dsh-email 0.14.7 → 0.15.0

package/lib/client.js

@@ -148,6 +148,10 @@ const CSS = [
   ".dshe-header p{max-width:640px;margin:4px 0 0;color:var(--dsw-alias-label-tertiary,#77736d);font-size:13px;line-height:1.55}",
   ".dshe-kicker{font-size:10px;text-transform:uppercase;letter-spacing:.1em;color:var(--dsw-alias-state-business-primary,#0b6c9f);font-weight:700}",
   ".dshe-panel{display:grid;gap:12px;padding:15px;border:1px solid var(--dsw-alias-border-l2,#dedbd5);border-radius:14px;background:var(--dsw-alias-bg-layer-1,#fff);box-shadow:0 1px 1px rgba(0,0,0,.02)}",
+  ".dshe-panel{container-type:inline-size}@container(max-width:650px){.dshe-panel .dshe-workbench{grid-template-columns:minmax(0,1fr)}.dshe-panel .dshe-draft-list{max-height:160px;grid-template-columns:repeat(auto-fit,minmax(min(100%,180px),1fr))}}",
+  "@media(max-width:700px){[role=dialog]:has(.dshe-settings){width:100%!important;max-width:100%!important;flex-direction:column!important}[role=dialog]:has(.dshe-settings)>nav+div{min-width:0;width:100%}[role=dialog]:has(.dshe-settings)>nav+div>div:has(.dshe-settings){padding:12px!important;min-width:0}[role=dialog]:has(.dshe-settings) nav{width:100%!important;flex-basis:auto!important;border-right:0;max-height:170px;overflow:auto}[role=dialog]:has(.dshe-settings) nav>div:has(>button){display:flex;flex-direction:row!important;flex-wrap:wrap;flex-shrink:0;gap:4px}}",
+  ".dshe-tabs{display:flex;gap:6px;flex-wrap:wrap}.dshe-tabs [aria-selected=true]{background:var(--dsw-alias-button-primary-fill,#0b6c9f);color:var(--dsw-alias-label-primary-foreground,#fff)}",
+  ".dshe-workbench{display:grid;grid-template-columns:minmax(150px,210px) minmax(0,1fr);gap:14px}.dshe-workbench>*{min-width:0}.dshe-draft-list{display:grid;gap:6px;max-height:340px;overflow:auto;align-content:start}.dshe-draft-row{display:grid;gap:4px;text-align:left;padding:10px;border:1px solid var(--dsw-alias-border-l2,#dedbd5);border-radius:9px;background:transparent;color:inherit;cursor:pointer;overflow-wrap:anywhere}.dshe-draft-row[aria-pressed=true]{border-color:var(--dsw-alias-state-business-primary,#0b6c9f)}.dshe-draft-row small{font-size:11px;opacity:.75}.dshe-draft-editor{display:grid;gap:12px;min-width:0}.dshe-review{display:grid;gap:10px;padding:12px;border:1px solid var(--dsw-alias-state-business-primary,#0b6c9f);border-radius:12px}.dshe-review h3{margin:0;font-size:16px}.dshe-review p{margin:0;overflow-wrap:anywhere;font-size:13px}.dshe-review pre{margin:0;padding:10px;background:var(--dsw-specific-input-major,#fafafa);border-radius:8px;white-space:pre-wrap;overflow-wrap:anywhere;max-height:240px;overflow:auto;font:inherit;font-size:13px}.dshe-files{display:grid;gap:7px;margin:0;padding:0;list-style:none}.dshe-files li{display:flex;align-items:center;justify-content:space-between;gap:8px;overflow-wrap:anywhere;font-size:13px}.dshe-files li span{min-width:0}.dshe-match-list{margin:0;padding-left:18px;font-size:12px;line-height:1.8;overflow-wrap:anywhere}.dshe-review .dshe-check{align-items:flex-start}.dshe-draft-editor textarea{resize:vertical;min-height:160px}.dshe-rule-panel textarea{resize:vertical;min-height:100px}.dshe-section-hidden[hidden]{display:none}.dshe-upload{display:grid;gap:6px;font-size:12px;min-width:0}.dshe-upload input{max-width:100%;font:inherit}.dshe-local-actions{display:flex;gap:6px;flex-wrap:wrap}.dshe-workbench h3{font-size:15px;margin:0}.dshe-workbench .dshe-grid{grid-template-columns:1fr}.dshe-editor-empty{padding:20px 0;color:var(--dsw-alias-label-tertiary,#77736d)}@media(max-width:600px){.dshe-workbench{grid-template-columns:minmax(0,1fr)}.dshe-draft-list{max-height:180px}.dshe-review{padding:10px}.dshe-files li{align-items:flex-start}}",
   ".dshe-grid{display:grid;grid-template-columns:1fr 1fr;gap:12px}",
   ".dshe-field{display:grid;gap:6px}",
   ".dshe-field label{font-size:12px;font-weight:600;color:var(--dsw-alias-label-primary,#26231f)}",
@@ -890,13 +894,13 @@ function draftToInput(draft) {
 
 /**
  * 半填账号：名字、邮箱地址、服务商三者缺一都算。服务商是账号的连接身份 —— 没有它
- * 就没有端点可展开，后端 persist 时会把这个键删掉，卡片上必须先把这件事说出来。
+ * 没有服务商且未填完整的自定义服务器时，就没有端点可展开。
  * OAuth2 账号不要密码：有 (name, provider, user) 就算填完了。
  */
 function accountIncomplete(draft) {
   return String(draft.name || "").trim() === ""
     || String(draft.user || "").trim() === ""
-    || String(draft.provider || "").trim() === "";
+    || (String(draft.provider || "").trim() === "" && !(draft.imap?.host && draft.smtp?.host));
 }
 
 /** 改过名字后草稿要跟着键走：旧键删掉，整份草稿（含 imap/smtp）搬到新键下。 */
@@ -2132,7 +2136,149 @@ function ServerPresetsEditor(props) {
   ]);
 }
 
+const DRAFT_ROUTE = "api/dsh-email/drafts";
+const dt = (zh, en) => UI_LANG === "en" ? en : zh;
+// Session memory survives closing the host settings dialog. A page reload
+// still uses the unsaved-edits guard, and only an explicit Save writes content.
+let draftUiCache = null, rulesUiCache = null, emailActiveTab = "accounts";
+async function draftApi(action, payload, upload) {
+  const init = { credentials: "same-origin", method: "POST", headers: { "x-dsh-email-draft": "1", "Content-Type": upload ? "application/octet-stream" : "application/json" } };
+  if (upload) {
+    Object.assign(init.headers, { "x-dsh-draft-id": payload.id, "x-dsh-draft-revision": String(payload.revision), "x-dsh-draft-filename": encodeURIComponent(upload.name) });
+    init.body = upload;
+  } else init.body = JSON.stringify({ ...payload, action });
+  const response = await fetch(upload ? DRAFT_ROUTE + "/upload" : DRAFT_ROUTE, init), result = await response.json();
+  if (!response.ok || !result.ok) { const error = new Error(result.error && result.error.message || dt("邮件操作失败", "Email action failed")); error.code = result.error && result.error.code; throw error; }
+  return result.value;
+}
+const draftForm = (draft) => ({ account: draft.account || "", to: draft.to || "", cc: draft.cc || "", subject: draft.subject || "", text: draft.text || "", attachments: draft.attachments.map(file => file.id) });
+const draftState = (state) => ({ draft: dt("未发送", "Not sent"), sending: dt("正在提交 / 待核对", "Submitting / check mailbox"), sent: dt("SMTP 已返回回执", "SMTP receipt saved"), uncertain: dt("结果未确定，请核对邮箱", "Outcome uncertain, check mailbox") })[state] || state;
+
+function DraftWorkbench({ active }) {
+  const [data, setData] = useState({ drafts: [], accounts: [] }), [selected, setSelected] = useState(() => draftUiCache && draftUiCache.selected), [form, setForm] = useState(() => draftUiCache && draftUiCache.form);
+  const [busy, setBusy] = useState(false), [error, setError] = useState(""), [notice, setNotice] = useState(""), [preview, setPreview] = useState(null), [acknowledged, setAcknowledged] = useState(false), [pending, setPending] = useState(null), [remove, setRemove] = useState(false), [copy, setCopy] = useState(false);
+  const operation = useRef(false);
+  const dirty = selected && form && JSON.stringify(form) !== JSON.stringify(draftForm(selected));
+  useEffect(() => { draftUiCache = { selected, form }; }, [selected, form]);
+  const locked = !selected || selected.state !== "draft";
+  const reload = async () => { const next = await draftApi("list"); setData(next); return next; };
+  const run = async (fn) => {
+    if (operation.current) return;
+    operation.current = true; setBusy(true); setError("");
+    try { return await fn(); } catch (e) { setError(e.message || String(e)); return undefined; } finally { operation.current = false; setBusy(false); }
+  };
+  const adopt = (draft) => { setSelected(draft); setForm(draftForm(draft)); setPreview(null); setAcknowledged(false); setRemove(false); setCopy(false); setError(""); setNotice(""); };
+  useEffect(() => { if (active) { setPreview(null); setAcknowledged(false); run(reload); } }, [active]);
+  useEffect(() => {
+    const guard = (event) => { if (dirty) { event.preventDefault(); event.returnValue = ""; } };
+    window.addEventListener("beforeunload", guard); return () => window.removeEventListener("beforeunload", guard);
+  }, [dirty]);
+  const save = async () => { const value = await draftApi("update", { ...form, id: selected.id, revision: selected.revision }); adopt(value); await reload(); setNotice(dt("草稿已保存，邮件未发送。", "Draft saved. No email was sent.")); return value; };
+  const switchTo = async (target) => {
+    if (target.kind === "new") adopt(await draftApi("create", { account: "", to: "", cc: "", subject: "", text: "" }));
+    else adopt(await draftApi("get", { id: target.id }));
+    await reload(); setPending(null);
+  };
+  const requestSwitch = (target) => { if (dirty) setPending(target); else run(() => switchTo(target)); };
+  const field = (key, zh, en, multiline) => h("div", { className: "dshe-field", key }, [
+    h("label", { htmlFor: "dshe-draft-" + key }, dt(zh, en)),
+    h(multiline ? "textarea" : "input", { id: "dshe-draft-" + key, type: multiline ? undefined : "text", value: form[key], disabled: busy || locked, rows: multiline ? 8 : undefined, maxLength: multiline ? 102400 : key === "subject" ? 500 : 4096, onChange: (event) => { const value = event.target.value; setForm(current => ({ ...current, [key]: value })); setPreview(null); setAcknowledged(false); setNotice(""); } }),
+  ]);
+  const review = preview && h("section", { className: "dshe-review", "aria-label": dt("发送前预览", "Review before sending") }, [
+    h("h3", null, dt("发送前预览", "Review before sending")),
+    h("p", null, dt("发件人：", "From: ") + (preview.from.name ? preview.from.name + " <" + preview.from.address + ">" : preview.from.address)),
+    h("p", null, dt("主题：", "Subject: ") + preview.draft.subject),
+    h("ul", { className: "dshe-match-list" }, preview.matching.rows.map((row, index) => h("li", { key: index }, (row.field === "cc" ? "Cc: " : "To: ") + row.address + " · " + (row.matched ? dt("匹配可信规则", "Matches a trusted rule") : dt("需要确认", "Needs confirmation"))))),
+    h("pre", null, preview.draft.text || dt("（空正文）", "(Empty body)")),
+    preview.attachments.length ? h("ul", { className: "dshe-files" }, preview.attachments.map(file => h("li", { key: file.id }, [
+      h("span", null, file.filename + " · " + Math.ceil(file.size / 1024) + " KiB"),
+      h("a", { href: DRAFT_ROUTE + "?preview=" + encodeURIComponent(preview.id) + "&attachment=" + encodeURIComponent(file.id), download: file.filename }, dt("下载检查", "Download to check")),
+    ]))) : h("p", null, dt("没有附件", "No attachments")),
+    h("div", { className: "dshe-hint" }, dt("附件已固定为本次预览快照。10 分钟后需重新预览；修改草稿、账号或规则也会使预览失效。", "Attachments are fixed to this preview. Review again after 10 minutes or when the draft, account or rules change.")),
+    h("label", { className: "dshe-check" }, [h("input", { type: "checkbox", checked: acknowledged, disabled: busy, onChange: event => setAcknowledged(event.target.checked) }), dt("我已核对发件人、所有收件人、正文和附件", "I checked the sender, all recipients, content and attachments")]),
+    h("div", { className: "dshe-actions" }, [
+      h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => run(async () => { await draftApi("cancelPreview", { id: selected.id }); setPreview(null); setAcknowledged(false); setNotice(dt("预览已取消，邮件未发送。", "Review cancelled. No email was sent.")); }) }, dt("取消预览", "Cancel review")),
+      h("button", { type: "button", className: "dshe-btn primary", disabled: busy || !acknowledged || dirty, onClick: () => run(async () => {
+        try { const result = await draftApi("send", { id: selected.id, preview: preview.id, confirmed: true }); adopt(result.draft); }
+        finally { setPreview(null); setAcknowledged(false); const fresh = await reload(); const current = fresh.drafts.find(draft => draft.id === selected.id); if (current && current.state !== "draft") adopt(current); }
+      }) }, busy ? dt("正在提交…", "Submitting…") : dt("确认发送", "Confirm send")),
+    ]),
+  ]);
+  return h("section", { className: "dshe-panel", "aria-label": dt("邮件草稿", "Email drafts") }, [
+    h("div", { className: "dshe-actions" }, [
+      h("button", { type: "button", className: "dshe-btn primary", disabled: busy, onClick: () => requestSwitch({ kind: "new" }) }, dt("新建草稿", "New draft")),
+      h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => run(async () => { const next = await reload(); if (selected && !dirty) { const saved = next.drafts.find(draft => draft.id === selected.id); if (saved) adopt(saved); } }) }, dt("刷新列表", "Refresh list")),
+    ]),
+    h("p", { className: "dshe-hint" }, dt("草稿只保存在本机。模型可用 email_draft 准备内容，你在这里编辑、保存和确认发送。", "Drafts stay on this device. Ask the model to prepare one with email_draft, then edit, save and confirm here.")),
+    pending ? h("div", { className: "dshe-alert info", role: "alert" }, [dt("当前草稿有未保存的编辑。", "The current draft has unsaved edits."), h("div", { className: "dshe-actions" }, [
+      h("button", { type: "button", className: "dshe-btn", disabled: busy || locked, onClick: () => run(async () => { await save(); await switchTo(pending); }) }, dt("保存并切换", "Save and switch")),
+      h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => run(() => switchTo(pending)) }, dt("放弃编辑并切换", "Discard edits and switch")),
+      h("button", { type: "button", className: "dshe-btn", onClick: () => setPending(null) }, dt("保留编辑", "Keep editing")),
+    ])]) : null,
+    error ? h("div", { className: "dshe-alert error", role: "alert" }, [error, selected ? h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => requestSwitch({ kind: "open", id: selected.id }) }, dt("重新打开服务器版本", "Reopen saved version")) : null]) : null,
+    notice ? h("div", { className: "dshe-alert info", role: "status" }, notice) : null,
+    h("div", { className: "dshe-workbench" }, [
+      h("aside", { className: "dshe-draft-list", "aria-label": dt("已保存的草稿", "Saved drafts") }, data.drafts.length ? data.drafts.map(draft => h("button", { key: draft.id, type: "button", className: "dshe-draft-row", disabled: busy, "aria-pressed": selected && selected.id === draft.id, onClick: () => requestSwitch({ kind: "open", id: draft.id }) }, [h("strong", null, draft.subject || dt("未命名草稿", "Untitled draft")), h("small", null, draft.account + " · " + draftState(draft.state))])) : h("p", { className: "dshe-hint" }, dt("还没有草稿，先新建一份。", "No drafts yet. Create your first draft."))),
+      selected && form ? h("div", { className: "dshe-draft-editor" }, [
+        h("div", { role: "status", className: "dshe-hint" }, dirty ? dt("有未保存的编辑", "Unsaved edits") : draftState(selected.state)),
+        h("div", { className: "dshe-field" }, [h("label", { htmlFor: "dshe-draft-account" }, dt("发件账号", "Sending account")), h("select", { id: "dshe-draft-account", value: form.account, disabled: busy || locked, onChange: event => { const value = event.target.value; setForm(current => ({ ...current, account: value })); setPreview(null); setAcknowledged(false); } }, [h("option", { value: "" }, dt("请选择账号", "Choose an account")), ...[...new Set([...data.accounts, ...(form.account ? [form.account] : [])])].map(name => h("option", { key: name, value: name }, name))])]),
+        field("to", "收件人 To", "Recipients To"), field("cc", "抄送 Cc", "Copy Cc"), field("subject", "主题", "Subject"), field("text", "正文", "Message", true),
+        h("ul", { className: "dshe-files" }, selected.attachments.filter(file => form.attachments.includes(file.id)).map(file => h("li", { key: file.id }, [h("span", null, file.filename), !locked ? h("button", { type: "button", className: "dshe-btn", disabled: busy, "aria-label": dt("移除附件 ", "Remove attachment ") + file.filename, onClick: () => { setForm(current => ({ ...current, attachments: current.attachments.filter(id => id !== file.id) })); setPreview(null); setAcknowledged(false); } }, dt("移除", "Remove")) : null]))),
+        !locked ? h("label", { className: "dshe-upload" }, [dt("添加附件（先保存编辑，最多 10 个 / 合计 20 MiB）", "Add attachments (save edits first; up to 10 files / 20 MiB total)"), h("input", { type: "file", multiple: true, disabled: busy || dirty, "aria-label": dt("添加附件", "Add attachments"), onChange: event => { const files = Array.from(event.target.files || []); event.target.value = ""; run(async () => { let current = selected; for (const file of files) { if (file.size > 20 * 1024 * 1024) throw new Error(dt("单个附件超过 20 MiB", "Attachment exceeds 20 MiB")); current = await draftApi("upload", { id: current.id, revision: current.revision }, file); adopt(current); } await reload(); setNotice(dt("附件已添加，尚未发送。请检查预览。", "Attachments added. Review before sending.")); }); } })]) : null,
+        !locked ? h("div", { className: "dshe-actions" }, [
+          h("button", { type: "button", className: "dshe-btn", disabled: busy || !dirty, onClick: () => run(save) }, dt("保存草稿", "Save draft")),
+          h("button", { type: "button", className: "dshe-btn primary", disabled: busy || dirty, onClick: () => run(async () => { setPreview(await draftApi("preview", { id: selected.id, revision: selected.revision })); setAcknowledged(false); setNotice(""); }) }, dt("检查发送预览", "Review before sending")),
+        ]) : null,
+        review,
+        selected.receipt ? h("div", { className: "dshe-alert " + (selected.receipt.rejected.length ? "info" : "success"), role: "status" }, [(selected.receipt.rejected.length ? dt("部分地址被服务器拒绝，邮件不会自动重发。服务器接受：", "Some addresses were rejected. This email will not retry automatically. Server accepted: ") : dt("SMTP 已返回回执，邮件不会再次发送。服务器接受：", "SMTP receipt saved. This draft will not send again. Server accepted: ")) + (selected.receipt.accepted.join(", ") || dt("无", "none")), h("p", null, dt("服务器拒绝：", "Server rejected: ") + (selected.receipt.rejected.join(", ") || dt("无", "none"))), h("p", null, dt("这是服务器提交结果，不代表已送达收件人的收件箱。", "This confirms the server response, not delivery to the recipient inbox."))]) : null,
+        selected.state === "uncertain" || selected.state === "sending" ? h("div", { className: "dshe-alert info", role: "status" }, selected.error || dt("提交尚未留下回执。先核对邮箱，再刷新列表；不要重复发送。", "No receipt yet. Check your mailbox, then refresh the list. Do not send again.")) : null,
+        h("div", { className: "dshe-local-actions" }, [
+          h("button", { type: "button", className: "dshe-btn", disabled: busy || selected.state === "sending" || dirty, onClick: () => setCopy(true) }, dt("复制为新草稿", "Copy to a new draft")),
+          h("button", { type: "button", className: "dshe-btn", disabled: busy || selected.state === "sending", onClick: () => setRemove(true) }, dt("删除本地草稿", "Delete local draft")),
+        ]),
+        copy ? h("div", { className: "dshe-alert info" }, [dt("会复制内容及附件为一份新的未发送草稿。若上次已提交或结果不明，请先核对邮箱，避免重复投递。", "Copies content and attachments to a new unsent draft. Check the mailbox first if the original was submitted or its result is uncertain."), h("div", { className: "dshe-actions" }, [h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => run(async () => { adopt(await draftApi("copy", { id: selected.id, revision: selected.revision, confirmed: true })); await reload(); }) }, dt("确认复制", "Confirm copy")), h("button", { type: "button", className: "dshe-btn", onClick: () => setCopy(false) }, dt("取消", "Cancel"))])]) : null,
+        remove ? h("div", { className: "dshe-alert info" }, [dt("只删除本地草稿与插件上传的附件副本；引用的原文件和邮箱中的邮件不会删除。", "Deletes this local draft and plugin-uploaded copies. Original files and mailbox messages stay intact."), h("div", { className: "dshe-actions" }, [h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => run(async () => { await draftApi("delete", { id: selected.id, revision: selected.revision, confirmed: true }); setSelected(null); setForm(null); setRemove(false); await reload(); }) }, dt("确认删除", "Confirm delete")), h("button", { type: "button", className: "dshe-btn", onClick: () => setRemove(false) }, dt("取消", "Cancel"))])]) : null,
+      ]) : h("div", { className: "dshe-editor-empty" }, dt("选择一份草稿，或新建草稿开始编辑。", "Select a draft or create one to start editing.")),
+    ]),
+  ]);
+}
+
+function RecipientRules({ active, onSaved }) {
+  const [data, setData] = useState(() => rulesUiCache && rulesUiCache.data), [account, setAccount] = useState(() => rulesUiCache && rulesUiCache.account || ""), [form, setForm] = useState(() => rulesUiCache && rulesUiCache.form || { addresses: "", domains: "", skipApproval: false });
+  const [base, setBase] = useState(() => rulesUiCache && rulesUiCache.base || ""), [busy, setBusy] = useState(false), [error, setError] = useState(""), [notice, setNotice] = useState(""), [pending, setPending] = useState(null), [to, setTo] = useState(() => rulesUiCache && rulesUiCache.to || ""), [cc, setCc] = useState(() => rulesUiCache && rulesUiCache.cc || ""), [match, setMatch] = useState(null);
+  const operation = useRef(false), dirty = data && JSON.stringify(form) !== base;
+  useEffect(() => { rulesUiCache = { data, account, form, base, to, cc }; }, [data, account, form, base, to, cc]);
+  const choose = (next, name) => { const rule = next.policies[name] || { addresses: [], domains: [], skipApproval: false }, fields = { addresses: rule.addresses.join("\n"), domains: rule.domains.join("\n"), skipApproval: rule.skipApproval }; setAccount(name); setForm(fields); setBase(JSON.stringify(fields)); setMatch(null); setPending(null); };
+  const run = async (fn) => { if (operation.current) return; operation.current = true; setBusy(true); setError(""); try { await fn(); } catch (e) { setError(e.message || String(e)); } finally { operation.current = false; setBusy(false); } };
+  const load = async () => { const next = await draftApi("rules"); setData(next); choose(next, next.accounts.includes(account) ? account : next.accounts[0] || ""); };
+  useEffect(() => { if (active && !dirty) run(load); }, [active]);
+  useEffect(() => { const guard = event => { if (dirty) { event.preventDefault(); event.returnValue = ""; } }; window.addEventListener("beforeunload", guard); return () => window.removeEventListener("beforeunload", guard); }, [dirty]);
+  const policy = () => ({ skipApproval: form.skipApproval, addresses: form.addresses.split(/\r?\n/).map(row => row.trim()).filter(Boolean), domains: form.domains.split(/\r?\n/).map(row => row.trim()).filter(Boolean) });
+  const save = async () => { const next = await draftApi("saveRules", { account, policy: policy(), revision: data.revision }); setData(next); choose(next, account); onSaved(next.revision); setNotice(dt("此账号规则已保存。", "Rules saved for this account.")); return next; };
+  const change = patch => { setForm(current => ({ ...current, ...patch })); setMatch(null); setNotice(""); };
+  const request = target => { if (dirty) setPending(target); else if (target.kind === "reload") run(load); else choose(data, target.name); };
+  return h("section", { className: "dshe-panel dshe-rule-panel", "aria-label": dt("可信收件人规则", "Trusted recipients") }, [
+    h("p", { className: "dshe-hint" }, dt("默认每次确认。主动启用后，只有该账号的全部 To/Cc 都匹配时，email_send 才跳过插件确认；宿主权限仍然生效，草稿仍需手动确认。域名规则只匹配指定域名，不包含子域名。", "Approval is the default. When enabled, email_send skips this plugin's approval only if every To/Cc address matches this account's rules. Host permissions still apply, and drafts still need manual confirmation. Domain rules exclude subdomains.")),
+    error ? h("div", { className: "dshe-alert error", role: "alert" }, error) : null,
+    notice ? h("div", { className: "dshe-alert success", role: "status" }, notice) : null,
+    data && data.sendApproval === false ? h("div", { className: "dshe-alert info" }, dt("全局发信确认目前已关闭；这份规则不会额外拦截 email_send。", "Global send approval is currently off. These rules do not add another email_send gate.")) : null,
+    h("div", { className: "dshe-field" }, [h("label", { htmlFor: "dshe-rule-account" }, dt("规则所属账号", "Account for these rules")), h("select", { id: "dshe-rule-account", value: account, disabled: busy, onChange: event => request({ kind: "account", name: event.target.value }) }, [h("option", { value: "", disabled: true }, dt("请选择已配置账号", "Choose a configured account")), ...(data ? data.accounts : []).map(name => h("option", { key: name, value: name }, name))])]),
+    pending ? h("div", { className: "dshe-alert info" }, [dt("规则还未保存。", "Rules have unsaved edits."), h("div", { className: "dshe-actions" }, [h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => run(async () => { const next = await save(); if (pending.kind === "reload") await load(); else choose(next, pending.name); }) }, dt("保存并切换", "Save and switch")), h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => { if (pending.kind === "reload") run(load); else choose(data, pending.name); } }, dt("放弃编辑并切换", "Discard edits and switch")), h("button", { type: "button", className: "dshe-btn", onClick: () => setPending(null) }, dt("保留编辑", "Keep editing"))])]) : null,
+    h("div", { className: "dshe-field" }, [h("label", { htmlFor: "dshe-rule-addresses" }, dt("可信邮箱地址（每行一个）", "Trusted email addresses (one per line)")), h("textarea", { id: "dshe-rule-addresses", rows: 4, value: form.addresses, placeholder: "name@example.com", disabled: busy || !account, onChange: event => change({ addresses: event.target.value }) })]),
+    h("div", { className: "dshe-field" }, [h("label", { htmlFor: "dshe-rule-domains" }, dt("可信域名（每行一个，匹配该域所有邮箱）", "Trusted domains (one per line, all mailboxes in that domain)")), h("textarea", { id: "dshe-rule-domains", rows: 3, value: form.domains, placeholder: "example.com", disabled: busy || !account, onChange: event => change({ domains: event.target.value }) })]),
+    h("label", { className: "dshe-check" }, [h("input", { type: "checkbox", checked: form.skipApproval, disabled: busy || !account, onChange: event => change({ skipApproval: event.target.checked }) }), dt("允许全部匹配时跳过 email_send 的插件确认", "Skip plugin approval for email_send when all addresses match")]),
+    h("div", { className: "dshe-actions" }, [h("button", { type: "button", className: "dshe-btn primary", disabled: busy || !dirty || !account || data && !data.writable, onClick: () => run(save) }, dt("保存此账号规则", "Save rules for this account")), h("button", { type: "button", className: "dshe-btn", disabled: busy, onClick: () => request({ kind: "reload" }) }, dt("重新加载规则", "Reload rules"))]),
+    h("div", { className: "dshe-hint", role: "status" }, dirty ? dt("未保存；匹配预览使用当前编辑的规则。", "Unsaved; matching uses the rules you are editing.") : dt("已保存的规则才会作用于模型发信。", "Only saved rules affect model-initiated sends.")),
+    h("div", { className: "dshe-field" }, [h("label", { htmlFor: "dshe-rule-to" }, dt("试填收件人 To", "Try recipients To")), h("input", { id: "dshe-rule-to", type: "text", value: to, disabled: busy, onChange: event => { setTo(event.target.value); setMatch(null); } })]),
+    h("div", { className: "dshe-field" }, [h("label", { htmlFor: "dshe-rule-cc" }, dt("试填抄送 Cc", "Try copy Cc")), h("input", { id: "dshe-rule-cc", type: "text", value: cc, disabled: busy, onChange: event => { setCc(event.target.value); setMatch(null); } })]),
+    h("button", { type: "button", className: "dshe-btn", disabled: busy || !account, onClick: () => run(async () => setMatch(await draftApi("matchRules", { account, policy: policy(), to, cc }))) }, dt("检查规则匹配（不发送）", "Check matches (no email sent)")),
+    match ? h("div", { className: "dshe-review" }, [h("p", null, match.skipsApproval ? dt("全部 To/Cc 匹配，可跳过插件确认。", "All To/Cc match; plugin approval can be skipped.") : dt("不会跳过插件确认。", "Plugin approval will remain.")), h("ul", { className: "dshe-match-list" }, match.rows.map((row, index) => h("li", { key: index }, row.field.toUpperCase() + ": " + row.address + " · " + (row.matched ? dt("匹配：", "Match: ") + row.value : dt("未匹配", "No match")))))]) : null,
+  ]);
+}
+
 function EmailSettingsSection() {
+  const [tab, setTab] = useState(emailActiveTab);
+  useEffect(() => { emailActiveTab = tab; }, [tab]);
   const [draft, setDraft] = useState(null);
   const [snapshot, setSnapshot] = useState(undefined);
   const [busy, setBusy] = useState(false);
@@ -2416,10 +2562,13 @@ function EmailSettingsSection() {
     h("header", { className: "dshe-header" }, [
       h("span", { className: "dshe-kicker" }, "dsh-email · IMAP/SMTP"),
       h("h2", null, t("section.title")),
-      h("p", null, t("section.intro")),
+      h("p", null, dt("配置邮箱账号，编辑草稿并确认发送，或管理收件人规则。账号设置修改后会自动保存。", "Configure accounts, edit and confirm drafts, or manage recipient rules. Account settings save automatically.")),
     ]),
-    status,
-    h("section", { className: "dshe-panel" }, [
+    tab === "accounts" ? status : null,
+    h("div", { className: "dshe-tabs", role: "tablist", "aria-label": dt("邮件功能", "Email features") }, [["accounts", dt("邮箱账号", "Accounts")], ["drafts", dt("草稿", "Drafts")], ["rules", dt("收件人规则", "Recipient rules")]].map(([id, label]) => h("button", { key: id, type: "button", role: "tab", className: "dshe-btn", "aria-selected": tab === id, "aria-controls": "dshe-pane-" + id, onClick: () => setTab(id) }, label))),
+    h("div", { id: "dshe-pane-drafts", role: "tabpanel", hidden: tab !== "drafts", className: "dshe-section-hidden" }, h(DraftWorkbench, { active: tab === "drafts" })),
+    h("div", { id: "dshe-pane-rules", role: "tabpanel", hidden: tab !== "rules", className: "dshe-section-hidden" }, h(RecipientRules, { active: tab === "rules", onSaved: revision => { setSnapshot(old => ({ ...old, settings: { ...old.settings, revision } })); } })),
+    h("section", { id: "dshe-pane-accounts", role: "tabpanel", hidden: tab !== "accounts", className: "dshe-panel dshe-section-hidden" }, [
       // 全局设置：发信确认和下载目录对所有账号一视同仁，不属于任何一张卡片，
       // 所以摆在卡片列表上方，而不是塞进某一张卡里。
       h("div", { className: "dshe-global" }, [

package/lib/config.d.ts

@@ -108,6 +108,8 @@ export interface AccountConfig {
     inboxFolder?: string;
 }
 export interface EmailConfig extends AccountConfig {
+    /** Per-account recipient rules, independent of IMAP/SMTP connection settings. */
+    trustedRecipientsYaml?: string;
     /** Ask the user for approval before email_send. Default true. */
     sendApproval?: boolean;
     /** Plain-text body cap for email_read. Default 20000. */

package/lib/draft-store.d.ts

@@ -0,0 +1,57 @@
+import type { EmailSendResult } from './types.js';
+export type DraftState = 'draft' | 'sending' | 'sent' | 'uncertain';
+export interface DraftAttachment {
+    id: string;
+    path: string;
+    filename: string;
+    owned: boolean;
+}
+export interface EmailDraft {
+    id: string;
+    revision: number;
+    account: string;
+    to: string;
+    cc: string;
+    subject: string;
+    text: string;
+    attachments: DraftAttachment[];
+    state: DraftState;
+    createdAt: string;
+    updatedAt: string;
+    attemptAt?: string;
+    receipt?: EmailSendResult;
+    error?: string;
+}
+export interface DraftFields {
+    account: string;
+    to: string;
+    cc: string;
+    subject: string;
+    text: string;
+}
+export declare class DraftError extends Error {
+    readonly code: string;
+    constructor(message: string, code?: string);
+}
+export declare function draftFields(input: unknown): DraftFields;
+/** Private, bounded local drafts. File locks protect separate DSH processes and atomic replacement preserves old data on failure. */
+export declare class DraftStore {
+    readonly root: string;
+    private readonly file;
+    constructor(home?: string);
+    list(): Promise<EmailDraft[]>;
+    private load;
+    private write;
+    private withLock;
+    private mutate;
+    get(id: string): Promise<EmailDraft>;
+    create(fields: DraftFields, attachments?: DraftAttachment[], signal?: AbortSignal): Promise<EmailDraft>;
+    change(id: string, expectedRevision: unknown, action: (draft: EmailDraft) => void, signal?: AbortSignal): Promise<EmailDraft>;
+    remove(id: string, revision: unknown, signal?: AbortSignal): Promise<void>;
+    removeOwnedFile(id: string, file: DraftAttachment): Promise<void>;
+    sendLock<T>(id: string, action: (signal: AbortSignal) => Promise<T>, signal?: AbortSignal): Promise<T>;
+    uploadPath(id: string, filename: string): {
+        path: string;
+        filename: string;
+    };
+}

package/lib/draft-store.js

@@ -0,0 +1,169 @@
+import { randomUUID } from 'node:crypto';
+import { mkdir, open, readFile, realpath, rename, stat, unlink } from 'node:fs/promises';
+import { homedir } from 'node:os';
+import { basename, dirname, isAbsolute, join, resolve, sep } from 'node:path';
+import lockfile from 'proper-lockfile';
+export class DraftError extends Error {
+    code;
+    constructor(message, code = 'draft-invalid') {
+        super(message);
+        this.code = code;
+    }
+}
+const isId = (id) => typeof id === 'string' && /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/.test(id);
+export function draftFields(input) {
+    if (!input || typeof input !== 'object' || Array.isArray(input))
+        throw new DraftError('草稿内容必须是对象');
+    const raw = input, fields = {};
+    for (const [key, cap] of [['account', 200], ['to', 4096], ['cc', 4096], ['subject', 500], ['text', 100 * 1024]]) {
+        const value = raw[key] ?? '';
+        if (typeof value !== 'string' || Buffer.byteLength(value) > cap || /[\u0000-\u0008\u000b\u000c\u000e-\u001f\u007f]/.test(value) || (key !== 'text' && /[\r\n]/.test(value)))
+            throw new DraftError(key === 'text' ? '正文最多 100 KiB，且不能包含非文本控制字符' : key + ' 内容过长或包含换行/控制字符');
+        fields[key] = key === 'text' ? value : value.trim();
+    }
+    return fields;
+}
+/** Private, bounded local drafts. File locks protect separate DSH processes and atomic replacement preserves old data on failure. */
+export class DraftStore {
+    root;
+    file;
+    constructor(home = process.env.DSH_HOME?.trim() || join(homedir(), '.dsh')) {
+        this.root = resolve(home, 'data/dsh-email');
+        this.file = join(this.root, 'drafts-v1.json');
+    }
+    async list() { return (await this.load()).drafts; }
+    async load() {
+        try {
+            if ((await stat(this.file)).size > 16 * 1024 * 1024)
+                throw new Error('too large');
+            const doc = JSON.parse(await readFile(this.file, 'utf8'));
+            if (doc.version !== 1 || !Array.isArray(doc.drafts) || doc.drafts.length > 50 || new Set(doc.drafts.map(d => d.id)).size !== doc.drafts.length)
+                throw new Error('invalid document');
+            for (const draft of doc.drafts) {
+                if (!isId(draft.id) || !Number.isSafeInteger(draft.revision) || draft.revision < 1 || !['draft', 'sending', 'sent', 'uncertain'].includes(draft.state))
+                    throw new Error('invalid draft');
+                draftFields(draft);
+                if (!Array.isArray(draft.attachments) || draft.attachments.length > 10 || draft.attachments.some(file => !isId(file.id) || !isAbsolute(file.path) || typeof file.filename !== 'string' || typeof file.owned !== 'boolean'))
+                    throw new Error('invalid attachments');
+            }
+            return doc;
+        }
+        catch (error) {
+            if (error?.code === 'ENOENT')
+                return { version: 1, drafts: [] };
+            throw new DraftError('本地草稿文件无法读取，已保留原文件；请检查存储位置或从备份恢复', 'draft-storage');
+        }
+    }
+    async write(doc) {
+        const data = JSON.stringify(doc, null, 2);
+        if (Buffer.byteLength(data) > 16 * 1024 * 1024)
+            throw new DraftError('草稿总量过大，请先删除不再需要的草稿');
+        const temporary = join(this.root, '.drafts-' + randomUUID() + '.json');
+        try {
+            const handle = await open(temporary, 'wx', 0o600);
+            try {
+                await handle.writeFile(data);
+                await handle.sync();
+            }
+            finally {
+                await handle.close();
+            }
+            await rename(temporary, this.file);
+        }
+        finally {
+            await unlink(temporary).catch(() => { });
+        }
+    }
+    async withLock(file, action, signal, wait = true) {
+        signal?.throwIfAborted();
+        await mkdir(this.root, { recursive: true, mode: 0o700 });
+        const compromised = new AbortController();
+        let release;
+        try {
+            release = await lockfile.lock(file, { realpath: false, stale: 120000, update: 10000, retries: wait ? { retries: 10, factor: 1, minTimeout: 50, maxTimeout: 50 } : 0, onCompromised: error => compromised.abort(error) });
+        }
+        catch (error) {
+            if (error?.code === 'ELOCKED')
+                throw new DraftError('另一处 DSH 正在保存或发送这份草稿，请稍后重试', 'draft-busy');
+            throw new DraftError('无法锁定草稿存储，请检查目录权限', 'draft-storage');
+        }
+        try {
+            const current = signal ? AbortSignal.any([signal, compromised.signal]) : compromised.signal;
+            current.throwIfAborted();
+            return await action(current);
+        }
+        finally {
+            await release().catch(() => { });
+        }
+    }
+    async mutate(action, signal) {
+        return this.withLock(this.file, async (current) => { const doc = await this.load(); current.throwIfAborted(); const result = action(doc); current.throwIfAborted(); await this.write(doc); return result; }, signal);
+    }
+    async get(id) {
+        const draft = (await this.list()).find(d => d.id === id);
+        if (!draft)
+            throw new DraftError('草稿不存在或已被移除', 'draft-missing');
+        return draft;
+    }
+    async create(fields, attachments = [], signal) {
+        if (attachments.length > 10 || attachments.some(file => !isId(file.id) || !isAbsolute(file.path) || typeof file.filename !== 'string' || typeof file.owned !== 'boolean'))
+            throw new DraftError('草稿最多 10 个有效本地附件');
+        return this.mutate(doc => {
+            if (doc.drafts.length >= 50)
+                throw new DraftError('已有 50 份草稿，请先删除不再需要的草稿');
+            const now = new Date().toISOString(), draft = { ...draftFields(fields), id: randomUUID(), revision: 1, attachments, state: 'draft', createdAt: now, updatedAt: now };
+            doc.drafts.unshift(draft);
+            return draft;
+        }, signal);
+    }
+    async change(id, expectedRevision, action, signal) {
+        return this.mutate(doc => {
+            const draft = doc.drafts.find(d => d.id === id);
+            if (!draft)
+                throw new DraftError('草稿不存在或已被移除', 'draft-missing');
+            if (draft.revision !== expectedRevision)
+                throw new DraftError('草稿已在另一处修改，请重新打开；当前编辑内容尚未覆盖服务器', 'draft-conflict');
+            action(draft);
+            draft.revision++;
+            draft.updatedAt = new Date().toISOString();
+            return draft;
+        }, signal);
+    }
+    async remove(id, revision, signal) {
+        const removed = await this.mutate(doc => {
+            const draft = doc.drafts.find(d => d.id === id);
+            if (!draft)
+                throw new DraftError('草稿已被移除', 'draft-missing');
+            if (draft.revision !== revision)
+                throw new DraftError('草稿已改变，请重新打开后删除', 'draft-conflict');
+            if (draft.state === 'sending')
+                throw new DraftError('邮件正在提交，请结束后再移除草稿', 'draft-busy');
+            doc.drafts = doc.drafts.filter(d => d.id !== id);
+            return draft;
+        }, signal);
+        for (const file of removed.attachments)
+            await this.removeOwnedFile(id, file);
+    }
+    async removeOwnedFile(id, file) {
+        if (!file.owned || !isId(id))
+            return;
+        try {
+            const root = await realpath(join(this.root, 'draft-uploads', id)), target = await realpath(file.path);
+            const comparable = (path) => process.platform === 'win32' ? path.toLowerCase() : path;
+            if (comparable(target).startsWith(comparable(root + sep)) && comparable(dirname(target)) === comparable(root))
+                await unlink(file.path);
+        }
+        catch { /* Never remove a referenced original or a path outside this draft's owned upload directory. */ }
+    }
+    async sendLock(id, action, signal) {
+        if (!isId(id))
+            throw new DraftError('草稿编号不合法');
+        return this.withLock(join(this.root, 'send-' + id), action, signal, false);
+    }
+    uploadPath(id, filename) {
+        if (!isId(id))
+            throw new DraftError('草稿编号不合法');
+        const safe = basename(filename).replace(/[\u0000-\u001f\u007f<>:"/\\|?*]/g, '_').slice(0, 160).replace(/[. ]+$/, '') || 'attachment';
+        return { path: join(this.root, 'draft-uploads', id, randomUUID() + '-' + safe), filename: safe };
+    }
+}

package/lib/draft-web.d.ts

@@ -0,0 +1,32 @@
+import { DraftStore, type EmailDraft } from './draft-store.js';
+import type { EmailRuntime } from './runtime.js';
+import type { EmailSettingsBackend } from './web.js';
+export declare const EMAIL_DRAFT_ROUTE = "/api/dsh-email/drafts";
+interface Options {
+    store?: DraftStore;
+    now?: () => number;
+}
+/** All mutations use the host's authenticated fetch carrier and an explicit UI action. */
+export declare class EmailDraftBackend {
+    private readonly runtime;
+    private readonly settings;
+    private readonly options;
+    readonly store: DraftStore;
+    private readonly plans;
+    constructor(runtime: Pick<EmailRuntime, 'getEffectiveSettings' | 'getSettingsValue' | 'getPool'>, settings: Pick<EmailSettingsBackend, 'snapshot' | 'saveRecipientRules'>, options?: Options);
+    private now;
+    private prune;
+    private invalidate;
+    private connection;
+    private safe;
+    private bytes;
+    private attachments;
+    create(input: Record<string, unknown>, signal?: AbortSignal): Promise<EmailDraft>;
+    private recover;
+    action(body: Record<string, unknown>, signal?: AbortSignal): Promise<unknown>;
+    private writeUpload;
+    private upload;
+    fetch(request: Request): Promise<Response>;
+}
+export declare function installEmailDrafts(ctx: any, backend: EmailDraftBackend): void;
+export {};