments] = useState([]);
+    const [to, setTo] = useState(resume?.to ?? initialTo ?? "");
+    const [cc, setCc] = useState(resume?.cc ?? initialCc ?? "");
+    const [bcc, setBcc] = useState(resume?.bcc ?? "");
+    const [showCcBcc, setShowCcBcc] = useState(!!(resume ? resume.cc || resume.bcc : initialCc));
+    const [subject, setSubject] = useState(resume?.subject ?? initialSubject ?? "");
+    const [html, setHtml] = useState(resume?.html ?? "");
+    const [contentReady, setContentReady] = useState(!!resume);
+    const [attachments, setAttachments] = useState(resume?.attachments ?? []);
     const [attachError, setAttachError] = useState(null);
+    // A problem with the message as composed (no recipient, an attachment that can't be signed): shown here, and the window stays open. What
+    // goes wrong after Send was accepted is a pop-up instead (see `sendJob.ts`).
     const [sendError, setSendError] = useState(null);
-    // The technical facts behind `sendError` (per-recipient SMTP results, a transport error), when the server gave any.
-    const [sendDetails, setSendDetails] = useState([]);
-    const [sending, setSending] = useState(false);
-    const [requestReceipt, setRequestReceipt] = useState(false);
+    // Send was pressed while an attachment was still uploading: the window waits (and says so) rather than send without it.
+    const [waitingForUploads, setWaitingForUploads] = useState(false);
+    const [requestReceipt, setRequestReceipt] = useState(!!resume?.requestReceipt);
     const [schedulePickerOpen, setSchedulePickerOpen] = useState(false);
     const scheduleButtonRef = useRef(null);
     const [mailbox, setMailbox] = useState(null);
@@ -144,11 +142,10 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     // Digital Signatures - a list that appends a footer after signing invalidates the signature) - see
     // `MessageDetailPane.tsx`'s handleReply()/handleReplyAll() for where this is computed. The user can
     // still turn it back on; this only changes the default.
-    const [signEnabled, setSignEnabled] = useState(!suppressSigning);
+    const [signEnabled, setSignEnabled] = useState(resume ? resume.signEnabled : !suppressSigning);
     // A reply to or forward of an encrypted message starts (and, after a From switch, restarts) with encryption
     // requested - see `OpenComposeInput.encrypt`.
-    const [encryptRequested, setEncryptRequested] = useState(!!initialEncrypt);
-    const [encryptionBlocked, setEncryptionBlocked] = useState(null);
+    const [encryptRequested, setEncryptRequested] = useState(resume ? resume.encryptRequested : !!initialEncrypt);
     // Compose-time discovery (spec: "Discovery occurs ... when the user addresses a new message to a
     // recipient", never on receipt) - keyed by address so a recipient already looked up isn't re-fetched
     // just because the user re-focuses the field. Only ever grows via `checkRecipientDiscovery()` below;
@@ -158,16 +155,14 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     // look one up twice), and a counter bumped by a From switch so a lookup for the previous sender is dropped.
     const lookupsInFlightRef = useRef(new Set());
     const discoveryGenerationRef = useRef(0);
-    // A failed lookup stores no status (it would read as "no key" and let a message that must be encrypted autosave
-    // or send as plaintext): it's retried with the same backoff as the mailbox/policy load, and once those retries
-    // run out the address is "exhausted" - shown as a check that couldn't be done, with Retry.
+    // A failed lookup stores no status: the recipient is simply "not known to be encryptable" (fail open - see `encryptionRequirement.ts`), and
+    // the lookup is retried in the background with the same backoff as the mailbox/policy load, without a word to the user.
     const lookupFailuresRef = useRef(new Map());
     const lookupRetryTimersRef = useRef(new Set());
     const [lookupRetryToken, setLookupRetryToken] = useState(0);
-    const [exhaustedLookups, setExhaustedLookups] = useState({});
-    // A send refused because signing/encryption was wanted but can't happen right now (keys locked, the
-    // encryption policy/mailbox couldn't be loaded, or Bcc recipients on an encrypted message) - never a
-    // silent downgrade to plaintext; the user has to explicitly pick the override.
+    // A send refused *before it left* because signing/encryption was asked for (or the loaded policy applies it) but can't happen right now
+    // (keys locked, Bcc recipients on an encrypted message, a recipient without a key) - never a silent downgrade to plaintext; the user
+    // has to explicitly pick the override.
     const [securityBlock, setSecurityBlock] = useState(null);
     // The schedule time of the send that got blocked (undefined for an immediate send), so the banners'
     // override buttons replay the same kind of send the user originally asked for.
@@ -188,8 +183,11 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     const lastSavedRef = useRef(null);
     /** An edit is waiting on the autosave debounce - flushed if the window unmounts first. */
     const pendingSaveRef = useRef(false);
-    /** Mirrors `sending` for the page-leave/sign-out flushes, which run outside React's render cycle. */
-    const sendingRef = useRef(false);
+    /** Send was pressed and is being validated/handed over: a second press (a double click, the shortcut held or repeated) does nothing. */
+    const submittingRef = useRef(false);
+    /** Attachment/inline-image uploads on the wire, and who is waiting for them to finish (Send pressed meanwhile). */
+    const uploadsInFlightRef = useRef(0);
+    const uploadWaitersRef = useRef([]);
     /** The latest save request, if any - each save is chained after the one before it. Always settles (never
      * rejects), to the saved message, or `undefined` when that save failed. */
     const saveInFlightRef = useRef(Promise.resolve(undefined));
@@ -197,13 +195,10 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     const finishedRef = useRef(false);
     // A mailbox with no keys enrolled yet just means sign/encrypt stay unavailable for this compose session -
     // encryption is optional and gradual by design (see `KeyEnrollmentGate`'s own doc comment).
-    // `cryptoContextReady` (below) gates Send/Send-later until both calls have settled either way, so a
-    // send that happens to race this fetch can't silently skip encryption the spec says should apply.
-    // A failed load is retried with backoff (`cryptoRetryDelaysMs`), then on demand ("Retry"): until both have
-    // loaded, whether this message must be encrypted is unknown, so it isn't autosaved (see `autosaveSuppressed`).
-    const [cryptoContextReady, setCryptoContextReady] = useState(false);
-    const [cryptoLoadFailed, setCryptoLoadFailed] = useState(false);
-    const [cryptoRetryToken, setCryptoRetryToken] = useState(0);
+    // The mailbox and the encryption policy load in the background and *nothing waits for them*: until both have loaded, the message is treated as
+    // not encrypted - its draft saves, Close and Send work, and no message about it is shown (see `encryptionRequirement.ts`). A failed load is
+    // retried silently with backoff (`cryptoRetryDelaysMs`); if it later turns out the message must be encrypted, `encryptionDecided` (below) starts
+    // to apply - see the transition rules there.
     useEffect(() => {
         let cancelled = false;
         listMailboxes({ limit: 100 })
@@ -238,8 +233,6 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
         let mailboxLoaded = mailbox?.uid === mailboxUid;
         let policyLoaded = !!encryptionPolicy;
         let retries = 0;
-        setCryptoContextReady(false);
-        setCryptoLoadFailed(false);
         async function load() {
             await Promise.all([
                 mailboxLoaded ||
@@ -257,13 +250,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
                         }
                     }, () => undefined),
             ]);
-            if (cancelled) {
-                return;
-            }
-            const failed = !mailboxLoaded || !policyLoaded;
-            setCryptoContextReady(true);
-            setCryptoLoadFailed(failed);
-            if (failed && retries < cryptoRetryDelaysMs.length) {
+            if (!cancelled && (!mailboxLoaded || !policyLoaded) && retries < cryptoRetryDelaysMs.length) {
                 timer = setTimeout(() => void load(), cryptoRetryDelaysMs[retries++]);
             }
         }
@@ -272,7 +259,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
             cancelled = true;
             clearTimeout(timer);
         };
-    }, [mailboxUid, cryptoRetryToken]);
+    }, [mailboxUid]);
     useEffect(() => {
         if (!mailboxUid) {
             return;
@@ -299,14 +286,14 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
      * Runs discovery for whichever of `addresses` haven't already been looked up this compose session,
      * caching the result so the small per-recipient indicator below the recipient fields can update
      * without waiting for Send. Called from the To/Cc/Bcc fields' own `onBlur` - not on every keystroke,
-     * and not the same lookup `assembleForSend()` performs again at send time (deliberately: this is a
+     * and not the lookup the background send (`sendJob.ts`) performs again at send time (deliberately: this is a
      * best-effort UI hint, not something a stale value here should be trusted to skip at send time).
      * A mailbox/policy fetch that hasn't resolved yet just leaves that address with no indicator - the effect
      * below runs it again for every current recipient once both have loaded. A failed lookup leaves it without
-     * a status too, and is retried after `cryptoRetryDelaysMs` (then only on blur, Close or Retry).
+     * a status too, and is retried silently after `cryptoRetryDelaysMs` (then only on blur).
      *
-     * The statuses also drive autosave: a recipient without one yet (lookup pending, failed or never run) or a
-     * decision that would auto-encrypt keeps the plaintext draft save off (see `autosaveSuppressed`).
+     * The statuses also drive `encryptionRequirement.ts`: only when every recipient has one, and the loaded policy
+     * auto-encrypts for all of them, does the message turn into one that is never saved as a plaintext draft.
      */
     function checkRecipientDiscovery(addresses) {
         if (!mailbox || !encryptionPolicy) {
@@ -335,12 +322,11 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
             });
         }
     }
-    /** Schedules the next automatic retry of a failed lookup, or marks the address exhausted once they've run out. */
+    /** Schedules the next automatic, silent retry of a failed lookup (until the backoff has run out; a later blur tries again). */
     function noteLookupFailed(address) {
         const failures = (lookupFailuresRef.current.get(address) ?? 0) + 1;
         lookupFailuresRef.current.set(address, failures);
         if (failures > cryptoRetryDelaysMs.length) {
-            setExhaustedLookups((prev) => ({ ...prev, [address]: true }));
             return;
         }
         const timer = setTimeout(() => {
@@ -359,7 +345,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     useEffect(() => {
         checkRecipientDiscovery([...parseAddresses(to), ...parseAddresses(cc), ...parseAddresses(bcc)]);
     }, [mailbox, encryptionPolicy, lookupRetryToken]);
-    // Resolves the mailbox's default signature (if any) for `signatureContext` and seeds `html` with it
+    // Resolves the mailbox's default signature (if any) for `signatureContext` and seeds `html` with it (not for a window re-opened around a composed message)
     // plus any quoted original message (laid out by `buildComposeBodyHtml()`: an empty first paragraph for the
     // caret, then the signature, then the quote), before `RichTextEditor` ever mounts (gated by `contentReady`
     // below) — `RichTextEditor`'s own doc comment is explicit that `value` only seeds its *initial*
@@ -368,26 +354,41 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     // non-blocking fetch in this codebase (e.g. `ConversationList`'s own child-message fetch) — no
     // signature is a completely legitimate outcome, so this falls back to just the quoted content
     // (if any) rather than surfacing an error over what's a cosmetic nicety.
+    //
+    // A reply or forward opens before its quoted original has been fetched (`quotePending`, see
+    // `OpenComposeInput.pending`). The body is seeded as soon as the signature is here, without the quote, so the editor is usable
+    // at once however slow the original is to come; the quote is added at the end of the editor's document when it arrives
+    // (`appendHtml` below) - the same place, under the signature, that a body seeded with it would have had it.
+    const [defaultSignature, setDefaultSignature] = useState();
     useEffect(() => {
-        // Seeds the body once, from whichever mailbox is the sender when compose opens - switching From
-        // later must not overwrite what the user has already written (the editor itself never re-syncs).
-        if (!mailboxUid || contentReady) {
+        // Fetched once, for whichever mailbox is the sender when compose opens - switching From later must not
+        // overwrite what the user has already written (the editor itself never re-syncs).
+        if (!mailboxUid || contentReady || defaultSignature) {
             return;
         }
         listMailSignatures(mailboxUid)
             .then((signatures) => {
             const signature = signatures.find((s) => signatureContext === "new" ? s.isDefaultForNewMessages : s.isDefaultForReplyForward);
-            const seeded = buildComposeBodyHtml(signature?.contentHtml, initialQuotedHtml);
-            setHtml(seeded);
-            setSeededHtml(seeded);
-        })
-            .catch(() => {
-            const seeded = buildComposeBodyHtml(undefined, initialQuotedHtml);
-            setHtml(seeded);
-            setSeededHtml(seeded);
+            setDefaultSignature({ html: signature?.contentHtml });
         })
-            .finally(() => setContentReady(true));
-    }, [mailboxUid, signatureContext, initialQuotedHtml]);
+            .catch(() => setDefaultSignature({}));
+    }, [mailboxUid, signatureContext]);
+    const [seededWithoutQuote, setSeededWithoutQuote] = useState(false);
+    useEffect(() => {
+        if (contentReady || !defaultSignature) {
+            return;
+        }
+        const seeded = buildComposeBodyHtml(defaultSignature.html, quotePending ? undefined : initialQuotedHtml);
+        setHtml(seeded);
+        setSeededHtml(seeded);
+        setSeededWithoutQuote(!!quotePending);
+        setContentReady(true);
+        markComposePhase(id, "body");
+    }, [defaultSignature, quotePending, initialQuotedHtml]);
+    /** What the editor adds to the end of its document once the quote a reply was opened without has arrived. */
+    const lateQuoteHtml = seededWithoutQuote && !quotePending && initialQuotedHtml && defaultSignature
+        ? buildComposeBodyHtml(defaultSignature.html, initialQuotedHtml).slice(buildComposeBodyHtml(defaultSignature.html) === "" ? "<p></p>".length : buildComposeBodyHtml(defaultSignature.html).length)
+        : undefined;
     useEffect(() => {
         if (!mailboxUid || !draftsFolderUid || draft) {
             return;
@@ -405,6 +406,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
                 return;
             }
             setDraft(created);
+            markComposePhase(id, "draft");
             // Only now that the replacement exists is it safe to discard the draft(s) a From switch
             // superseded - if creating this one had failed, the earlier draft is still there.
             for (const superseded of supersededDraftsRef.current.splice(0)) {
@@ -491,9 +493,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
         discoveryGenerationRef.current += 1;
         lookupsInFlightRef.current = new Set();
         lookupFailuresRef.current = new Map();
-        setExhaustedLookups({});
         setEncryptRequested(!!initialEncrypt);
-        setEncryptionBlocked(null);
         setSecurityBlock(null);
         offeredCryptoRef.current = { sign: false, encrypt: false };
         setFromMailboxUid(nextMailboxUid);
@@ -549,6 +549,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
             setAttachError("Please wait for the draft to finish loading before inserting an image.");
             return null;
         }
+        uploadStarted();
         try {
             const attachment = await uploadAttachment(draft.uid, file);
             setHasUploads(true);
@@ -559,6 +560,21 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
             setAttachError(err instanceof ApiRequestError ? err.message : "Could not upload image.");
             return null;
         }
+        finally {
+            uploadFinished();
+        }
+    }
+    /** Send waits for every upload started before it: see `submit()`. */
+    function uploadStarted() {
+        uploadsInFlightRef.current += 1;
+    }
+    function uploadFinished() {
+        uploadsInFlightRef.current -= 1;
+        if (uploadsInFlightRef.current === 0) {
+            for (const resolve of uploadWaitersRef.current.splice(0)) {
+                resolve();
+            }
+        }
     }
     /** Uploading an attachment bumps the draft's version server-side (it records `hasAttachments`), so a later
      * Discard would otherwise send a stale `?version=`. Best-effort: Discard also retries with the server's
@@ -581,198 +597,110 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
         const files = Array.from(e.target.files ?? []);
         e.target.value = "";
         setAttachError(null);
-        for (const file of files) {
-            try {
-                const attachment = await uploadAttachment(draft.uid, file);
-                setHasUploads(true);
-                setAttachments((prev) => [...prev, attachment]);
-                void refreshDraftVersion(draft.uid);
-            }
-            catch (err) {
-                setAttachError(err instanceof ApiRequestError ? err.message : "Could not upload attachment.");
-            }
-        }
-    }
-    /**
-     * Builds this draft's final body — plaintext, signed-only, or signed+encrypted per
-     * `specs/end-to-end_encryption.md` — then stores it via `assembleDraft()`/`assembleDraftRaw()`.
-     * Shared by immediate and scheduled sends (and the banners' override buttons rendered below, via
-     * `forcePlaintext`) so the sign/encrypt decision lives in exactly one place.
-     *
-     * Returns `"blocked"` (never throws for this case) whenever the message can't go out the way the user
-     * asked for — never a silent downgrade to plaintext:
-     * encryption was requested (or auto-applies) but not every recipient can currently be encrypted to -
-     * the spec's "Multiple Recipients" all-or-nothing rule (sets `encryptionBlocked`); signing/encryption was
-     * on offer this session but the keys have since locked, or the mailbox/encryption policy needed to decide
-     * couldn't be loaded (sets `securityBlock`, and re-prompts the unlock dialog when the keys are merely
-     * locked); or the message would be encrypted but has Bcc recipients - every recipient's certificate goes
-     * into one shared envelope, which would disclose the Bcc list to every other recipient, and the send API
-     * has no per-recipient-copy submission to avoid that (sets `securityBlock`).
-     * Callers must stop (not send) when they get this back. `forcePlaintext` (the user's explicit choice
-     * from one of those banners) skips every one of these checks and never encrypts; signing still
-     * happens if it's currently possible.
-     *
-     * Discovery (`lookupKeys()`) and the resulting sign/encrypt decision only run at this, the final
-     * pre-send step — `checkRecipientDiscovery()`'s on-blur badges are a best-effort hint only.
-     */
-    async function assembleForSend(toRecipients, ccRecipients, bccRecipients, forcePlaintext) {
-        // Keys are read at the moment they're needed, and again after any await: they can lock (idle
-        // timeout, sign-out elsewhere) mid-send, and a destroyed `UnlockedKeys` object must count as locked.
-        // Only reachable once a draft exists, which itself requires `mailboxUid` to have resolved.
-        function readKeys() {
-            const stored = getUnlockedKeys(mailboxUid);
-            const unlocked = stored?.destroyed ? undefined : stored;
-            return {
-                unlocked,
-                // `mailbox` is required to build protected headers (own From address) whenever signing or
-                // encrypting - not just guarded on the encryption branch below, since a signed-only message
-                // needs it too.
-                canSign: signEnabled && !!mailbox && !!unlocked?.signingPrivateKey && !!unlocked.signingCertDer,
-                canEncryptSelf: !!unlocked?.encryptionPrivateKey && !!unlocked.encryptionCertDer,
-            };
-        }
-        let keys = readKeys();
-        const allRecipients = [...toRecipients, ...ccRecipients, ...bccRecipients];
-        // The Sign toggle was shown (and is still checked), but signing can't actually happen any more.
-        const signingLost = () => !forcePlaintext && signEnabled && offeredCryptoRef.current.sign && !keys.canSign;
-        if (signingLost()) {
-            return blockSend(KEYS_LOCKED_SIGN_MESSAGE, "Send without signing or encryption", !keys.unlocked);
-        }
-        if (!forcePlaintext && !mailbox) {
-            // The mailbox's enrolled keys are what say whether this message could be encrypted at all - with keys
-            // that aren't unlocked in this session, a failed mailbox load would otherwise skip encryption silently.
-            return blockSend(POLICY_UNAVAILABLE_MESSAGE, "Send without encryption", false);
-        }
-        let wantEncrypt = false;
-        let recipientCertDers = [];
-        // Entered whenever this message could be encrypted at all - including a mailbox with an enrolled
-        // encryption key that this session never unlocked: policy may still auto-encrypt, and that must block
-        // (and prompt to unlock) rather than quietly send plaintext.
-        if (!forcePlaintext && (keys.canEncryptSelf || offeredCryptoRef.current.encrypt || hasEnrolledEncryptionKey)) {
-            if (!encryptionPolicy) {
-                // Without it, there's no telling whether policy auto-encrypts this message.
-                return blockSend(POLICY_UNAVAILABLE_MESSAGE, "Send without encryption", false);
-            }
-            // Reachable only with `mailbox` loaded (checked above).
-            const ownPrefersMutual = mailbox.encryptPreference?.preferEncrypt === "mutual";
-            const lookups = await Promise.all(allRecipients.map((r) => lookupKeys(mailboxUid, r.address).then((lookup) => ({ lookup }), () => null)));
-            keys = readKeys();
-            if (signingLost()) {
-                return blockSend(KEYS_LOCKED_SIGN_MESSAGE, "Send without signing or encryption", !keys.unlocked);
-            }
-            // A failed lookup isn't "no key": treating it as one could send plaintext that policy would encrypt.
-            if (lookups.some((result) => !result) && (encryptRequested || policyCanAutoEncrypt(encryptionPolicy))) {
-                return blockSend(LOOKUP_UNAVAILABLE_MESSAGE, "Send without encryption", false);
-            }
-            const statuses = allRecipients.map((r, i) => resolveRecipientEncryption(mailbox.primarySmtpAddress, ownPrefersMutual, encryptionPolicy, r.address, lookups[i]?.lookup));
-            const decision = decideMessageEncryption(statuses);
-            wantEncrypt = encryptRequested || decision.autoEncrypt;
-            if (wantEncrypt) {
-                if (!keys.canEncryptSelf) {
-                    return blockSend(KEYS_LOCKED_ENCRYPT_MESSAGE, "Send without encryption", !keys.unlocked);
-                }
-                if (!decision.canEncryptAll) {
-                    setEncryptionBlocked(decision.blockedRecipients);
-                    return "blocked";
+        uploadStarted();
+        try {
+            for (const file of files) {
+                try {
+                    const attachment = await uploadAttachment(draft.uid, file);
+                    setHasUploads(true);
+                    setAttachments((prev) => [...prev, attachment]);
+                    void refreshDraftVersion(draft.uid);
                 }
-                if (bccRecipients.length > 0) {
-                    return blockSend(BCC_ENCRYPTED_MESSAGE, "Send without encryption", false);
+                catch (err) {
+                    setAttachError(err instanceof ApiRequestError ? err.message : "Could not upload attachment.");
                 }
-                recipientCertDers = [keys.unlocked.encryptionCertDer, ...statuses.map((s) => fromBase64(s.encryptCert.publicKey))];
             }
         }
-        const { canSign } = keys;
-        if ((wantEncrypt || canSign) && attachments.length > 0) {
-            // Matches BaseMailComposeRoute.assembleRaw()'s own server-side rejection, surfaced here with a
-            // clearer explanation than that route's generic 400 rather than via a round trip.
-            throw new ApiRequestError("A signed or encrypted message cannot include file attachments yet - remove them before sending.", 400);
-        }
-        if ((wantEncrypt || canSign) && INLINE_IMAGE_PATTERN.test(html)) {
-            throw new ApiRequestError("A signed or encrypted message cannot include inline images yet - remove them before sending.", 400);
-        }
-        if (!wantEncrypt && !canSign) {
-            // See the old compose page's identical note: `sanitize-html` is Node-oriented and the server-side
-            // gate in `BaseMailComposeRoute.assemble()` is the sole authoritative sanitizer regardless, so no
-            // client-side pass is done here either.
-            return assembleDraft(draft.uid, { to: toRecipients, cc: ccRecipients, bcc: bccRecipients, subject, html });
-        }
-        const domain = mailbox.primarySmtpAddress.split("@")[1] ?? "localhost";
-        const displayName = mailbox.displayName && !UNSAFE_DISPLAY_NAME_PATTERN.test(mailbox.displayName) ? mailbox.displayName : "";
-        const protectedHeaders = {
-            from: displayName
-                ? `"${displayName.replace(/"/g, '\\"')}" <${mailbox.primarySmtpAddress}>`
-                : mailbox.primarySmtpAddress,
-            to: toRecipients.map((r) => r.address).join(", "),
-            cc: ccRecipients.length > 0 ? ccRecipients.map((r) => r.address).join(", ") : undefined,
-            date: new Date().toUTCString(),
-            subject,
-            messageId: `<${crypto.randomUUID()}@${domain}>`,
-        };
-        const bodyContentType = 'text/html; charset="utf-8"';
-        const signing = canSign ? { certDer: keys.unlocked.signingCertDer, privateKey: keys.unlocked.signingPrivateKey } : undefined;
-        const outerHeaders = wantEncrypt ? applyBaselineOuterHeaders(protectedHeaders) : protectedHeaders;
-        const mimePart = wantEncrypt
-            ? await buildEncryptedMessage(bodyContentType, html, protectedHeaders, outerHeaders, recipientCertDers, signing)
-            : await buildSignedOnlyMessage(bodyContentType, html, protectedHeaders, signing.certDer, signing.privateKey);
-        const rawMime = assembleOutboundMime(outerHeaders, mimePart);
-        return assembleDraftRaw(draft.uid, { to: toRecipients, cc: ccRecipients, bcc: bccRecipients, subject: outerHeaders.subject, rawMime });
-    }
-    /** Records why a send was refused (see `assembleForSend()`), re-prompting the unlock dialog when the
-     * cause is keys that are enrolled but locked. */
-    function blockSend(message, overrideLabel, keysLocked) {
-        setSecurityBlock({ message, overrideLabel });
-        if (keysLocked && (hasEnrolledSigningKey || hasEnrolledEncryptionKey)) {
-            void handleUnlockForCrypto();
+        finally {
+            uploadFinished();
         }
-        return "blocked";
     }
     /**
-     * Sends (or, given `scheduledSendTimeIso`, schedules) the draft. Same reasoning as `handleFilesSelected`
-     * above: Send and the "Send later" caret are both `disabled` until `draft` resolves, so this is never
-     * reachable with a null `draft`. A scheduled send assembles the draft first (same as an immediate send),
-     * then sets `scheduledSendTime` on the *freshly assembled* copy before calling `sendMessage()` — `send()`
-     * itself is what reads the field and defers relay into Outbox instead of sending immediately (see
-     * `mailApi.ts`'s own doc comment on `setMessageScheduledSendTime`). A blocked send remembers its schedule
-     * time so the banners' override buttons replay it as the same kind of send.
+     * Send (or, given `scheduledSendTimeIso`, Send later) - and get out of the way. The window is the place the message is *written*; nothing
+     * about getting it to the server is waited for here.
+     *
+     * 1. **Validate synchronously**, from what the window already knows (no request): a recipient is required; and if the message is one
+     * that must be signed or encrypted and can't be right now (keys locked, Bcc on an encrypted message, a recipient with no key, an
+     * attachment that can't be signed) that is shown right here and the window stays open - the sender fixes it or picks the override.
+     * An attachment still uploading is waited for, inline (Send says so), never left behind.
+     * 2. **Close immediately** (`onClose()`): `startSend()` (see `sendJob.ts`) takes over with a snapshot of the message. From here the only
+     * feedback is the Outbox indicator; a failure at any stage is a sticky pop-up with the reason and Retry / Open draft.
+     *
+     * Pressed twice (a double click, the shortcut repeated) it sends once: the first press sets `submittingRef` before any `await`, and
+     * `startSend()` itself refuses a draft that is already being sent. `forcePlaintext` is the override buttons' choice.
      */
     async function submit(forcePlaintext, scheduledSendTimeIso) {
-        const toRecipients = parseAddresses(to);
-        if (toRecipients.length === 0) {
+        if (submittingRef.current || finishedRef.current) {
+            return;
+        }
+        if (parseAddresses(latestRef.current.to).length === 0) {
             setSendError("At least one recipient is required.");
             return;
         }
-        setSending(true);
-        sendingRef.current = true;
+        submittingRef.current = true;
         setSendError(null);
-        setSendDetails([]);
         setSecurityBlock(null);
-        setEncryptionBlocked(null);
-        pendingSaveRef.current = false;
         try {
-            // An autosave already on the wire must never land after (and overwrite) the send's own assembly.
-            await saveInFlightRef.current;
-            const assembled = await assembleForSend(toRecipients, parseAddresses(cc), parseAddresses(bcc), forcePlaintext);
-            if (assembled === "blocked") {
+            if (uploadsInFlightRef.current > 0) {
+                setWaitingForUploads(true);
+                await new Promise((resolve) => uploadWaitersRef.current.push(resolve));
+                // The editor puts an image it has just uploaded into the message a moment after the upload resolves: let the window catch up.
+                await new Promise((resolve) => setTimeout(resolve, 0));
+                setWaitingForUploads(false);
+            }
+            const current = latestRef.current;
+            const request = {
+                draft: current.draft,
+                mailboxUid: current.mailboxUid,
+                mailbox: current.mailbox ?? undefined,
+                policy: current.encryptionPolicy ?? undefined,
+                toText: current.to,
+                ccText: current.cc,
+                bccText: current.bcc,
+                to: parseAddresses(current.to),
+                cc: parseAddresses(current.cc),
+                bcc: parseAddresses(current.bcc),
+                subject: current.subject,
+                html: current.html,
+                attachments: current.attachments,
+                requestReceipt: current.requestReceipt,
+                scheduledSendTime: scheduledSendTimeIso,
+                signEnabled: current.signEnabled,
+                offeredSign: offeredCryptoRef.current.sign,
+                offeredEncrypt: offeredCryptoRef.current.encrypt,
+                encryptRequested: current.encryptRequested,
+                forcePlaintext,
+                saved: saveInFlightRef.current,
+            };
+            if (request.to.length === 0) {
+                setSendError("At least one recipient is required.");
+                return;
+            }
+            const early = decideSend(sendDecisionInput(request, request.mailbox, request.policy, current.statuses, false));
+            if (early.action === "rejected") {
+                setSendError(early.message);
+                return;
+            }
+            if (early.action === "blocked") {
                 setBlockedScheduleIso(scheduledSendTimeIso);
+                setSecurityBlock(early.block);
+                if (early.block.keysLocked && (hasEnrolledSigningKey || hasEnrolledEncryptionKey)) {
+                    void handleUnlockForCrypto();
+                }
                 return;
             }
-            // The draft now holds exactly this content (possibly signed/encrypted) - don't autosave a
-            // plaintext copy over it if the rest of the send fails.
-            lastSavedRef.current = `${assembled.uid}:${contentKey}`;
-            const withReceipt = requestReceipt ? await setMessageRequestReceipt(assembled, true) : assembled;
-            await sendMessage(withReceipt.uid, scheduledSendTimeIso ? { scheduledSendTime: scheduledSendTimeIso } : undefined);
+            pendingSaveRef.current = false;
             finishedRef.current = true;
+            if (!startSend(request)) {
+                finishedRef.current = false;
+                setSendError("This message is already being sent.");
+                return;
+            }
             onClose();
         }
-        catch (err) {
-            // The window stays open with the draft exactly as it was; nothing here closes, discards or saves over it.
-            const failure = describeSendFailure(err, scheduledSendTimeIso ? "Could not schedule this message." : "Could not send this message.");
-            setSendError(failure.message);
-            setSendDetails(failure.lines);
-        }
         finally {
-            sendingRef.current = false;
-            setSending(false);
+            submittingRef.current = false;
+            setWaitingForUploads(false);
         }
     }
     function handleScheduleSend(scheduledSendTimeIso) {
@@ -782,7 +710,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     async function handleUnlockForCrypto() {
         try {
             // Only reachable when hasEnrolledSigningKey/hasEnrolledEncryptionKey found a real enrolled key
-            // in mailbox.keys (the unlock button below, or blockSend()), so neither is empty/undefined here.
+            // in mailbox.keys (the unlock button below, or a blocked send()), so neither is empty/undefined here.
             await requestUnlock(mailbox.uid, mailbox.keys);
             setUnlockRefresh((n) => n + 1);
         }
@@ -797,7 +725,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
      * `latestRef` only once it actually runs, so it saves what was last typed (skipping the request when the
      * save before it already stored exactly that). Whether a save may happen at all is re-checked at that same
      * moment: while it waited, the message may have become one that must not be stored as plaintext (Encrypt
-     * turned on, a recipient that auto-encrypts), or the window may have started sending or finished - then it
+     * turned on, a recipient that auto-encrypts), or the window may have been sent or finished - then it
      * resolves `{ skipped: true }` without a request (`message` then being the previous save's result). Never
      * rejects; `message` is `undefined` when the save failed.
      */
@@ -809,7 +737,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
         const outcome = (async () => {
             const before = await previous;
             const current = latestRef.current;
-            if (current.autosaveSuppressed || sendingRef.current || finishedRef.current) {
+            if (current.autosaveSuppressed || finishedRef.current) {
                 setSaveStatus("idle");
                 // Still the newest copy the server holds, for the version a later delete needs.
                 return { skipped: true, message: before };
@@ -928,39 +856,19 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
         }
     }
     /** "Close": keeps the draft (saving any unsaved edits first, and closing only once that save succeeded) -
-     * unless there's nothing in it worth keeping, or it can't be saved because it's headed for encryption, or
-     * whether it is can't be told yet (settings loading or unavailable, recipient lookups pending): those need
-     * the same confirmation as a discard. A failed save keeps the window open with Discard / Keep editing.
-     * Close and Discard are both disabled while a send is in progress: deleting the draft, or saving a
-     * plaintext copy over the message the send just assembled, mid-send would lose or leak it. */
-    async function handleClose(sendFailureAcknowledged = false) {
+     * unless there's nothing in it worth keeping, or it can't be saved because it's really headed for encryption
+     * (asked for, or applied by the loaded policy): that needs the same confirmation as a discard. Whatever is
+     * *unknown* (settings loading or failed, a lookup pending) is not a reason to hold the window: it is saved like any
+     * other message. A failed save keeps the window open with Discard / Keep editing. */
+    async function handleClose() {
         if (!hasUserContent) {
             void discardNow();
             return;
         }
-        if (sendError && !sendFailureAcknowledged) {
-            // Closing would keep the draft and say nothing, which reads as if it had been sent.
-            setClosePrompt({ title: SEND_FAILED_TITLE, message: sendFailedCloseMessage(sendError), closeAnyway: true });
-            return;
-        }
         if (encryptionDecided) {
             setClosePrompt({ title: DISCARD_TITLE, message: ENCRYPTED_CLOSE_MESSAGE });
             return;
         }
-        if (cryptoCheckUnavailable) {
-            setClosePrompt({ title: DISCARD_TITLE, message: CRYPTO_UNAVAILABLE_MESSAGE, retry: true });
-            return;
-        }
-        if (awaitingRecipients) {
-            setClosePrompt({ title: DISCARD_TITLE, message: NO_RECIPIENTS_CLOSE_MESSAGE });
-            return;
-        }
-        if (encryptionUndetermined) {
-            // A recipient typed but never blurred has no lookup running yet.
-            checkRecipientDiscovery([...parseAddresses(to), ...parseAddresses(cc), ...parseAddresses(bcc)]);
-            setClosePrompt({ title: DISCARD_TITLE, message: CHECKING_CLOSE_MESSAGE });
-            return;
-        }
         if (!draft || !contentReady) {
             saveErrorRef.current = draftError ?? "the draft hasn't been created yet";
             showSaveFailedPrompt();
@@ -972,7 +880,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
             setClosing(false);
             if (outcome.skipped) {
                 // It became a message that mustn't be saved as plaintext while waiting on an earlier save.
-                setClosePrompt({ title: DISCARD_TITLE, message: latestRef.current.encryptionDecided ? ENCRYPTED_CLOSE_MESSAGE : CHECKING_CLOSE_MESSAGE });
+                setClosePrompt({ title: DISCARD_TITLE, message: ENCRYPTED_CLOSE_MESSAGE });
                 return;
             }
             if (!outcome.message) {
@@ -983,13 +891,6 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
         finishedRef.current = true;
         onClose();
     }
-    function retryCryptoContext() {
-        setClosePrompt(null);
-        setCryptoRetryToken((n) => n + 1);
-        lookupFailuresRef.current = new Map();
-        setExhaustedLookups({});
-        setLookupRetryToken((n) => n + 1);
-    }
     // A plain read from keySession.ts's module-level session store, not React state - see that module's
     // own doc comment. Cheap enough to read fresh on every render rather than caching in state.
     const unlockedKeys = mailboxUid ? getUnlockedKeys(mailboxUid) : undefined;
@@ -1019,34 +920,85 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     // Autosave. "User content" is anything beyond what compose opened with (prefilled recipients/subject,
     // seeded signature/quote) - an untouched window has nothing worth saving or confirming a discard of.
     const contentKey = JSON.stringify([to, cc, bcc, subject, html]);
-    const baselineKey = JSON.stringify([initialTo ?? "", initialCc ?? "", "", initialSubject ?? "", seededHtml ?? ""]);
+    const baselineKey = JSON.stringify([baselineTo ?? "", baselineCc ?? "", "", initialSubject ?? "", seededHtml ?? ""]);
     const hasUserContent = contentKey !== baselineKey || hasUploads;
-    // A message headed for encryption is never autosaved: the draft would store its plaintext server-side,
-    // defeating end-to-end encryption. Until it's known not to be, it isn't either: while the mailbox (whose
-    // enrolled keys say whether encryption is possible at all) or the encryption policy hasn't loaded, and -
-    // whenever this message could be encrypted (an unlocked or enrolled encryption key) - while the policy is
-    // missing or any current recipient's lookup is still pending (or failed, or hasn't run) - and while there are no
-    // recipients at all when policy auto-encrypts some tier, since the first one added may turn encryption on.
+    // Whether this message is *really* headed for encryption - `encryptionRequirement.ts` decides, and it fails open: the message is plain (its
+    // draft saves, Close and Send work, nothing is shown) unless the user asked for encryption or the policy was loaded and applies it to every
+    // recipient (whose keys were all looked up). What has not loaded, or failed to, is not held against the message.
+    //
+    // Transitions, when a later load turns a plain message into an encrypted one (the policy arrives, a slow lookup answers, a recipient is
+    // added): (1) autosave stops at once (`autosaveSuppressed`); (2) a plaintext copy this window already saved is *replaced by an empty draft*
+    // (`scrubSavedDraft()` below) so the plaintext doesn't sit on the server; (3) Close asks first ("Encrypted messages aren't saved as drafts");
+    // (4) Send encrypts (or is refused, with the override, when it can't) - never silently plaintext. And back: when it stops being encrypted
+    // (a recipient removed) autosave simply resumes.
     const currentAddresses = [...parseAddresses(to), ...parseAddresses(cc), ...parseAddresses(bcc)].map((r) => r.address);
     const currentStatuses = currentAddresses.map((address) => recipientStatuses[address]);
-    const encryptionPossible = !!unlockedKeys?.encryptionPrivateKey || hasEnrolledEncryptionKey || offeredCryptoRef.current.encrypt;
-    /** Could be auto-encrypted, but has no recipients yet to decide by. */
-    const awaitingRecipients = encryptionPossible && !!encryptionPolicy && currentAddresses.length === 0 && policyCanAutoEncrypt(encryptionPolicy);
-    const encryptionUndetermined = !cryptoContextReady || !mailbox || awaitingRecipients || (encryptionPossible && (!encryptionPolicy || currentStatuses.some((s) => !s)));
-    /** Known to be headed for encryption: requested, or policy auto-encrypts it. */
-    const encryptionDecided = encryptRequested || (!encryptionUndetermined && encryptionPossible && decideMessageEncryption(currentStatuses).autoEncrypt);
-    const autosaveSuppressed = encryptionDecided || encryptionUndetermined;
-    /** Loading the mailbox/policy failed (retries may still be pending) and this message's encryption hinges on it, or
-     * a current recipient's key lookup kept failing. */
-    const cryptoCheckUnavailable = (cryptoContextReady && cryptoLoadFailed && (!mailbox || (encryptionPossible && !encryptionPolicy))) ||
-        (encryptionPossible && currentAddresses.some((address) => exhaustedLookups[address] && !recipientStatuses[address]));
-    const latestRef = useRef({ draft, to, cc, bcc, subject, html, seededHtml, contentKey, saveStatus, hasUserContent, autosaveSuppressed, encryptionDecided });
-    latestRef.current = { draft, to, cc, bcc, subject, html, seededHtml, contentKey, saveStatus, hasUserContent, autosaveSuppressed, encryptionDecided };
+    const hasEncryptionKey = !!unlockedKeys?.encryptionPrivateKey || hasEnrolledEncryptionKey || offeredCryptoRef.current.encrypt;
+    const requirement = evaluateEncryptionRequirement({
+        encryptRequested,
+        policy: encryptionPolicy ?? undefined,
+        mailboxLoaded: !!mailbox,
+        hasEncryptionKey,
+        recipients: currentStatuses,
+    });
+    const encryptionDecided = requirement.required;
+    const autosaveSuppressed = encryptionDecided;
+    const latestRef = useRef({
+        draft, mailboxUid, mailbox, encryptionPolicy, to, cc, bcc, subject, html, attachments, requestReceipt, signEnabled, encryptRequested,
+        statuses: currentStatuses, seededHtml, contentKey, saveStatus, hasUserContent, autosaveSuppressed, encryptionDecided,
+    });
+    latestRef.current = {
+        draft, mailboxUid, mailbox, encryptionPolicy, to, cc, bcc, subject, html, attachments, requestReceipt, signEnabled, encryptRequested,
+        statuses: currentStatuses, seededHtml, contentKey, saveStatus, hasUserContent, autosaveSuppressed, encryptionDecided,
+    };
+    /** A message that turned out to need encryption after a plaintext copy of it was saved: the saved copy is replaced by an empty draft (the same
+     * uid, so attachments and the folder are undisturbed), chained after any save still on the wire. Best effort - a failure is reported once. */
+    function scrubSavedDraft(target) {
+        lastSavedRef.current = null;
+        setSaveStatus("idle");
+        const previous = saveInFlightRef.current;
+        const scrub = (async () => {
+            await previous;
+            try {
+                // Its answer (the new version) is what a later delete waits for through `saveInFlightRef`, like any save's.
+                return await assembleDraft(target.uid, { to: [], cc: [], bcc: [], subject: "", html: "" });
+            }
+            catch {
+                notify({
+                    id: `scrub-draft:${target.uid}`,
+                    kind: "warning",
+                    title: "An earlier draft copy is still saved",
+                    message: "This message needs encryption, but the copy saved before that was known couldn't be replaced. Discarding the draft removes it.",
+                });
+                return undefined;
+            }
+        })();
+        saveInFlightRef.current = scrub;
+    }
+    // Only a message that was really saved (`lastSavedRef` names its draft) has a plaintext copy to replace.
+    useEffect(() => {
+        if (encryptionDecided && draft && lastSavedRef.current?.startsWith(`${draft.uid}:`)) {
+            scrubSavedDraft(draft);
+        }
+    }, [encryptionDecided, draft?.uid]);
+    // Recipients a reply could only work out after this window opened (Reply All: whoever the original's headers name)
+    // replace the ones it opened with - but only in a field the user hasn't touched, never over what they typed.
+    useEffect(() => {
+        if (!late) {
+            return;
+        }
+        const current = latestRef.current;
+        if (late.to !== undefined && current.to === (initialTo ?? "")) {
+            setTo(late.to);
+        }
+        if (late.cc !== undefined && current.cc === (initialCc ?? "")) {
+            setCc(late.cc);
+            setShowCcBcc((shown) => shown || late.cc !== "");
+        }
+    }, [late]);
     useEffect(() => {
         const due = !!draft &&
             contentReady &&
-            cryptoContextReady &&
-            !sending &&
             !autosaveSuppressed &&
             hasUserContent &&
             lastSavedRef.current !== `${draft.uid}:${contentKey}`;
@@ -1056,7 +1008,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
         }
         const timer = setTimeout(() => void saveDraftNow(), autosaveDelayMs);
         return () => clearTimeout(timer);
-    }, [draft, contentReady, cryptoContextReady, sending, autosaveSuppressed, hasUserContent, contentKey]);
+    }, [draft, contentReady, autosaveSuppressed, hasUserContent, contentKey]);
     // Unmounting with an edit still waiting on the debounce (e.g. the whole app shell unmounting) saves it
     // right away rather than losing it.
     useEffect(() => () => {
@@ -1098,7 +1050,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     // out - that navigation must not be cancellable.
     useEffect(() => {
         function handleBeforeUnload(event) {
-            if (finishedRef.current || sendingRef.current || isSigningOut()) {
+            if (finishedRef.current || isSigningOut()) {
                 return;
             }
             const latest = latestRef.current;
@@ -1118,7 +1070,7 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     // Where the caret starts, once per session: a reply/forward in the body (at its top), a new message in To - or,
     // with To already filled in (e.g. Contacts' "Email"), in Subject. Minimizing unmounts the fields, so restoring a
     // window must not move the caret there again.
-    const isReplyOrForward = initialQuotedHtml !== undefined;
+    const isReplyOrForward = initialQuotedHtml !== undefined || !!quotePending || !!resume;
     const fieldsFocusedRef = useRef(false);
     const bodyFocusedRef = useRef(false);
     const focusToOnMount = !isReplyOrForward && !initialTo && !fieldsFocusedRef.current;
@@ -1127,7 +1079,16 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
     // The editor serializes the seeded body its own way (see `RichTextEditor`'s `onInitialized`). While the body is
     // still exactly what compose seeded, that serialization becomes the baseline - so an untouched reply or signature
     // isn't mistaken for an edit (and autosaved) just because the editor was focused or clicked.
+    /** The quote has been added: unless the reader has typed something already, that is still exactly what compose seeded. */
+    function handleQuoteAppended(normalized) {
+        const latest = latestRef.current;
+        if (latest.html === latest.seededHtml) {
+            setHtml(normalized);
+            setSeededHtml(normalized);
+        }
+    }
     function handleEditorInitialized(normalized) {
+        markComposePhase(id, "editor");
         const latest = latestRef.current;
         if (latest.html === latest.seededHtml && normalized !== latest.html) {
             setHtml(normalized);
@@ -1140,21 +1101,37 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
             bodyFocusedRef.current || (bodyFocusedRef.current = contentReady);
         }
     }, [minimized, contentReady]);
+    // Keyboard shortcuts, active while the focus is inside this window (`container`; the scope attribute on its root is what tells the
+    // dispatcher the focus is in a compose window at all). They do what the Send and Close buttons and autosave do, under the same conditions -
+    // a shortcut pressed while its button would be disabled is consumed and does nothing.
+    // Send never waits for the encryption settings to load (fail open, see `encryptionRequirement.ts`); it only needs the draft to exist. Pressed
+    // while an earlier press is still being handled it does nothing (`submit()` guards that itself).
+    const canSend = !!draft && !closing && !waitingForUploads;
+    useShortcut(SHORTCUTS.compose.send, () => void (canSend && submit(false)), { container: windowRef });
+    useShortcut(SHORTCUTS.compose.saveDraft, () => {
+        // Autosave's own conditions: never a draft that must not be stored as plaintext.
+        if (draft && contentReady && !closing && !autosaveSuppressed && hasUserContent) {
+            void saveDraftNow();
+        }
+    }, { container: windowRef });
+    useShortcut(SHORTCUTS.compose.close, () => {
+        if (!closing) {
+            void handleClose();
+        }
+    }, { container: windowRef });
+    useShortcut(SHORTCUTS.compose.create, () => openCompose({ mailboxUid }), { container: windowRef });
     const title = subject.trim() || "New Message";
     const titleId = `compose-title-${id}`;
-    const discardModal = (_jsxs(Modal, { open: closePrompt !== null, onClose: () => setClosePrompt(null), title: closePrompt?.title ?? DISCARD_TITLE, children: [_jsx("p", { className: "text-sm text-text-muted mb-4", children: closePrompt?.message }), _jsxs("div", { className: "flex gap-3", children: [closePrompt?.retry && (_jsx(Button, { type: "button", onClick: retryCryptoContext, className: "!w-auto", children: "Retry" })), closePrompt?.closeAnyway && (_jsx(Button, { type: "button", onClick: () => {
-                            setClosePrompt(null);
-                            void handleClose(true);
-                        }, disabled: sending || closing, className: "!w-auto", children: "Close, keep draft" })), _jsx(Button, { type: "button", onClick: () => void discardNow(), disabled: sending || closing, className: "!w-auto", children: "Discard" }), _jsx(Button, { type: "button", variant: "secondary", onClick: () => setClosePrompt(null), className: "!w-auto", children: "Keep editing" })] })] }));
+    const discardModal = (_jsxs(Modal, { open: closePrompt !== null, onClose: () => setClosePrompt(null), title: closePrompt?.title ?? DISCARD_TITLE, children: [_jsx("p", { className: "text-sm text-text-muted mb-4", children: closePrompt?.message }), _jsxs("div", { className: "flex gap-3", children: [_jsx(Button, { type: "button", onClick: () => void discardNow(), disabled: closing, className: "!w-auto", children: "Discard" }), _jsx(Button, { type: "button", variant: "secondary", onClick: () => setClosePrompt(null), className: "!w-auto", children: "Keep editing" })] })] }));
     if (minimized) {
-        return (_jsxs(_Fragment, { children: [_jsx("div", { role: "dialog", "aria-label": title, className: "w-64 shrink-0 bg-surface border border-border border-b-0 rounded-t-md shadow-modal", children: _jsxs("div", { className: "h-10 flex items-center justify-between gap-2 px-3 rounded-t-md bg-primary-darker text-white cursor-pointer", onClick: onToggleMinimize, children: [_jsx("span", { className: "text-sm font-medium truncate", children: title }), sendError && _jsx("span", { className: "shrink-0 text-xs font-bold uppercase tracking-wide", children: "Not sent" }), _jsxs("div", { className: "flex items-center gap-0.5", onClick: (e) => e.stopPropagation(), children: [_jsx(HeaderButton, { label: "Restore", onClick: onToggleMinimize, icon: HiOutlineArrowsPointingOut }), _jsx(HeaderButton, { label: "Discard draft", onClick: handleDiscard, icon: HiOutlineXMark, disabled: sending || closing })] })] }) }), discardModal] }));
+        return (_jsxs(_Fragment, { children: [_jsx("div", { role: "dialog", "aria-label": title, className: "w-64 shrink-0 bg-surface border border-border border-b-0 rounded-t-md shadow-modal", children: _jsxs("div", { className: "h-10 flex items-center justify-between gap-2 px-3 rounded-t-md bg-primary-darker text-white cursor-pointer", onClick: onToggleMinimize, children: [_jsx("span", { className: "text-sm font-medium truncate", children: title }), _jsxs("div", { className: "flex items-center gap-0.5", onClick: (e) => e.stopPropagation(), children: [_jsx(HeaderButton, { label: "Restore", onClick: onToggleMinimize, icon: HiOutlineArrowsPointingOut }), _jsx(HeaderButton, { label: "Discard draft", onClick: handleDiscard, icon: HiOutlineXMark, disabled: closing })] })] }) }), discardModal] }));
     }
-    return (_jsxs(_Fragment, { children: [_jsxs("div", { ref: windowRef, role: "dialog", "aria-labelledby": titleId, style: !isMobile && manualSize ? { width: manualSize.width, height: manualSize.height } : undefined, className: [
+    return (_jsxs(_Fragment, { children: [_jsxs("div", { ref: windowRef, role: "dialog", "data-shortcut-scope": "compose", "aria-labelledby": titleId, style: !isMobile && manualSize ? { width: manualSize.width, height: manualSize.height } : undefined, className: [
                     "relative shrink-0 flex flex-col bg-surface border border-border shadow-modal overflow-hidden",
                     isMobile
                         ? "fixed inset-0 w-full h-full rounded-none border-0"
                         : ["border-b-0 rounded-t-md", manualSize ? "" : expanded ? "w-[720px] h-[85vh]" : "w-[480px] h-[520px]"].join(" "),
-                ].join(" "), children: [!isMobile && (_jsxs(_Fragment, { children: [_jsx("div", { onPointerDown: handleResizeStart("top"), "aria-hidden": "true", className: "absolute top-0 left-0 right-0 h-1.5 cursor-ns-resize z-20" }), _jsx("div", { onPointerDown: handleResizeStart("left"), "aria-hidden": "true", className: "absolute top-0 left-0 bottom-0 w-1.5 cursor-ew-resize z-20" }), _jsx("div", { onPointerDown: handleResizeStart("corner"), role: "separator", "aria-label": "Resize", className: "absolute top-0 left-0 w-3 h-3 cursor-nwse-resize z-30" })] })), _jsxs("div", { className: "h-10 shrink-0 flex items-center justify-between gap-2 px-3 bg-primary-darker text-white cursor-pointer", onClick: onToggleMinimize, children: [_jsx("span", { id: titleId, className: "text-sm font-medium truncate", children: title }), _jsxs("div", { className: "flex items-center gap-0.5", onClick: (e) => e.stopPropagation(), children: [_jsx(HeaderButton, { label: "Minimize", onClick: onToggleMinimize, icon: HiOutlineMinus }), !isMobile && (_jsx(HeaderButton, { label: expanded ? "Collapse" : "Expand", onClick: toggleExpanded, icon: expanded ? HiOutlineArrowsPointingIn : HiOutlineArrowsPointingOut })), _jsx(HeaderButton, { label: "Close", onClick: () => void handleClose(), icon: HiOutlineXMark, disabled: sending || closing })] })] }), _jsxs("div", { className: "flex-1 min-h-0 flex flex-col", children: [(folderError || draftError || sendError || attachError || discardError) && (_jsxs("div", { className: "px-3 pt-2", children: [folderError && _jsx(Alert, { children: folderError }), draftError && _jsx(Alert, { children: draftError }), sendError && _jsx(SendFailureAlert, { message: sendError, lines: sendDetails }), attachError && _jsx(Alert, { children: attachError }), discardError && _jsx(Alert, { children: discardError })] })), cryptoCheckUnavailable && (_jsx("div", { className: "px-3 pt-2", children: _jsxs(Alert, { children: [_jsx("p", { className: "mb-2", children: CRYPTO_UNAVAILABLE_MESSAGE }), _jsx(Button, { type: "button", variant: "secondary", className: "!w-auto", onClick: retryCryptoContext, children: "Retry" })] }) })), encryptionBlocked && (_jsx("div", { className: "px-3 pt-2", children: _jsxs(Alert, { children: [_jsxs("p", { className: "mb-2", children: ["This message can\u2019t be encrypted for everyone: ", encryptionBlocked.map((r) => r.address).join(", "), encryptionBlocked[0]?.prohibitedReason ? ` — ${encryptionBlocked[0].prohibitedReason}` : " has no encryption key on file", ". Remove ", encryptionBlocked.length > 1 ? "these recipients" : "this recipient", " from To/Cc/Bcc, or send the whole message in plaintext."] }), _jsx(Button, { type: "button", disabled: sending, onClick: () => void submit(true, blockedScheduleIso), children: "Send without encryption" })] }) })), securityBlock && (_jsx("div", { className: "px-3 pt-2", children: _jsxs(Alert, { children: [_jsx("p", { className: "mb-2", children: securityBlock.message }), _jsx(Button, { type: "button", disabled: sending, onClick: () => void submit(true, blockedScheduleIso), children: securityBlock.overrideLabel })] }) })), fromOptions.length > 1 && (_jsxs("div", { className: FIELD_ROW, children: [_jsx("label", { htmlFor: `compose-from-${id}`, className: "text-xs text-text-muted shrink-0", children: "From" }), _jsx("select", { id: `compose-from-${id}`, className: `${FIELD_INPUT} disabled:opacity-55`, value: mailboxUid ?? "", disabled: hasUploads || sending, title: hasUploads ? "The sender can't be changed after adding attachments or images." : undefined, onChange: (e) => handleFromChange(e.target.value), children: fromOptions.map((mb) => (_jsxs("option", { value: mb.uid, children: [mb.displayName ? `${mb.displayName} <${mb.primarySmtpAddress}>` : mb.primarySmtpAddress, mb.ownerUserUid ? "" : " (shared)"] }, mb.uid))) })] })), _jsxs("div", { className: FIELD_ROW, children: [_jsx("label", { htmlFor: `compose-to-${id}`, className: "text-xs text-text-muted shrink-0", children: "To" }), _jsx(RecipientInput, { id: `compose-to-${id}`, label: "To", value: to, mailboxUid: mailboxUid, onChange: setTo, onBlur: (value) => checkRecipientDiscovery(parseAddresses(value)), onCommit: (value) => checkRecipientDiscovery(parseAddresses(value)), autoFocus: focusToOnMount }), !showCcBcc && (_jsx("button", { type: "button", onClick: () => setShowCcBcc(true), className: "text-xs text-text-muted hover:text-text shrink-0", children: "Cc Bcc" }))] }), showCcBcc && (_jsxs(_Fragment, { children: [_jsxs("div", { className: FIELD_ROW, children: [_jsx("label", { htmlFor: `compose-cc-${id}`, className: "text-xs text-text-muted shrink-0", children: "Cc" }), _jsx(RecipientInput, { id: `compose-cc-${id}`, label: "Cc", value: cc, mailboxUid: mailboxUid, onChange: setCc, onBlur: (value) => checkRecipientDiscovery(parseAddresses(value)), onCommit: (value) => checkRecipientDiscovery(parseAddresses(value)) })] }), _jsxs("div", { className: FIELD_ROW, children: [_jsx("label", { htmlFor: `compose-bcc-${id}`, className: "text-xs text-text-muted shrink-0", children: "Bcc" }), _jsx(RecipientInput, { id: `compose-bcc-${id}`, label: "Bcc", value: bcc, mailboxUid: mailboxUid, onChange: setBcc, onBlur: (value) => checkRecipientDiscovery(parseAddresses(value)), onCommit: (value) => checkRecipientDiscovery(parseAddresses(value)) })] })] })), (() => {
+                ].join(" "), children: [!isMobile && (_jsxs(_Fragment, { children: [_jsx("div", { onPointerDown: handleResizeStart("top"), "aria-hidden": "true", className: "absolute top-0 left-0 right-0 h-1.5 cursor-ns-resize z-20" }), _jsx("div", { onPointerDown: handleResizeStart("left"), "aria-hidden": "true", className: "absolute top-0 left-0 bottom-0 w-1.5 cursor-ew-resize z-20" }), _jsx("div", { onPointerDown: handleResizeStart("corner"), role: "separator", "aria-label": "Resize", className: "absolute top-0 left-0 w-3 h-3 cursor-nwse-resize z-30" })] })), _jsxs("div", { className: "h-10 shrink-0 flex items-center justify-between gap-2 px-3 bg-primary-darker text-white cursor-pointer", onClick: onToggleMinimize, children: [_jsx("span", { id: titleId, className: "text-sm font-medium truncate", children: title }), _jsxs("div", { className: "flex items-center gap-0.5", onClick: (e) => e.stopPropagation(), children: [_jsx(HeaderButton, { label: "Minimize", onClick: onToggleMinimize, icon: HiOutlineMinus }), !isMobile && (_jsx(HeaderButton, { label: expanded ? "Collapse" : "Expand", onClick: toggleExpanded, icon: expanded ? HiOutlineArrowsPointingIn : HiOutlineArrowsPointingOut })), _jsx(HeaderButton, { label: "Close", onClick: () => void handleClose(), icon: HiOutlineXMark, disabled: closing, shortcut: SHORTCUTS.compose.close })] })] }), _jsxs("div", { className: "flex-1 min-h-0 flex flex-col", children: [(folderError || draftError || sendError || attachError || discardError) && (_jsxs("div", { className: "px-3 pt-2 shrink-0 max-h-[45%] overflow-y-auto", children: [folderError && _jsx(Alert, { children: folderError }), draftError && _jsx(Alert, { children: draftError }), sendError && _jsx(Alert, { children: sendError }), attachError && _jsx(Alert, { children: attachError }), discardError && _jsx(Alert, { children: discardError })] })), securityBlock && (_jsx("div", { className: "px-3 pt-2", children: _jsxs(Alert, { children: [_jsx("p", { className: "mb-2", children: securityBlock.message }), _jsx(Button, { type: "button", onClick: () => void submit(true, blockedScheduleIso), children: securityBlock.overrideLabel })] }) })), fromOptions.length > 1 && (_jsxs("div", { className: FIELD_ROW, children: [_jsx("label", { htmlFor: `compose-from-${id}`, className: "text-xs text-text-muted shrink-0", children: "From" }), _jsx("select", { id: `compose-from-${id}`, className: `${FIELD_INPUT} disabled:opacity-55`, value: mailboxUid ?? "", disabled: hasUploads, title: hasUploads ? "The sender can't be changed after adding attachments or images." : undefined, onChange: (e) => handleFromChange(e.target.value), children: fromOptions.map((mb) => (_jsxs("option", { value: mb.uid, children: [mb.displayName ? `${mb.displayName} <${mb.primarySmtpAddress}>` : mb.primarySmtpAddress, mb.ownerUserUid ? "" : " (shared)"] }, mb.uid))) })] })), _jsxs("div", { className: FIELD_ROW, children: [_jsx("label", { htmlFor: `compose-to-${id}`, className: "text-xs text-text-muted shrink-0", children: "To" }), _jsx(RecipientInput, { id: `compose-to-${id}`, label: "To", value: to, mailboxUid: mailboxUid, onChange: setTo, onBlur: (value) => checkRecipientDiscovery(parseAddresses(value)), onCommit: (value) => checkRecipientDiscovery(parseAddresses(value)), autoFocus: focusToOnMount }), !showCcBcc && (_jsx("button", { type: "button", onClick: () => setShowCcBcc(true), className: "text-xs text-text-muted hover:text-text shrink-0", children: "Cc Bcc" }))] }), showCcBcc && (_jsxs(_Fragment, { children: [_jsxs("div", { className: FIELD_ROW, children: [_jsx("label", { htmlFor: `compose-cc-${id}`, className: "text-xs text-text-muted shrink-0", children: "Cc" }), _jsx(RecipientInput, { id: `compose-cc-${id}`, label: "Cc", value: cc, mailboxUid: mailboxUid, onChange: setCc, onBlur: (value) => checkRecipientDiscovery(parseAddresses(value)), onCommit: (value) => checkRecipientDiscovery(parseAddresses(value)) })] }), _jsxs("div", { className: FIELD_ROW, children: [_jsx("label", { htmlFor: `compose-bcc-${id}`, className: "text-xs text-text-muted shrink-0", children: "Bcc" }), _jsx(RecipientInput, { id: `compose-bcc-${id}`, label: "Bcc", value: bcc, mailboxUid: mailboxUid, onChange: setBcc, onBlur: (value) => checkRecipientDiscovery(parseAddresses(value)), onCommit: (value) => checkRecipientDiscovery(parseAddresses(value)) })] })] })), (() => {
                                 const knownRecipients = [...parseAddresses(to), ...parseAddresses(cc), ...parseAddresses(bcc)]
                                     .map((r) => recipientStatuses[r.address])
                                     .filter((status) => !!status);
@@ -1162,5 +1139,5 @@ export default function ComposeWindow({ session, onClose, onToggleMinimize, user
                                     return null;
                                 }
                                 return (_jsx("ul", { className: "flex flex-wrap gap-1.5 px-3 pt-1.5", "aria-label": "Recipient encryption availability", children: knownRecipients.map((status) => (_jsxs("li", { className: `text-xs font-medium py-0.5 px-2 rounded-pill ${status.canEncrypt ? "bg-primary/10 text-primary-dark" : "bg-surface-alt text-text-muted"}`, children: [status.address, " ", status.canEncrypt ? "supports encryption" : "no encryption key found"] }, status.address))) }));
-                            })(), _jsx("div", { className: FIELD_ROW, children: _jsx("input", { "aria-label": "Subject", type: "text", placeholder: "Subject", className: FIELD_INPUT, value: subject, autoFocus: focusSubjectOnMount, onChange: (e) => setSubject(e.target.value) }) }), _jsx("div", { className: "flex-1 min-h-0 p-2", children: contentReady && (_jsx(RichTextEditor, { value: html, onChange: setHtml, fill: true, onUploadImage: handleUploadImage, autoFocusStart: focusBodyOnMount, onInitialized: handleEditorInitialized })) }), attachments.length > 0 && (_jsx("ul", { className: "flex flex-wrap gap-2 px-3 pb-2", children: attachments.map((attachment) => (_jsx("li", { className: "text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt text-text-muted", children: attachment.filename }, attachment.uid))) })), _jsxs("label", { className: "flex items-center gap-1.5 px-3 pb-1 text-xs text-text-muted", children: [_jsx("input", { type: "checkbox", checked: requestReceipt, onChange: (e) => setRequestReceipt(e.target.checked) }), "Request a read receipt"] }), needsUnlockForCrypto && (_jsx("div", { className: "px-3 pb-1", children: _jsxs("button", { type: "button", onClick: handleUnlockForCrypto, className: "inline-flex items-center gap-1 text-xs font-medium text-primary-dark hover:underline", children: [_jsx(HiOutlineLockClosed, { size: 12, "aria-hidden": "true" }), "Unlock to sign or encrypt this message"] }) })), unlockedKeys?.signingPrivateKey && (_jsxs("label", { className: "flex items-center gap-1.5 px-3 pb-1 text-xs text-text-muted", children: [_jsx("input", { type: "checkbox", checked: signEnabled, onChange: (e) => setSignEnabled(e.target.checked) }), "Digitally sign this message"] })), unlockedKeys?.encryptionPrivateKey && (_jsxs("label", { className: "flex items-center gap-1.5 px-3 pb-1 text-xs text-text-muted", children: [_jsx("input", { type: "checkbox", checked: encryptRequested, onChange: (e) => setEncryptRequested(e.target.checked) }), "Encrypt this message"] })), _jsxs("div", { className: "shrink-0 flex items-center gap-1 px-3 py-2 border-t border-border", children: [_jsxs("div", { className: "flex items-center rounded-pill bg-primary text-white overflow-hidden", children: [_jsx("button", { type: "button", onClick: () => void submit(false), disabled: !draft || sending || closing || !cryptoContextReady, className: "py-1.5 pl-5 pr-3 font-semibold text-sm hover:not-disabled:bg-primary-dark disabled:opacity-55 disabled:cursor-not-allowed", children: sending ? "Sending…" : "Send" }), _jsx("button", { ref: scheduleButtonRef, type: "button", "aria-label": "Send later", "aria-haspopup": "true", "aria-expanded": schedulePickerOpen, disabled: !draft || sending || closing || !cryptoContextReady, onClick: () => setSchedulePickerOpen((o) => !o), className: "py-1.5 px-2 border-l border-white/30 hover:not-disabled:bg-primary-dark disabled:opacity-55 disabled:cursor-not-allowed", children: _jsx(HiOutlineChevronDown, { size: 14 }) })] }), schedulePickerOpen && (_jsx(ScheduleSendPicker, { anchorRef: scheduleButtonRef, onClose: () => setSchedulePickerOpen(false), onSchedule: handleScheduleSend })), _jsxs("label", { "aria-label": "Attach files", title: "Attach files", className: "w-8 h-8 flex items-center justify-center rounded-full text-text-muted hover:bg-surface-alt hover:text-text cursor-pointer has-[:disabled]:opacity-40 has-[:disabled]:cursor-not-allowed", children: [_jsx(HiOutlinePaperClip, { size: 18 }), _jsx("input", { type: "file", multiple: true, disabled: !draft, onChange: handleFilesSelected, className: "sr-only" })] }), _jsx("span", { role: "status", "aria-live": "polite", className: "ml-auto text-xs text-text-muted", children: SAVE_STATUS_LABEL[saveStatus] }), _jsx("button", { type: "button", "aria-label": "Discard draft", title: "Discard draft", onClick: handleDiscard, disabled: sending || closing, className: "w-8 h-8 flex items-center justify-center rounded-full text-text-muted hover:bg-surface-alt hover:text-text disabled:opacity-40 disabled:cursor-not-allowed", children: _jsx(HiOutlineTrash, { size: 18 }) })] })] })] }), discardModal] }));
+                            })(), _jsx("div", { className: FIELD_ROW, children: _jsx("input", { "aria-label": "Subject", type: "text", placeholder: "Subject", className: FIELD_INPUT, value: subject, autoFocus: focusSubjectOnMount, onChange: (e) => setSubject(e.target.value) }) }), _jsx("div", { className: "flex-1 min-h-0 p-2", children: contentReady && (_jsx(RichTextEditor, { appendHtml: lateQuoteHtml, onAppended: handleQuoteAppended, value: html, onChange: setHtml, fill: true, onUploadImage: handleUploadImage, autoFocusStart: focusBodyOnMount, onInitialized: handleEditorInitialized })) }), quotePending && (_jsx("p", { role: "status", className: "px-3 pb-1 text-xs text-text-muted", children: "Loading the original message\u2026" })), attachments.length > 0 && (_jsx("ul", { className: "flex flex-wrap gap-2 px-3 pb-2", children: attachments.map((attachment) => (_jsx("li", { className: "text-xs font-medium py-1 px-2.5 rounded-pill bg-surface-alt text-text-muted", children: attachment.filename }, attachment.uid))) })), _jsxs("label", { className: "flex items-center gap-1.5 px-3 pb-1 text-xs text-text-muted", children: [_jsx("input", { type: "checkbox", checked: requestReceipt, onChange: (e) => setRequestReceipt(e.target.checked) }), "Request a read receipt"] }), needsUnlockForCrypto && (_jsx("div", { className: "px-3 pb-1", children: _jsxs("button", { type: "button", onClick: handleUnlockForCrypto, className: "inline-flex items-center gap-1 text-xs font-medium text-primary-dark hover:underline", children: [_jsx(HiOutlineLockClosed, { size: 12, "aria-hidden": "true" }), "Unlock to sign or encrypt this message"] }) })), unlockedKeys?.signingPrivateKey && (_jsxs("label", { className: "flex items-center gap-1.5 px-3 pb-1 text-xs text-text-muted", children: [_jsx("input", { type: "checkbox", checked: signEnabled, onChange: (e) => setSignEnabled(e.target.checked) }), "Digitally sign this message"] })), unlockedKeys?.encryptionPrivateKey && (_jsxs("label", { className: "flex items-center gap-1.5 px-3 pb-1 text-xs text-text-muted", children: [_jsx("input", { type: "checkbox", checked: encryptRequested, onChange: (e) => setEncryptRequested(e.target.checked) }), "Encrypt this message"] })), _jsxs("div", { className: "shrink-0 flex items-center gap-1 px-3 py-2 border-t border-border", children: [_jsxs("div", { className: "flex items-center rounded-pill bg-primary text-white overflow-hidden", children: [_jsx("button", { type: "button", onClick: () => void submit(false), title: withHint("Send", SHORTCUTS.compose.send, keyEnv), "aria-keyshortcuts": ariaKeyShortcuts(SHORTCUTS.compose.send, keyEnv), disabled: !draft || closing || waitingForUploads, className: "py-1.5 pl-5 pr-3 font-semibold text-sm hover:not-disabled:bg-primary-dark disabled:opacity-55 disabled:cursor-not-allowed", children: "Send" }), _jsx("button", { ref: scheduleButtonRef, type: "button", "aria-label": "Send later", "aria-haspopup": "true", "aria-expanded": schedulePickerOpen, disabled: !draft || closing || waitingForUploads, onClick: () => setSchedulePickerOpen((o) => !o), className: "py-1.5 px-2 border-l border-white/30 hover:not-disabled:bg-primary-dark disabled:opacity-55 disabled:cursor-not-allowed", children: _jsx(HiOutlineChevronDown, { size: 14 }) })] }), schedulePickerOpen && (_jsx(ScheduleSendPicker, { anchorRef: scheduleButtonRef, onClose: () => setSchedulePickerOpen(false), onSchedule: handleScheduleSend })), _jsxs("label", { "aria-label": "Attach files", title: "Attach files", className: "w-8 h-8 flex items-center justify-center rounded-full text-text-muted hover:bg-surface-alt hover:text-text cursor-pointer has-[:disabled]:opacity-40 has-[:disabled]:cursor-not-allowed", children: [_jsx(HiOutlinePaperClip, { size: 18 }), _jsx("input", { type: "file", multiple: true, disabled: !draft, onChange: handleFilesSelected, className: "sr-only" })] }), _jsx("span", { role: "status", "aria-live": "polite", className: "ml-auto text-xs text-text-muted", children: waitingForUploads ? "Waiting for attachments to finish uploading…" : SAVE_STATUS_LABEL[saveStatus] }), _jsx("button", { type: "button", "aria-label": "Discard draft", title: "Discard draft", onClick: handleDiscard, disabled: closing, className: "w-8 h-8 flex items-center justify-center rounded-full text-text-muted hover:bg-surface-alt hover:text-text disabled:opacity-40 disabled:cursor-not-allowed", children: _jsx(HiOutlineTrash, { size: 18 }) })] })] })] }), discardModal] }));
 }