+ {desktopPolicyNotice} +
- {desktopPolicyNotice} -
{desktopNotice} diff --git a/app/(main)/[locale]/popout/spare/page.tsx b/app/(main)/[locale]/popout/spare/page.tsx new file mode 100644 index 000000000..1eafe6639 --- /dev/null +++ b/app/(main)/[locale]/popout/spare/page.tsx @@ -0,0 +1,7 @@ +import { PopoutSpareApp } from "@/components/popout/popout-spare-app"; + +// The desktop app's warm spare (components/popout/popout-spare-app.tsx). Not in +// Lite: scripts/lite removes this tree. +export default function PopoutSparePage() { + return ; +} diff --git a/app/(main)/admin/_pages/__tests__/device-registry-panel.test.tsx b/app/(main)/admin/_pages/__tests__/device-registry-panel.test.tsx new file mode 100644 index 000000000..535f76f13 --- /dev/null +++ b/app/(main)/admin/_pages/__tests__/device-registry-panel.test.tsx @@ -0,0 +1,93 @@ +import { fireEvent, render, screen, waitFor, within } from '@testing-library/react'; +import { beforeEach, describe, expect, it, vi } from 'vitest'; +import type { DeviceView } from '@/lib/devices/types'; +import { DeviceRegistryPanel } from '../device-registry-panel'; + +const device = (over: Partial): DeviceView => ({ + id: `${'a'.repeat(64)}/${'b'.repeat(32)}`, + userKey: 'a'.repeat(64), + user: 'alice@example.org', + server: 'https://mail.example.org', + platform: 'Chrome, Windows', + appVersion: '1.2.3', + firstSeen: '2026-11-01T10:00:00.000Z', + lastSeen: '2026-11-03T10:00:00.000Z', + wipe: null, + wipedAt: null, + wipeReason: null, + ...over, +}); + +let rows: DeviceView[]; +let posts: Array>; + +beforeEach(() => { + posts = []; + rows = [device({})]; + vi.stubGlobal('fetch', vi.fn(async (input: unknown, init?: RequestInit) => { + if (init?.method === 'POST') { + posts.push(JSON.parse(String(init.body))); + return new Response('{}', { status: 200 }); + } + expect(String(input)).toContain('/api/admin/devices'); + return new Response(JSON.stringify({ devices: rows, total: rows.length }), { status: 200 }); + })); +}); + +describe('the registered devices', () => { + it('lists user, platform, version and last seen', async () => { + render(); + const row = await screen.findByTestId('device-row'); + expect(screen.getByText('alice@example.org')).toBeTruthy(); + expect(row.textContent).toContain('Chrome, Windows'); + expect(row.textContent).toContain('Version 1.2.3'); + expect(row.textContent).toContain('Last seen'); + }); + + it('wipes only after the confirmation, naming who and what', async () => { + render(); + fireEvent.click(await screen.findByTestId('device-wipe')); + expect(posts).toEqual([]); + const dialog = await screen.findByRole('alertdialog').catch(() => screen.getByRole('dialog')); + expect(dialog.textContent).toContain('alice@example.org'); + expect(dialog.textContent).toContain('Mail that was waiting to be sent is lost'); + expect(dialog.textContent).toContain('S/MIME and OpenPGP keys imported in that browser or app go for every account there'); + fireEvent.click(within(dialog).getByRole('button', { name: 'Wipe' })); + await waitFor(() => expect(posts).toEqual([{ action: 'wipe', id: rows[0].id }])); + }); + + it('offers all of a user\'s devices once there are several', async () => { + rows = [device({}), device({ id: `${'a'.repeat(64)}/${'c'.repeat(32)}`, platform: 'Desktop app, Windows' })]; + render(); + fireEvent.click(await screen.findByTestId('devices-wipe-user')); + const dialog = await screen.findByRole('alertdialog').catch(() => screen.getByRole('dialog')); + fireEvent.click(within(dialog).getByRole('button', { name: 'Wipe' })); + await waitFor(() => expect(posts).toEqual([{ action: 'wipe-user', userKey: 'a'.repeat(64) }])); + }); + + it('says a wipe is waiting and lets the admin take it back', async () => { + rows = [device({ wipe: { requestedAt: '2026-11-03T11:00:00.000Z', by: 'admin' } })]; + render(); + const row = await screen.findByTestId('device-row'); + expect(row.textContent).toContain('Wipe waiting'); + expect(screen.queryByTestId('device-wipe')).toBeNull(); + fireEvent.click(screen.getByTestId('device-cancel')); + await waitFor(() => expect(posts).toEqual([{ action: 'cancel', id: rows[0].id }])); + }); + + it('shows a wiped device as such, with nothing more to wipe', async () => { + rows = [device({ wipedAt: '2026-11-03T12:00:00.000Z', wipeReason: 'user' })]; + render(); + const row = await screen.findByTestId('device-row'); + expect(row.textContent).toContain('Wiped'); + expect(row.textContent).toContain('by the user'); + expect(screen.queryByTestId('device-wipe')).toBeNull(); + expect(screen.getByTestId('device-forget')).toBeTruthy(); + }); + + it('says so when nothing registered', async () => { + rows = []; + render(); + expect(await screen.findByTestId('devices-empty')).toBeTruthy(); + }); +}); diff --git a/app/(main)/admin/_pages/device-registry-panel.tsx b/app/(main)/admin/_pages/device-registry-panel.tsx new file mode 100644 index 000000000..eba321350 --- /dev/null +++ b/app/(main)/admin/_pages/device-registry-panel.tsx @@ -0,0 +1,251 @@ +'use client'; + +import { useCallback, useEffect, useMemo, useState } from 'react'; +import { Trash2, X } from '@/components/icons'; +import { AdminList, AdminListRow } from '@/components/admin/list'; +import { Badge } from '@/components/admin/badge'; +import { SettingsSection } from '@/components/settings/settings-section'; +import { Button } from '@/components/ui/button'; +import { ConfirmDialog } from '@/components/ui/confirm-dialog'; +import { apiFetch } from '@/lib/browser-navigation'; +import type { DeviceView } from '@/lib/devices/types'; + +const PAGE_SIZE = 100; + +type Pending = + | { kind: 'device'; device: DeviceView } + | { kind: 'user'; userKey: string; user: string; count: number } + | { kind: 'forget'; device: DeviceView }; + +function when(iso: string | null): string { + return iso ? new Date(iso).toLocaleString() : ''; +} + +/** + * Browsers with offline mode on and desktop apps. A wipe waits for the device's + * next contact, and the row says so until the device confirms. Its own section, + * with no draft and no save bar: each action happens when it's confirmed. + */ +export function DeviceRegistryPanel() { + const [devices, setDevices] = useState(null); + const [total, setTotal] = useState(0); + const [offset, setOffset] = useState(0); + const [query, setQuery] = useState(''); + const [search, setSearch] = useState(''); + const [error, setError] = useState(null); + const [busy, setBusy] = useState(null); + const [pending, setPending] = useState(null); + + const load = useCallback(async () => { + try { + const params = new URLSearchParams({ offset: String(offset), limit: String(PAGE_SIZE) }); + if (search) params.set('q', search); + const res = await apiFetch(`/api/admin/devices?${params}`); + if (!res.ok) throw new Error(`HTTP ${res.status}`); + const data = await res.json() as { devices: DeviceView[]; total: number }; + setDevices(data.devices); + setTotal(data.total); + setError(null); + } catch (e) { + setError(`Could not load the devices (${(e as Error).message})`); + } + }, [offset, search]); + + useEffect(() => { void load(); }, [load]); + + const act = async (key: string, body: Record) => { + setBusy(key); + try { + const res = await apiFetch('/api/admin/devices', { + method: 'POST', + headers: { 'Content-Type': 'application/json' }, + body: JSON.stringify(body), + }); + if (!res.ok) throw new Error(`HTTP ${res.status}`); + await load(); + } catch (e) { + setError(`That didn't work (${(e as Error).message})`); + } finally { + setBusy(null); + } + }; + + const groups = useMemo(() => { + const byUser = new Map(); + for (const device of devices ?? []) { + const rows = byUser.get(device.userKey) ?? []; + rows.push(device); + byUser.set(device.userKey, rows); + } + return [...byUser.entries()].map(([userKey, rows]) => ({ + userKey, + user: rows[0].user, + server: rows[0].server, + rows: [...rows].sort((a, b) => b.lastSeen.localeCompare(a.lastSeen)), + })); + }, [devices]); + + const confirmPending = () => { + if (!pending) return; + setPending(null); + if (pending.kind === 'device') void act(pending.device.id, { action: 'wipe', id: pending.device.id }); + else if (pending.kind === 'forget') void act(pending.device.id, { action: 'forget', id: pending.device.id }); + else void act(pending.userKey, { action: 'wipe-user', userKey: pending.userKey }); + }; + + return ( + + { event.preventDefault(); setOffset(0); setSearch(query.trim()); }} + > + setQuery(event.target.value)} + placeholder="Search by user" + aria-label="Search by user" + className="h-8 min-w-48 flex-1 rounded-md border border-input bg-background px-2 text-sm" + data-testid="devices-search" + /> + Search + + {error && {error}} + {devices !== null && devices.length === 0 && ( + + {search ? 'No device matches that search.' : 'No device has registered yet.'} + + )} + + {groups.map((group) => { + const wipeable = group.rows.filter((device) => !device.wipe && !device.wipedAt); + return ( + + + + {group.user} + {group.server} + + {wipeable.length > 1 && ( + setPending({ kind: 'user', userKey: group.userKey, user: group.user, count: wipeable.length })} + data-testid="devices-wipe-user" + > + Wipe all {wipeable.length} devices + + )} + + + {group.rows.map((device) => ( + Wipe waiting + : device.wipedAt + ? Wiped + : null} + description={device.wipe + ? `Asked ${when(device.wipe.requestedAt)}. Happens the next time this device connects.` + : device.wipedAt + ? `Wiped ${when(device.wipedAt)}${device.wipeReason && device.wipeReason !== 'admin' ? ` (${wipeReasonLabel(device.wipeReason)})` : ''}` + : undefined} + meta={`${device.appVersion ? `Version ${device.appVersion} · ` : ''}Last seen ${when(device.lastSeen)} · First seen ${when(device.firstSeen)}`} + control={( + + {!device.wipe && !device.wipedAt && ( + setPending({ kind: 'device', device })} + data-testid="device-wipe" + > + Wipe + + )} + {device.wipe && ( + { void act(device.id, { action: 'cancel', id: device.id }); }} + data-testid="device-cancel" + > + Take back + + )} + setPending({ kind: 'forget', device })} + data-testid="device-forget" + > + Forget + + + )} + /> + ))} + + + ); + })} + + {total > PAGE_SIZE && ( + + {offset + 1} to {Math.min(offset + PAGE_SIZE, total)} of {total} + + setOffset(Math.max(0, offset - PAGE_SIZE))}>Previous + = total} onClick={() => setOffset(offset + PAGE_SIZE)}>Next + + + )} + setPending(null)} + onConfirm={confirmPending} + title={pending?.kind === 'forget' ? 'Forget this device?' : 'Wipe this data?'} + message={confirmMessage(pending)} + confirmText={pending?.kind === 'forget' ? 'Forget' : 'Wipe'} + variant="destructive" + /> + + ); +} + +function wipeReasonLabel(reason: NonNullable): string { + switch (reason) { + case 'user': return 'by the user'; + case 'rejected': return 'the server refused the login'; + case 'session': return 'the session limit ran out'; + default: return reason; + } +} + +function confirmMessage(pending: Pending | null): string { + if (!pending) return ''; + const consequences = 'Mail, keys and files kept on it are deleted and the account is signed out the next time it connects. Mail that was waiting to be sent is lost. S/MIME and OpenPGP keys imported in that browser or app go for every account there, because they are not kept per account: anyone using them has to import them again. Keys in the OS certificate store stay. The mail on the server is not touched.'; + if (pending.kind === 'device') return `${pending.device.platform || 'This device'} of ${pending.device.user}. ${consequences}`; + if (pending.kind === 'user') return `All ${pending.count} devices of ${pending.user}. ${consequences}`; + return pending.device.wipe + ? `The wipe waiting for ${pending.device.platform || 'this device'} of ${pending.device.user} is dropped with its row. The device will not be told.` + : `${pending.device.platform || 'This device'} of ${pending.device.user} leaves this list. It comes back as a new row if it registers again.`; +} diff --git a/app/(main)/admin/_pages/logs.tsx b/app/(main)/admin/_pages/logs.tsx index 4077e9732..d6930eeb2 100644 --- a/app/(main)/admin/_pages/logs.tsx +++ b/app/(main)/admin/_pages/logs.tsx @@ -63,6 +63,10 @@ export function LogsPage() { Config Update Config Revert Policy Update + Device Wipe Requested + Device Wipe Confirmed + Device Wipe Cancelled + Device Forgotten diff --git a/app/(main)/admin/_pages/org-devices.tsx b/app/(main)/admin/_pages/org-devices.tsx index a7cf2834d..c542cffe8 100644 --- a/app/(main)/admin/_pages/org-devices.tsx +++ b/app/(main)/admin/_pages/org-devices.tsx @@ -4,6 +4,7 @@ import { OrgPage } from '@/components/admin/org/org-page'; import { useOrgPolicyDraft } from '@/components/admin/org/use-org-policy-draft'; import { DevicesSection } from '@/components/admin/org/sections/devices-section'; import { OfflineSection } from '@/components/admin/org/sections/offline-section'; +import { DeviceRegistryPanel } from './device-registry-panel'; export function OrgDevicesPage() { const draft = useOrgPolicyDraft('org-devices'); @@ -11,6 +12,7 @@ export function OrgDevicesPage() { + ); } diff --git a/app/(main)/admin/layout.tsx b/app/(main)/admin/layout.tsx index c666fd358..4ba067930 100644 --- a/app/(main)/admin/layout.tsx +++ b/app/(main)/admin/layout.tsx @@ -4,6 +4,7 @@ import { ThemeProvider } from '@/components/providers/theme-provider'; import { TourProvider } from '@/components/tour/tour-provider'; import { defaultLocale } from '@/i18n/routing'; import { AdminLayoutClient } from './_layout-client'; +import { WindowMenuBar } from '@/components/layout/window-menu-bar'; /** * /admin sits outside the [locale] tree, so it loads the message catalog @@ -25,6 +26,7 @@ export default async function AdminLayout({ children }: { children: React.ReactN + {children} diff --git a/app/(main)/layout.tsx b/app/(main)/layout.tsx index e2704bcc8..e259ae6ad 100644 --- a/app/(main)/layout.tsx +++ b/app/(main)/layout.tsx @@ -20,7 +20,7 @@ import { locales, defaultLocale } from "@/i18n/routing"; import { IS_LITE, LITE_MOUNT_GLOBAL } from "@/lib/lite"; import { accessibilityBootScript } from "@/lib/accessibility-settings"; import { bootSkeletonScript } from "@/lib/boot-skeleton/boot-script"; -import { WindowTitleBar } from "@/components/layout/window-title-bar"; +import { WindowControlsHost } from "@/components/layout/window-controls-host"; import "../globals.css"; import "../print.css"; import "../desktop.css"; @@ -334,7 +334,7 @@ export default async function RootLayout({ className={`${geistSans.variable} ${geistMono.variable} ${hankenGrotesk.variable} antialiased`} > - + {!themeColorConfigured && } diff --git a/app/api/admin/devices/__tests__/auth.test.ts b/app/api/admin/devices/__tests__/auth.test.ts new file mode 100644 index 000000000..77cb78375 --- /dev/null +++ b/app/api/admin/devices/__tests__/auth.test.ts @@ -0,0 +1,91 @@ +import { mkdtempSync, readFileSync, rmSync } from 'node:fs'; +import { tmpdir } from 'node:os'; +import path from 'node:path'; +import { NextRequest } from 'next/server'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; + +// The real admin check, not a stand-in: a wipe request from another site carries +// the admin's cookie, and only the same-origin check stands in its way. + +const jar = vi.hoisted(() => new Map()); +vi.mock('next/headers', () => ({ + cookies: async () => ({ + get: (name: string) => (jar.has(name) ? { name, value: jar.get(name) } : undefined), + set: (name: string, value: string) => { jar.set(name, value); }, + delete: (name: string) => { jar.delete(name); }, + }), +})); + +let dir: string; + +function post(body: unknown, headers: Record): NextRequest { + return new NextRequest('https://mail.example.org/api/admin/devices', { + method: 'POST', + body: JSON.stringify(body), + headers: { 'Content-Type': 'application/json', ...headers }, + }); +} + +function audit(): string { + try { + return readFileSync(path.join(dir, 'audit.log'), 'utf8'); + } catch { + return ''; + } +} + +describe('/api/admin/devices with the real admin check', () => { + let route: typeof import('../route'); + let registry: typeof import('@/lib/devices/registry'); + let row: { id: string }; + + beforeEach(async () => { + vi.resetModules(); + dir = mkdtempSync(path.join(tmpdir(), 'bw-device-admin-')); + vi.stubEnv('ADMIN_STATE_DIR', dir); + vi.stubEnv('ADMIN_CONFIG_DIR', dir); + vi.stubEnv('SESSION_SECRET', 'x'.repeat(64)); + jar.clear(); + route = await import('../route'); + registry = await import('@/lib/devices/registry'); + row = await registry.registerDevice('alice@example.org', 'https://mail.example.org', { platform: 'x', appVersion: '1' }); + const session = await import('@/lib/admin/session'); + const { getAdminSessionGeneration } = await import('@/lib/admin/password'); + jar.set('admin_session', session.createAdminSession(await getAdminSessionGeneration())); + }); + + afterEach(() => { + vi.unstubAllEnvs(); + rmSync(dir, { recursive: true, force: true }); + }); + + it.each([ + ['another site says so', { 'sec-fetch-site': 'cross-site' }], + ['a page on another origin', { origin: 'https://evil.example.net' }], + ])('refuses a wipe with the admin\'s own cookie when %s', async (_name, headers) => { + const response = await route.POST(post({ action: 'wipe', id: row.id }, headers)); + expect(response.status).toBe(403); + expect((await registry.getDevice(row.id))?.wipe).toBeNull(); + expect(audit()).toBe(''); + }); + + it('refuses wiping a whole user from another site', async () => { + const response = await route.POST(post({ action: 'wipe-user', userKey: row.id.split('/')[0] }, { 'sec-fetch-site': 'cross-site' })); + expect(response.status).toBe(403); + expect((await registry.getDevice(row.id))?.wipe).toBeNull(); + }); + + it('takes it from the same origin with the cookie', async () => { + const response = await route.POST(post({ action: 'wipe', id: row.id }, { 'sec-fetch-site': 'same-origin' })); + expect(response.status).toBe(200); + expect((await registry.getDevice(row.id))?.wipe).toMatchObject({ by: 'admin' }); + expect(audit()).toContain('device.wipe.request'); + }); + + it('refuses without the cookie, same origin or not', async () => { + jar.clear(); + const response = await route.POST(post({ action: 'wipe', id: row.id }, { 'sec-fetch-site': 'same-origin' })); + expect(response.status).toBe(401); + expect((await registry.getDevice(row.id))?.wipe).toBeNull(); + }); +}); diff --git a/app/api/admin/devices/route.ts b/app/api/admin/devices/route.ts new file mode 100644 index 000000000..8e0ac47d4 --- /dev/null +++ b/app/api/admin/devices/route.ts @@ -0,0 +1,114 @@ +import { NextRequest, NextResponse } from 'next/server'; +import { auditLog } from '@/lib/admin/audit'; +import { getClientIP, requireAdminAuth } from '@/lib/admin/session'; +import { storeUnavailableResponse } from '@/lib/admin/store-unavailable-response'; +import { + cancelDeviceWipe, + DEVICE_ID_RE, + forgetDevice, + getDevice, + isUserKey, + listDevices, + requestDeviceWipe, + requestUserWipe, +} from '@/lib/devices/registry'; +import { AUDIT_DEVICE_FORGET, AUDIT_DEVICE_WIPE_CANCEL, AUDIT_DEVICE_WIPE_REQUEST, type DeviceView } from '@/lib/devices/types'; +import { logger } from '@/lib/logger'; + +const MAX_PAGE = 200; + +function positiveInt(raw: string | null, fallback: number): number { + const parsed = Number.parseInt(raw ?? '', 10); + return Number.isFinite(parsed) && parsed >= 0 ? parsed : fallback; +} + +function auditDetail(device: DeviceView, by: string): Record { + return { device: device.id, user: device.user, server: device.server, platform: device.platform, by }; +} + +/** Nothing to do: the row as it stands, so a stale page catches up. Only a missing row is an error. */ +async function unchanged(id: string): Promise { + const device = await getDevice(id); + return device ? NextResponse.json({ device }) : NextResponse.json({ error: 'not found' }, { status: 404 }); +} + +/** GET /api/admin/devices?offset=&limit=&q= : the registered devices, a page at a time. */ +export async function GET(request: NextRequest) { + try { + const auth = await requireAdminAuth(request); + if ('error' in auth) return auth.error; + const { searchParams } = request.nextUrl; + const page = await listDevices({ + offset: positiveInt(searchParams.get('offset'), 0), + limit: Math.min(positiveInt(searchParams.get('limit'), 100) || 100, MAX_PAGE), + query: searchParams.get('q') ?? undefined, + }); + return NextResponse.json(page, { headers: { 'Cache-Control': 'no-store' } }); + } catch (error) { + const unavailable = storeUnavailableResponse(error); + if (unavailable) return unavailable; + logger.error('admin devices GET', { error: error instanceof Error ? error.message : String(error) }); + return NextResponse.json({ error: 'Internal server error' }, { status: 500 }); + } +} + +/** + * POST /api/admin/devices + * { action: 'wipe' | 'cancel' | 'forget', id } + * { action: 'wipe-user', userKey } + * + * A wipe waits until the device next reaches this instance. Each request and + * each confirmed wipe goes in the audit log. Someone who controls the instance + * can wipe any device that checks in here: that's the admin's power, on the record. + */ +export async function POST(request: NextRequest) { + try { + const auth = await requireAdminAuth(request); + if ('error' in auth) return auth.error; + // The admin session has a role and no name. + const by = 'admin'; + const ip = getClientIP(request); + + const body = await request.json().catch(() => null) as { action?: unknown; id?: unknown; userKey?: unknown } | null; + const action = body?.action; + + if (action === 'wipe-user') { + if (!isUserKey(body?.userKey)) return NextResponse.json({ error: 'invalid userKey' }, { status: 400 }); + const devices = await requestUserWipe(body.userKey, by); + for (const device of devices) { + if (device.wipe) await auditLog(AUDIT_DEVICE_WIPE_REQUEST, auditDetail(device, by), ip); + } + return NextResponse.json({ devices }); + } + + if (typeof body?.id !== 'string' || !DEVICE_ID_RE.test(body.id)) { + return NextResponse.json({ error: 'invalid id' }, { status: 400 }); + } + + if (action === 'wipe') { + const device = await requestDeviceWipe(body.id, by); + if (!device) return unchanged(body.id); + await auditLog(AUDIT_DEVICE_WIPE_REQUEST, auditDetail(device, by), ip); + return NextResponse.json({ device }); + } + if (action === 'cancel') { + const device = await cancelDeviceWipe(body.id); + if (!device) return unchanged(body.id); + await auditLog(AUDIT_DEVICE_WIPE_CANCEL, auditDetail(device, by), ip); + return NextResponse.json({ device }); + } + if (action === 'forget') { + const device = await getDevice(body.id); + if (!device) return NextResponse.json({ error: 'not found' }, { status: 404 }); + await forgetDevice(body.id); + await auditLog(AUDIT_DEVICE_FORGET, auditDetail(device, by), ip); + return NextResponse.json({ ok: true }); + } + return NextResponse.json({ error: 'unknown action' }, { status: 400 }); + } catch (error) { + const unavailable = storeUnavailableResponse(error); + if (unavailable) return unavailable; + logger.error('admin devices POST', { error: error instanceof Error ? error.message : String(error) }); + return NextResponse.json({ error: 'Internal server error' }, { status: 500 }); + } +} diff --git a/app/api/devices/__tests__/route.test.ts b/app/api/devices/__tests__/route.test.ts new file mode 100644 index 000000000..055485d39 --- /dev/null +++ b/app/api/devices/__tests__/route.test.ts @@ -0,0 +1,320 @@ +import { mkdtempSync, readFileSync, rmSync } from 'node:fs'; +import { tmpdir } from 'node:os'; +import path from 'node:path'; +import { NextRequest } from 'next/server'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; + +const creds = vi.hoisted(() => ({ value: null as null | { accountName: string; serverUrl: string } })); +vi.mock('@/lib/stalwart/credentials', () => ({ getStalwartCredentials: async () => creds.value })); + +const admin = vi.hoisted(() => ({ allowed: true })); +// Rate limits are per address and outlive a test: each test is its own address. +const client = vi.hoisted(() => ({ ip: '', count: 0 })); +vi.mock('@/lib/admin/session', async (original) => ({ + ...await original(), + requireAdminAuth: async () => (admin.allowed + ? { session: { role: 'admin' } } + : { error: new Response(JSON.stringify({ error: 'Unauthorized' }), { status: 401 }) }), + getClientIP: () => client.ip, +})); + +import { POST as checkIn } from '../route'; +import { POST as wiped } from '../wiped/route'; +import { GET as adminList, POST as adminAct } from '../../admin/devices/route'; +import * as registry from '@/lib/devices/registry'; + +let dir: string; + +function request(url: string, body: unknown, headers: Record = {}): NextRequest { + return new NextRequest(`https://mail.example.org${url}`, { + method: 'POST', + body: JSON.stringify(body), + headers: { 'Content-Type': 'application/json', 'sec-fetch-site': 'same-origin', ...headers }, + }); +} + +function audit(): Array<{ action: string; detail: Record; ip: string }> { + try { + return readFileSync(path.join(dir, 'audit.log'), 'utf8').trim().split('\n').map((line) => JSON.parse(line)); + } catch { + return []; + } +} + +async function register(): Promise<{ id: string; secret: string }> { + creds.value = { accountName: 'alice@example.org', serverUrl: 'https://mail.example.org' }; + const response = await checkIn(request('/api/devices', { platform: 'Chrome, Windows', appVersion: '1.0.0' }, { 'X-JMAP-Cookie-Slot': '0' })); + expect(response.status).toBe(200); + const body = await response.json() as { id: string; secret: string }; + // Everything after this works with no session at all. + creds.value = null; + return body; +} + +vi.setConfig({ testTimeout: 60_000 }); + +beforeEach(() => { + client.count += 1; + client.ip = `203.0.113.${client.count}`; + dir = mkdtempSync(path.join(tmpdir(), 'bw-device-routes-')); + vi.stubEnv('ADMIN_STATE_DIR', dir); + admin.allowed = true; + creds.value = null; +}); + +afterEach(() => { + vi.unstubAllEnvs(); + rmSync(dir, { recursive: true, force: true }); +}); + +describe('POST /api/devices', () => { + it('won\'t register anyone without a session cookie', async () => { + const response = await checkIn(request('/api/devices', { platform: 'x', appVersion: '1' })); + expect(response.status).toBe(401); + expect((await registry.listDevices()).total).toBe(0); + }); + + it('keys a new row on the cookie\'s account name', async () => { + const { id } = await register(); + expect(id.split('/')[0]).toBe((await registry.listDevices()).devices[0].userKey); + expect((await registry.getDevice(id))?.user).toBe('alice@example.org'); + }); + + it('refuses another site', async () => { + const response = await checkIn(request('/api/devices', { id: 'x', secret: 'y' }, { 'sec-fetch-site': 'cross-site' })); + expect(response.status).toBe(403); + }); + + it('tells a device with no cookies about its wipe, going by its secret', async () => { + const { id, secret } = await register(); + const before = await checkIn(request('/api/devices', { id, secret, platform: 'x', appVersion: '1' })); + expect(await before.json()).toEqual({ wipe: null }); + + await registry.requestDeviceWipe(id, 'admin'); + const after = await checkIn(request('/api/devices', { id, secret, platform: 'x', appVersion: '1' })); + expect((await after.json() as { wipe: unknown }).wipe).toMatchObject({ requestedAt: expect.any(String) }); + }); + + it('says the same for a wrong secret as for a row that isn\'t there', async () => { + const { id } = await register(); + const wrong = await checkIn(request('/api/devices', { id, secret: 'f'.repeat(64) })); + const missing = await checkIn(request('/api/devices', { id: `${'a'.repeat(64)}/${'b'.repeat(32)}`, secret: 'f'.repeat(64) })); + expect(wrong.status).toBe(404); + expect(await wrong.json()).toEqual(await missing.json()); + }); + + it('tells the device whose row was wiped, so it can start over', async () => { + const { id, secret } = await register(); + await registry.requestDeviceWipe(id, 'admin'); + await registry.confirmDeviceWipe(id, secret, 'admin'); + const answer = await checkIn(request('/api/devices', { id, secret, platform: 'x', appVersion: '1' })); + expect(await answer.json()).toEqual({ wipe: null, wiped: true }); + }); + + it('gives a new row\'s owner with the row, so the device can check it', async () => { + creds.value = { accountName: 'alice@example.org', serverUrl: 'https://mail.example.org' }; + const response = await checkIn(request('/api/devices', { platform: 'x', appVersion: '1' })); + expect(await response.json()).toMatchObject({ user: 'alice@example.org', server: 'https://mail.example.org' }); + }); + + it('holds new rows to a much lower limit per address than check-ins, and a 429 changes nothing', async () => { + creds.value = { accountName: 'alice@example.org', serverUrl: 'https://mail.example.org' }; + const statuses: number[] = []; + for (let i = 0; i <= registry.REGISTER_PER_HOUR; i += 1) { + statuses.push((await checkIn(request('/api/devices', { platform: 'x', appVersion: '1' }))).status); + } + expect(statuses.slice(0, registry.REGISTER_PER_HOUR).every((status) => status === 200)).toBe(true); + expect(statuses.at(-1)).toBe(429); + expect((await registry.listDevices()).total).toBe(registry.REGISTER_PER_HOUR); + + // A device that's already registered still hears about its wipe. + const [{ id }] = (await registry.listDevices()).devices; + await registry.requestDeviceWipe(id, 'admin'); + const answer = await checkIn(request('/api/devices', { id, secret: 'f'.repeat(64) })); + expect(answer.status).toBe(404); + }); + + it('turns down a new row past the cap when every row has a wipe waiting', async () => { + creds.value = { accountName: 'alice@example.org', serverUrl: 'https://mail.example.org' }; + const spy = vi.spyOn(registry, 'registerDevice').mockRejectedValueOnce(new registry.TooManyDevicesError()); + const response = await checkIn(request('/api/devices', { platform: 'x', appVersion: '1' })); + spy.mockRestore(); + expect(response.status).toBe(429); + }); + + it('won\'t store a platform with control characters or at any length', async () => { + creds.value = { accountName: 'alice@example.org', serverUrl: 'https://mail.example.org' }; + const response = await checkIn(request('/api/devices', { platform: `a\nb${'x'.repeat(200)}`, appVersion: '1' })); + const { id } = await response.json() as { id: string }; + const device = await registry.getDevice(id); + expect(device?.platform).not.toContain('\n'); + expect(device?.platform.length).toBeLessThanOrEqual(64); + }); +}); + +describe('POST /api/devices/wiped', () => { + it('confirms with the secret alone and writes an audit entry', async () => { + const { id, secret } = await register(); + await registry.requestDeviceWipe(id, 'admin'); + + const response = await wiped(request('/api/devices/wiped', { id, secret, reason: 'admin', unsent: 2 })); + expect(response.status).toBe(200); + + const device = await registry.getDevice(id); + expect(device?.wipe).toBeNull(); + expect(device?.wipedAt).not.toBeNull(); + const entry = audit().find((line) => line.action === 'device.wipe.confirm'); + expect(entry?.detail).toMatchObject({ device: id, user: 'alice@example.org', reason: 'admin', unsentDeleted: 2 }); + expect(entry?.ip).toBe(client.ip); + }); + + it('sent again, writes no second entry: a row that didn\'t change leaves no trace', async () => { + const { id, secret } = await register(); + await registry.requestDeviceWipe(id, 'admin'); + for (let i = 0; i < 3; i += 1) { + expect((await wiped(request('/api/devices/wiped', { id, secret, reason: 'admin', unsent: 2 }))).status).toBe(200); + } + expect(audit().filter((line) => line.action === 'device.wipe.confirm')).toHaveLength(1); + }); + + it('won\'t let any signed-in user fill the log: repeating a user wipe writes one entry', async () => { + const { id, secret } = await register(); + for (let i = 0; i < 3; i += 1) await wiped(request('/api/devices/wiped', { id, secret, reason: 'user', unsent: 0 })); + expect(audit().filter((line) => line.action === 'device.wipe.confirm')).toHaveLength(1); + }); + + it('refuses reason admin when no wipe was asked, changes nothing and writes nothing', async () => { + const { id, secret } = await register(); + const response = await wiped(request('/api/devices/wiped', { id, secret, reason: 'admin', unsent: 0 })); + expect(response.status).toBe(409); + expect(await response.json()).toEqual({ error: 'no_wipe_asked' }); + expect((await registry.getDevice(id))?.wipedAt).toBeNull(); + expect(audit().filter((line) => line.action === 'device.wipe.confirm')).toEqual([]); + }); + + it('turns down a reason it doesn\'t know instead of calling it the admin\'s', async () => { + const { id, secret } = await register(); + await registry.requestDeviceWipe(id, 'admin'); + expect((await wiped(request('/api/devices/wiped', { id, secret, reason: 'mischief' }))).status).toBe(400); + expect((await registry.getDevice(id))?.wipe).not.toBeNull(); + }); + + it('records an unknown count as unknown, not as none', async () => { + const { id, secret } = await register(); + await registry.requestDeviceWipe(id, 'admin'); + await wiped(request('/api/devices/wiped', { id, secret, reason: 'admin', unsent: null })); + expect(audit().find((line) => line.action === 'device.wipe.confirm')?.detail).toMatchObject({ unsentDeleted: 'unknown' }); + }); + + it('a sign-out drops the row with its secret, and writes nothing', async () => { + const { id, secret } = await register(); + expect((await wiped(request('/api/devices/wiped', { id, secret, drop: true }))).status).toBe(200); + expect(await registry.getDevice(id)).toBeNull(); + expect(audit()).toEqual([]); + }); + + it('a sign-out with a wipe waiting answers that wipe: the row stays, confirmed and on the record', async () => { + const { id, secret } = await register(); + await registry.requestDeviceWipe(id, 'admin'); + expect((await wiped(request('/api/devices/wiped', { id, secret, drop: true }))).status).toBe(200); + const device = await registry.getDevice(id); + expect(device?.wipe).toBeNull(); + expect(device?.wipedAt).not.toBeNull(); + expect(audit().filter((line) => line.action === 'device.wipe.confirm')).toHaveLength(1); + }); + + it('won\'t drop a row without the right secret', async () => { + const { id } = await register(); + expect((await wiped(request('/api/devices/wiped', { id, secret: 'f'.repeat(64), drop: true }))).status).toBe(404); + expect(await registry.getDevice(id)).not.toBeNull(); + }); + + it('answers 429 past the limit and takes nothing', async () => { + const { id } = await register(); + await registry.requestDeviceWipe(id, 'admin'); + let last = 200; + for (let i = 0; i <= 300 && last !== 429; i += 1) { + last = (await wiped(request('/api/devices/wiped', { id, secret: 'f'.repeat(64), reason: 'admin' }))).status; + } + expect(last).toBe(429); + expect((await registry.getDevice(id))?.wipe).not.toBeNull(); + }); + + it('takes nothing without the right secret and writes no entry', async () => { + const { id } = await register(); + await registry.requestDeviceWipe(id, 'admin'); + const response = await wiped(request('/api/devices/wiped', { id, secret: 'f'.repeat(64), reason: 'admin' })); + expect(response.status).toBe(404); + expect((await registry.getDevice(id))?.wipe).not.toBeNull(); + expect(audit().filter((line) => line.action === 'device.wipe.confirm')).toEqual([]); + }); +}); + +describe('/api/admin/devices', () => { + it('is closed without an admin session', async () => { + admin.allowed = false; + expect((await adminAct(request('/api/admin/devices', { action: 'wipe', id: 'x' }))).status).toBe(401); + expect((await adminList(new NextRequest('https://mail.example.org/api/admin/devices'))).status).toBe(401); + }); + + it('wipes one device and writes an audit entry for the request', async () => { + const { id } = await register(); + const response = await adminAct(request('/api/admin/devices', { action: 'wipe', id })); + expect(response.status).toBe(200); + expect((await registry.getDevice(id))?.wipe).toMatchObject({ by: 'admin' }); + expect(audit().map((line) => line.action)).toEqual(['device.wipe.request']); + expect(audit()[0].detail).toMatchObject({ device: id, user: 'alice@example.org', by: 'admin' }); + }); + + it('asking again writes no second entry', async () => { + const { id } = await register(); + await adminAct(request('/api/admin/devices', { action: 'wipe', id })); + const again = await adminAct(request('/api/admin/devices', { action: 'wipe', id })); + expect(again.status).toBe(200); + expect(audit().filter((line) => line.action === 'device.wipe.request')).toHaveLength(1); + }); + + it('wipes all of a user\'s devices, one audit entry each', async () => { + const first = await register(); + const second = await register(); + const response = await adminAct(request('/api/admin/devices', { action: 'wipe-user', userKey: first.id.split('/')[0] })); + expect(response.status).toBe(200); + expect((await registry.getDevice(first.id))?.wipe).not.toBeNull(); + expect((await registry.getDevice(second.id))?.wipe).not.toBeNull(); + expect(audit().filter((line) => line.action === 'device.wipe.request')).toHaveLength(2); + }); + + it('takes a wipe back and forgets a row, on the record', async () => { + const { id } = await register(); + await adminAct(request('/api/admin/devices', { action: 'wipe', id })); + await adminAct(request('/api/admin/devices', { action: 'cancel', id })); + expect((await registry.getDevice(id))?.wipe).toBeNull(); + await adminAct(request('/api/admin/devices', { action: 'forget', id })); + expect(await registry.getDevice(id)).toBeNull(); + expect(audit().map((line) => line.action)).toEqual(['device.wipe.request', 'device.wipe.cancel', 'device.forget']); + }); + + it('lists without any secret', async () => { + const { secret } = await register(); + const response = await adminList(new NextRequest('https://mail.example.org/api/admin/devices')); + const text = await response.text(); + expect(JSON.parse(text).total).toBe(1); + expect(text).not.toContain(secret); + expect(text).not.toContain('secretHash'); + }); + + it('turns down nonsense', async () => { + expect((await adminAct(request('/api/admin/devices', { action: 'wipe', id: '../etc/passwd' }))).status).toBe(400); + expect((await adminAct(request('/api/admin/devices', { action: 'wipe-user', userKey: 'nope' }))).status).toBe(400); + expect((await adminAct(request('/api/admin/devices', { action: 'wipe', id: `${'a'.repeat(64)}/${'b'.repeat(32)}` }))).status).toBe(404); + }); +}); + +describe('the audit log page', () => { + it('can filter by every device action', () => { + const page = readFileSync(path.join(process.cwd(), 'app/(main)/admin/_pages/logs.tsx'), 'utf8'); + for (const action of ['device.wipe.request', 'device.wipe.confirm', 'device.wipe.cancel', 'device.forget']) { + expect(page).toContain(`value="${action}"`); + } + }); +}); diff --git a/app/api/devices/route.ts b/app/api/devices/route.ts new file mode 100644 index 000000000..3d3be4c91 --- /dev/null +++ b/app/api/devices/route.ts @@ -0,0 +1,80 @@ +import { NextRequest, NextResponse } from 'next/server'; +import { getClientIP } from '@/lib/admin/session'; +import { checkInDevice, DEVICE_ID_RE, DEVICE_SECRET_RE, REGISTER_PER_HOUR, registerDevice, TooManyDevicesError } from '@/lib/devices/registry'; +import { logger } from '@/lib/logger'; +import { rejectCrossOriginRequest } from '@/lib/security/same-origin'; +import { getStore } from '@/lib/shared-store'; +import { getStalwartCredentials } from '@/lib/stalwart/credentials'; +import { isStoreUnavailable } from '@/lib/stored-data-errors'; + +const NO_STORE = { 'Cache-Control': 'no-store' }; +const MAX_BODY_BYTES = 2048; +// Per address: a whole office can sit behind one, checking in as it starts up. +const PER_MINUTE = 300; + +function cleanText(value: unknown): string { + if (typeof value !== 'string') return ''; + return value.replace(/[^\x20-\x7e]/g, '').trim().slice(0, 64); +} + +/** + * POST /api/devices + * + * With `{ id, secret }`: a device checks in and hears whether a wipe waits for + * it. No session needed, and nothing goes to the mail server: a device whose + * password was revoked still has to learn about its wipe. + * + * Without them: a new device registers for the signed-in account in the sealed + * context cookie (the slot header picks which). That needs a live session + * cookie, so a browser that restarted registers once its session is restored. + */ +export async function POST(request: NextRequest) { + const crossOrigin = rejectCrossOriginRequest(request); + if (crossOrigin) return crossOrigin; + + const limit = await getStore().counters.reserve([ + { key: `device-checkin:${getClientIP(request)}`, max: PER_MINUTE, windowMs: 60_000 }, + ]).catch(() => ({ ok: true })); + if (!limit.ok) return NextResponse.json({ error: 'rate limited' }, { status: 429, headers: NO_STORE }); + + try { + const text = await request.text(); + if (text.length > MAX_BODY_BYTES) return NextResponse.json({ error: 'too large' }, { status: 413, headers: NO_STORE }); + let body: Record; + try { + body = JSON.parse(text) as Record; + } catch { + return NextResponse.json({ error: 'bad request' }, { status: 400, headers: NO_STORE }); + } + const info = { platform: cleanText(body?.platform), appVersion: cleanText(body?.appVersion) }; + + if (body?.id !== undefined || body?.secret !== undefined) { + if (typeof body.id !== 'string' || !DEVICE_ID_RE.test(body.id) || typeof body.secret !== 'string' || !DEVICE_SECRET_RE.test(body.secret)) { + return NextResponse.json({ error: 'unknown_device' }, { status: 404, headers: NO_STORE }); + } + const device = await checkInDevice(body.id, body.secret, info); + if (!device) return NextResponse.json({ error: 'unknown_device' }, { status: 404, headers: NO_STORE }); + if (device.wipe) return NextResponse.json({ wipe: { requestedAt: device.wipe.requestedAt } }, { headers: NO_STORE }); + // Its data went already. A device still holding this row starts over. + return NextResponse.json(device.wipedAt ? { wipe: null, wiped: true } : { wipe: null }, { headers: NO_STORE }); + } + + const creds = await getStalwartCredentials(request); + if (!creds) return NextResponse.json({ error: 'Not authenticated' }, { status: 401, headers: NO_STORE }); + const newRows = await getStore().counters.reserve([ + { key: `device-register:${getClientIP(request)}`, max: REGISTER_PER_HOUR, windowMs: 60 * 60 * 1000 }, + ]).catch(() => ({ ok: true })); + if (!newRows.ok) return NextResponse.json({ error: 'rate limited' }, { status: 429, headers: NO_STORE }); + const created = await registerDevice(creds.accountName, creds.serverUrl, info); + return NextResponse.json({ ...created, wipe: null }, { headers: NO_STORE }); + } catch (error) { + if (error instanceof Error && error.name === new TooManyDevicesError().name) { + return NextResponse.json({ error: 'too_many_devices' }, { status: 429, headers: NO_STORE }); + } + if (isStoreUnavailable(error)) { + return NextResponse.json({ error: 'Temporarily unavailable' }, { status: 503, headers: { ...NO_STORE, 'Retry-After': '30' } }); + } + logger.error('device check-in', { error: error instanceof Error ? error.message : String(error) }); + return NextResponse.json({ error: 'Internal server error' }, { status: 500, headers: NO_STORE }); + } +} diff --git a/app/api/devices/wiped/route.ts b/app/api/devices/wiped/route.ts new file mode 100644 index 000000000..31c10e2b3 --- /dev/null +++ b/app/api/devices/wiped/route.ts @@ -0,0 +1,78 @@ +import { NextRequest, NextResponse } from 'next/server'; +import { auditLog } from '@/lib/admin/audit'; +import { getClientIP } from '@/lib/admin/session'; +import { confirmDeviceWipe, DEVICE_ID_RE, DEVICE_SECRET_RE, dropDevice } from '@/lib/devices/registry'; +import type { DeviceView } from '@/lib/devices/types'; +import { AUDIT_DEVICE_WIPE_CONFIRM, WIPE_REASONS, type WipeReason } from '@/lib/devices/types'; +import { logger } from '@/lib/logger'; +import { rejectCrossOriginRequest } from '@/lib/security/same-origin'; +import { getStore } from '@/lib/shared-store'; +import { isStoreUnavailable } from '@/lib/stored-data-errors'; + +const NO_STORE = { 'Cache-Control': 'no-store' }; +const MAX_BODY_BYTES = 1024; +// Per address: a whole office can sit behind one, checking in as it starts up. +const PER_MINUTE = 300; + +/** + * POST /api/devices/wiped: a device says its wipe is done. By then it has signed + * out or is about to, so its secret is the proof, not a session. Sent again at + * the next contact until it gets through, so it answers the same each time, and + * only a row that really changes goes in the log. + * + * With `drop`: the account signed out here, with its data, so the row goes too. + */ +export async function POST(request: NextRequest) { + const crossOrigin = rejectCrossOriginRequest(request); + if (crossOrigin) return crossOrigin; + + const limit = await getStore().counters.reserve([ + { key: `device-checkin:${getClientIP(request)}`, max: PER_MINUTE, windowMs: 60_000 }, + ]).catch(() => ({ ok: true })); + if (!limit.ok) return NextResponse.json({ error: 'rate limited' }, { status: 429, headers: NO_STORE }); + + try { + const text = await request.text(); + if (text.length > MAX_BODY_BYTES) return NextResponse.json({ error: 'too large' }, { status: 413, headers: NO_STORE }); + let body: Record; + try { + body = JSON.parse(text) as Record; + } catch { + return NextResponse.json({ error: 'bad request' }, { status: 400, headers: NO_STORE }); + } + if (typeof body?.id !== 'string' || !DEVICE_ID_RE.test(body.id) || typeof body.secret !== 'string' || !DEVICE_SECRET_RE.test(body.secret)) { + return NextResponse.json({ error: 'unknown_device' }, { status: 404, headers: NO_STORE }); + } + const write = (device: DeviceView, reason: WipeReason, unsentDeleted: number | 'unknown') => auditLog(AUDIT_DEVICE_WIPE_CONFIRM, { + device: device.id, + user: device.user, + server: device.server, + platform: device.platform, + reason, + unsentDeleted, + }, getClientIP(request)); + + if (body.drop === true) { + const dropped = await dropDevice(body.id, body.secret); + if (!dropped) return NextResponse.json({ error: 'unknown_device' }, { status: 404, headers: NO_STORE }); + if (dropped.confirmed) await write(dropped.confirmed, 'user', 'unknown'); + return NextResponse.json({ ok: true }, { headers: NO_STORE }); + } + + if (!WIPE_REASONS.includes(body.reason as WipeReason)) return NextResponse.json({ error: 'bad request' }, { status: 400, headers: NO_STORE }); + const reason = body.reason as WipeReason; + const unsent = typeof body.unsent === 'number' && Number.isFinite(body.unsent) && body.unsent >= 0 ? Math.floor(body.unsent) : 'unknown'; + + const answer = await confirmDeviceWipe(body.id, body.secret, reason); + if (!answer) return NextResponse.json({ error: 'unknown_device' }, { status: 404, headers: NO_STORE }); + if (answer === 'no_wipe_asked') return NextResponse.json({ error: 'no_wipe_asked' }, { status: 409, headers: NO_STORE }); + if (answer.changed) await write(answer.device, reason, unsent); + return NextResponse.json({ ok: true }, { headers: NO_STORE }); + } catch (error) { + if (isStoreUnavailable(error)) { + return NextResponse.json({ error: 'Temporarily unavailable' }, { status: 503, headers: { ...NO_STORE, 'Retry-After': '30' } }); + } + logger.error('device wipe confirmation', { error: error instanceof Error ? error.message : String(error) }); + return NextResponse.json({ error: 'Internal server error' }, { status: 500, headers: NO_STORE }); + } +} diff --git a/app/api/errors/__tests__/route.test.ts b/app/api/errors/__tests__/route.test.ts index d53e1dde6..c32f23499 100644 --- a/app/api/errors/__tests__/route.test.ts +++ b/app/api/errors/__tests__/route.test.ts @@ -102,3 +102,22 @@ describe('POST /api/errors', () => { expect((await POST(post('not json'))).status).toBe(400); }); }); + +describe('a desktop app\'s version', () => { + it.each(['0.3.0-beta.1+desktop', '1.20.0+desktop', '1.20.0-rc.2'])('keeps %s', async (version) => { + config.errorReportingDsn = DSN; + const res = await POST(post({ name: 'TypeError', frames: [], version })); + expect(res.status).toBe(204); + await flushErrors(); + const day = (await readErrors())[utcDay()] ?? {}; + expect(Object.values(day).map((entry) => entry.version)).toContain(version); + }); + + it.each(['1.20.0+a+b', '1.20.0-beta/../x', 'not a version'])('falls back to the server\'s for %s', async (version) => { + config.errorReportingDsn = DSN; + await POST(post({ name: 'RangeError', frames: [], version })); + await flushErrors(); + const day = (await readErrors())[utcDay()] ?? {}; + expect(Object.values(day).map((entry) => entry.version)).not.toContain(version); + }); +}); diff --git a/app/api/errors/route.ts b/app/api/errors/route.ts index b31a38952..0bdb02235 100644 --- a/app/api/errors/route.ts +++ b/app/api/errors/route.ts @@ -65,7 +65,7 @@ export async function POST(request: NextRequest) { 'browser', // The version the tab runs (a tab left open across an update runs the // old one, and its frames point into that); the server's when absent. - typeof body.version === 'string' && /^\d+\.\d+\.\d+(?:[-+][\w.-]{1,40})?$/.test(body.version) ? body.version : appVersion(), + typeof body.version === 'string' && /^\d+\.\d+\.\d+(?:-[\w.-]{1,40})?(?:\+[\w.-]{1,40})?$/.test(body.version) ? body.version : appVersion(), ); countBrowserError(); return new NextResponse(null, { status: 204, headers: NO_STORE }); diff --git a/app/api/plugin-secrets/__tests__/wipe.test.ts b/app/api/plugin-secrets/__tests__/wipe.test.ts new file mode 100644 index 000000000..075138ac9 --- /dev/null +++ b/app/api/plugin-secrets/__tests__/wipe.test.ts @@ -0,0 +1,70 @@ +/** + * @vitest-environment node + */ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { NextRequest } from 'next/server'; + +// Deleting everything of one user, which only makes sense where the server and its +// files are on the device: the desktop app. On an instance the same request is a +// way to delete someone else's connected accounts, so it has to do nothing. + +const deleted = vi.hoisted(() => [] as unknown[]); +const session = vi.hoisted(() => ({ signedIn: false })); +vi.mock('@/lib/stalwart/credentials', () => ({ + getStalwartCredentials: async () => (session.signedIn ? { accountName: 'me@example.org', serverUrl: 'https://mail.example.org', authHeader: 'x' } : null), +})); +vi.mock('@/lib/admin/config-manager', () => ({ + configManager: { ensureLoaded: async () => {}, get: () => undefined, getPolicy: () => ({ features: { pluginsEnabled: true } }) }, +})); +vi.mock('@/lib/plugin-secrets/vault', () => ({ + VaultFullError: class extends Error {}, + deleteAllUserCredentials: vi.fn(async (user: unknown) => { deleted.push(user); }), + deleteUserCredentials: vi.fn(async () => {}), + listUserCredentials: vi.fn(async () => []), + putUserCredential: vi.fn(async () => {}), +})); + +async function remove(query: string, headers: Record = { 'sec-fetch-site': 'same-origin' }): Promise { + vi.resetModules(); + const { DELETE } = await import('../route'); + return DELETE(new NextRequest(`https://app.local/api/plugin-secrets?${query}`, { method: 'DELETE', headers })); +} + +const EVICTED = 'all=true&username=alice&server=https%3A%2F%2Fmail.example.org'; + +beforeEach(() => { + deleted.length = 0; + session.signedIn = false; +}); + +afterEach(() => { + vi.unstubAllEnvs(); +}); + +describe('DELETE /api/plugin-secrets?all=true', () => { + it('in the desktop app takes a dropped account by who it was, with no cookie', async () => { + vi.stubEnv('NEXT_PUBLIC_BULWARK_DESKTOP', '1'); + expect((await remove(EVICTED)).status).toBe(200); + expect(deleted).toEqual([{ username: 'alice', serverUrl: 'https://mail.example.org' }]); + }); + + it('won\'t take it from another site', async () => { + vi.stubEnv('NEXT_PUBLIC_BULWARK_DESKTOP', '1'); + expect((await remove(EVICTED, { 'sec-fetch-site': 'cross-site' })).status).toBe(403); + expect(deleted).toEqual([]); + }); + + it('on an instance deletes nobody\'s, with a cookie or without', async () => { + expect((await remove(EVICTED)).status).toBe(401); + session.signedIn = true; + await remove(EVICTED); + expect(deleted).toEqual([]); + }); + + it('in the desktop app with a cookie and no name takes the signed-in account', async () => { + vi.stubEnv('NEXT_PUBLIC_BULWARK_DESKTOP', '1'); + session.signedIn = true; + expect((await remove('all=true')).status).toBe(200); + expect(deleted).toEqual([{ username: 'me@example.org', serverUrl: 'https://mail.example.org' }]); + }); +}); diff --git a/app/api/plugin-secrets/route.ts b/app/api/plugin-secrets/route.ts index e235b5a0c..b767e0dbe 100644 --- a/app/api/plugin-secrets/route.ts +++ b/app/api/plugin-secrets/route.ts @@ -7,12 +7,14 @@ import { adminCredentialOrigins, adminCredentialStatus } from '@/lib/plugin-secr import { declaredUserCredential } from '@/lib/plugin-secrets/known-plugins'; import { VaultFullError, + deleteAllUserCredentials, deleteUserCredentials, listUserCredentials, putUserCredential, type VaultUser, } from '@/lib/plugin-secrets/vault'; import { storedDataUnavailableResponse } from '@/lib/stored-data-errors'; +import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; const PLUGIN_ID_RE = /^[a-z0-9][a-z0-9-]*[a-z0-9]$/; const MAX_SECRET_LENGTH = 4096; @@ -112,8 +114,34 @@ export async function POST(request: NextRequest) { export async function DELETE(request: NextRequest) { const crossOrigin = rejectCrossOriginRequest(request); if (crossOrigin) return crossOrigin; + // An account dropped earlier, in the desktop app: no cookie left, and this server serves this device alone. + const { searchParams } = request.nextUrl; + const owner = searchParams.get('username'); + const server = searchParams.get('server'); + if (IS_DESKTOP_BUILD && searchParams.get('all') === 'true' && owner && server) { + try { + await deleteAllUserCredentials({ username: owner, serverUrl: server }); + return NextResponse.json({ ok: true }, { headers: NO_STORE }); + } catch (error) { + const unavailable = storedDataUnavailableResponse(error, NO_STORE); + if (unavailable) return unavailable; + throw error; + } + } const user = await currentUser(request); if (user instanceof NextResponse) return user; + // A wipe in the desktop app, where this server and its files are on the device. + // On an instance they aren't the device's to remove. + if (IS_DESKTOP_BUILD && request.nextUrl.searchParams.get('all') === 'true') { + try { + await deleteAllUserCredentials(user); + return NextResponse.json({ ok: true }, { headers: NO_STORE }); + } catch (error) { + const unavailable = storedDataUnavailableResponse(error, NO_STORE); + if (unavailable) return unavailable; + throw error; + } + } const pluginId = request.nextUrl.searchParams.get('plugin') ?? ''; const credentialId = request.nextUrl.searchParams.get('credential') ?? undefined; if (!PLUGIN_ID_RE.test(pluginId)) return bad('Invalid plugin id'); diff --git a/app/desktop.css b/app/desktop.css index 7f1b55c74..49ca879bc 100644 --- a/app/desktop.css +++ b/app/desktop.css @@ -36,8 +36,7 @@ html[data-desktop] :is( [role="treeitem"], [role="row"], [data-composer-header], - [data-mv-compose-titlebar], - [data-window-title-bar] + [data-mv-compose-titlebar] ) { -webkit-user-select: none; user-select: none; diff --git a/app/globals.css b/app/globals.css index 212b080c2..30a67a4e3 100644 --- a/app/globals.css +++ b/app/globals.css @@ -569,24 +569,144 @@ optgroup { /* Mobile Responsive Utilities */ /* - * The top of the page in an installed app without a native title bar. 0 - * without one: then --app-top-inset is exactly env(safe-area-inset-top), what - * the page roots used before. env() and not the display-mode media query, - * which is false in Electron with titleBarOverlay. Set at the root, so it - * holds from the first paint, for the boot skeletons too; - * lib/window-controls-overlay.ts keeps it up to date afterwards. + * An installed app or the desktop app with no native title bar. No row is kept + * for it: --titlebar-inset is 0, and the app's columns run to the top of the + * window. The window's controls sit in the top row of the column beneath them, + * which leaves them their room. env() and not the display-mode media query, + * which is false in Electron with titleBarOverlay. Set at the root, so it holds + * from the first paint, for the boot skeletons too; + * lib/window-controls-overlay.ts keeps it exact afterwards, and marks the rows. */ :root { - --titlebar-inset: env(titlebar-area-height, 0px); - --app-top-inset: max(env(safe-area-inset-top), var(--titlebar-inset)); + --titlebar-inset: 0px; + --app-top-inset: env(safe-area-inset-top, 0px); + --titlebar-right-inset: calc(100vw - env(titlebar-area-x, 0px) - env(titlebar-area-width, 100vw)); + --titlebar-left-inset: env(titlebar-area-x, 0px); + --titlebar-row-height: env(titlebar-area-height, 0px); } -/* components/layout/window-title-bar.tsx: what the window is dragged by. */ -.window-title-bar { +/* A skeleton's row that will hold the controls has them from the first frame. */ +html[data-window-controls] [data-window-row-right] { + padding-right: calc(var(--titlebar-right-inset) + 0.5rem) !important; +} + +/* Something floating at the top end of a page with no row: next to the controls, lined up. */ +html[data-window-controls]:not([dir="rtl"]) [data-window-beside-controls] { + right: calc(var(--titlebar-right-inset) + 0.5rem); + top: calc(var(--titlebar-row-height) / 2 - 1.25rem); +} + +/* A column docked at the window's end starts below the controls, level with its neighbours' rows. */ +html[data-window-controls]:not([data-interface-layout="mountain-view"]) [data-window-end-column] { + padding-top: var(--titlebar-row-height); +} + +/* A composer that is its own window closes with the window's button, one row over. */ +html[data-window-controls] [data-own-window-close] { + display: none; +} + +/* A top row is at least as tall as the controls, so they don't hang over what's below it. */ +html[data-window-controls] [data-window-row] { + min-height: var(--titlebar-row-height); +} + +/* + * Mountain View's bar is the top row there, and lines up with the controls by being as + * tall. An installed PWA's controls are shorter than what's in that bar. + */ +html[data-window-controls] [data-mv-topbar] { + height: max(var(--titlebar-row-height), 3.5rem); +} + +/* Pro's tab strip is the top row there: as tall as the controls, its tabs along the bottom edge. */ +html[data-window-controls] [data-pane-strip] { + height: max(var(--titlebar-row-height), 2.25rem); + align-items: flex-end; +} + +html[data-window-controls] [data-window-row-left] { + padding-left: calc(var(--titlebar-left-inset) + 0.5rem) !important; +} + +/* + * The empty parts of the app's top rows are what the window is dragged by, and a + * double-click there maximises. Anything to click stays clickable, and so does + * whatever floats over a row: a region's drag wins over what's painted above it. + * + * Under the rows lies the band the controls have, invisible and first in the page, so + * a page with no row of its own (the login, an error) can still be moved. Everything + * later in the page cuts its own shape out of it. + */ +html[data-window-controls] body::before { + content: ""; + position: fixed; + inset-inline: 0; + top: 0; + height: var(--titlebar-row-height); + pointer-events: none; app-region: drag; -webkit-app-region: drag; } +html[data-window-controls] :is([data-window-row], [data-window-rail]) { + app-region: drag; + -webkit-app-region: drag; +} + +/* A row that's only there to hold the controls: the settings page's name, for one. */ +[data-window-only] { + display: none !important; +} + +html[data-window-controls]:not([data-interface-layout="mountain-view"]) [data-window-only] { + display: flex !important; +} + +html[data-window-controls] :is( + a, + button, + input, + label, + select, + summary, + textarea, + [contenteditable="true"], + [role="button"], + iframe, + [role="checkbox"], + [role="combobox"], + [role="link"], + [role="menu"], + [role="menuitem"], + [role="option"], + [role="searchbox"], + [role="switch"], + [role="tab"], + [role="treeitem"], + [tabindex]:not([tabindex="-1"]), + [draggable="true"] +) { + app-region: no-drag; + -webkit-app-region: no-drag; +} + +html[data-window-controls] :is(.fixed, [role="dialog"], [role="alertdialog"], [role="menu"], [role="listbox"], [role="tooltip"]) { + app-region: no-drag; + -webkit-app-region: no-drag; +} + +/* A dialog's own top row, when it fills the window, is a row like any other. */ +html[data-window-controls] :is(.fixed, [role="dialog"]) [data-window-row] { + app-region: drag; + -webkit-app-region: drag; +} + +/* macOS: the traffic lights sit at the top of the rail, with room there only. */ +html[data-window-controls-left] [data-window-rail] { + padding-top: var(--titlebar-row-height); +} + /* Safe area insets for notched devices (iPhone X+, etc.) */ .safe-area-inset-top { padding-top: env(safe-area-inset-top); diff --git a/app/manifest.ts b/app/manifest.ts index c95478c26..41f989ba2 100644 --- a/app/manifest.ts +++ b/app/manifest.ts @@ -126,7 +126,7 @@ export default async function manifest(): Promise { scope: withBase("/"), display: "standalone", // The page draws up to the top of the window, next to the native controls - // (components/layout/window-title-bar.tsx). `display` is the fallback. + // (components/layout/window-controls-host.tsx). `display` is the fallback. display_override: ["window-controls-overlay", "standalone"], orientation: "portrait-primary", theme_color: themeColor, diff --git a/components/admin/admin-shell.tsx b/components/admin/admin-shell.tsx index 857ab630b..0c2ffeaf7 100644 --- a/components/admin/admin-shell.tsx +++ b/components/admin/admin-shell.tsx @@ -442,6 +442,10 @@ export function AdminShell({ authenticated, isStalwartAutoLogin, configReadOnly, + {/* Only for the window's controls: the sidebar says which page is open. */} + + {pageName ?? 'Admin'} + {readOnlyBanner} diff --git a/components/admin/org/__tests__/offline-section.test.tsx b/components/admin/org/__tests__/offline-section.test.tsx index a5051d4fb..2b5630630 100644 --- a/components/admin/org/__tests__/offline-section.test.tsx +++ b/components/admin/org/__tests__/offline-section.test.tsx @@ -59,6 +59,22 @@ describe('Offline mode section', () => { expect((puts[0].organisation as { devices: { noOffline: boolean } }).devices.noOffline).toBe(true); }); + it('leaves a refused login\'s data alone by default, and can ask for deletion at once, per scope', async () => { + await renderSection(); + const toggle = screen.getByTestId('org-devices-wipeOnForcedSignOut'); + expect(toggle.getAttribute('aria-checked')).toBe('false'); + act(() => latest!.setScopeId('field')); + fireEvent.click(screen.getByTestId('org-devices-wipeOnForcedSignOut')); + expect(latest!.policy?.scopes?.[0].policy.organisation).toEqual({ devices: { wipeOnForcedSignOut: true } }); + expect(latest!.policy?.organisation?.devices.wipeOnForcedSignOut).toBe(false); + }); + + it('says what a sign-out does now, for the timers too', async () => { + await renderSection(); + expect(document.body.textContent).not.toContain('Every sign-out, the automatic one after inactivity included, deletes everything'); + expect(document.body.textContent).toContain('A sign-out someone asks for deletes everything'); + }); + it('writes a scope override only into that scope', async () => { await renderSection(); act(() => latest!.setScopeId('field')); diff --git a/components/admin/org/sections/offline-section.tsx b/components/admin/org/sections/offline-section.tsx index 359648627..9a806ccbc 100644 --- a/components/admin/org/sections/offline-section.tsx +++ b/components/admin/org/sections/offline-section.tsx @@ -50,6 +50,7 @@ const describeCap = (value: number, unit: string) => (value > 0 ? `${value} ${un export function OfflineSection({ draft }: { draft: OrgPolicyDraft }) { const forbid = draft.orgValue('devices', 'noOffline'); const noAttachments = draft.orgValue('devices', 'noOfflineAttachments'); + const wipeOnRefused = draft.orgValue('devices', 'wipeOnForcedSignOut'); return ( draft.clearOrgValue('devices', 'noOfflineAttachments')} /> + + + draft.setOrgValue('devices', 'wipeOnForcedSignOut', v)} testId="org-devices-wipeOnForcedSignOut" /> + draft.clearOrgValue('devices', 'wipeOnForcedSignOut')} /> + + What a device keeps: mail in every folder from the window the person picks (30 days, 90 days, a year or everything), with calendar, contacts and files, encrypted on the device. That protects against someone copying its files, not against someone using the unlocked browser or app. The limits above can only lower what people pick: where several scopes apply, the lowest value counts, so a scope can't raise what another one lowered. The app holds itself to - them when it fetches the policy; the server can't check what is on a device. Every sign-out, the automatic one - after inactivity included, deletes everything. With several accounts signed in, each account follows its own settings. + them when it fetches the policy; the server can't check what is on a device. A sign-out someone asks for deletes everything. + One that nobody asked for hides it, as the switch above says. With several accounts signed in, each account follows its own settings. Bulwark Lite reads the same policy but has no offline mode.{' '} How offline mode works diff --git a/components/boot-skeleton/admin-skeleton.tsx b/components/boot-skeleton/admin-skeleton.tsx index 16bc29d97..0db2ff49b 100644 --- a/components/boot-skeleton/admin-skeleton.tsx +++ b/components/boot-skeleton/admin-skeleton.tsx @@ -227,6 +227,9 @@ export function AdminSkeleton({ label, page, backLabel, searchLabel, labels, cla + + + diff --git a/components/boot-skeleton/calendar-skeleton.tsx b/components/boot-skeleton/calendar-skeleton.tsx index 28191a02c..87011e717 100644 --- a/components/boot-skeleton/calendar-skeleton.tsx +++ b/components/boot-skeleton/calendar-skeleton.tsx @@ -176,7 +176,7 @@ function ToolbarSkeleton({ text }: { text?: CalendarSkeletonText }) { const views = text?.views; return ( <> - + diff --git a/components/boot-skeleton/files-skeleton.tsx b/components/boot-skeleton/files-skeleton.tsx index 840ec325e..6802ccd98 100644 --- a/components/boot-skeleton/files-skeleton.tsx +++ b/components/boot-skeleton/files-skeleton.tsx @@ -199,7 +199,7 @@ function FilesSidebarSkeleton() { function FilesHeaderSkeleton({ picker }: { picker: boolean }) { const on = "bg-primary/10 text-primary"; return ( - + {picker ? null : } diff --git a/components/boot-skeleton/login-skeleton.tsx b/components/boot-skeleton/login-skeleton.tsx index c36e4ef8d..28141c548 100644 --- a/components/boot-skeleton/login-skeleton.tsx +++ b/components/boot-skeleton/login-skeleton.tsx @@ -65,7 +65,7 @@ export function LoginSkeleton({ label, accessibilityButton = false, className }: )} > {/* The theme menu button: its icon, and the theme's name from sm up. */} - + diff --git a/components/boot-skeleton/mail-skeleton.tsx b/components/boot-skeleton/mail-skeleton.tsx index 063d040ba..a13165166 100644 --- a/components/boot-skeleton/mail-skeleton.tsx +++ b/components/boot-skeleton/mail-skeleton.tsx @@ -411,7 +411,7 @@ export function MailMessageToolbarSkeleton({ end }: { end?: ReactNode } = {}) { const button = "h-8 w-20 rounded-md"; return ( - + {/* Phones: back, then icon-over-label actions. */} diff --git a/components/boot-skeleton/pro-skeleton.tsx b/components/boot-skeleton/pro-skeleton.tsx index 3e6eecda0..6065e72d5 100644 --- a/components/boot-skeleton/pro-skeleton.tsx +++ b/components/boot-skeleton/pro-skeleton.tsx @@ -34,6 +34,8 @@ function TabStripSkeleton() { return ( diff --git a/components/boot-skeleton/settings-skeleton.tsx b/components/boot-skeleton/settings-skeleton.tsx index 7d8c868ec..f9d73e546 100644 --- a/components/boot-skeleton/settings-skeleton.tsx +++ b/components/boot-skeleton/settings-skeleton.tsx @@ -163,7 +163,7 @@ function SettingsPage({ sections }: { sections: number }) { /** A phone header row: back arrow, title, then the ⋮ menu and the avatar (PhoneHeaderActions). */ function PhoneHeader({ list }: { list: boolean }) { return ( - + @@ -270,6 +270,11 @@ export function SettingsSkeletonBody({ embedded = false }: { embedded?: boolean + {embedded ? null : ( + + + + )} diff --git a/components/calendar/calendar-toolbar.tsx b/components/calendar/calendar-toolbar.tsx index 75fb07763..40c372390 100644 --- a/components/calendar/calendar-toolbar.tsx +++ b/components/calendar/calendar-toolbar.tsx @@ -225,7 +225,7 @@ export function CalendarToolbar({ {/* ── MOBILE TOOLBAR ── */} {isMobile && ( - + {/* Row 1 while searching: the search box with a way back. */} {mobileSearchField ? ( diff --git a/components/calendar/event-modal.tsx b/components/calendar/event-modal.tsx index 57fad15a2..94438b553 100644 --- a/components/calendar/event-modal.tsx +++ b/components/calendar/event-modal.tsx @@ -1037,7 +1037,7 @@ export function EventModal({ {/* Header */} - + diff --git a/components/calendar/missed-reminders-dialog.tsx b/components/calendar/missed-reminders-dialog.tsx new file mode 100644 index 000000000..2b4ed8af3 --- /dev/null +++ b/components/calendar/missed-reminders-dialog.tsx @@ -0,0 +1,76 @@ +"use client"; + +import { useLocale, useTranslations } from "next-intl"; +import { Button } from "@/components/ui/button"; +import { Dialog } from "@/components/ui/dialog"; +import { getPathPrefix } from "@/lib/browser-navigation"; +import { reminderTimeZone, useMissedReminders } from "@/lib/calendar-reminders/state"; +import { dismissReminders, joinLabel, joinMeeting } from "@/lib/desktop/reminder-notifications"; +import { useSettingsStore } from "@/stores/settings-store"; + +/** What came due while the app was closed, the machine slept or notifications were paused. */ +export function MissedRemindersDialog() { + const t = useTranslations("desktopReminders"); + const tAlert = useTranslations("calendar.notifications"); + const locale = useLocale(); + const timeZone = useSettingsStore((s) => s.timeZone); + const account = useMissedReminders((s) => s.account); + const alerts = useMissedReminders((s) => s.alerts); + const close = useMissedReminders((s) => s.close); + const joinLabels = { join: t("join"), joinHost: (host: string) => t("join_host", { host }) }; + + if (!account || alerts.length === 0) return null; + + const format = new Intl.DateTimeFormat(locale, { dateStyle: "medium", timeStyle: "short", timeZone: reminderTimeZone(timeZone) }); + const finish = () => { + dismissReminders(account, alerts.map((alert) => alert.key)); + close(); + }; + + return ( + + { + finish(); + window.location.href = `${getPathPrefix(locale)}/${locale}/calendar`; + }} + > + {t("open_calendar")} + + {t("done")} + + )} + > + + {alerts.map((alert) => ( + + + {alert.title || tAlert("alert_title")} + + {format.format(new Date(alert.startMs ?? alert.fireTimeMs))} + {alert.calendarName ? ` · ${alert.calendarName}` : ""} + + + {alert.joinUrl && ( + void joinMeeting(alert.joinUrl!)} + > + {joinLabel(alert, joinLabels)} + + )} + + ))} + + + ); +} diff --git a/components/calendar/task-modal.tsx b/components/calendar/task-modal.tsx index a23cfd610..75ea6439a 100644 --- a/components/calendar/task-modal.tsx +++ b/components/calendar/task-modal.tsx @@ -222,7 +222,7 @@ export function TaskModal({ onKeyDown={handleKeyDown} > {/* Header */} - + {isEdit ? t("tasks.edit") : t("tasks.create")} diff --git a/components/contacts/contact-detail.tsx b/components/contacts/contact-detail.tsx index 2b0b382d3..2f6b44f0d 100644 --- a/components/contacts/contact-detail.tsx +++ b/components/contacts/contact-detail.tsx @@ -99,7 +99,9 @@ export function ContactDetail({ contact, onEdit, onDelete, onAddToGroup, onDupli if (!contact) { return ( - + + {/* The window's controls lie over this end, and its empty top is something to drag by. */} + {t("detail.no_contact_selected")} @@ -139,7 +141,7 @@ export function ContactDetail({ contact, onEdit, onDelete, onAddToGroup, onDupli return ( - + diff --git a/components/contacts/contact-form.tsx b/components/contacts/contact-form.tsx index d35baf1af..dbd29960a 100644 --- a/components/contacts/contact-form.tsx +++ b/components/contacts/contact-form.tsx @@ -704,7 +704,7 @@ export function ContactForm({ contact, addressBooks, allKeywords, defaultAddress // The app checks the fields itself and says what is wrong inline; the // browser's own bubble covered that message. - + {isEditing ? t("edit_title") : t("create_title")} diff --git a/components/contacts/contact-group-detail.tsx b/components/contacts/contact-group-detail.tsx index 68d99cf85..48a251453 100644 --- a/components/contacts/contact-group-detail.tsx +++ b/components/contacts/contact-group-detail.tsx @@ -48,7 +48,7 @@ export function ContactGroupDetail({ return ( - + diff --git a/components/contacts/contact-group-form.tsx b/components/contacts/contact-group-form.tsx index c1c11278f..58e5b8bce 100644 --- a/components/contacts/contact-group-form.tsx +++ b/components/contacts/contact-group-form.tsx @@ -88,7 +88,7 @@ export function ContactGroupForm({ return ( - + {isEditing ? t("groups.edit") : t("groups.create")} diff --git a/components/desktop/__tests__/desktop-host.test.tsx b/components/desktop/__tests__/desktop-host.test.tsx new file mode 100644 index 000000000..9f6da218b --- /dev/null +++ b/components/desktop/__tests__/desktop-host.test.tsx @@ -0,0 +1,313 @@ +import { act, cleanup, render, waitFor } from '@testing-library/react'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import type { BulwarkDesktopBridge } from '@/lib/desktop/types'; +import { registerDesktopSurface, resetDesktopCommands } from '@/lib/desktop/commands'; +import { readDesktopPrefs, resetDesktopPrefsCache, setDesktopPref } from '@/lib/desktop/preferences'; +import { resetDesktopLanguages } from '@/lib/desktop/languages'; +import { registerComposeFlush, resetComposeFlushRegistry } from '@/lib/compose-flush-registry'; +import { useToastStore } from '@/stores/toast-store'; +import { useAuthStore } from '@/stores/auth-store'; +import { useLocaleStore } from '@/stores/locale-store'; +import { useOfflineStore } from '@/lib/offline/state'; + +const push = vi.fn(); +vi.mock('@/i18n/navigation', () => ({ useRouter: () => ({ push }) })); + +const canPrint = vi.fn(() => true); +const canDownload = vi.fn(() => true); +vi.mock('@/lib/device-policy', () => ({ canPrintAnywhere: () => canPrint(), canDownloadAnywhere: () => canDownload() })); +vi.mock('@/hooks/use-device-policy', () => ({ useStrictestDevices: () => strictest.current })); +const strictest = vi.hoisted(() => ({ current: {} as object })); + +const resolveExternalLink = vi.fn(async (ctx: { href: string }) => ctx.href as string | null); +vi.mock('@/lib/plugin-hook-result', () => ({ resolveExternalLink: (ctx: { href: string }) => resolveExternalLink(ctx) })); +const requestInternalMailto = vi.fn((_raw: string) => true); +vi.mock('@/lib/protocol-handlers/mailto', () => ({ requestInternalMailto: (raw: string) => requestInternalMailto(raw) })); +const allowed = vi.hoisted(() => ({ dictionary: true })); +vi.mock('@/lib/desktop/dictionary-download', () => ({ dictionaryDownloadAllowed: () => allowed.dictionary })); +const signOut = vi.hoisted(() => ({ full: [] as (() => void)[], before: [] as (() => Promise)[] })); +vi.mock('@/lib/sign-out-cleanup', async (original) => ({ + ...(await original()), + onFullSignOut: (task: () => void) => signOut.full.push(task), + onBeforeSignOut: (task: () => Promise) => signOut.before.push(task), +})); + +const { DesktopHost } = await import('../desktop-host'); + +function fakeBridge() { + let command: ((id: string) => void) | null = null; + let flush: (() => Promise) | null = null; + let missing: ((language: string) => void) | null = null; + const parts = { + setState: vi.fn(), + setLanguages: vi.fn(), + sessionReady: vi.fn(), + setRestoreEnabled: vi.fn(), + setTheme: vi.fn(), + openExternal: vi.fn(), + allowDownload: vi.fn(), + clearFiles: vi.fn(), + }; + const bridge = { + version: 1, + platform: 'win32', + menu: { setState: parts.setState, onCommand: (listener: (id: string) => void) => { command = listener; return () => {}; } }, + shell: { openExternal: parts.openExternal, setLanguages: parts.setLanguages }, + spellcheck: { missing: async () => [], onMissing: (listener: (language: string) => void) => { missing = listener; return () => {}; }, allowDownload: parts.allowDownload }, + clipboard: { copyFile: async () => true, clearFiles: parts.clearFiles }, + windows: { sessionReady: parts.sessionReady, setRestoreEnabled: parts.setRestoreEnabled }, + theme: { set: parts.setTheme, system: async () => ({ dark: false, highContrast: false }) }, + lifecycle: { onFlushRequest: (handler: () => Promise) => { flush = handler; return () => {}; } }, + }; + window.bulwarkDesktop = bridge as unknown as BulwarkDesktopBridge; + return { ...parts, run: (id: string) => act(() => command!(id)), flush: () => flush!(), missing: (language: string) => act(() => missing!(language)) }; +} + +const original = useAuthStore.getState(); + +beforeEach(() => { + push.mockClear(); + resolveExternalLink.mockClear(); + resolveExternalLink.mockImplementation(async (ctx) => ctx.href); + requestInternalMailto.mockClear(); + requestInternalMailto.mockReturnValue(true); + allowed.dictionary = true; + signOut.full.length = 0; + signOut.before.length = 0; + resetDesktopLanguages(); + canPrint.mockReturnValue(true); + canDownload.mockReturnValue(true); + localStorage.clear(); + resetDesktopPrefsCache(); + useAuthStore.setState({ isAuthenticated: true, getAllConnectedClients: () => new Map() } as never); +}); + +afterEach(() => { + cleanup(); + window.bulwarkDesktop = undefined; + resetDesktopCommands(); + useAuthStore.setState(original); + window.history.replaceState(null, '', '/'); +}); + +describe('DesktopHost', () => { + it('does nothing in a browser', () => { + expect(() => render()).not.toThrow(); + }); + + it('runs a command from what\'s on the page first', () => { + const shell = fakeBridge(); + render(); + const onPage = vi.fn(); + registerDesktopSurface({ handlers: { 'go.inbox': onPage }, state: {} }); + shell.run('go.inbox'); + expect(onPage).toHaveBeenCalledTimes(1); + expect(push).not.toHaveBeenCalled(); + }); + + it('with nothing there, the commands that work anywhere still do', () => { + const shell = fakeBridge(); + render(); + shell.run('go.calendar'); + expect(push).toHaveBeenLastCalledWith('/calendar'); + shell.run('go.contacts'); + expect(push).toHaveBeenLastCalledWith('/contacts'); + }); + + it('a link to a folder goes through the router, encoded', () => { + const shell = fakeBridge(); + render(); + shell.run('link.folder:sent'); + expect(push).toHaveBeenLastCalledWith('/mail/folder/sent'); + }); + + it('an unknown command does nothing', () => { + const shell = fakeBridge(); + render(); + expect(() => shell.run('nonsense')).not.toThrow(); + expect(push).not.toHaveBeenCalled(); + }); + + it('tells the shell what the organisation allows', async () => { + canPrint.mockReturnValue(false); + canDownload.mockReturnValue(false); + const shell = fakeBridge(); + render(); + await waitFor(() => expect(shell.setState).toHaveBeenCalled()); + expect(shell.setState.mock.lastCall![0]).toMatchObject({ 'file.print': false, 'file.savePdf': false, 'policy.download': false }); + }); + + it('signed in: it says so once, for windows from last time and waiting links', async () => { + const shell = fakeBridge(); + render(); + await waitFor(() => expect(shell.sessionReady).toHaveBeenCalledTimes(1)); + }); + + it('not signed in, or in a pop-out with a borrowed session: it doesn\'t', async () => { + const shell = fakeBridge(); + useAuthStore.setState({ isAuthenticated: false } as never); + const first = render(); + await act(async () => {}); + expect(shell.sessionReady).not.toHaveBeenCalled(); + first.unmount(); + useAuthStore.setState({ isAuthenticated: true } as never); + window.history.replaceState(null, '', '/popout/compose'); + render(); + await act(async () => {}); + expect(shell.sessionReady).not.toHaveBeenCalled(); + }); + + it('passes the restore setting on', async () => { + const shell = fakeBridge(); + render(); + await waitFor(() => expect(shell.setRestoreEnabled).toHaveBeenLastCalledWith(true)); + act(() => setDesktopPref('restoreWindows', false)); + await waitFor(() => expect(shell.setRestoreEnabled).toHaveBeenLastCalledWith(false)); + }); + + it('says which languages are in use', async () => { + const shell = fakeBridge(); + act(() => useLocaleStore.setState({ locale: 'de' })); + render(); + await waitFor(() => expect(shell.setLanguages).toHaveBeenCalled()); + expect(shell.setLanguages.mock.lastCall![0]).toMatchObject({ ui: 'de' }); + }); + + describe('Open Link in a native menu', () => { + const openLink = (url: string) => `link.open:${JSON.stringify({ url, text: 'click' })}`; + + it('goes past the same check as a click on it', async () => { + const shell = fakeBridge(); + render(); + shell.run(openLink('https://example.org/a')); + await waitFor(() => expect(shell.openExternal).toHaveBeenCalledWith('https://example.org/a')); + expect(resolveExternalLink).toHaveBeenCalledWith(expect.objectContaining({ href: 'https://example.org/a', text: 'click' })); + }); + + it('a plugin can stop it', async () => { + resolveExternalLink.mockResolvedValue(null); + const shell = fakeBridge(); + render(); + shell.run(openLink('https://example.org/a')); + await waitFor(() => expect(resolveExternalLink).toHaveBeenCalled()); + await act(async () => {}); + expect(shell.openExternal).not.toHaveBeenCalled(); + }); + + it('a plugin can send it elsewhere', async () => { + resolveExternalLink.mockResolvedValue('https://safe.example.org/'); + const shell = fakeBridge(); + render(); + shell.run(openLink('https://example.org/a')); + await waitFor(() => expect(shell.openExternal).toHaveBeenCalledWith('https://safe.example.org/')); + }); + + it('a mail address goes to the app\'s composer', async () => { + const shell = fakeBridge(); + render(); + shell.run(openLink('mailto:a@example.org')); + await waitFor(() => expect(requestInternalMailto).toHaveBeenCalledWith('mailto:a@example.org')); + expect(shell.openExternal).not.toHaveBeenCalled(); + }); + + it('tells the shell it has this path, so an older page keeps the direct way', async () => { + const shell = fakeBridge(); + render(); + await waitFor(() => expect(shell.setState).toHaveBeenCalled()); + expect(shell.setState.mock.lastCall![0]).toMatchObject({ 'link.check': true }); + }); + }); + + it('hands the shell its menus in the interface language', async () => { + const shell = fakeBridge(); + act(() => useLocaleStore.setState({ locale: 'fr' })); + render(); + await waitFor(() => expect(shell.setLanguages).toHaveBeenCalled()); + const { labels } = shell.setLanguages.mock.lastCall![0]; + // The test's next-intl gives the key back. + expect(labels.menuFile).toBe('desktopUi.menu.file'); + expect(labels.menuReply).toBe('context_menu.reply'); + expect(labels.unsentMany).toBe('desktopUi.closing.unsent_many'); + }); + + describe('a language with no checker in the OS', () => { + afterEach(() => resetComposeFlushRegistry()); + const toasts = () => useToastStore.getState().toasts; + + it('the composer asks once, and only a yes opens the downloads', async () => { + useToastStore.setState({ toasts: [] }); + const shell = fakeBridge(); + render(); + await act(async () => {}); + shell.missing('nl-NL'); + // No composer open: nobody is writing yet. + expect(toasts()).toHaveLength(0); + const stop = registerComposeFlush(async () => {}); + await waitFor(() => expect(toasts()).toHaveLength(1)); + expect(shell.allowDownload).not.toHaveBeenCalled(); + act(() => toasts()[0].action!.onClick()); + expect(shell.allowDownload).toHaveBeenCalledTimes(1); + expect(readDesktopPrefs().dictionaryDownload).toBe('yes'); + stop(); + }); + + it('never a second time', async () => { + useToastStore.setState({ toasts: [] }); + setDesktopPref('dictionaryDownload', 'no'); + const shell = fakeBridge(); + render(); + await act(async () => {}); + const stop = registerComposeFlush(async () => {}); + shell.missing('nl-NL'); + await act(async () => {}); + expect(toasts()).toHaveLength(0); + stop(); + }); + + it('never in no-third-party mode, even after an old yes', async () => { + useToastStore.setState({ toasts: [] }); + allowed.dictionary = false; + setDesktopPref('dictionaryDownload', 'yes'); + const first = fakeBridge(); + const view = render(); + await act(async () => {}); + expect(first.allowDownload).not.toHaveBeenCalled(); + view.unmount(); + setDesktopPref('dictionaryDownload', 'ask'); + const shell = fakeBridge(); + render(); + await act(async () => {}); + const stop = registerComposeFlush(async () => {}); + shell.missing('nl-NL'); + await act(async () => {}); + expect(toasts()).toHaveLength(0); + stop(); + }); + + it('a yes from before opens them at the next start', async () => { + setDesktopPref('dictionaryDownload', 'yes'); + const shell = fakeBridge(); + render(); + await act(async () => {}); + expect(shell.allowDownload).toHaveBeenCalledTimes(1); + }); + }); + + it('signing out takes the files copied to the clipboard with it', async () => { + const shell = fakeBridge(); + render(); + await act(async () => {}); + signOut.full[0](); + expect(shell.clearFiles).toHaveBeenCalledTimes(1); + await signOut.before[0](); + expect(shell.clearFiles).toHaveBeenCalledTimes(2); + }); + + it('a quit is told how much mail is waiting', async () => { + const shell = fakeBridge(); + render(); + act(() => useOfflineStore.setState({ outbox: [{ id: 1 }, { id: 2 }] } as never)); + await expect(shell.flush()).resolves.toEqual({ unsent: 2 }); + act(() => useOfflineStore.setState({ outbox: [] } as never)); + }); +}); diff --git a/components/desktop/desktop-host.tsx b/components/desktop/desktop-host.tsx new file mode 100644 index 000000000..f8295a3ad --- /dev/null +++ b/components/desktop/desktop-host.tsx @@ -0,0 +1,226 @@ +"use client"; + +import { useEffect, useRef } from "react"; +import { useTranslations } from "next-intl"; +import { useStrictestDevices } from "@/hooks/use-device-policy"; +import { useRouter } from "@/i18n/navigation"; +import { openKeyboardShortcuts, parkAppCommand, requestAppCommand, type AppCommand } from "@/lib/app-commands"; +import { onComposerOpened, composerIsOpen } from "@/lib/compose-flush-registry"; +import { getDesktopBridge } from "@/lib/desktop/bridge"; +import { runDesktopCommand, setDesktopBaseState } from "@/lib/desktop/commands"; +import { dictionaryDownloadAllowed } from "@/lib/desktop/dictionary-download"; +import { noteComposerLanguage, setDesktopInterfaceLanguage, shellLabels } from "@/lib/desktop/languages"; +import { openLinkFromNativeMenu } from "@/lib/desktop/open-link"; +import { readDesktopPrefs, setDesktopPref, useDesktopPrefs } from "@/lib/desktop/preferences"; +import { applySystemAccent } from "@/lib/desktop/system-accent"; +import type { DesktopSystemTheme } from "@/lib/desktop/types"; +import { canDownloadAnywhere, canPrintAnywhere } from "@/lib/device-policy"; +import { useOfflineStore } from "@/lib/offline/state"; +import { openNewComposerWindow } from "@/lib/popout/open"; +import { isPopoutWindow } from "@/lib/popout/window-role"; +import { onBeforeSignOut, onFullSignOut } from "@/lib/sign-out-cleanup"; +import { useAuthStore } from "@/stores/auth-store"; +import { useEmailStore } from "@/stores/email-store"; +import { useLocaleStore } from "@/stores/locale-store"; +import { useSettingsStore } from "@/stores/settings-store"; +import { useThemeStore } from "@/stores/theme-store"; +import { toast } from "@/stores/toast-store"; + +/** + * The webmail's side of what every desktop window needs: runs menu commands nothing + * else on the page took, tells the shell the language and the device policy, and + * says how much mail is waiting when the app quits. Renders nothing and does nothing + * in a browser, where there's no bridge. + */ +export function DesktopHost() { + const router = useRouter(); + const routerRef = useRef(router); + routerRef.current = router; + const t = useTranslations(); + const tRef = useRef(t); + tRef.current = t; + + const isAuthenticated = useAuthStore((s) => s.isAuthenticated); + const singleKeys = useSettingsStore((s) => s.singleKeyShortcuts); + const writingLanguage = useSettingsStore((s) => s.writingLanguage); + const uiLocale = useLocaleStore((s) => s.locale); + const strictest = useStrictestDevices(); + const { restoreWindows } = useDesktopPrefs(); + const theme = useThemeStore((s) => s.theme); + const resolvedTheme = useThemeStore((s) => s.resolvedTheme); + const activeThemeId = useThemeStore((s) => s.activeThemeId); + + // Commands no surface on the page answers: those work from anywhere in the app. + useEffect(() => { + const menu = getDesktopBridge()?.menu; + if (!menu?.onCommand) return; + const toMail = (command: AppCommand) => { + if (requestAppCommand(command)) return; + parkAppCommand(command); + routerRef.current.push("/"); + }; + const fallback: Record void> = { + "file.newMessage": () => { + if (isPopoutWindow()) openNewComposerWindow(useAuthStore.getState().activeAccountId); + else toMail("compose"); + }, + "edit.search": () => toMail("search"), + "go.inbox": () => routerRef.current.push("/"), + "go.mail": () => routerRef.current.push("/"), + "go.calendar": () => routerRef.current.push("/calendar"), + "go.contacts": () => routerRef.current.push("/contacts"), + "go.files": () => routerRef.current.push("/files"), + "help.shortcuts": () => openKeyboardShortcuts(), + }; + return menu.onCommand((id) => { + // A bulwark:// link to a folder. + if (id.startsWith("link.folder:")) { + routerRef.current.push(`/mail/folder/${encodeURIComponent(id.slice("link.folder:".length))}`); + return; + } + // Open Link in a native menu. + if (id.startsWith("link.open:")) { + try { + const { url, text } = JSON.parse(id.slice("link.open:".length)) as { url: string; text: string }; + void openLinkFromNativeMenu(url, text, useEmailStore.getState().selectedEmail?.id); + } catch { + // Only the shell sends this, and it sends JSON. + } + return; + } + if (!runDesktopCommand(id)) fallback[id]?.(); + }); + }, []); + + // What's on offer anywhere, and what the organisation allows. + useEffect(() => { + if (!getDesktopBridge()?.menu) return; + const canPrint = canPrintAnywhere(); + const signedIn = isAuthenticated; + const popout = isPopoutWindow(); + setDesktopBaseState({ + "link.check": true, + "shortcuts.singleKeys": singleKeys, + "policy.download": canDownloadAnywhere(), + "file.print": canPrint, + "file.savePdf": canPrint, + "file.newMessage": signedIn, + "edit.search": signedIn && !popout, + "go.inbox": signedIn, + "go.mail": signedIn, + "go.calendar": signedIn, + "go.contacts": signedIn, + "go.files": signedIn, + "help.shortcuts": true, + }); + }, [isAuthenticated, singleKeys, strictest]); + + // Menus and spellcheck follow the interface. + useEffect(() => { + const ui = uiLocale || document.documentElement.lang; + if (ui) setDesktopInterfaceLanguage(ui, shellLabels(tRef.current as unknown as (key: string) => string)); + }, [uiLocale]); + + // What the user writes in, whichever composer asks for it too. + useEffect(() => { + noteComposerLanguage("settings", writingLanguage && writingLanguage !== "auto" ? writingLanguage : null); + }, [writingLanguage]); + + // A language with no checker in the OS needs a dictionary from Google: the composer + // asks once, and never in no-third-party mode. Until a yes, the shell has nowhere to + // fetch from at all. + useEffect(() => { + const spellcheck = getDesktopBridge()?.spellcheck; + if (!spellcheck) return; + if (readDesktopPrefs().dictionaryDownload === "yes" && dictionaryDownloadAllowed()) spellcheck.allowDownload(); + const waiting = new Set(); + const offer = () => { + const [language] = waiting; + if (!language || !composerIsOpen() || !dictionaryDownloadAllowed()) return; + if (readDesktopPrefs().dictionaryDownload !== "ask") return; + // Asked once, whatever comes of it. + setDesktopPref("dictionaryDownload", "no"); + const translate = tRef.current; + let name = language; + try { + name = new Intl.DisplayNames([document.documentElement.lang || "en"], { type: "language" }).of(language) ?? language; + } catch { + // The tag itself will do. + } + toast.info(translate("desktopUi.spellcheck.offer", { language: name }), { + duration: 0, + action: { + label: translate("desktopUi.spellcheck.download"), + onClick: () => { + setDesktopPref("dictionaryDownload", "yes"); + if (dictionaryDownloadAllowed()) spellcheck.allowDownload(); + }, + }, + }); + }; + const heard = (language: string) => { + waiting.add(language); + offer(); + }; + void spellcheck.missing().then((list) => list.forEach(heard)); + const stopMissing = spellcheck.onMissing(heard); + const stopComposer = onComposerOpened(offer); + return () => { + stopMissing(); + stopComposer(); + }; + }, []); + + // Signed out: nothing of that account stays on the file clipboard. + useEffect(() => { + const clipboard = getDesktopBridge()?.clipboard; + if (!clipboard?.clearFiles) return; + const clear = () => clipboard.clearFiles?.(); + onFullSignOut(clear); + onBeforeSignOut(async () => clear()); + }, []); + + // The windows' behaviour lives here, the shell only needs its copy. + useEffect(() => { + getDesktopBridge()?.windows?.setRestoreEnabled?.(restoreWindows); + }, [restoreWindows]); + + // Signed in: this window has a session to lend, for pop-outs from last time and links. + useEffect(() => { + if (!isAuthenticated || isPopoutWindow()) return; + getDesktopBridge()?.windows?.sessionReady?.(); + }, [isAuthenticated]); + + // A quit asks for this: mail that hasn't left is worth a question. + useEffect(() => { + const lifecycle = getDesktopBridge()?.lifecycle; + if (!lifecycle || isPopoutWindow()) return; + return lifecycle.onFlushRequest(async () => ({ unsent: useOfflineStore.getState().outbox.length })); + }, []); + + // The OS accent colour, while the theme follows the OS. + useEffect(() => { + const bridge = getDesktopBridge()?.theme; + if (!bridge) return; + const followsSystem = theme === "system" && !activeThemeId; + const apply = (system: DesktopSystemTheme) => { + applySystemAccent({ + accent: system.accent, + highContrast: system.highContrast, + dark: document.documentElement.classList.contains("dark"), + followsSystem, + }); + }; + let cancelled = false; + void bridge.system?.().then((system) => { + if (!cancelled) apply(system); + }); + const stop = bridge.onSystemChange?.(apply); + return () => { + cancelled = true; + stop?.(); + }; + }, [theme, resolvedTheme, activeThemeId]); + + return null; +} diff --git a/components/desktop/desktop-os-host.tsx b/components/desktop/desktop-os-host.tsx new file mode 100644 index 000000000..a6e522136 --- /dev/null +++ b/components/desktop/desktop-os-host.tsx @@ -0,0 +1,86 @@ +"use client"; + +import { useEffect, useRef } from "react"; +import { useLocale, useTranslations } from "next-intl"; +import { useArchiveActionEnabled } from "@/lib/archive-gate"; +import { getDesktopBridge } from "@/lib/desktop/bridge"; +import { isAppLocked } from "@/lib/desktop/app-lock-state"; +import { contentHiddenFor, startMailNotifications, type MailNotificationLabels, type MailNotifications } from "@/lib/desktop/mail-notifications"; +import { startOsSummary } from "@/lib/desktop/os-summary"; +import { startPowerWatch } from "@/lib/desktop/power"; +import { startWindowFiles } from "@/lib/desktop/window-files"; +import type { IJMAPClient } from "@/lib/jmap/client-interface"; +import { useAccountStore } from "@/stores/account-store"; +import { useAuthStore } from "@/stores/auth-store"; + +/** + * The main window's end of the desktop app's OS integration: new mail as native + * notifications, what the tray and jump list show, waking up after sleep, and files + * dropped or pasted on the window. Renders nothing, and does nothing in a browser. + * Lives inside MainWindowOnly, so pop-outs don't do any of it a second time. + */ +export function DesktopOsHost() { + const t = useTranslations("desktopOs"); + const tNotify = useTranslations("notifications"); + const tPush = useTranslations("pwaNotify"); + const locale = useLocale(); + const archiveEnabled = useArchiveActionEnabled(); + const clientKey = useAccountStore((s) => s.accounts.map((a) => a.id).join("\n")); + const isAuthenticated = useAuthStore((s) => s.isAuthenticated); + const mailRef = useRef(null); + const summaryRef = useRef<{ refresh: () => void } | null>(null); + const localeRef = useRef(locale); + localeRef.current = locale; + + const labels: MailNotificationLabels = { + newMail: t("new_mail"), + newMailCount: (count) => tNotify("new_mail_count", { count }), + noSubject: t("no_subject"), + archive: archiveEnabled ? tPush("action_archive") : null, + markRead: tPush("action_mark_read"), + delete: t("action_delete"), + reply: tPush("action_reply"), + replyPlaceholder: tPush("reply_placeholder"), + }; + const labelsRef = useRef(labels); + labelsRef.current = labels; + + useEffect(() => { + const os = getDesktopBridge()?.os; + if (!os) return; + // Main shows no content anywhere until this page has said it may. + os.setLocked(isAppLocked()); + const mail = startMailNotifications(labelsRef.current); + mailRef.current = mail; + const summary = startOsSummary(() => localeRef.current); + summaryRef.current = summary; + const stopPower = startPowerWatch(); + const stopFiles = startWindowFiles(); + return () => { + mail.stop(); + summary.stop(); + stopPower(); + stopFiles(); + mailRef.current = null; + summaryRef.current = null; + }; + }, []); + + useEffect(() => { + mailRef.current?.setLabels(labels); + // eslint-disable-next-line react-hooks/exhaustive-deps + }, [locale, archiveEnabled]); + + // Every login needs a state to work from before its first push. + useEffect(() => { + const mail = mailRef.current; + if (!mail || !isAuthenticated) return; + const auth = useAuthStore.getState(); + const clients = new Set(useAccountStore.getState().accounts.flatMap((account) => auth.getClientForAccount(account.id) ?? [])); + if (auth.client) clients.add(auth.client); + for (const client of clients) mail.seed(client); + summaryRef.current?.refresh(); + }, [isAuthenticated, clientKey]); + + return null; +} diff --git a/components/device/__tests__/device-gates.test.tsx b/components/device/__tests__/device-gates.test.tsx index bb86a6b7b..5557f2eed 100644 --- a/components/device/__tests__/device-gates.test.tsx +++ b/components/device/__tests__/device-gates.test.tsx @@ -129,6 +129,8 @@ describe('No export', () => { await waitFor(() => expect(discard).toHaveBeenCalledWith(true)); expect(controller.signal.aborted).toBe(true); expect(useMailTransferStore.getState().job).toBeNull(); + // The dialog just went: this is all that says why. + expect(toast.info).toHaveBeenCalledWith('export_blocked'); }); }); diff --git a/components/device/device-policy-host.tsx b/components/device/device-policy-host.tsx index d7465be08..acfaa9c7c 100644 --- a/components/device/device-policy-host.tsx +++ b/components/device/device-policy-host.tsx @@ -4,7 +4,7 @@ import { useEffect } from 'react'; import { createPortal } from 'react-dom'; import { useTranslations } from 'next-intl'; import { useDevicePolicy, useStrictestDevices } from '@/hooks/use-device-policy'; -import { DOWNLOAD_BLOCKED_EVENT, type DownloadKind } from '@/lib/download-guard'; +import { DOWNLOAD_BLOCKED_EVENT, downloadAllowed, type DownloadKind } from '@/lib/download-guard'; // Installs the download guard (lib/download-guard.ts) for every page. import '@/lib/device-policy'; import { useMailTransferStore } from '@/stores/mail-transfer-store'; @@ -48,6 +48,8 @@ export function DevicePolicyHost() { if (store.job?.kind !== 'export') return; const job = store.job; store.cancelJob('policy'); + // This closes the dialog too, which would otherwise be gone with no reason given. + downloadAllowed('export', null); // The private file goes at once, once the job has stopped: nothing may download it any more. const discard = () => { if (useMailTransferStore.getState().job?.controller === job.controller) useMailTransferStore.getState().close({ now: true }); diff --git a/components/email/__tests__/composer-close-guard.test.tsx b/components/email/__tests__/composer-close-guard.test.tsx index 8ac5e5b82..9ef9370a7 100644 --- a/components/email/__tests__/composer-close-guard.test.tsx +++ b/components/email/__tests__/composer-close-guard.test.tsx @@ -1,5 +1,5 @@ import { render, screen, fireEvent, waitFor, act, within } from '@testing-library/react'; -import { beforeEach, describe, it, expect, vi } from 'vitest'; +import { afterEach, beforeEach, describe, it, expect, vi } from 'vitest'; import React from 'react'; import { EmailComposer } from '../email-composer'; import { useAuthStore } from '@/stores/auth-store'; @@ -235,6 +235,39 @@ describe('composer close guard with a follow-up', () => { expect(afterClose).not.toHaveBeenCalled(); }); + describe('in the desktop app', () => { + afterEach(() => { + window.bulwarkDesktop = undefined; + }); + + const nativeBridge = (answer: number) => { + const confirm = vi.fn(async () => answer); + window.bulwarkDesktop = { version: 1, platform: 'win32', dialogs: { confirm } } as never; + return confirm; + }; + + it('asks through the OS, and shows no dialog of its own', async () => { + const confirm = nativeBridge(2); + const { requestCloseRef, afterClose, onClose } = renderWithCloseRef(); + act(() => requestCloseRef.current!(afterClose)); + await waitFor(() => expect(confirm).toHaveBeenCalledTimes(1)); + expect(confirm.mock.calls[0]).toMatchObject([{ message: 'close_draft_title', buttons: ['save', 'discard', 'cancel'], defaultId: 0 }]); + expect(screen.queryByText('close_draft_title')).not.toBeInTheDocument(); + // The last button is Cancel: nothing happens. + await act(async () => {}); + expect(onClose).not.toHaveBeenCalled(); + expect(afterClose).not.toHaveBeenCalled(); + }); + + it('Discard discards, and the follow-up runs', async () => { + nativeBridge(1); + const { requestCloseRef, afterClose, onClose } = renderWithCloseRef(); + act(() => requestCloseRef.current!(afterClose)); + await waitFor(() => expect(onClose).toHaveBeenCalledTimes(1)); + await waitFor(() => expect(afterClose).toHaveBeenCalledTimes(1)); + }); + }); + it('runs the follow-up after discarding', async () => { const { requestCloseRef, afterClose, onClose } = renderWithCloseRef(); diff --git a/components/email/__tests__/reader-attachments.test.tsx b/components/email/__tests__/reader-attachments.test.tsx index 8e0f1fae4..67c6913e7 100644 --- a/components/email/__tests__/reader-attachments.test.tsx +++ b/components/email/__tests__/reader-attachments.test.tsx @@ -1,5 +1,5 @@ -import { fireEvent, render, screen, within } from '@testing-library/react'; -import { describe, it, expect, vi } from 'vitest'; +import { cleanup, fireEvent, render, screen, waitFor, within } from '@testing-library/react'; +import { afterEach, describe, it, expect, vi } from 'vitest'; import { ReaderAttachments, splitFileName, type ReaderAttachmentItem } from '../reader-attachments'; // The reader's attachment bar: equal tiles that keep the extension in view, @@ -24,6 +24,47 @@ function renderBar(attachments: ReaderAttachmentItem[], overrides: Partial { + afterEach(() => { + window.bulwarkDesktop = undefined; + cleanup(); + }); + + const openMenu = async (popupAnswer: (items: { id?: string; label?: string }[]) => string | null, overrides: Partial[0]> = {}) => { + const popup = vi.fn(async (items: { id?: string; label?: string }[]) => popupAnswer(items)); + window.bulwarkDesktop = { version: 1, platform: 'win32', menu: { setState: () => {}, popup } } as never; + const props = renderBar([file('1', 'report.pdf')], { onCopyFile: vi.fn(), ...overrides }); + fireEvent.contextMenu(await screen.findByTestId('attachment'), { clientX: 5, clientY: 5 }); + await waitFor(() => expect(popup).toHaveBeenCalled()); + return { props, popup }; + }; + + it('has Open, Save as and Copy, natively', async () => { + const { popup } = await openMenu(() => null); + expect(popup.mock.calls[0][0].map((item) => item.label)).toEqual(['open', 'save_as', 'copy']); + }); + + it.each([['open', 'onOpen'], ['save_as', 'onDownload'], ['copy', 'onCopyFile']] as const)('%s runs the action', async (label, handler) => { + const { props } = await openMenu((items) => items.find((item) => item.label === label)!.id!); + await waitFor(() => expect((props as unknown as Record>)[handler]).toHaveBeenCalledTimes(1)); + expect((props as unknown as Record>)[handler].mock.calls[0][0]).toMatchObject({ id: '1' }); + }); + + it('with downloads off there\'s nothing to save or copy', async () => { + const { popup } = await openMenu(() => null, { downloadsOff: true, opensPreview: () => true }); + expect(popup.mock.calls[0][0].map((item) => item.label)).toEqual(['open']); + }); + + it('a browser keeps its own menu', async () => { + window.bulwarkDesktop = undefined; + renderBar([file('1', 'report.pdf')], { onCopyFile: vi.fn() }); + const event = fireEvent.contextMenu(await screen.findByTestId('attachment')); + // Not prevented: the browser's menu shows, and no HTML one opens. + expect(event).toBe(true); + expect(screen.queryByRole('menu')).toBeNull(); + }); +}); + describe('splitFileName', () => { it('splits off a short extension', () => { expect(splitFileName('prototype-v3.png')).toEqual(['prototype-v3', '.png']); diff --git a/components/email/__tests__/viewer-mark-read.test.tsx b/components/email/__tests__/viewer-mark-read.test.tsx index 86e0f4dd8..569b0c285 100644 --- a/components/email/__tests__/viewer-mark-read.test.tsx +++ b/components/email/__tests__/viewer-mark-read.test.tsx @@ -75,6 +75,14 @@ describe('EmailViewer mark as read', () => { await waitFor(() => expect(onMarkAsRead).toHaveBeenCalledWith('e1', true, { automatic: true })); }); + it('a message opened from a link stays unread until the user says', async () => { + useSettingsStore.setState({ markAsReadDelay: 0 }); + const onMarkAsRead = vi.fn(); + render(); + await new Promise((resolve) => setTimeout(resolve, 20)); + expect(onMarkAsRead).not.toHaveBeenCalled(); + }); + it("passes the toolbar button on as the user's own change", () => { useSettingsStore.setState({ markAsReadDelay: -1 }); const onMarkAsRead = vi.fn(); diff --git a/components/email/__tests__/viewer-send-failures.test.tsx b/components/email/__tests__/viewer-send-failures.test.tsx index 759465667..fd95d5e73 100644 --- a/components/email/__tests__/viewer-send-failures.test.tsx +++ b/components/email/__tests__/viewer-send-failures.test.tsx @@ -271,6 +271,14 @@ describe('viewer send failures', () => { useAuthStore.setState({ client: null, identities: [] } as never); }); + it('a message opened from a link sends none by itself', async () => { + render(); + await act(async () => { + await new Promise((resolve) => setTimeout(resolve, 20)); + }); + expect(sendReadReceipt).not.toHaveBeenCalled(); + }); + it('tries once per opening, not once per refresh, when the quota is full on Stalwart 1.0', async () => { const props = { mailboxes, selectedMailbox: 'inbox', currentMailboxRole: 'inbox' }; const { rerender } = render(); diff --git a/components/email/email-composer.tsx b/components/email/email-composer.tsx index 44a474b99..d584a8c44 100644 --- a/components/email/email-composer.tsx +++ b/components/email/email-composer.tsx @@ -169,8 +169,12 @@ import { htmlToPlainText as htmlToPlainTextShared } from "@/lib/html-to-text"; import { fileStorage } from "@/lib/plugin-storage"; import { usePolicyStore } from "@/stores/policy-store"; import { registerComposeFlush } from "@/lib/compose-flush-registry"; +import { getDesktopBridge } from "@/lib/desktop/bridge"; +import { noteComposerLanguage } from "@/lib/desktop/languages"; +import { noteOpenDraft } from "@/lib/desktop/window-restore"; import type { RescuedDraft } from "@/lib/popout/channel"; import { toUnicodeEmail } from "@/lib/idn"; +import { setComposerFileTarget } from "@/lib/desktop/window-files"; /** * Derives the text/plain alternative from the composer's HTML body, preserving @@ -383,7 +387,7 @@ interface EmailComposerProps { /** The state as the window unloads, for a reload to start from. */ onUnloadState?: (data: ComposerDraftData) => void; /** A save reached the server, for other windows showing the Drafts folder. */ - onDraftSaved?: () => void; + onDraftSaved?: (draftId: string) => void; /** * Hands a draft to another window to save as this one closes: a request * started now wouldn't survive. False when that can't be done safely. @@ -1943,6 +1947,14 @@ export function EmailComposer({ // eslint-disable-next-line react-hooks/exhaustive-deps }, []); + // A composer that comes back with the app: a draft it opened on counts from the start. + // Gone with the composer: sent, discarded or closed. + useEffect(() => { + if (draftIdRef.current) noteOpenDraft(effectiveSessionKey, { draftId: draftIdRef.current, localAccountId: draftLocalAccountIdRef.current ?? useAuthStore.getState().activeAccountId, ownerAccountId: draftAccountIdRef.current }); + return () => noteOpenDraft(effectiveSessionKey, null); + // eslint-disable-next-line react-hooks/exhaustive-deps + }, [effectiveSessionKey]); + // Auto-save draft to server on page close (best-effort) const ownWindowRef = useRef(ownWindow); ownWindowRef.current = ownWindow; @@ -2698,6 +2710,12 @@ export function EmailComposer({ const pluginToolbarOffers = usePluginSlotOffers('composer-toolbar'); // The plugin side panels fold when the composer gets too narrow for them. const [composerRootEl, setComposerRootEl] = useState(null); + + // The desktop app: files dropped or pasted anywhere on the window come here, if this one's on screen. + useEffect(() => setComposerFileTarget( + (files) => void addFiles(files), + () => !!composerRootEl?.isConnected && composerRootEl.getClientRects().length > 0, + ), [addFiles, composerRootEl]); // The id plugins know this composer by (registered below, with the handle). const [pluginComposerId, setPluginComposerId] = useState(null); const pluginSidebars = useComposerSidebars(composerRootEl, pluginComposerId); @@ -3017,6 +3035,8 @@ export function EmailComposer({ draftIdRef.current = savedDraftId; draftAccountIdRef.current = draftAccountId; draftLocalAccountIdRef.current = savingLogin; + // Before a save's promise settles: quitting waits for it, then keeps this list. + noteOpenDraft(effectiveSessionKey, { draftId: savedDraftId, localAccountId: savingLogin ?? useAuthStore.getState().activeAccountId, ownerAccountId: draftAccountId }); setDraftId(savedDraftId); setDraftAccountId(draftAccountId); setDraftLocalAccountId(savingLogin); @@ -3097,7 +3117,7 @@ export function EmailComposer({ // Only the save the user asked for is read out: autosave would say it // every minute, and the save before sending is followed by "Sent". if (opts.announce && id && !saveFailedRef.current) announceStatus(t('draft_saved')); - if (id && !saveFailedRef.current) ownWindowRef.current?.onDraftSaved?.(); + if (id && !saveFailedRef.current) ownWindowRef.current?.onDraftSaved?.(id); return id; })(); inflightSaveRef.current = promise; @@ -3360,6 +3380,11 @@ export function EmailComposer({ const uiLocale = useLocale(); const writingLanguage = useSettingsStore((s) => s.writingLanguage); const textLang = writingLanguage && writingLanguage !== 'auto' ? writingLanguage : uiLocale; + // The desktop app's spellcheck follows what's being written. + useEffect(() => { + noteComposerLanguage(effectiveSessionKey, textLang); + return () => noteComposerLanguage(effectiveSessionKey, null); + }, [effectiveSessionKey, textLang]); const proofreading = useProofreading({ composerId: pluginComposerId, sessionKey: effectiveSessionKey, @@ -4433,6 +4458,29 @@ export function EmailComposer({ emitClose(); }; + /** The question before closing or discarding: the OS's own in the desktop app. */ + const openCloseDialog = (kind: 'discard' | 'close') => { + const dialogs = getDesktopBridge()?.dialogs; + if (!dialogs) { + setCloseDialogKind(kind); + setShowCloseDialog(true); + return; + } + const discarding = kind === 'discard'; + const buttons = discarding ? [t('discard'), t('cancel')] : [tCommon('save'), t('discard'), t('cancel')]; + void dialogs.confirm({ + type: 'warning', + message: discarding ? t('discard_draft_title') : t('close_draft_title'), + detail: discarding ? t('discard_draft_message') : t('close_draft_message'), + buttons, + defaultId: discarding ? 1 : 0, + }).then((choice) => { + if (buttons[choice] === t('discard')) handleDiscardAndClose(); + else if (!discarding && choice === 0) void handleSaveDraftAndClose(); + else afterCloseRef.current = null; + }); + }; + // Discard deletes the draft, also one that has no unsaved changes, such as // a scheduled message reopened with "Cancel and edit". It used to share the // X button's path, which closed such a composer and kept the draft. @@ -4444,8 +4492,7 @@ export function EmailComposer({ return; } afterCloseRef.current = null; - setCloseDialogKind('discard'); - setShowCloseDialog(true); + openCloseDialog('discard'); }; const handleClose = (afterClose?: () => void) => { @@ -4457,8 +4504,7 @@ export function EmailComposer({ && !saveFailedRef.current && !attachmentsRef.current.some(att => att.uploading || att.error); if (isDirtyRef.current && !savedAlready) { - setCloseDialogKind('close'); - setShowCloseDialog(true); + openCloseDialog('close'); } else { cleanClose(); } @@ -4744,6 +4790,7 @@ export function EmailComposer({ className="-me-2 max-md:order-first max-md:me-0 max-md:-ms-2 max-md:h-11 max-md:w-11" label={tCommon('close')} data-testid="composer-close" + data-own-window-close={ownWindow ? "" : undefined} > diff --git a/components/email/email-viewer.tsx b/components/email/email-viewer.tsx index 4f431dd60..092ca7f82 100644 --- a/components/email/email-viewer.tsx +++ b/components/email/email-viewer.tsx @@ -160,6 +160,7 @@ import { requestInternalMailto } from "@/lib/protocol-handlers/mailto"; import { imageBlobUrl, inertBlobType, isFilePreviewable, isMimeTypeSafeForInlinePreview, toInertBlob } from "@/lib/file-preview"; import { openPreviewInNewWindow } from "@/lib/standalone-display"; import { downloadAllowed, saveBlobAs } from "@/lib/download-guard"; +import { getDesktopBridge } from "@/lib/desktop/bridge"; import { canPickFolder, createUniqueNamer, isPickerCancelled, pickFolder, saveFilesToFolder, type FolderHandle } from "@/lib/attachments/save-to-folder"; import { useDevicePolicy } from "@/hooks/use-device-policy"; import { Watermark, useWatermarkText } from "@/components/device/watermark"; @@ -290,6 +291,11 @@ interface EmailViewerProps { onToggleFullscreen?: () => void; /** Opens this message in its own window; left out where that isn't on offer. */ onOpenInWindow?: () => void; + /** + * Opened by something outside the app (a bulwark:// link), not by the user in it. + * It shows the message and does nothing on its own: no mark as read, no read receipt. + */ + noAutomaticActions?: boolean; isFullscreen?: boolean; currentUserEmail?: string; currentUserName?: string; @@ -678,6 +684,7 @@ interface DraggableAttachmentChipProps { onPointerEnter: () => void; onDragStart: (e: React.DragEvent) => void; onDragEnd: (e: React.DragEvent) => void; + onCopyAsFile?: () => Promise; }) => React.ReactNode; } @@ -685,6 +692,19 @@ function DraggableAttachmentChip({ attachment, client, accountId, enabled, downl const source = useMemo(() => ({ name: downloadName || attachment.name || 'download', type: attachment.type || 'application/octet-stream', + // A decrypted attachment doesn't go through the app's temporary folder or the clipboard: it + // stays with the browser's drag, which only writes it where the user drops it. + ...(attachment.decryptedAttachment ? {} : { + getBlob: async () => { + if (attachment.blobId && client) { + return client.fetchBlob(attachment.blobId, downloadName || attachment.name || undefined, attachment.type, accountId).catch(() => null); + } + const bytes = attachment.tnefData; + if (!bytes || bytes.byteLength === 0) return null; + const buffer = bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength) as ArrayBuffer; + return new Blob([buffer], { type: inertBlobType(attachment.type) }); + }, + }), getBlobUrl: async () => { if (attachment.blobId && client) { try { @@ -1324,6 +1344,7 @@ export function EmailViewer({ onCompose, onToggleFullscreen, onOpenInWindow, + noAutomaticActions = false, isFullscreen = false, currentUserEmail, currentUserName, @@ -2203,7 +2224,7 @@ export function EmailViewer({ useEffect(() => { // Mark as read when email is viewed, respecting the delay setting - if (!email || !onMarkAsRead) { + if (!email || !onMarkAsRead || noAutomaticActions) { return; } @@ -3122,6 +3143,8 @@ export function EmailViewer({ // What the attachment bar and the attachment cards share. const attachmentCardsRef = useRef(null); + const desktopClipboard = getDesktopBridge()?.clipboard; + const tDesktopUi = useTranslations('desktopUi.attachment'); const readerAttachmentProps = { attachments: effectiveAttachments, thumbUrls: imageThumbUrls, @@ -3130,6 +3153,13 @@ export function EmailViewer({ onDownload: handleEffectiveAttachmentDownload, onDownloadAll: handleDownloadAllAttachments, onSaveAllToFolder: canPickFolder() ? () => void handleSaveAllToFolder() : undefined, + onCopyFile: desktopClipboard && blobClient ? (attachment: EffectiveAttachment) => { + if (!attachment.blobId || !downloadAllowed('attachment', email)) return; + void blobClient.fetchBlobArrayBuffer(attachment.blobId, undefined, undefined, blobAccountId) + .then((data) => desktopClipboard.copyFile(resolveAttachmentName(attachment), data)) + .then((copied) => { if (!copied) toast.error(tDesktopUi('copy_failed')); }) + .catch(() => toast.error(tDesktopUi('copy_failed'))); + } : undefined, downloadingAll: isDownloadingAll, downloadsOff, // Save to Files would get around the policy: Files downloads are off too, but the copy would stay. @@ -3951,7 +3981,7 @@ ${printWatermark ? printWatermark.html : ''} if (autoMdnRef.current !== email?.id) autoMdnRef.current = null; }, [email?.id]); useEffect(() => { - if (readReceiptResponse !== 'always') return; + if (readReceiptResponse !== 'always' || noAutomaticActions) return; if (!shouldOfferReadReceipt || !email) return; if (autoMdnRef.current === email.id) return; autoMdnRef.current = email.id; @@ -4108,7 +4138,9 @@ ${printWatermark ? printWatermark.html : ''} // in a split pane - the empty reading pane should always say what it is // and offer a way forward. return shell( - + + {/* An empty reading pane's top is still the window's top, to drag by. */} + diff --git a/components/email/reader-attachments.tsx b/components/email/reader-attachments.tsx index 0e3aa1fbd..167767905 100644 --- a/components/email/reader-attachments.tsx +++ b/components/email/reader-attachments.tsx @@ -1,13 +1,17 @@ "use client"; -import { useState, type DragEvent, type ReactNode } from "react"; +import { useEffect, useState, type DragEvent, type ReactNode } from "react"; import { useTranslations } from "next-intl"; -import { ChevronDown, ChevronUp, Download, FolderInput, Loader2, Paperclip } from "@/components/icons"; +import { ChevronDown, ChevronUp, Copy, Download, FolderInput, Loader2, Paperclip } from "@/components/icons"; import { Button } from "@/components/ui/button"; +import { ContextMenu, ContextMenuItem } from "@/components/ui/context-menu"; +import { useContextMenu } from "@/hooks/use-context-menu"; +import { nativeMenusAvailable } from "@/lib/desktop/native-menu"; import { IconButton } from "@/components/ui/icon-button"; import { getAttachmentDisplayName } from "@/lib/attachment-name"; import { cn, formatFileSize } from "@/lib/utils"; import { noMediaSavingProps } from "@/lib/device-frame"; +import { toast } from "@/stores/toast-store"; import { attachmentIcon } from "./attachment-chips"; export interface ReaderAttachmentItem { @@ -26,6 +30,8 @@ export interface AttachmentDragProps { onPointerEnter: () => void; onDragStart: (e: DragEvent) => void; onDragEnd: (e: DragEvent) => void; + /** The desktop app only. */ + onCopyAsFile?: () => Promise; } /** Past this many tiles the bar shows one row less and a "Show N more" tile. */ @@ -47,6 +53,11 @@ interface ReaderAttachmentsProps { layout?: ReaderAttachmentLayout; /** Object URLs of image attachments, keyed by attachment id. */ thumbUrls: Record; + /** + * Copies the file to the clipboard. Comes with the right-click menu the desktop app + * has on an attachment; a browser has its own menu there and never gets this one. + */ + onCopyFile?: (attachment: T) => void; /** Whether a click on the attachment previews it instead of downloading it. */ opensPreview: (attachment: T) => boolean; onOpen: (attachment: T) => void; @@ -94,6 +105,7 @@ export function ReaderAttachments({ onDownload, onDownloadAll, onSaveAllToFolder, + onCopyFile, downloadingAll, downloadsOff = false, onSaveToFiles, @@ -105,6 +117,11 @@ export function ReaderAttachments({ const tFiles = useTranslations("files"); const tDevice = useTranslations("device_policy"); const tWindows = useTranslations("pwaWindows"); + const tDesktop = useTranslations("desktopUi.attachment"); + const menu = useContextMenu(); + const [desktopMenu, setDesktopMenu] = useState(false); + useEffect(() => setDesktopMenu(nativeMenusAvailable()), []); + const menuTarget = menu.contextMenu.data; // Opens nothing: no preview, and downloads are off. const locked = (attachment: T) => downloadsOff && !opensPreview(attachment); const openLabel = (attachment: T, name: string) => @@ -159,6 +176,7 @@ export function ReaderAttachments({ )} {pluginMenu?.(attachment)} + {!downloadsOff && drag.onCopyAsFile && } {!downloadsOff && ( ({ )} {pluginMenu?.(attachment)} + {!downloadsOff && drag.onCopyAsFile && } {!downloadsOff && ( onDownload(attachment)}> @@ -292,7 +311,7 @@ export function ReaderAttachments({ layout === "cards" ? "grid-cols-[repeat(auto-fill,minmax(10rem,1fr))] gap-3" : "grid-cols-[repeat(auto-fill,minmax(15rem,1fr))] gap-2", )}> {shown.map((attachment) => ( - + menu.openContextMenu(event, attachment) : undefined}> {renderItem ? renderItem(attachment, (drag) => draw(attachment, drag)) : draw(attachment, NO_DRAG)} @@ -324,6 +343,19 @@ export function ReaderAttachments({ )} + {desktopMenu && menuTarget && ( + + {!locked(menuTarget) && ( + { menu.closeContextMenu(); onOpen(menuTarget); }} /> + )} + {!downloadsOff && ( + { menu.closeContextMenu(); onDownload(menuTarget); }} /> + )} + {!downloadsOff && onCopyFile && ( + { menu.closeContextMenu(); onCopyFile(menuTarget); }} /> + )} + + )} ); } @@ -332,6 +364,25 @@ export function ReaderAttachments({ * The image itself when there is a thumbnail, else the file type's icon over * its extension, in the type's colour. */ +/** The desktop app's "Copy as file", for pasting the attachment into Explorer or Finder. */ +function CopyAsFileButton({ copy }: { copy: () => Promise }) { + const t = useTranslations("desktopOs"); + return ( + { + void copy().then((ok) => { + if (ok) toast.success(t("copied")); + else toast.error(t("copy_failed")); + }, () => toast.error(t("copy_failed"))); + }} + > + + + ); +} + function AttachmentThumb({ attachment, url, label }: { attachment: ReaderAttachmentItem; url?: string; label: string }) { if (url) { return ; diff --git a/components/files/preview-shell.tsx b/components/files/preview-shell.tsx index 50ada2993..8c53bb15e 100644 --- a/components/files/preview-shell.tsx +++ b/components/files/preview-shell.tsx @@ -82,6 +82,7 @@ export function PreviewShell({ name, onClose, onDownload, actions, neighbours, c {/* Full-screen under `viewport-fit=cover`: the bar pads itself out of the iOS status bar (#936). The insets are physical, so pl/pr. */} e.stopPropagation()} > diff --git a/components/layout/__tests__/account-switcher-needs-sign-in.test.tsx b/components/layout/__tests__/account-switcher-needs-sign-in.test.tsx new file mode 100644 index 000000000..ffb61683c --- /dev/null +++ b/components/layout/__tests__/account-switcher-needs-sign-in.test.tsx @@ -0,0 +1,88 @@ +import { act, fireEvent, render, screen } from '@testing-library/react'; +import { beforeEach, describe, expect, it, vi } from 'vitest'; + +// A refused account beside another that stays signed in: the switcher marks it, +// with the count and the date, and takes the user to its sign-in. + +const push = vi.hoisted(() => vi.fn()); +vi.mock('@/i18n/navigation', () => ({ + useRouter: () => ({ push, replace: vi.fn() }), + usePathname: () => '/', +})); + +const { AccountSwitcher } = await import('../account-switcher'); +const { useAccountStore } = await import('@/stores/account-store'); +const { useAuthStore } = await import('@/stores/auth-store'); +const { useSettingsStore } = await import('@/stores/settings-store'); +const { markLoginRefused, setRefusedCount, dropRefusedLogin } = await import('@/lib/devices/wipe-state'); +const { useOfflineStore, markEvicted, clearEvicted } = await import('@/lib/offline/state'); + +const A = 'a@example.com'; +const B = 'b@example.com'; + +function account(id: string) { + return { id, label: id, email: id, username: id, displayName: id.toUpperCase(), serverUrl: 'https://mail.example.com', avatarColor: '#336699', cookieSlot: 0, isConnected: true, isDefault: id === A }; +} + +function open(): void { + render(); + fireEvent.click(screen.getByTestId('account-switcher')); +} + +beforeEach(() => { + push.mockClear(); + localStorage.clear(); + useAccountStore.setState({ accounts: [account(A)] } as never); + useAuthStore.setState({ activeAccountId: A } as never); + useSettingsStore.setState({ interfaceLayout: 'default' } as never); + useOfflineStore.setState({ enabled: [A, B] }); + markLoginRefused(B, { certain: true, seenBy: [A], label: B, username: B }); + markEvicted(B); +}); + +describe('an account that needs signing in again', () => { + it('is marked, with its count and the date its data goes', () => { + setRefusedCount(B, 2); + open(); + const row = screen.getByTestId('account-needs-sign-in'); + expect(row.textContent).toContain(B); + expect(row.textContent).toContain('needs_sign_in'); + expect(row.textContent).toContain('switcher_waiting'); + }); + + it('says only the date when it couldn\'t count, or there\'s nothing unsent', () => { + setRefusedCount(B, 0); + open(); + const row = screen.getByTestId('account-needs-sign-in'); + expect(row.textContent).toContain('switcher_kept'); + expect(row.textContent).not.toContain('switcher_waiting'); + }); + + it('takes the user to its sign-in, with the name filled in', () => { + setRefusedCount(B, 2); + open(); + fireEvent.click(screen.getByTestId('account-needs-sign-in')); + expect(push).toHaveBeenCalledWith(`/login?mode=add-account&username=${encodeURIComponent(B)}`); + }); + + it('shows the count as soon as it\'s known, with the menu open', () => { + open(); + expect(screen.getByTestId('account-needs-sign-in').textContent).toContain('switcher_kept'); + act(() => setRefusedCount(B, 3)); + expect(screen.getByTestId('account-needs-sign-in').textContent).toContain('switcher_waiting'); + }); + + it('isn\'t shown to an account that wasn\'t there', () => { + useAuthStore.setState({ activeAccountId: 'stranger@example.com' } as never); + useAccountStore.setState({ accounts: [account('stranger@example.com')] } as never); + open(); + expect(screen.queryByTestId('account-needs-sign-in')).toBeNull(); + }); + + it('is gone once it signed in again', () => { + clearEvicted(B); + open(); + expect(screen.queryByTestId('account-needs-sign-in')).toBeNull(); + dropRefusedLogin(B); + }); +}); diff --git a/components/layout/account-switcher.tsx b/components/layout/account-switcher.tsx index 505f868e6..9c424eabe 100644 --- a/components/layout/account-switcher.tsx +++ b/components/layout/account-switcher.tsx @@ -17,6 +17,7 @@ import { inboxUnread, totalInboxUnread } from "@/lib/account-inbox-unread"; import { isDocumentRTL } from "@/i18n/direction"; import { cn, formatFileSize } from "@/lib/utils"; import { useRouter } from "@/i18n/navigation"; +import { onRefusedLoginsChanged, siblingWaits, waitDate } from "@/lib/devices/wipe-state"; import { Avatar } from "@/components/ui/avatar"; import { useMenuNavigation } from "@/hooks/use-menu-navigation"; import { useConfirmDialog } from "@/hooks/use-confirm-dialog"; @@ -116,6 +117,11 @@ export function AccountSwitcher({ const removeAccount = useAuthStore((s) => s.removeAccount); const logoutAll = useAuthStore((s) => s.logoutAll); const { dialogProps: confirmDialogProps, confirm } = useConfirmDialog(); + const tWipe = useTranslations("offlineWipe"); + // An account that signed out by itself beside this one: its data waits. + const [, noteWaitsChanged] = useState(0); + useEffect(() => onRefusedLoginsChanged(() => noteWaitsChanged((count) => count + 1)), []); + const waiting = siblingWaits(activeAccountId); const updatePosition = useCallback(() => { if (!buttonRef.current) return; @@ -513,6 +519,30 @@ export function AccountSwitcher({ ); })} + {waiting.map((wait) => ( + { + setOpen(false); + router.push(`/login?mode=add-account&username=${encodeURIComponent(wait.username)}` as never); + }} + > + + + {toUnicodeEmail(wait.label)} + {tWipe("needs_sign_in")} + + {wait.unsent + ? tWipe("switcher_waiting", { count: wait.unsent, date: waitDate(wait.until) }) + : tWipe("switcher_kept", { date: waitDate(wait.until) })} + + + + ))} {/* Mountain View: the account actions as rows closing the white card, diff --git a/components/layout/inline-app-view.tsx b/components/layout/inline-app-view.tsx index c74296236..970116fef 100644 --- a/components/layout/inline-app-view.tsx +++ b/components/layout/inline-app-view.tsx @@ -20,7 +20,7 @@ export function InlineAppView({ apps, activeAppId, onClose, className }: InlineA return ( {/* Header bar */} - + {activeApp?.name} diff --git a/components/layout/navigation-rail.tsx b/components/layout/navigation-rail.tsx index 1ebaed59c..87e6d9fa8 100644 --- a/components/layout/navigation-rail.tsx +++ b/components/layout/navigation-rail.tsx @@ -596,6 +596,7 @@ export function NavigationRail({ })()} (null); + + useEffect(() => watchTitlebarArea((next) => { + applyControlsArea(next); + setArea(next); + }), []); + + const key = area ? `${area.x},${area.width},${area.height}` : ""; + useEffect(() => { + if (!area) return; + return watchWindowRows(area); + // `key` stands for area, a new object at each change. + // eslint-disable-next-line react-hooks/exhaustive-deps + }, [key]); + + return null; +} diff --git a/components/layout/window-menu-bar.tsx b/components/layout/window-menu-bar.tsx new file mode 100644 index 000000000..371cead30 --- /dev/null +++ b/components/layout/window-menu-bar.tsx @@ -0,0 +1,100 @@ +"use client"; + +import { useCallback, useEffect, useRef, useState } from "react"; +import { useTranslations } from "next-intl"; +import { getDesktopBridge } from "@/lib/desktop/bridge"; +import type { DesktopMenuBarEntry } from "@/lib/desktop/types"; + +/** + * Alt floats the menu's names over the top left for a moment, since a window with no + * frame has no native bar. Each name opens the app's menu as a native one + * (src/main/menu.ts in the desktop repo). Dismissed, nothing is left of it. + */ +export function WindowMenuBar() { + const t = useTranslations("desktopUi.menu"); + const [entries, setEntries] = useState(null); + const stripRef = useRef(null); + const previousFocus = useRef(null); + // What to do once the names are on screen: open that menu, or null to focus the first name. + const afterShow = useRef(undefined); + + const openMenu = useCallback((id: string) => { + const button = stripRef.current?.querySelector(`[data-menu-id="${CSS.escape(id)}"]`); + if (!button) return; + const rect = button.getBoundingClientRect(); + getDesktopBridge()?.menu?.bar?.open(id, { x: rect.left, y: rect.bottom }); + }, []); + + const dismiss = useCallback(() => { + setEntries(null); + previousFocus.current?.focus?.(); + previousFocus.current = null; + }, []); + + useEffect(() => { + const bar = getDesktopBridge()?.menu?.bar; + if (!bar) return; + return bar.onEvent((event) => { + if (!event.visible) { + dismiss(); + return; + } + void bar.entries().then((list) => { + previousFocus.current ??= document.activeElement instanceof HTMLElement ? document.activeElement : null; + afterShow.current = event.open ?? null; + setEntries(list); + }); + }); + }, [dismiss]); + + useEffect(() => { + const next = afterShow.current; + if (!entries || next === undefined) return; + afterShow.current = undefined; + if (next) openMenu(next); + else stripRef.current?.querySelector("button")?.focus(); + }, [entries, openMenu]); + + if (!entries) return null; + + const onStripKey = (event: React.KeyboardEvent) => { + const buttons = Array.from(stripRef.current?.querySelectorAll("button") ?? []); + const at = buttons.indexOf(document.activeElement as HTMLElement); + if (event.key === "ArrowRight" || event.key === "ArrowLeft") { + event.preventDefault(); + const delta = event.key === "ArrowRight" ? 1 : -1; + buttons[(at + delta + buttons.length) % buttons.length]?.focus(); + } else if (event.key === "ArrowDown") { + event.preventDefault(); + buttons[at]?.click(); + } else if (event.key === "Escape") { + event.preventDefault(); + dismiss(); + } + }; + + return ( + + {entries.map((entry) => ( + openMenu(entry.id)} + className="rounded px-2.5 py-1 hover:bg-muted focus-visible:bg-muted focus-visible:outline-none" + > + {entry.label} + + ))} + + ); +} diff --git a/components/layout/window-title-bar.tsx b/components/layout/window-title-bar.tsx deleted file mode 100644 index 7f4e306fa..000000000 --- a/components/layout/window-title-bar.tsx +++ /dev/null @@ -1,48 +0,0 @@ -"use client"; - -import { useEffect, useState } from "react"; -import { applyTitlebarInset, watchTitlebarArea, type TitlebarArea } from "@/lib/window-controls-overlay"; - -/** - * The strip above the app in a window without a native title bar: the part - * the user drags the window by, with the window's title in small text. The - * native window controls sit next to it, outside the area it is given. The - * page roots leave this row empty through --titlebar-inset. - * - * Renders nothing, and changes nothing on the page, without an overlay. It - * repeats the title for sighted users only, so it stays out of the - * accessibility tree and out of the tab order. - */ -export function WindowTitleBar() { - const [area, setArea] = useState(null); - const [title, setTitle] = useState(""); - - useEffect(() => watchTitlebarArea((next) => { - applyTitlebarInset(next); - setArea(next); - }), []); - - const visible = area !== null; - useEffect(() => { - if (!visible) return; - const read = () => setTitle(document.title); - read(); - // Each surface sets its own title, and Next puts back on navigation. - const observer = new MutationObserver(read); - observer.observe(document.head, { childList: true, subtree: true, characterData: true }); - return () => observer.disconnect(); - }, [visible]); - - if (!area) return null; - - return ( - <div - aria-hidden="true" - data-window-title-bar="" - className="window-title-bar fixed z-[100002] flex items-center bg-background ps-3 pe-3 text-xs text-muted-foreground select-none" - style={{ top: area.y, left: area.x, width: area.width, height: area.height }} - > - <span className="truncate">{title}</span> - </div> - ); -} diff --git a/components/mail-transfer/__tests__/local-export.test.tsx b/components/mail-transfer/__tests__/local-export.test.tsx new file mode 100644 index 000000000..4d25a4cbe --- /dev/null +++ b/components/mail-transfer/__tests__/local-export.test.tsx @@ -0,0 +1,838 @@ +import 'fake-indexeddb/auto'; +import { act, cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { MailTransferHost } from '@/components/mail-transfer/mail-transfer-host'; +import { localExportAllowed, startLocalExport } from '@/components/mail-transfer/start-local-export'; +import { OfflineSettings } from '@/components/offline/offline-settings'; +import { DEFAULT_ORGANISATION_POLICY } from '@/lib/admin/organisation-policy'; +import { getStrictestDevices, devicesForAccount } from '@/lib/device-policy'; +import { setDownloadGuard } from '@/lib/download-guard'; +import type { ExportProgress } from '@/lib/mail-export/engine'; +import { memorySink, type ExportFile, type ExportSink } from '@/lib/mail-export/sinks'; +import { useOfflineStore } from '@/lib/offline/state'; +import { runWipeCleaners } from '@/lib/offline/wipe-registry'; +import { useAccountSubjects } from '@/lib/org/account-subjects'; +import { runBeforeSignOut } from '@/lib/sign-out-cleanup'; +import { setStoreBackend, type StoreBackend } from '@/lib/store/client/api'; +import { useAccountStore } from '@/stores/account-store'; +import { useAuthStore } from '@/stores/auth-store'; +import { isJobActive, openLocalExport, useMailTransferStore } from '@/stores/mail-transfer-store'; +import { usePolicyStore } from '@/stores/policy-store'; +import { toast } from '@/stores/toast-store'; + +const FOLDERS: { id: string; name: string; role?: string; sortOrder: number }[] = [ + { id: 'inbox', name: 'Inbox', role: 'inbox', sortOrder: 0 }, + { id: 'archive', name: 'Archive', sortOrder: 1 }, +]; +const RAW = new TextEncoder().encode('Subject: x\r\n\r\nbody\r\n'); + +/** A kept account where Inbox has 2 of 3 originals and Archive 1 of 1. */ +function fakeStore(overrides: { rawBlob?: (blobId: string) => unknown; status?: { total: number; kept: number }; size?: { bytes: number; keptBytes: number } } = {}) { + const area = vi.fn(async (_account: string, name: string, params?: { mailboxId?: string; blobId?: string }): Promise<unknown> => { + if (name === 'mail.session') return { primaryAccounts: { 'urn:ietf:params:jmap:mail': 'jmap-a' } }; + if (name === 'mail.rawStatus') return overrides.status ?? (params?.mailboxId === 'inbox' ? { total: 3, kept: 2 } : { total: 1, kept: 1 }); + if (name === 'mail.rawBlob') return overrides.rawBlob ? overrides.rawBlob(params!.blobId!) : { ok: true, blob: new Blob([RAW]) }; + if (name === 'mail.rawSize') return overrides.size ?? { bytes: 10, keptBytes: 10 }; + if (name === 'mail.rawKept') return []; + return null; + }); + const answer = vi.fn(async (_account: string, calls: [string, Record<string, unknown>, string][]) => { + const [name, args] = calls[0]; + if (name === 'Mailbox/get') return { methodResponses: [['Mailbox/get', { list: FOLDERS }, '0']] }; + if (name === 'Email/query') return { methodResponses: [['Email/query', { ids: (args.position as number) > 0 ? [] : ['m1'] }, '0']] }; + return { methodResponses: [['Email/get', { list: [{ id: 'm1', blobId: 'raw-m1', size: RAW.length, keywords: {}, receivedAt: '2026-10-01T00:00:00Z', subject: 'x' }] }, '0']] }; + }); + return { supported: () => true, setScope: vi.fn(async () => {}), area, answer }; +} + +function setDevices(devices: Partial<typeof DEFAULT_ORGANISATION_POLICY.devices>) { + usePolicyStore.setState({ + loaded: true, source: 'server', partial: false, subject: { email: 'alice@example.org', groups: [] }, + policy: { ...usePolicyStore.getState().policy, organisation: { ...DEFAULT_ORGANISATION_POLICY, devices: { ...DEFAULT_ORGANISATION_POLICY.devices, ...devices } } }, + } as never); +} + +function fakeSink(): ExportSink & { write: ReturnType<typeof vi.fn>; abort: ReturnType<typeof vi.fn>; close: ReturnType<typeof vi.fn> } { + const file: ExportFile = { name: 'a.mbox', size: 1, discard: vi.fn(async () => {}) }; + return { kind: 'picker', write: vi.fn(async () => {}), close: vi.fn(async () => file), abort: vi.fn(async () => {}) }; +} + +/** The one lib/device-policy.ts installs, for tests that put their own in for a moment. */ +const installedGuard: Parameters<typeof setDownloadGuard>[0] = (kind, subject) => { + const devices = subject === undefined ? getStrictestDevices() : devicesForAccount(subject as string | null); + return kind === 'export' ? !devices.noExport : !devices.noDownloads; +}; + +const realClient = { getServerUrl: () => 'https://mail.example.org', getAccountId: () => 'jmap-a', getMaxConcurrentRequests: () => 4 }; + +function setOnline(online: boolean) { + useOfflineStore.setState({ browserOffline: !online, downServers: [] }); +} + +beforeEach(() => { + useMailTransferStore.setState({ request: null, visible: false, job: null }); + useAuthStore.setState({ + client: realClient as never, + activeAccountId: 'acc', + getClientForAccount: ((id: string) => (id === 'acc' ? realClient : undefined)) as never, + getAllConnectedClients: (() => new Map([['acc', realClient]])) as never, + } as never); + useAccountStore.setState({ accounts: [{ id: 'acc', email: 'alice@example.org', username: 'alice@example.org', serverUrl: 'https://mail.example.org' }] } as never); + useOfflineStore.setState({ + enabled: ['acc', 'other'], outbox: [], pendingChanges: 0, conflicts: [], areaConflicts: [], syncing: [], lastSyncedAt: {}, choices: { acc: { on: true } }, health: {}, + storageFull: {}, progress: {}, persist: 'granted', browserOffline: false, downServers: [], startedOffline: false, + usage: { acc: { bytes: 5000, parts: [] } }, + }); + setDevices({}); + setStoreBackend(fakeStore() as unknown as StoreBackend); +}); + +afterEach(() => { + cleanup(); + setStoreBackend(null); + delete (window as { showSaveFilePicker?: unknown }).showSaveFilePicker; + delete (window as { bulwarkDesktop?: unknown }).bulwarkDesktop; + vi.unstubAllGlobals(); +}); + +async function openDialog() { + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await screen.findByTestId('local-export-summary'); +} + +/** Runs one export to its end through the job. */ +async function finishedJob(sink = fakeSink()) { + expect(startLocalExport({ account: 'acc', jmap: 'jmap-a', format: 'mbox', folders: [{ mailboxId: 'inbox', path: ['Inbox'] }], sink })).toBe(true); + await act(async () => { await useMailTransferStore.getState().job!.finished; }); + return sink; +} + +describe('before an export starts', () => { + it('says how many originals are here and how many come from the server when online', async () => { + await openDialog(); + expect(screen.getByTestId('local-export-kept').textContent).toBe('kept'); + expect(screen.getByTestId('local-export-missing').textContent).toBe('missing_online'); + expect(screen.queryByTestId('local-export-reason')).toBeNull(); + }); + + it('says offline how many can\'t be exported, and why', async () => { + setOnline(false); + await openDialog(); + expect(screen.getByTestId('local-export-missing').textContent).toBe('missing_offline'); + expect(screen.getByTestId('local-export-reason').textContent).toBe('reason_not_kept'); + }); + + it('gives attachments being off as the reason when they are', async () => { + setOnline(false); + useOfflineStore.setState({ choices: { acc: { on: true, attachments: false } } } as never); + await openDialog(); + expect(screen.getByTestId('local-export-reason').textContent).toBe('reason_attachments_off'); + }); + + it('counts only the folders chosen, and offers none of the rest', async () => { + setOnline(false); + await openDialog(); + const area = (await import('@/lib/store/client/api')).getStore().area as ReturnType<typeof vi.fn>; + expect(area).toHaveBeenCalledWith('acc', 'mail.rawStatus', { jmap: 'jmap-a', mailboxId: 'inbox' }); + const boxes = screen.getAllByTestId('local-export-folder') as HTMLInputElement[]; + expect(boxes.map((box) => box.dataset.folder)).toEqual(['Inbox', 'Archive']); + fireEvent.click(boxes[0]); + // Only Archive now: all of its originals are here. + expect(screen.queryByTestId('local-export-missing')).toBeNull(); + const all = screen.getByTestId('local-export-all') as HTMLInputElement; + expect(all.indeterminate).toBe(true); + fireEvent.click(all); + expect(boxes.every((box) => box.checked)).toBe(true); + }); + + it('can\'t start offline with no original of anything, and can as soon as the server is back', async () => { + setOnline(false); + setStoreBackend(fakeStore({ status: { total: 4, kept: 0 } }) as unknown as StoreBackend); + await openDialog(); + expect((screen.getByTestId('local-export-start') as HTMLButtonElement).disabled).toBe(true); + expect(screen.getByTestId('local-export-missing').textContent).toBe('missing_offline'); + act(() => setOnline(true)); + expect((screen.getByTestId('local-export-start') as HTMLButtonElement).disabled).toBe(false); + expect(screen.getByTestId('local-export-missing').textContent).toBe('missing_online'); + }); + + it('puts the focus on the folders once they are read', async () => { + await openDialog(); + await waitFor(() => expect(document.activeElement).toBe(screen.getByTestId('local-export-all'))); + }); + + it('can\'t start with nothing chosen', async () => { + await openDialog(); + fireEvent.click(screen.getByTestId('local-export-all')); + expect((screen.getByTestId('local-export-start') as HTMLButtonElement).disabled).toBe(true); + expect(screen.getByTestId('local-export-nothing')).toBeTruthy(); + }); + + it('opens the picker from the click, with a name for what was chosen', async () => { + const writable = { write: vi.fn(async () => {}), close: vi.fn(async () => {}), abort: vi.fn(async () => {}) }; + const picker = vi.fn(async () => ({ createWritable: async () => writable })); + (window as { showSaveFilePicker?: unknown }).showSaveFilePicker = picker; + await openDialog(); + fireEvent.click(screen.getAllByTestId('local-export-folder')[1]); + fireEvent.click(screen.getByTestId('local-export-start')); + await waitFor(() => expect(picker).toHaveBeenCalled()); + expect(picker).toHaveBeenCalledWith(expect.objectContaining({ suggestedName: 'Inbox.mbox' })); + await waitFor(() => expect(useMailTransferStore.getState().job?.progress.phase).toBe('done')); + expect(writable.close).toHaveBeenCalled(); + }); +}); + +describe('the device policy "No export"', () => { + it('locks the action in settings, with the reason beside it', () => { + setDevices({ noExport: true }); + render(<OfflineSettings />); + expect((screen.getByTestId('local-export-open') as HTMLButtonElement).disabled).toBe(true); + expect(screen.getByText('settings_label').closest('[data-search-label]')!.querySelector('[data-org-locked]')).toBeTruthy(); + }); + + it('leaves the action in settings open when it\'s off, and that opens the dialog', async () => { + render(<OfflineSettings />); + fireEvent.click(screen.getByTestId('local-export-open')); + expect(useMailTransferStore.getState().request).toEqual({ kind: 'local-export', account: 'acc' }); + }); + + it('keeps the dialog from opening', () => { + setDevices({ noExport: true }); + act(() => openLocalExport('acc')); + expect(useMailTransferStore.getState().request).toBeNull(); + }); + + it('refuses to start, gives back the sink and reads nothing', () => { + const store = fakeStore(); + setStoreBackend(store as unknown as StoreBackend); + setDevices({ noExport: true }); + const sink = fakeSink(); + expect(startLocalExport({ account: 'acc', jmap: 'jmap-a', format: 'mbox', folders: [{ mailboxId: 'inbox', path: [] }], sink })).toBe(false); + expect(sink.abort).toHaveBeenCalled(); + expect(store.answer).not.toHaveBeenCalled(); + expect(useMailTransferStore.getState().job).toBeNull(); + }); + + it('counts as on while the organisation\'s word isn\'t known, as at a first start offline', () => { + usePolicyStore.setState({ loaded: false, source: 'none' } as never); + expect(localExportAllowed('acc')).toBe(false); + usePolicyStore.setState({ loaded: true, source: 'fallback' } as never); + expect(localExportAllowed('acc')).toBe(false); + usePolicyStore.setState({ loaded: true, source: 'server', partial: true } as never); + expect(localExportAllowed('acc')).toBe(false); + usePolicyStore.setState({ loaded: true, source: 'cache', partial: false } as never); + expect(localExportAllowed('acc')).toBe(true); + }); + + it('stops a running export the moment it\'s switched on, and its file goes', async () => { + let release: () => void = () => {}; + const store = fakeStore(); + store.answer.mockImplementationOnce(() => new Promise((resolve) => { release = () => resolve({ methodResponses: [['Email/query', { ids: [] }, '0']] }); })); + setStoreBackend(store as unknown as StoreBackend); + const sink = fakeSink(); + startLocalExport({ account: 'acc', jmap: 'jmap-a', format: 'mbox', folders: [{ mailboxId: 'inbox', path: [] }], sink }); + const job = useMailTransferStore.getState().job!; + expect(isJobActive(job)).toBe(true); + await waitFor(() => expect(store.answer).toHaveBeenCalled()); + act(() => setDevices({ noExport: true })); + expect(job.controller.signal.aborted).toBe(true); + release(); + await act(async () => { await job.finished; }); + expect(useMailTransferStore.getState().job?.progress.phase).toBe('cancelled'); + expect(sink.abort).toHaveBeenCalled(); + expect(sink.close).not.toHaveBeenCalled(); + }); + + it('asks about the account the export is for, not the active one', async () => { + useAuthStore.setState({ getClientForAccount: (() => realClient) as never } as never); + useAccountSubjects.setState({ settled: { other: true } } as never); + const asked: unknown[] = []; + setDownloadGuard((_kind, subject) => { asked.push(subject); return true; }); + try { + const sink = fakeSink(); + expect(startLocalExport({ account: 'other', jmap: 'jmap-a', format: 'mbox', folders: [{ mailboxId: 'inbox', path: [] }], sink })).toBe(true); + expect(useMailTransferStore.getState().job?.scope).toBe('other'); + await act(async () => { await useMailTransferStore.getState().job!.finished; }); + expect(sink.close).toHaveBeenCalled(); + expect(asked.length).toBeGreaterThan(1); + expect(new Set(asked)).toEqual(new Set(['other'])); + } finally { + setDownloadGuard(installedGuard); + } + }); + + it('stops at the file when it came on without the store noticing, as the save picker has no other gate', async () => { + const sink = fakeSink(); + let allowed = true; + setDownloadGuard(() => allowed); + try { + sink.write.mockImplementation(async () => { allowed = false; }); + await finishedJob(sink); + expect(useMailTransferStore.getState().job?.progress.phase).toBe('failed'); + expect(sink.close).not.toHaveBeenCalled(); + expect(sink.abort).toHaveBeenCalled(); + } finally { + setDownloadGuard(installedGuard); + } + }); + + it('shows the organisation as the reason when a real change of policy stopped it', async () => { + const sink = fakeSink(); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + // Through the policy store, the way a fetched policy arrives. + sink.write.mockImplementation(async () => { act(() => setDevices({ noExport: true })); }); + await finishedJob(sink); + expect(useMailTransferStore.getState().job?.progress.phase).toBe('cancelled'); + expect(screen.getByTestId('local-export-stop-reason').textContent).toBe('export_blocked'); + expect(sink.close).not.toHaveBeenCalled(); + }); + + it('says why when the account stopped keeping mail here during the run', async () => { + const sink = fakeSink(); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + sink.write.mockImplementation(async () => { act(() => useOfflineStore.setState({ enabled: ['other'] })); }); + await finishedJob(sink); + expect(screen.getByTestId('local-export-stop-reason').textContent).toBe('stopped_offline_off'); + }); + + it('gives no reason beyond the title when the person cancelled it', async () => { + const sink = fakeSink(); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + sink.write.mockImplementation(async () => { act(() => useMailTransferStore.getState().cancelJob()); }); + await finishedJob(sink); + expect(screen.queryByTestId('local-export-stop-reason')).toBeNull(); + }); + + describe('with a scope the subject decides', () => { + /** Everyone may export; one domain or group may not. */ + function scoped(match: Record<string, string[]>) { + const base = usePolicyStore.getState().rawPolicy; + usePolicyStore.setState({ + rawPolicy: { ...base, scopes: [{ id: 'locked', label: 'Locked', match, policy: { organisation: { devices: { noExport: true } } } }] }, + loaded: true, source: 'server', partial: false, subject: null, subjectPending: false, + } as never); + } + + afterEach(() => { + usePolicyStore.setState({ rawPolicy: { ...usePolicyStore.getState().rawPolicy, scopes: [] }, subjectPending: false } as never); + usePolicyStore.getState().setPolicySubject(null); + }); + + it.each([['domain', { domains: ['example.org'] }], ['group', { groups: ['team@example.org'] }]])('%s: says no until the subject is known, whatever Everyone may do', (_kind, match) => { + scoped(match as Record<string, string[]>); + // What the policy alone would say: nobody has been matched yet. + expect(devicesForAccount('acc').noExport).toBe(false); + expect(localExportAllowed('acc')).toBe(false); + usePolicyStore.setState({ subjectPending: true } as never); + expect(localExportAllowed('acc')).toBe(false); + usePolicyStore.setState({ subjectPending: false } as never); + usePolicyStore.getState().setPolicySubject({ email: 'alice@example.org', groups: ['team@example.org'] }); + expect(devicesForAccount('acc').noExport).toBe(true); + expect(localExportAllowed('acc')).toBe(false); + }); + + it('opens once the subject is known and the scope isn\'t for it', () => { + scoped({ domains: ['elsewhere.example'] }); + expect(localExportAllowed('acc')).toBe(false); + usePolicyStore.getState().setPolicySubject({ email: 'alice@example.org', groups: [] }); + expect(localExportAllowed('acc')).toBe(true); + }); + + it('waits for another account\'s own subject too', () => { + usePolicyStore.getState().setPolicySubject({ email: 'alice@example.org', groups: [] }); + useAuthStore.setState({ getClientForAccount: (() => realClient) as never } as never); + useAccountSubjects.setState({ settled: {} } as never); + expect(localExportAllowed('other')).toBe(false); + useAccountSubjects.setState({ settled: { other: true } } as never); + expect(localExportAllowed('other')).toBe(true); + }); + }); + + describe('at the click on Export', () => { + function withPicker() { + const picker = vi.fn(async () => ({ createWritable: async () => ({ write: async () => {}, close: async () => {}, abort: async () => {} }) })); + (window as { showSaveFilePicker?: unknown }).showSaveFilePicker = picker; + return picker; + } + + it('opens the picker in the same tick as the click, so the gesture counts', async () => { + const picker = withPicker(); + await openDialog(); + fireEvent.click(screen.getByTestId('local-export-start')); + expect(picker).toHaveBeenCalledTimes(1); + await waitFor(() => expect(useMailTransferStore.getState().job?.progress.phase).toBe('done')); + }); + + it('opens no picker under the policy, and says why', async () => { + const picker = withPicker(); + await openDialog(); + setDevices({ noExport: true }); + fireEvent.click(screen.getByTestId('local-export-start')); + expect(picker).not.toHaveBeenCalled(); + expect((await screen.findByTestId('local-export-refused')).textContent).toBe('export_blocked'); + expect(useMailTransferStore.getState().job).toBeNull(); + }); + + it('opens no picker while the policy isn\'t known, and says that', async () => { + const picker = withPicker(); + await openDialog(); + usePolicyStore.setState({ subjectPending: true } as never); + fireEvent.click(screen.getByTestId('local-export-start')); + expect(picker).not.toHaveBeenCalled(); + expect((await screen.findByTestId('local-export-refused')).textContent).toBe('policy_unknown'); + usePolicyStore.setState({ subjectPending: false } as never); + }); + }); +}); + +describe('what the browser can hold', () => { + const SAFARI = 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15'; + const MB = 1024 * 1024; + + /** A browser with no save picker but a private file system: the spool path. */ + function spoolBrowser(agent: string, free: number) { + vi.stubGlobal('navigator', { + ...navigator, userAgent: agent, + storage: { getDirectory: async () => ({}), estimate: async () => ({ quota: free + 100, usage: 100 }) }, + locks: { request: async (name: string, _o: unknown, cb: (lock: unknown) => unknown) => cb({ name }) }, + }); + vi.stubGlobal('FileSystemFileHandle', class { createWritable() {} }); + } + + it('on WebKit stops it before it starts when the choice is over the cap, and says what to do', async () => { + spoolBrowser(SAFARI, 100 * 1024 * MB); + setStoreBackend(fakeStore({ status: { total: 2, kept: 2 }, size: { bytes: 600 * MB, keptBytes: 600 * MB } }) as unknown as StoreBackend); + await openDialog(); + expect(screen.getByTestId('local-export-over-limit').textContent).toBe('over_limit'); + expect((screen.getByTestId('local-export-start') as HTMLButtonElement).disabled).toBe(true); + // Fewer folders fit. + fireEvent.click(screen.getAllByTestId('local-export-folder')[0]); + expect(screen.queryByTestId('local-export-over-limit')).toBeNull(); + expect((screen.getByTestId('local-export-start') as HTMLButtonElement).disabled).toBe(false); + }); + + it('puts no such cap on Firefox', async () => { + spoolBrowser('Mozilla/5.0 (Windows NT 10.0; rv:148.0) Gecko/20100101 Firefox/148.0', 100 * 1024 * MB); + setStoreBackend(fakeStore({ status: { total: 2, kept: 2 }, size: { bytes: 600 * MB, keptBytes: 600 * MB } }) as unknown as StoreBackend); + await openDialog(); + expect(screen.queryByTestId('local-export-over-limit')).toBeNull(); + expect((screen.getByTestId('local-export-start') as HTMLButtonElement).disabled).toBe(false); + }); + + it('says so when the browser has no room for the spool', async () => { + spoolBrowser('Mozilla/5.0 (Windows NT 10.0; rv:148.0) Gecko/20100101 Firefox/148.0', 5 * MB); + setStoreBackend(fakeStore({ status: { total: 2, kept: 2 }, size: { bytes: 3 * MB, keptBytes: 3 * MB } }) as unknown as StoreBackend); + await openDialog(); + expect(screen.getByTestId('local-export-no-room').textContent).toBe('no_room'); + expect((screen.getByTestId('local-export-start') as HTMLButtonElement).disabled).toBe(true); + }); + + it('counts only what will be written: offline, what is kept', async () => { + spoolBrowser('Mozilla/5.0 (Windows NT 10.0; rv:148.0) Gecko/20100101 Firefox/148.0', 5 * MB); + setOnline(false); + setStoreBackend(fakeStore({ status: { total: 2, kept: 1 }, size: { bytes: 300 * MB, keptBytes: 1 * MB } }) as unknown as StoreBackend); + await openDialog(); + expect(screen.queryByTestId('local-export-no-room')).toBeNull(); + act(() => setOnline(true)); + expect(screen.getByTestId('local-export-no-room')).toBeTruthy(); + }); + + it('doesn\'t ask about room when the save picker writes elsewhere', async () => { + spoolBrowser('Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36', 5 * MB); + (window as { showSaveFilePicker?: unknown }).showSaveFilePicker = vi.fn(); + setStoreBackend(fakeStore({ status: { total: 2, kept: 2 }, size: { bytes: 300 * MB, keptBytes: 300 * MB } }) as unknown as StoreBackend); + await openDialog(); + expect(screen.queryByTestId('local-export-no-room')).toBeNull(); + expect(screen.queryByTestId('local-export-over-limit')).toBeNull(); + }); + + it.each([ + ['ExportTooLargeError', 'stopped_limit'], + ['QuotaExceededError', 'stopped_no_room'], + ['TypeError', 'failed_generic'], + ])('says %s in the user\'s language, never the browser\'s text', async (name, key) => { + const sink = fakeSink(); + sink.write.mockImplementation(async () => { throw Object.assign(new Error('Some English from a browser'), { name, limit: 1024 }); }); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await finishedJob(sink); + expect(useMailTransferStore.getState().job?.progress.phase).toBe('failed'); + expect(screen.getByText(key)).toBeTruthy(); + expect(screen.queryByText(/Some English/)).toBeNull(); + }); + + it('says a message failed in the user\'s language too', async () => { + setStoreBackend(fakeStore({ rawBlob: () => { throw new Error('Some English from a server'); } }) as unknown as StoreBackend); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await finishedJob(); + expect(screen.getByText(/message_failed/)).toBeTruthy(); + expect(screen.queryByText(/Some English/)).toBeNull(); + }); +}); + +describe('what an export couldn\'t write', () => { + const notKept = () => setStoreBackend(fakeStore({ rawBlob: () => ({ ok: false, reason: 'not_kept' }) }) as unknown as StoreBackend); + + it('counts it offline with the reason and no way to retry until online', async () => { + setOnline(false); + notKept(); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await finishedJob(); + expect((useMailTransferStore.getState().job?.progress as ExportProgress).notKept).toEqual({ not_kept: 1 }); + expect(screen.getByTestId('local-export-not-kept-missing').textContent).toBe('not_kept_not_kept'); + // Nothing was written: no file, and nothing to download again. + expect(screen.queryByTestId('mail-export-file')).toBeNull(); + expect(screen.queryByTestId('mail-export-download')).toBeNull(); + expect(screen.queryByTestId('local-export-not-kept-attachments')).toBeNull(); + expect(screen.getByTestId('local-export-retry-hint').textContent).toBe('retry_offline'); + expect((screen.getByTestId('local-export-retry') as HTMLButtonElement).disabled).toBe(true); + }); + + it('offers the retry once the connection is back, which goes back to the question with fresh counts', async () => { + setOnline(false); + notKept(); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await finishedJob(); + act(() => setOnline(true)); + expect(screen.getByTestId('local-export-retry-hint').textContent).toBe('retry_online'); + const area = (await import('@/lib/store/client/api')).getStore().area as ReturnType<typeof vi.fn>; + area.mockClear(); + fireEvent.click(screen.getByTestId('local-export-retry')); + await screen.findByTestId('local-export-summary'); + expect(useMailTransferStore.getState().job).toBeNull(); + expect(area).toHaveBeenCalledWith('acc', 'mail.rawStatus', expect.anything()); + expect(screen.getByTestId('local-export-missing').textContent).toBe('missing_online'); + }); + + it('says the export stopped, not that a file is ready, when it ends hidden with nothing written', async () => { + setOnline(false); + notKept(); + const warning = vi.spyOn(toast, 'warning'); + const success = vi.spyOn(toast, 'success'); + render(<MailTransferHost />); + await finishedJob(); + expect(warning).toHaveBeenCalledWith('toast_stopped', expect.anything()); + expect(success).not.toHaveBeenCalled(); + warning.mockRestore(); + success.mockRestore(); + }); + + it('says when the picked file couldn\'t be removed after a run that wrote nothing', async () => { + setOnline(false); + notKept(); + const sink = fakeSink(); + sink.abort.mockImplementation(async () => ({ leftover: 'a.mbox' })); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await finishedJob(sink); + expect(sink.close).not.toHaveBeenCalled(); + expect(screen.getByTestId('local-export-leftover').textContent).toBe('leftover_file'); + }); + + it('says nothing about a file that was removed', async () => { + setOnline(false); + notKept(); + const sink = fakeSink(); + sink.abort.mockImplementation(async () => ({})); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await finishedJob(sink); + expect(sink.abort).toHaveBeenCalled(); + expect(screen.queryByTestId('local-export-leftover')).toBeNull(); + }); + + it('keeps to the chosen folders on the retry, also when a new folder has turned up', async () => { + setOnline(false); + notKept(); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await screen.findByTestId('local-export-summary'); + fireEvent.click(screen.getAllByTestId('local-export-folder')[1]); + await finishedJob(); + act(() => setOnline(true)); + FOLDERS.push({ id: 'new', name: 'New', sortOrder: 2 }); + try { + fireEvent.click(screen.getByTestId('local-export-retry')); + await waitFor(() => expect(screen.getAllByTestId('local-export-folder')).toHaveLength(3)); + const boxes = screen.getAllByTestId('local-export-folder') as HTMLInputElement[]; + expect(boxes.map((box) => [box.dataset.folder, box.checked])).toEqual([['Inbox', true], ['Archive', false], ['New', false]]); + } finally { + FOLDERS.pop(); + } + }); + + it('takes a new folder in when all were chosen', async () => { + setOnline(false); + notKept(); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await screen.findByTestId('local-export-summary'); + await finishedJob(); + act(() => setOnline(true)); + FOLDERS.push({ id: 'new', name: 'New', sortOrder: 2 }); + try { + fireEvent.click(screen.getByTestId('local-export-retry')); + await waitFor(() => expect(screen.getAllByTestId('local-export-folder')).toHaveLength(3)); + expect((screen.getAllByTestId('local-export-folder') as HTMLInputElement[]).every((box) => box.checked)).toBe(true); + } finally { + FOLDERS.pop(); + } + }); + + it('makes no empty file when the folders turned out empty by the time it ran, and says so', async () => { + const store = fakeStore(); + store.answer.mockImplementation(async (_account: string, calls: [string, Record<string, unknown>, string][]) => ( + calls[0][0] === 'Mailbox/get' + ? { methodResponses: [['Mailbox/get', { list: FOLDERS }, '0']] } + : { methodResponses: [['Email/query', { ids: [] }, '0']] } + ) as never); + setStoreBackend(store as unknown as StoreBackend); + const sink = fakeSink(); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await finishedJob(sink); + expect(sink.close).not.toHaveBeenCalled(); + expect(sink.abort).toHaveBeenCalled(); + expect(screen.getByTestId('local-export-wrote-nothing').textContent).toBe('nothing_kept'); + }); + + it('offers no retry when everything was written', async () => { + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + await finishedJob(); + expect(useMailTransferStore.getState().job?.progress.phase).toBe('done'); + expect(screen.queryByTestId('local-export-retry')).toBeNull(); + }); +}); + +describe('while it runs', () => { + it('shows the progress, and Cancel stops it and gives up its file', async () => { + const sink = fakeSink(); + let finish: () => void = () => {}; + const store = fakeStore(); + store.answer.mockImplementationOnce(() => new Promise((resolve) => { finish = () => resolve({ methodResponses: [['Email/query', { ids: [] }, '0']] }); })); + setStoreBackend(store as unknown as StoreBackend); + render(<MailTransferHost />); + act(() => openLocalExport('acc')); + act(() => { startLocalExport({ account: 'acc', jmap: 'jmap-a', format: 'mbox', folders: [{ mailboxId: 'inbox', path: [] }], sink }); }); + expect(screen.getByRole('progressbar')).toBeTruthy(); + expect(screen.getByTestId('mail-export-status').getAttribute('role')).toBe('status'); + await waitFor(() => expect(store.answer).toHaveBeenCalled()); + const job = useMailTransferStore.getState().job!; + fireEvent.click(screen.getByTestId('local-export-cancel')); + expect(job.controller.signal.aborted).toBe(true); + finish(); + await act(async () => { await job.finished; }); + expect(useMailTransferStore.getState().job?.progress.phase).toBe('cancelled'); + expect(sink.abort).toHaveBeenCalled(); + expect(sink.close).not.toHaveBeenCalled(); + expect(screen.getByText('cancelled_title')).toBeTruthy(); + }); +}); + +describe('stopped while the file is being finished', () => { + /** A sink whose close doesn't end until told, the way opening a large spool takes a while. */ + function slowClose() { + const sink = fakeSink(); + const file: ExportFile = { name: 'a.mbox', size: 1, discard: vi.fn(async () => {}) }; + let finish: () => void = () => {}; + let signal: AbortSignal | undefined; + sink.close.mockImplementation((given?: AbortSignal) => new Promise((resolve) => { + signal = given; + finish = () => resolve(file); + })); + return { sink, file, finish: () => finish(), signal: () => signal }; + } + + async function closing(sink: ExportSink) { + expect(startLocalExport({ account: 'acc', jmap: 'jmap-a', format: 'mbox', folders: [{ mailboxId: 'inbox', path: [] }], sink })).toBe(true); + await waitFor(() => expect((sink.close as ReturnType<typeof vi.fn>)).toHaveBeenCalled()); + return useMailTransferStore.getState().job!; + } + + it('passes the job\'s signal to the sink', async () => { + const slow = slowClose(); + const job = await closing(slow.sink); + expect(slow.signal()).toBe(job.controller.signal); + slow.finish(); + await act(async () => { await job.finished; }); + }); + + it('a cancel: the file goes and the run counts as cancelled, also if the sink finished anyway', async () => { + const slow = slowClose(); + const job = await closing(slow.sink); + act(() => useMailTransferStore.getState().cancelJob()); + slow.finish(); + await act(async () => { await job.finished; }); + const progress = useMailTransferStore.getState().job?.progress as ExportProgress; + expect(progress.phase).toBe('cancelled'); + expect(progress.file).toBeUndefined(); + expect(slow.file.discard).toHaveBeenCalledWith(true); + }); + + it('a wipe that outlasts its wait: the job and its file still go when it ends', async () => { + render(<MailTransferHost />); + const slow = slowClose(); + const job = await closing(slow.sink); + await act(async () => { await runWipeCleaners('acc'); }); + expect(job.controller.signal.aborted).toBe(true); + // Still running after the 1.5 s the wipe gives it. + expect(useMailTransferStore.getState().job).not.toBeNull(); + slow.finish(); + await act(async () => { await job.finished; }); + await waitFor(() => expect(useMailTransferStore.getState().job).toBeNull()); + expect(slow.file.discard).toHaveBeenCalledWith(true); + }); + + it('a sign-out that outlasts its wait: the same', async () => { + render(<MailTransferHost />); + const slow = slowClose(); + const job = await closing(slow.sink); + await act(async () => { await runBeforeSignOut('acc'); }); + slow.finish(); + await act(async () => { await job.finished; }); + await waitFor(() => expect(useMailTransferStore.getState().job).toBeNull()); + expect(slow.file.discard).toHaveBeenCalledWith(true); + }); + + it('a wipe after the dialog closed drops the finished file at once', async () => { + const revoke = vi.fn(); + vi.stubGlobal('URL', Object.assign(URL, { createObjectURL: () => 'blob:x', revokeObjectURL: revoke })); + render(<MailTransferHost />); + await finishedJob(memorySink('a.mbox', 'application/mbox') as ReturnType<typeof fakeSink>); + act(() => useMailTransferStore.getState().close()); + expect(useMailTransferStore.getState().job).toBeNull(); + expect(revoke).not.toHaveBeenCalled(); + await act(async () => { await runWipeCleaners('acc'); }); + expect(revoke).toHaveBeenCalledWith('blob:x'); + }); +}); + +describe('an export is cleaned up', () => { + /** A job that doesn't end until it's aborted. */ + function runningJob(account = 'acc') { + const sink = fakeSink(); + const store = fakeStore(); + // Like a store read: under way until the job is stopped. + store.answer.mockImplementation(() => new Promise((_resolve, reject) => { + const signal = useMailTransferStore.getState().job!.controller.signal; + const stop = () => reject(new DOMException('stopped', 'AbortError')); + if (signal.aborted) stop(); + else signal.addEventListener('abort', stop); + })); + setStoreBackend(store as unknown as StoreBackend); + expect(startLocalExport({ account, jmap: 'jmap-a', format: 'mbox', folders: [{ mailboxId: 'inbox', path: [] }], sink })).toBe(true); + return { sink, job: useMailTransferStore.getState().job! }; + } + + function stubSweep() { + const removed: string[] = []; + const dir = { + keys: async function* () { yield 'old-spool'; }, + removeEntry: async (name: string) => { removed.push(name); }, + }; + const root = { + getDirectoryHandle: async () => dir, + removeEntry: vi.fn(async () => {}), + }; + vi.stubGlobal('navigator', { ...navigator, storage: { getDirectory: async () => root }, locks: { request: async (name: string, _o: unknown, cb: (lock: unknown) => unknown) => cb({ name }) } }); + return { removed, root }; + } + + it('on a wipe of its account: stops the job and forgets it', async () => { + render(<MailTransferHost />); + const { job } = runningJob(); + await act(async () => { await runWipeCleaners('acc'); }); + expect(job.controller.signal.aborted).toBe(true); + expect(useMailTransferStore.getState().job).toBeNull(); + }); + + it('a wipe of another account leaves the job alone', async () => { + render(<MailTransferHost />); + const { job } = runningJob(); + await act(async () => { await runWipeCleaners('someone-else'); }); + expect(job.controller.signal.aborted).toBe(false); + expect(useMailTransferStore.getState().job).toBe(job); + }); + + it('on a wipe of everything: also every spool, whoever holds it', async () => { + render(<MailTransferHost />); + const { job } = runningJob(); + const { root } = stubSweep(); + await act(async () => { await runWipeCleaners(null); }); + expect(job.controller.signal.aborted).toBe(true); + expect(root.removeEntry).toHaveBeenCalledWith('bulwark-exports', { recursive: true }); + }); + + it('on a wipe of one account: the spools nobody holds go too', async () => { + render(<MailTransferHost />); + const { removed, root } = stubSweep(); + await act(async () => { await runWipeCleaners('acc'); }); + expect(removed).toEqual(['old-spool']); + expect(root.removeEntry).not.toHaveBeenCalled(); + }); + + it('on sign-out of its account: stops the job and forgets it', async () => { + render(<MailTransferHost />); + const { job } = runningJob(); + await act(async () => { await runBeforeSignOut('acc'); }); + expect(job.controller.signal.aborted).toBe(true); + expect(useMailTransferStore.getState().job).toBeNull(); + }); + + it('frees a finished export\'s file at once on a wipe', async () => { + render(<MailTransferHost />); + const sink = fakeSink(); + await finishedJob(sink); + const file = (useMailTransferStore.getState().job!.progress as ExportProgress).file!; + await act(async () => { await runWipeCleaners('acc'); }); + expect(file.discard).toHaveBeenCalledWith(true); + }); + + it('when the account stops keeping mail here: stops the job', () => { + const { job } = runningJob(); + act(() => useOfflineStore.setState({ enabled: ['other'] })); + expect(job.controller.signal.aborted).toBe(true); + }); + + it('at start-up: sweeps what a crash left', async () => { + const { removed } = stubSweep(); + render(<MailTransferHost />); + await waitFor(() => expect(removed).toEqual(['old-spool'])); + }); +}); + +describe('the taskbar in the desktop app', () => { + it('shows a running export and takes it away at the end', async () => { + const setProgress = vi.fn(); + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', os: { setProgress } }; + render(<MailTransferHost />); + await finishedJob(); + const calls = setProgress.mock.calls; + expect(calls[0]).toEqual([0, 'normal']); + expect(calls[calls.length - 1][0]).toBeNull(); + }); + + it('says when it\'s paused', async () => { + const setProgress = vi.fn(); + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', os: { setProgress } }; + render(<MailTransferHost />); + const store = useMailTransferStore.getState(); + act(() => store.startJob({ kind: 'export', controller: new AbortController(), progress: { phase: 'paused', exported: 1, failed: 0, failures: [], total: 4, fraction: 0.25 } })); + expect(setProgress).toHaveBeenLastCalledWith(0.25, 'paused'); + }); + + it('asks nothing of a shell without it, or of a browser', async () => { + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32' }; + render(<MailTransferHost />); + await finishedJob(); + expect(useMailTransferStore.getState().job?.progress.phase).toBe('done'); + }); +}); diff --git a/components/mail-transfer/local-export-dialog.tsx b/components/mail-transfer/local-export-dialog.tsx new file mode 100644 index 000000000..c72d05329 --- /dev/null +++ b/components/mail-transfer/local-export-dialog.tsx @@ -0,0 +1,340 @@ +"use client"; + +import { useEffect, useId, useRef, useState } from "react"; +import { useLocale, useTranslations } from "next-intl"; +import { Dialog } from "@/components/ui/dialog"; +import { Button } from "@/components/ui/button"; +import { downloadAllowed } from "@/lib/download-guard"; +import { folderTree, safeName, type ExportFolder, type ExportFormat, type ExportProgress } from "@/lib/mail-export/engine"; +import { MEMORY_EXPORT_LIMIT, openExportSink, spoolLimit } from "@/lib/mail-export/sinks"; +import { scopeForAccount } from "@/lib/offline/offline-mode"; +import { useOfflineStore } from "@/lib/offline/state"; +import { getStore } from "@/lib/store/client/api"; +import { formatFileSize } from "@/lib/utils"; +import { useAccountStore } from "@/stores/account-store"; +import { isJobActive, useMailTransferStore, type LocalExportRequest } from "@/stores/mail-transfer-store"; +import { ExportProgressBody, saveMode } from "./mail-export-dialog"; +import { localExportAllowed, localExportDecided, localExportReachable, localExportReader, primaryJmapAccount, startLocalExport } from "./start-local-export"; +import { useFocusOnStage } from "./transfer-progress"; + +interface FolderRow { + folder: ExportFolder; + total: number; + kept: number; + bytes: number; + keptBytes: number; +} + +/** `free`: what the browser says is left for this site; null where it doesn't say. */ +type Loaded = { jmap: string; rows: FolderRow[]; free: number | null }; + +function today(): string { + return new Date().toISOString().slice(0, 10); +} + +/** What an account keeps, folder by folder, for the question before an export starts. */ +async function readFolders(account: string): Promise<Loaded> { + const jmap = await primaryJmapAccount(account); + if (!jmap) throw new Error("The account has no mail account in the store"); + const folders = folderTree(await localExportReader(account, jmap).getMailboxes()); + const rows: FolderRow[] = []; + for (const folder of folders) { + const params = { jmap, mailboxId: folder.mailboxId }; + const status = await getStore().area<{ total: number; kept: number }>(account, "mail.rawStatus", params); + const size = await getStore().area<{ bytes: number; keptBytes: number }>(account, "mail.rawSize", params); + rows.push({ folder, ...status, ...size }); + } + return { jmap, rows, free: await freeRoom() }; +} + +async function freeRoom(): Promise<number | null> { + try { + const estimate = await navigator.storage?.estimate?.(); + if (typeof estimate?.quota !== "number") return null; + return Math.max(0, estimate.quota - (estimate.usage ?? 0)); + } catch { + return null; + } +} + +/** Settings > Backup & reset > Offline > Export kept mail: from the local store, also with no server. */ +export function LocalExportDialog({ request }: { request: LocalExportRequest }) { + const t = useTranslations("offlineExport"); + const tExport = useTranslations("mail_export"); + const tPolicy = useTranslations("device_policy"); + const locale = useLocale(); + const id = useId(); + const { account } = request; + const visible = useMailTransferStore((s) => s.visible); + const job = useMailTransferStore((s) => s.job); + const close = useMailTransferStore((s) => s.close); + const hide = useMailTransferStore((s) => s.hide); + const cancelJob = useMailTransferStore((s) => s.cancelJob); + const address = useAccountStore((s) => { + const entry = s.accounts.find((candidate) => candidate.id === account); + return entry?.email || entry?.username || account; + }); + // Re-renders when the connection changes; what it means is asked below. + useOfflineStore((s) => s.browserOffline); + useOfflineStore((s) => s.downServers); + const reachable = localExportReachable(account); + const [loaded, setLoaded] = useState<Loaded | null>(null); + const [loadFailed, setLoadFailed] = useState(false); + const [excluded, setExcluded] = useState<ReadonlySet<string>>(new Set()); + const [format, setFormat] = useState<ExportFormat>("mbox"); + const [starting, setStarting] = useState(false); + const [refused, setRefused] = useState<string | null>(null); + const mode = saveMode(); + const progress = job?.kind === "export" ? job.progress : null; + const active = isJobActive(job); + const stageButton = useRef<HTMLButtonElement>(null); + const allFolders = useRef<HTMLInputElement | null>(null); + const knownFolders = useRef<ReadonlySet<string>>(new Set()); + useFocusOnStage(stageButton, progress ? (active ? "running" : "ended") : "setup"); + const inSetup = !progress; + + // Read again each time the setup shows, so a try online sees what's kept by then. + useEffect(() => { + if (!inSetup) return; + let live = true; + setLoadFailed(false); + readFolders(account).then( + (result) => { + if (!live) return; + // A folder that turned up since isn't one the person chose: after a try online + // only "All folders" takes it in. + const ids = result.rows.map((row) => row.folder.mailboxId); + const known = knownFolders.current; + knownFolders.current = new Set(ids); + setExcluded((was) => (was.size === 0 ? was : new Set([...was, ...ids.filter((folderId) => !known.has(folderId))]))); + setLoaded(result); + }, + () => { if (live) setLoadFailed(true); }, + ); + return () => { live = false; }; + }, [account, inSetup]); + + // The dialog opens before the folders are read, with only its footer to focus. + const foldersShown = inSetup && loaded !== null; + useEffect(() => { + if (foldersShown) allFolders.current?.focus(); + }, [foldersShown]); + + /** Why a run stopped, in the user's language, whatever the error said. */ + function stopMessage(run: ExportProgress): string { + if (run.errorCode === "ExportForbiddenError" || !localExportAllowed(account)) return tPolicy("export_blocked"); + if (run.errorCode === "ExportTooLargeError") return t("stopped_limit", { limit: formatFileSize(run.errorLimit ?? 0) }); + if (run.errorCode === "QuotaExceededError") return t("stopped_no_room"); + return t("failed_generic"); + } + + if (!visible) return null; + + if (progress) { + const notKept = progress.notKept; + const notKeptCount = (notKept?.attachments_off ?? 0) + (notKept?.not_kept ?? 0); + const reason: unknown = job?.controller.signal.reason; + const leftover = progress.leftover; + const shown: ExportProgress = { + ...progress, + // Nothing from a server or a browser reaches the user in English. + failures: progress.failures.map((failure) => ({ ...failure, reason: t("message_failed") })), + ...(progress.phase === "failed" ? { error: stopMessage(progress) } : {}), + }; + return ( + <Dialog + isOpen + onClose={() => (active ? hide() : close())} + size="full-on-phone" + preventOutsideClose + title={progress.phase === "done" ? tExport("done_title") : progress.phase === "cancelled" ? tExport("cancelled_title") : progress.phase === "failed" ? tExport("failed_title") : tExport("running_title")} + testId="local-export-dialog" + footer={active ? ( + <> + <Button ref={stageButton} variant="outline" onClick={hide}>{tExport("background")}</Button> + <Button variant="destructive" onClick={() => cancelJob()} aria-describedby={`${id}-status`} data-testid="local-export-cancel">{tExport("cancel_export")}</Button> + </> + ) : ( + <> + {progress.phase === "done" && progress.file?.download && ( + <Button variant="outline" onClick={() => progress.file?.download?.()} data-testid="mail-export-download">{tExport("download_again")}</Button> + )} + {notKeptCount > 0 && ( + <Button variant="outline" disabled={!reachable} onClick={() => useMailTransferStore.getState().open(request)} data-testid="local-export-retry">{t("retry")}</Button> + )} + <Button ref={stageButton} onClick={() => close()}>{tExport("close")}</Button> + </> + )} + > + <ExportProgressBody progress={shown} t={tExport} locale={locale} statusId={`${id}-status`} /> + {progress.phase === "cancelled" && reason === "policy" && <p className="mt-4 text-sm text-destructive" role="alert" data-testid="local-export-stop-reason">{tPolicy("export_blocked")}</p>} + {progress.phase === "cancelled" && reason === "offline-off" && <p className="mt-4 text-sm text-destructive" role="alert" data-testid="local-export-stop-reason">{t("stopped_offline_off")}</p>} + {progress.phase === "done" && progress.exported === 0 && progress.failed === 0 && <p className="mt-4 text-sm text-foreground" data-testid="local-export-wrote-nothing">{t("nothing_kept")}</p>} + {leftover && <p className="mt-4 text-sm text-destructive break-words" role="alert" data-testid="local-export-leftover">{t("leftover_file", { name: leftover })}</p>} + {notKeptCount > 0 && ( + <div className="mt-4 space-y-1 text-sm text-foreground" data-testid="local-export-not-kept"> + {!!notKept?.attachments_off && <p data-testid="local-export-not-kept-attachments">{t("not_kept_attachments_off", { count: notKept.attachments_off })}</p>} + {!!notKept?.not_kept && <p data-testid="local-export-not-kept-missing">{t("not_kept_not_kept", { count: notKept.not_kept })}</p>} + <p className="text-xs text-muted-foreground" data-testid="local-export-retry-hint">{reachable ? t("retry_online") : t("retry_offline")}</p> + </div> + )} + </Dialog> + ); + } + + const rows = loaded?.rows ?? []; + const chosen = rows.filter((row) => !excluded.has(row.folder.mailboxId)); + const total = chosen.reduce((sum, row) => sum + row.total, 0); + const kept = chosen.reduce((sum, row) => sum + row.kept, 0); + const missing = total - kept; + const single = chosen.length === 1; + const attachmentsOff = !scopeForAccount(account).scope.attachments; + // Offline with no original of anything: the save picker would ask where to put nothing. + const nothingToWrite = total === 0 || (kept === 0 && !reachable); + // What the run will need, against what this browser can give it. Asked up front: a + // tab killed with no message after hours is the outcome to avoid. + const needed = chosen.reduce((sum, row) => sum + (reachable ? row.bytes : row.keptBytes), 0); + const limit = mode === "memory" ? MEMORY_EXPORT_LIMIT : mode === "download" ? spoolLimit() : Infinity; + const overLimit = needed > limit; + const noRoom = mode === "download" && loaded?.free != null && needed > loaded.free; + + const onStart = async () => { + if (!loaded || starting || chosen.length === 0) return; + // Before the picker, with nothing awaited, so the click still counts for it. + if (!localExportAllowed(account)) { + setRefused(localExportDecided(account) ? tPolicy("export_blocked") : t("policy_unknown")); + downloadAllowed("export", account); + return; + } + setRefused(null); + const zip = !single || format === "eml"; + const base = single + ? safeName(chosen[0].folder.path[chosen[0].folder.path.length - 1] ?? "", "mail") + : `${safeName(address, "mail")}-${today()}`; + setStarting(true); + try { + // The save picker must open straight from the click. In the desktop app it's the OS's own Save dialog. + const sink = await openExportSink(`${base}.${zip ? "zip" : "mbox"}`, zip ? "application/zip" : "application/mbox", zip ? ".zip" : ".mbox"); + if (!sink) return; + startLocalExport({ account, jmap: loaded.jmap, format, folders: chosen.map((row) => row.folder), sink }); + } finally { + setStarting(false); + } + }; + + const toggleFolder = (mailboxId: string, on: boolean) => { + const next = new Set(excluded); + if (on) next.delete(mailboxId); + else next.add(mailboxId); + setExcluded(next); + }; + + const formats: { value: ExportFormat; label: string; hint: string }[] = [ + { value: "mbox", label: single ? tExport("format_mbox_folder") : tExport("format_mbox_account"), hint: tExport("hint_mbox") }, + { value: "eml", label: single ? tExport("format_eml_folder") : tExport("format_eml_account"), hint: tExport("hint_eml") }, + ]; + + return ( + <Dialog + isOpen + onClose={() => close()} + size="full-on-phone" + title={t("title")} + description={t("description")} + testId="local-export-dialog" + footer={( + <> + <Button variant="outline" onClick={() => close()}>{tExport("cancel")}</Button> + <Button onClick={() => void onStart()} disabled={starting || !loaded || nothingToWrite || overLimit || noRoom} data-testid="local-export-start">{tExport("start")}</Button> + </> + )} + > + <div className="mt-4 space-y-5"> + {loadFailed ? ( + <p className="text-sm text-destructive" role="alert" data-testid="local-export-load-failed">{t("load_failed")}</p> + ) : !loaded ? ( + <p className="text-sm text-muted-foreground" role="status" data-testid="local-export-loading">{t("loading")}</p> + ) : ( + <> + <fieldset> + <legend className="mb-2 text-sm font-medium text-foreground">{t("folders_label")}</legend> + <label className="flex items-center gap-2 py-1 text-sm font-medium text-foreground"> + <input + type="checkbox" + checked={excluded.size === 0} + ref={(input) => { + allFolders.current = input; + if (input) input.indeterminate = excluded.size > 0 && excluded.size < rows.length; + }} + onChange={(event) => setExcluded(event.target.checked ? new Set() : new Set(rows.map((row) => row.folder.mailboxId)))} + data-testid="local-export-all" + /> + {t("all_folders")} + </label> + <ul className="max-h-56 overflow-y-auto rounded-md border border-border"> + {rows.map((row) => ( + <li key={row.folder.mailboxId} className="border-b border-border last:border-b-0"> + <label className="flex items-start gap-2 px-3 py-2 text-sm text-foreground"> + <input + type="checkbox" + className="mt-0.5 shrink-0" + checked={!excluded.has(row.folder.mailboxId)} + onChange={(event) => toggleFolder(row.folder.mailboxId, event.target.checked)} + data-testid="local-export-folder" + data-folder={row.folder.path.join("/")} + /> + <span className="min-w-0 flex-1 [overflow-wrap:anywhere]">{row.folder.path.join(" / ")}</span> + <span className="shrink-0 text-xs tabular-nums text-muted-foreground">{t("folder_kept", { kept: row.kept, total: row.total })}</span> + </label> + </li> + ))} + </ul> + </fieldset> + <fieldset> + <legend className="mb-2 text-sm font-medium text-foreground">{tExport("format_label")}</legend> + <div className="space-y-2"> + {formats.map((f) => ( + <label key={f.value} className="flex items-start gap-2 rounded-md border border-border p-3 text-sm text-foreground has-[:checked]:border-primary"> + <input + type="radio" + name={`${id}-format`} + value={f.value} + checked={format === f.value} + onChange={() => setFormat(f.value)} + className="mt-0.5" + aria-describedby={`${id}-${f.value}-hint`} + data-testid={`local-export-format-${f.value}`} + /> + <span> + {f.label} + <span id={`${id}-${f.value}-hint`} className="block text-xs text-muted-foreground">{f.hint}</span> + </span> + </label> + ))} + </div> + </fieldset> + <div className="space-y-1 text-sm text-foreground" role="status" aria-live="polite" data-testid="local-export-summary"> + {total === 0 ? ( + <p data-testid="local-export-nothing">{t("nothing_kept")}</p> + ) : ( + <p data-testid="local-export-kept">{t("kept", { kept, total })}</p> + )} + {missing > 0 && ( + <p data-testid="local-export-missing" className={reachable ? undefined : "font-medium"}> + {reachable ? t("missing_online", { count: missing }) : t("missing_offline", { count: missing })} + </p> + )} + {missing > 0 && !reachable && ( + <p className="text-xs text-muted-foreground" data-testid="local-export-reason">{attachmentsOff ? t("reason_attachments_off") : t("reason_not_kept")}</p> + )} + {overLimit && <p className="font-medium text-destructive" data-testid="local-export-over-limit">{t("over_limit", { limit: formatFileSize(limit), size: formatFileSize(needed) })}</p>} + {noRoom && !overLimit && <p className="font-medium text-destructive" data-testid="local-export-no-room">{t("no_room", { size: formatFileSize(needed), free: formatFileSize(loaded?.free ?? 0) })}</p>} + {refused && <p className="font-medium text-destructive" data-testid="local-export-refused">{refused}</p>} + </div> + <p className="text-xs text-muted-foreground">{tExport(`save_${mode}`)}</p> + </> + )} + </div> + </Dialog> + ); +} diff --git a/components/mail-transfer/mail-export-dialog.tsx b/components/mail-transfer/mail-export-dialog.tsx index c3e7b6b99..9c09d14b7 100644 --- a/components/mail-transfer/mail-export-dialog.tsx +++ b/components/mail-transfer/mail-export-dialog.tsx @@ -9,7 +9,7 @@ import { useAuthStore } from "@/stores/auth-store"; import { isJobActive, useMailTransferStore, type ExportRequest } from "@/stores/mail-transfer-store"; import type { ExportFormat, ExportProgress } from "@/lib/mail-export/engine"; import { safeName } from "@/lib/mail-export/engine"; -import { canPickSaveFile, canWritePrivateFile, memorySink, pickSaveFile, privateFileSink, sweepPrivateExports, type ExportSink } from "@/lib/mail-export/sinks"; +import { canPickSaveFile, canWritePrivateFile, openExportSink } from "@/lib/mail-export/sinks"; import { formatFileSize } from "@/lib/utils"; import { formatClock, TransferBar, useFocusOnStage } from "./transfer-progress"; import { startExport } from "./start-export"; @@ -19,7 +19,7 @@ function today(): string { } /** Where the file will go in this browser, said before the export starts. */ -function saveMode(): "picker" | "download" | "memory" { +export function saveMode(): "picker" | "download" | "memory" { if (canPickSaveFile()) return "picker"; return canWritePrivateFile() ? "download" : "memory"; } @@ -57,21 +57,10 @@ export function MailExportDialog({ request }: { request: ExportRequest }) { const name = `${base}.${zip ? "zip" : "mbox"}`; const mime = zip ? "application/zip" : "application/mbox"; setStarting(true); - let sink: ExportSink | null = null; try { // The save picker must open straight from the click. - if (mode === "picker") { - try { - sink = await pickSaveFile(name, mime, zip ? ".zip" : ".mbox"); - } catch (error) { - if ((error as { name?: string } | null)?.name === "AbortError") return; - sink = null; - } - } - if (!sink) { - await sweepPrivateExports(); - sink = (await privateFileSink(name, mime)) ?? memorySink(name, mime); - } + const sink = await openExportSink(name, mime, zip ? ".zip" : ".mbox"); + if (!sink) return; startExport({ format, accountId: mailbox?.accountId || client.getAccountId(), @@ -165,7 +154,7 @@ export function MailExportDialog({ request }: { request: ExportRequest }) { type T = ReturnType<typeof useTranslations>; -function ExportProgressBody({ progress: p, t, locale, statusId }: { progress: ExportProgress; t: T; locale: string; statusId: string }) { +export function ExportProgressBody({ progress: p, t, locale, statusId }: { progress: ExportProgress; t: T; locale: string; statusId: string }) { const running = p.phase === "running" || p.phase === "paused"; // The live region says only what changes the user's plans (paused, done); // the count beside it would otherwise be read out several times a second. diff --git a/components/mail-transfer/mail-transfer-host.tsx b/components/mail-transfer/mail-transfer-host.tsx index c48444ea9..bacd2ff95 100644 --- a/components/mail-transfer/mail-transfer-host.tsx +++ b/components/mail-transfer/mail-transfer-host.tsx @@ -4,19 +4,48 @@ import { useEffect, useRef } from "react"; import { useLocale, useTranslations } from "next-intl"; import { Loader2, Pause } from "@/components/icons"; import { isJobActive, useMailTransferStore } from "@/stores/mail-transfer-store"; +import { showTaskbarProgress } from "@/lib/desktop/taskbar-progress"; +import { onDeviceWipe } from "@/lib/offline/wipe-registry"; import { onBeforeSignOut } from "@/lib/sign-out-cleanup"; import { clearCheckpointsFor } from "@/lib/mail-import/checkpoints"; -import { sweepPrivateExports } from "@/lib/mail-export/sinks"; +import { dropExportFiles, sweepPrivateExports } from "@/lib/mail-export/sinks"; import { useAuthStore } from "@/stores/auth-store"; import { toast } from "@/stores/toast-store"; import { MailImportDialog } from "./mail-import-dialog"; import { MailExportDialog } from "./mail-export-dialog"; +import { LocalExportDialog } from "./local-export-dialog"; import { formatClock } from "./transfer-progress"; import { forgetLocalImportFor, isDeviceOnlyClient, resumeLocalImport, setImportTaskbarProgress } from "./local-import-job"; /** How long sign-out waits for a cancelled job to stop (its budget is 2 s). */ const SIGN_OUT_WAIT_MS = 1500; +/** + * Stops the job of an account that goes, and frees what its export kept in this + * browser. `all`: whoever's job it is. Another account's job goes on. + */ +async function stopJobOf(accountId: string): Promise<void> { + // Finished exports waiting out their grace period, with the dialog long closed. + dropExportFiles(accountId); + const store = useMailTransferStore.getState(); + const job = store.job; + if (!job || !(accountId === "all" || !job.scope || job.scope === accountId)) return; + const forget = () => { + const now = useMailTransferStore.getState(); + if (now.job?.controller === job.controller) now.close({ now: true }); + }; + if (isJobActive(job)) { + store.cancelJob("signout"); + await Promise.race([job.finished, new Promise((resolve) => setTimeout(resolve, SIGN_OUT_WAIT_MS))]); + // Still going after the wait: close() leaves a running job be, so it goes when it ends. + if (isJobActive(useMailTransferStore.getState().job)) { + void job.finished?.then(forget, forget); + return; + } + } + forget(); +} + /** * Draws the mail import and export dialogs, and while it is hidden with a job running, * a chip in the corner that shows the progress and brings it back. Mounted @@ -32,19 +61,17 @@ export function MailTransferHost() { // Another account signing out leaves the job alone. The job's checkpoint // goes after the job has stopped, so a late write can't bring it back. useEffect(() => onBeforeSignOut(async (accountId) => { - const store = useMailTransferStore.getState(); - const job = store.job; - if (job && (accountId === "all" || !job.scope || job.scope === accountId)) { - if (isJobActive(job)) { - store.cancelJob("signout"); - await Promise.race([job.finished, new Promise((resolve) => setTimeout(resolve, SIGN_OUT_WAIT_MS))]); - } - useMailTransferStore.getState().close({ now: true }); - } + await stopJobOf(accountId); await forgetLocalImportFor(accountId); if (accountId !== "all") await clearCheckpointsFor(accountId); }), []); + // A wipe takes the same, and every spool no tab holds. `null` is everything on this device. + useEffect(() => onDeviceWipe(async (account) => { + await stopJobOf(account ?? "all"); + await sweepPrivateExports({ force: account === null }); + }), []); + // Export files a closed tab or a crash left in the browser's private // storage go when the app starts and when someone signs in. const activeAccountId = useAuthStore((s) => s.activeAccountId); @@ -52,6 +79,20 @@ export function MailTransferHost() { if (!isJobActive(useMailTransferStore.getState().job)) void sweepPrivateExports(); }, [activeAccountId]); + // The desktop app shows a running export on its taskbar button. + const exportPhase = job?.kind === "export" ? job.progress.phase : null; + const exportFraction = job?.kind === "export" ? job.progress.fraction : 0; + const onTaskbar = useRef(false); + useEffect(() => { + if (exportPhase === "running" || exportPhase === "paused") { + onTaskbar.current = true; + showTaskbarProgress(exportFraction, exportPhase === "paused" ? "paused" : "normal"); + } else if (onTaskbar.current) { + onTaskbar.current = false; + showTaskbarProgress(null); + } + }, [exportPhase, exportFraction]); + // A job that ends while its dialog is hidden says so, with a way back to its summary. const tImport = useTranslations("mail_import"); const tExport = useTranslations("mail_export"); @@ -96,8 +137,8 @@ export function MailTransferHost() { if (job.kind === "import") { if (phase === "done") toast.success(tImport("toast_done", { imported: job.progress.imported, failed: job.progress.failed }), { action }); else toast.warning(tImport("toast_stopped"), { action }); - } else if (phase === "done") { - toast.success(tExport("toast_done", { name: job.progress.file?.name ?? "" }), { action }); + } else if (phase === "done" && job.progress.file) { + toast.success(tExport("toast_done", { name: job.progress.file.name }), { action }); } else { toast.warning(tExport("toast_stopped"), { action }); } @@ -109,6 +150,7 @@ export function MailTransferHost() { <> {request?.kind === "import" && <MailImportDialog request={request} />} {request?.kind === "export" && <MailExportDialog request={request} />} + {request?.kind === "local-export" && <LocalExportDialog request={request} />} {!visible && isJobActive(job) && <TransferChip />} </> ); diff --git a/components/mail-transfer/start-local-export.ts b/components/mail-transfer/start-local-export.ts new file mode 100644 index 000000000..ca40ea492 --- /dev/null +++ b/components/mail-transfer/start-local-export.ts @@ -0,0 +1,116 @@ +import { downloadAllowed, downloadAllowedQuietly } from "@/lib/download-guard"; +import { localExportClient } from "@/lib/mail-export/local-store-client"; +import { runExport, type ExportFolder, type ExportFormat } from "@/lib/mail-export/engine"; +import { guardedSink, type ExportSink } from "@/lib/mail-export/sinks"; +import { scopeDecided } from "@/lib/offline/offline-mode"; +import { isOfflineNow, useOfflineStore } from "@/lib/offline/state"; +import { getStore } from "@/lib/store/client/api"; +import type { StoreSession } from "@/lib/store/engine/transport"; +import { useAuthStore } from "@/stores/auth-store"; +import { useMailTransferStore } from "@/stores/mail-transfer-store"; +import { usePolicyStore } from "@/stores/policy-store"; +import { useAccountSubjects } from "@/lib/org/account-subjects"; + +const MAIL_CAPABILITY = "urn:ietf:params:jmap:mail"; + +/** + * Whether the organisation has said what applies to this account, down to its + * groups. A start offline may not have heard it, and a group or domain scope may + * forbid what Everyone may do: not known means no. + */ +export function localExportDecided(account: string): boolean { + return scopeDecided(account); +} + +/** Whether the organisation lets this account export. */ +export function localExportAllowed(account: string): boolean { + return localExportDecided(account) && downloadAllowedQuietly("export", account); +} + +function clientOf(account: string) { + const auth = useAuthStore.getState(); + return auth.getClientForAccount?.(account) ?? (account === auth.activeAccountId ? auth.client : undefined) ?? null; +} + +/** The real client while its server can be reached. */ +function reachableClient(account: string) { + const client = clientOf(account); + if (!client || isOfflineNow(client.getServerUrl())) return null; + return client; +} + +/** Whether a message with no original here could be fetched right now. */ +export function localExportReachable(account: string): boolean { + return reachableClient(account) !== null; +} + +/** The account's own mail account in the store. Shared accounts aren't offered yet. */ +export async function primaryJmapAccount(account: string): Promise<string | null> { + const session = await getStore().area<StoreSession | null>(account, "mail.session"); + return session?.primaryAccounts?.[MAIL_CAPABILITY] ?? clientOf(account)?.getAccountId() ?? null; +} + +export function localExportReader(account: string, jmap: string) { + return localExportClient({ account, jmap, store: getStore(), online: () => reachableClient(account) }); +} + +export interface StartLocalExportInput { + account: string; + jmap: string; + format: ExportFormat; + folders: ExportFolder[]; + sink: ExportSink; +} + +/** Runs an export from the local store as the dialog's job. False, and nothing read, when the policy says no. */ +export function startLocalExport(input: StartLocalExportInput): boolean { + const { account, jmap, format, folders } = input; + if (!localExportAllowed(account) || !downloadAllowed("export", account)) { + void input.sink.abort().catch(() => {}); + return false; + } + const controller = new AbortController(); + // Stops at once, also for an account that isn't the active one, and when no write is due. + const unwatchPolicy = usePolicyStore.subscribe(() => { + if (!localExportAllowed(account)) controller.abort("policy"); + }); + // What another account's groups turn out to be can say no as well. + const unwatchSubjects = useAccountSubjects.subscribe(() => { + if (!localExportAllowed(account)) controller.abort("policy"); + }); + const unwatchOffline = useOfflineStore.subscribe((state) => { + if (!state.enabled.includes(account)) controller.abort("offline-off"); + }); + let ended: () => void = () => {}; + const finished = new Promise<void>((resolve) => { ended = resolve; }); + useMailTransferStore.getState().startJob({ + kind: "export", + controller, + scope: account, + finished, + progress: { phase: "running", exported: 0, failed: 0, failures: [], total: 0, fraction: 0 }, + }); + void (async () => { + try { + const result = await runExport({ + client: localExportReader(account, jmap), + accountId: jmap, + folders, + format, + // The save picker passes the guard in saveBlobAs, so every write asks. + sink: guardedSink(input.sink, () => localExportAllowed(account)), + signal: controller.signal, + requestsPerMinute: Infinity, + noEmptyFile: true, + onProgress: (progress) => useMailTransferStore.getState().updateProgress(progress), + }); + useMailTransferStore.getState().updateProgress(result); + } finally { + unwatchPolicy(); + unwatchSubjects(); + unwatchOffline(); + ended(); + } + })(); + return true; +} diff --git a/components/mail/mail-app.tsx b/components/mail/mail-app.tsx index a87fb51aa..c6d045964 100644 --- a/components/mail/mail-app.tsx +++ b/components/mail/mail-app.tsx @@ -63,6 +63,10 @@ import { useDeviceDetection } from "@/hooks/use-media-query"; import { usePaneSize } from "@/hooks/use-pane-size"; import { usePaneId } from "@/hooks/use-pane-context"; import { useKeyboardShortcuts, type GoToMailboxTarget } from "@/hooks/use-keyboard-shortcuts"; +import { useDesktopCommands } from "@/lib/desktop/commands"; +import { useDesktopPrefs } from "@/lib/desktop/preferences"; +import { hasDesktopWindows } from "@/lib/popout/support"; +import { composerDataFromDraft } from "@/lib/draft-composer-data"; import { useUndoShortcut } from "@/hooks/use-undo-shortcut"; import { confirmMailRemoval } from "@/lib/mail-removal-confirm"; import { findNextUnreadIndex } from "@/lib/next-unread-email"; @@ -144,6 +148,7 @@ import { AppTopBannerSlot } from "@/components/plugins/app-top-banner-slot"; import { canDownload } from "@/lib/device-policy"; import { consumePendingMailto, subscribeToPendingMailto } from "@/lib/protocol-handlers/session"; import { setNotificationReplyOpener } from "@/lib/pwa-notify/page-actions"; +import { setMailLinkOpener } from "@/lib/desktop/mail-links"; import { requestTabReply } from "@/lib/pwa-notify/tab-reply"; import { consumePendingReplyText } from "@/lib/pwa-notify/worker-state"; import { pendingHandoffs, subscribeHandoff, takeHandoff, type Handoff } from "@/lib/launch-handoff"; @@ -1216,6 +1221,7 @@ export function MailApp({ linkSegments: routeSegments }: MailAppProps = {}) { // Mountain View keeps the ticked rows while a message is read (#1231). The // shortcuts then act on the message on screen, as its toolbar does, and // reach the selection again back in the list. + const openEmailInWindow = useOpenEmailInWindow(); const shortcutsTargetSelection = selectedEmailKeys.size > 0 && !(mvShell && !cursorOnly && selectedEmail); const singleKeyShortcuts = useSettingsStore((s) => s.singleKeyShortcuts); useKeyboardShortcuts({ @@ -1259,6 +1265,59 @@ export function MailApp({ linkSegments: routeSegments }: MailAppProps = {}) { }, }, isAuthenticated && !!client); + // The desktop app's menu bar: the same handlers as the keys, and what's enabled + // from what's on screen (lib/desktop/commands.ts). + const desktopTarget = !showComposer && (!!selectedEmail || selectedEmailKeys.size > 0); + const desktopSingle = !showComposer && !!selectedEmail; + const mailLayoutSetting = useSettingsStore((s) => s.mailLayout); + const layoutFixed = interfaceLayout === 'mountain-view'; + useDesktopCommands({ + 'file.newMessage': keyboardHandlers.onCompose, + 'edit.search': keyboardHandlers.onFocusSearch, + 'view.refresh': () => void handleManualRefresh(), + 'view.layout.split': () => useSettingsStore.getState().updateSetting('mailLayout', 'split'), + 'view.layout.horizontal': () => useSettingsStore.getState().updateSetting('mailLayout', 'horizontal'), + 'view.layout.focus': () => useSettingsStore.getState().updateSetting('mailLayout', 'focus'), + 'message.reply': keyboardHandlers.onReply, + 'message.replyAll': keyboardHandlers.onReplyAll, + 'message.forward': keyboardHandlers.onForward, + 'message.markRead': () => void keyboardHandlers.onMarkAsRead?.(), + 'message.markUnread': () => void keyboardHandlers.onMarkAsUnread?.(), + 'message.star': () => void keyboardHandlers.onToggleStar?.(), + 'message.move': () => { if (selectedEmail) setMoveDialogEmail(selectedEmail); }, + 'message.archive': keyboardHandlers.onArchive ? () => void keyboardHandlers.onArchive?.() : undefined, + 'message.spam': () => void keyboardHandlers.onToggleSpam?.(), + 'message.delete': () => void keyboardHandlers.onDelete?.(), + 'message.openWindow': () => { if (selectedEmail) openEmailInWindow?.(selectedEmail); }, + 'go.inbox': () => keyboardHandlers.onGoToMailbox('inbox'), + 'go.sent': () => keyboardHandlers.onGoToMailbox('sent'), + 'go.drafts': () => keyboardHandlers.onGoToMailbox('drafts'), + 'go.nextMessage': keyboardHandlers.onNextEmail, + 'go.previousMessage': keyboardHandlers.onPreviousEmail, + 'go.nextUnread': keyboardHandlers.onNextUnread, + }, { + 'view.refresh': true, + 'view.layout.split': { enabled: !layoutFixed, checked: mailLayoutSetting === 'split' }, + 'view.layout.horizontal': { enabled: !layoutFixed, checked: mailLayoutSetting === 'horizontal' }, + 'view.layout.focus': { enabled: !layoutFixed, checked: mailLayoutSetting === 'focus' }, + 'message.reply': desktopSingle, + 'message.replyAll': desktopSingle, + 'message.forward': desktopSingle, + 'message.markRead': desktopTarget && !(selectedEmail && selectedEmailKeys.size === 0 && selectedEmail.keywords?.$seen), + 'message.markUnread': desktopTarget && !(selectedEmail && selectedEmailKeys.size === 0 && !selectedEmail.keywords?.$seen), + 'message.star': desktopSingle, + 'message.move': desktopSingle, + 'message.archive': desktopTarget && archiveActionEnabled, + 'message.spam': desktopTarget, + 'message.delete': desktopTarget, + 'message.openWindow': desktopSingle && !!openEmailInWindow, + 'go.sent': true, + 'go.drafts': true, + 'go.nextMessage': !showComposer, + 'go.previousMessage': !showComposer, + 'go.nextUnread': !showComposer, + }, isAuthenticated && !isEmbedded); + // Shared mail refresh: re-fetch mailboxes (unread counts) + the active list // via JMAP. Used by both the browser refresh gestures and the toolbar button. const [isManualRefreshing, setIsManualRefreshing] = useState(false); @@ -2266,7 +2325,7 @@ export function MailApp({ linkSegments: routeSegments }: MailAppProps = {}) { const composerSource = usePinnedPerSession(composerSessionId, selectedEmail ? emailWriteSource(selectedEmail, client) : undefined); const popoutsOn = usePopoutsAvailable(); - const openEmailInWindow = useOpenEmailInWindow(); + const desktopDoubleClick = useDesktopPrefs().openOnDoubleClick && hasDesktopWindows() && !isMobile && !!openEmailInWindow; // Text from a closing pop-out that couldn't be saved: the "Continue draft" // slot, once it is free. useEffect(() => { @@ -2604,17 +2663,12 @@ export function MailApp({ linkSegments: routeSegments }: MailAppProps = {}) { draft = await emailHooks.onBeforeEditDraft.transform(draft); - const { body: draftBody, bodyText, plainTextMode: draftPlainTextMode } = getDraftComposerBody(draft); + const { bodyText } = getDraftComposerBody(draft); - // Restore the identity the draft was composed with. Match the saved From - // (name + address) against the same list the composer renders — the flat - // cross-account list when multi-account is on — so a draft from a non-active - // account, or one of two identities sharing an address, is restored rather - // than reset to the default. + // The list the composer renders: the flat cross-account one when multi-account is on. const composerIdentities = multiAccountIdentities.enabled ? multiAccountIdentities.allIdentities : identities; - const matchedIdentityId = findDraftIdentityIdForLogin(composerIdentities, draft.from?.[0], localAccountId); const draftRecipients = (list: typeof draft.to) => (list ?? []).map(a => a.email).filter(Boolean); if (!(await withComposeGate('compose', { @@ -2627,46 +2681,12 @@ export function MailApp({ linkSegments: routeSegments }: MailAppProps = {}) { // Increment session ID to force the composer to remount with fresh state, // even if it was already open (e.g. right-clicking a draft while composing). setComposerSessionId(id => id + 1); - setPendingDraft({ - to: draft.to?.map(a => a.email).filter(Boolean).join(', ') || '', - cc: draft.cc?.map(a => a.email).filter(Boolean).join(', ') || '', - bcc: draft.bcc?.map(a => a.email).filter(Boolean).join(', ') || '', - // Drafts saved before #1189 stored an empty subject as the composer's - // "(No Subject)" placeholder; reopen those with an empty field. - subject: draft.subject && draft.subject !== t('email_composer.no_subject') ? draft.subject : '', - body: draftBody, - // Re-open in the format the draft was written in (#1022). - plainTextMode: draftPlainTextMode, - showCc: (draft.cc?.length || 0) > 0, - showBcc: (draft.bcc?.length || 0) > 0, - selectedIdentityId: matchedIdentityId, - subAddressTag: '', - mode: 'compose', - draftId: draft.id, - draftAccountId: accountId, - draftLocalAccountId: localAccountId, - // A reply draft re-opens in compose mode; its threading headers must - // come along or the reply leaves its thread. - inReplyTo: draft.inReplyTo ?? undefined, - references: draft.references ?? undefined, - priority: messagePriorityFromHeaders(draft.headers), - // A sent message brought back (Undo, Cancel and edit) has no draft - // marker: its SIO-Label says which label it went out with. - classification: reopenedLabelChoice(draft.headers, localAccountId), - // Existing server-side attachments must ride along, or the composer - // starts empty and the next save/send silently rebuilds the draft - // without them (#849). - attachments: (draft.attachments ?? []) - .filter(a => !!a.blobId) - .map(a => ({ - blobId: a.blobId, - name: a.name, - type: a.type, - size: a.size, - cid: a.cid, - disposition: a.disposition, - })), - }); + setPendingDraft(composerDataFromDraft(draft, { + accountId, + localAccountId, + identities: composerIdentities, + noSubject: t('email_composer.no_subject'), + })); setComposerMode('compose'); setShowComposer(true); if (isMobile) setActiveView('viewer'); @@ -2936,6 +2956,17 @@ export function MailApp({ linkSegments: routeSegments }: MailAppProps = {}) { }); }, []); + // The desktop app's tray, jump list and toasts, like any other permalink. A live + // composer's text goes through its own "Save or discard?" first. + useEffect(() => { + return setMailLinkOpener((link, options) => { + const open = () => void applyMailDeepLinkRef.current(link, options); + const requestClose = composerRequestCloseRef.current; + if (link.kind === 'message' && link.reply && composerOpenRef.current && requestClose) requestClose(open); + else open(); + }); + }, []); + // A plugin opening a message (api.ui.openEmail), as a click on a search // result entry naming one does: handleEmailSelect, set once it is defined. // Not inside the Pro shell, which keeps this tab mounted while hidden and @@ -5539,7 +5570,11 @@ export function MailApp({ linkSegments: routeSegments }: MailAppProps = {}) { onEmailSelect={handleEmailSelect} onOpenSearchResult={handleEmailSelect} onEmailPrefetch={handleEmailPrefetch} - onEmailDoubleClick={isEmbedded ? ((email) => { + onEmailDoubleClick={!isEmbedded ? (desktopDoubleClick ? (email) => { + // A draft goes back in the composer, as it does from a single click. + if (email.keywords?.$draft) void handleEditDraft(email); + else openEmailInWindow?.(email); + } : undefined) : ((email) => { const store = useProTabStore.getState(); const hasSplit = store.tabs.some((tab) => tab.paneId === 'split'); // In a split, open on the *other* side so this list stays @@ -5570,7 +5605,7 @@ export function MailApp({ linkSegments: routeSegments }: MailAppProps = {}) { mailboxId: selectedMailbox, title: email.subject?.trim() || t('email_composer.new_message'), }, { pane: targetPane, reuseReader: hasSplit }); - }) : undefined} + })} onOpenConversation={handleOpenConversation} // Context menu handlers onReply={(email) => { diff --git a/components/offline/__tests__/device-wipe-host.test.tsx b/components/offline/__tests__/device-wipe-host.test.tsx new file mode 100644 index 000000000..f2cf3373e --- /dev/null +++ b/components/offline/__tests__/device-wipe-host.test.tsx @@ -0,0 +1,62 @@ +import { act, render } from '@testing-library/react'; +import { beforeEach, describe, expect, it, vi } from 'vitest'; + +// The one toast when an account beside this one signs out by itself. + +const warning = vi.hoisted(() => vi.fn()); +vi.mock('@/stores/toast-store', () => ({ toast: { warning } })); +vi.mock('@/lib/offline/device-wipe', () => ({ startDeviceWipe: () => () => {} })); + +const { DeviceWipeHost } = await import('../device-wipe-host'); +const { useAuthStore } = await import('@/stores/auth-store'); +const { markLoginRefused, setRefusedCount } = await import('@/lib/devices/wipe-state'); +const { useOfflineStore, markEvicted } = await import('@/lib/offline/state'); + +const A = 'a@example.com'; +const B = 'b@example.com'; + +beforeEach(() => { + warning.mockClear(); + localStorage.clear(); + useOfflineStore.setState({ enabled: [A, B] }); + useAuthStore.setState({ activeAccountId: A, isAuthenticated: true } as never); +}); + +function refuseB(): void { + markLoginRefused(B, { certain: true, seenBy: [A], label: B, username: B }); + markEvicted(B); +} + +describe('the toast', () => { + it('comes once, when the count is in, and names the account, the count and the date', () => { + render(<DeviceWipeHost />); + act(() => refuseB()); + expect(warning).not.toHaveBeenCalled(); + act(() => setRefusedCount(B, 2)); + expect(warning).toHaveBeenCalledTimes(1); + expect(warning.mock.calls[0][0]).toBe('sibling_waiting'); + act(() => setRefusedCount(B, 2)); + expect(warning).toHaveBeenCalledTimes(1); + }); + + it('says the other thing with nothing unsent, or no number', () => { + render(<DeviceWipeHost />); + act(() => { refuseB(); setRefusedCount(B, null); }); + expect(warning.mock.calls[0][0]).toBe('sibling_kept'); + }); + + it('isn\'t for someone signed in later', () => { + useAuthStore.setState({ activeAccountId: 'stranger@example.com' } as never); + refuseB(); + setRefusedCount(B, 2); + render(<DeviceWipeHost />); + expect(warning).not.toHaveBeenCalled(); + }); + + it('shows at the next page for the one it was meant for, if it got no chance before', () => { + refuseB(); + setRefusedCount(B, 2); + render(<DeviceWipeHost />); + expect(warning).toHaveBeenCalledTimes(1); + }); +}); diff --git a/components/offline/__tests__/offline-settings.test.tsx b/components/offline/__tests__/offline-settings.test.tsx index 3113b413e..66e545e40 100644 --- a/components/offline/__tests__/offline-settings.test.tsx +++ b/components/offline/__tests__/offline-settings.test.tsx @@ -46,6 +46,29 @@ describe('Settings > Offline', () => { } }); + it('offers removing everything where offline mode exists', () => { + render(<OfflineSettings />); + expect(screen.getByTestId('wipe-device-section')).toBeTruthy(); + }); + + it('doesn\'t where it can\'t be used: a private window, a store that isn\'t there, an organisation\'s no', () => { + useOfflineStore.setState({ storageBlocked: true }); + const privateWindow = render(<OfflineSettings />); + expect(screen.queryByTestId('wipe-device-section')).toBeNull(); + privateWindow.unmount(); + useOfflineStore.setState({ storageBlocked: false }); + + setStoreBackend({ supported: () => false } as unknown as StoreBackend); + const noStore = render(<OfflineSettings />); + expect(screen.queryByTestId('wipe-device-section')).toBeNull(); + noStore.unmount(); + setStoreBackend({ supported: () => true } as unknown as StoreBackend); + + setNoOffline(true); + render(<OfflineSettings />); + expect(screen.queryByTestId('wipe-device-section')).toBeNull(); + }); + it('is off until the user turns it on in this browser', () => { render(<OfflineSettings />); const toggle = screen.getByTestId('offline-switch'); diff --git a/components/offline/__tests__/wipe-device-section.test.tsx b/components/offline/__tests__/wipe-device-section.test.tsx new file mode 100644 index 000000000..d07d03149 --- /dev/null +++ b/components/offline/__tests__/wipe-device-section.test.tsx @@ -0,0 +1,57 @@ +import { fireEvent, render, screen, waitFor } from '@testing-library/react'; +import { beforeEach, describe, expect, it, vi } from 'vitest'; + +const wipe = vi.hoisted(() => ({ whole: vi.fn(async () => {}), unsent: 0 as number | null })); +vi.mock('@/lib/offline/device-wipe', () => ({ wipeWholeDevice: wipe.whole })); +vi.mock('@/lib/offline/offline-mode', () => ({ unsentForWipe: async () => wipe.unsent })); + +import { WipeDeviceSection } from '../wipe-device-section'; + +beforeEach(() => { + wipe.whole.mockClear(); + wipe.unsent = 0; +}); + +describe('the wipe in settings', () => { + it('says what goes before anything happens', async () => { + render(<WipeDeviceSection />); + fireEvent.click(screen.getByTestId('wipe-device-button')); + const details = await screen.findByTestId('wipe-device-details'); + for (const key of ['confirm_mail', 'confirm_keys', 'confirm_plugins', 'confirm_files', 'confirm_templates', 'confirm_accounts']) { + expect(details.textContent).toContain(key); + } + expect(details.textContent).not.toContain('confirm_unsent'); + expect(wipe.whole).not.toHaveBeenCalled(); + }); + + it('names unsent mail when there is some', async () => { + wipe.unsent = 2; + render(<WipeDeviceSection />); + fireEvent.click(screen.getByTestId('wipe-device-button')); + expect((await screen.findByTestId('wipe-device-details')).textContent).toContain('confirm_unsent'); + }); + + it('says it can\'t tell, not that there\'s nothing, when the count is unknown', async () => { + wipe.unsent = null; + render(<WipeDeviceSection />); + fireEvent.click(screen.getByTestId('wipe-device-button')); + const details = await screen.findByTestId('wipe-device-details'); + expect(details.textContent).toContain('confirm_unsent_unknown'); + }); + + it('wipes only after the yes, as the user\'s own', async () => { + render(<WipeDeviceSection />); + fireEvent.click(screen.getByTestId('wipe-device-button')); + fireEvent.click(await screen.findByRole('button', { name: 'confirm_button' })); + await waitFor(() => expect(wipe.whole).toHaveBeenCalledWith('user')); + }); + + it('a no leaves everything', async () => { + render(<WipeDeviceSection />); + fireEvent.click(screen.getByTestId('wipe-device-button')); + await screen.findByTestId('wipe-device-details'); + fireEvent.keyDown(document.activeElement ?? document.body, { key: 'Escape' }); + await waitFor(() => expect(screen.queryByTestId('wipe-device-details')).toBeNull()); + expect(wipe.whole).not.toHaveBeenCalled(); + }); +}); diff --git a/components/offline/account-storage.tsx b/components/offline/account-storage.tsx index d58d07a1d..80666f60c 100644 --- a/components/offline/account-storage.tsx +++ b/components/offline/account-storage.tsx @@ -13,7 +13,9 @@ import { attachmentCapOptions, maxAttachmentMb, windowOptions } from '@/lib/offl import { isOfflineNow, useOfflineStore } from '@/lib/offline/state'; import { minutesLeft, progressWorthShowing, type SyncProgress } from '@/lib/offline/sync-progress'; import { devicesForAccount } from '@/lib/device-policy'; +import { localExportAllowed } from '@/components/mail-transfer/start-local-export'; import { useAccountStore } from '@/stores/account-store'; +import { openLocalExport } from '@/stores/mail-transfer-store'; import { KeptFiles } from './kept-files'; const MB = 1024 * 1024; @@ -65,6 +67,7 @@ function useUnsent(account: string) { export function AccountStorage({ account, primary, heading }: { account: string; primary: boolean; heading: string | null }) { const t = useTranslations('offline.settings'); const tStorage = useTranslations('offlineStorage'); + const tExport = useTranslations('offlineExport'); const format = useFormatter(); const enabled = useOfflineStore((s) => s.enabled.includes(account)); const usage = useOfflineStore((s) => s.usage[account]); @@ -220,6 +223,9 @@ export function AccountStorage({ account, primary, heading }: { account: string; </SettingItem> )} <KeptFiles account={account} /> + <SettingItem label={tExport('settings_label')} description={tExport('settings_description')} locked={!localExportAllowed(account)}> + <Button variant="outline" size="sm" disabled={!localExportAllowed(account)} onClick={() => openLocalExport(account)} data-testid={testId('local-export-open')}>{tExport('settings_button')}</Button> + </SettingItem> <SettingItem label={tStorage('clear_label')} description={cantClear ? tStorage('clear_needs_connection') : tStorage('clear_description')}> <Button variant="outline" size="sm" disabled={cantClear} onClick={askClear} data-testid={testId('offline-clear')}>{tStorage('clear_button')}</Button> </SettingItem> diff --git a/components/offline/device-wipe-host.tsx b/components/offline/device-wipe-host.tsx new file mode 100644 index 000000000..405e94a82 --- /dev/null +++ b/components/offline/device-wipe-host.tsx @@ -0,0 +1,49 @@ +'use client'; + +import { useEffect, useRef } from 'react'; +import { useTranslations } from 'next-intl'; +import { consumeWipeNote, onRefusedLoginsChanged, takeSiblingToasts, waitDate, type WipeNote } from '@/lib/devices/wipe-state'; +import { startDeviceWipe } from '@/lib/offline/device-wipe'; +import { useAuthStore } from '@/stores/auth-store'; +import { toast } from '@/stores/toast-store'; + +/** What a wipe left to say, as a sentence. Counts only. */ +export function wipeNoteText(note: WipeNote, t: (key: string, values?: { count: number }) => string): string { + if (note.unknown) return t('note_unknown'); + return note.unsent > 0 ? t('note_unsent', { count: note.unsent }) : t('note'); +} + +/** + * Runs the device's side of wipes on every page, the sign-in page too, so a + * device with nobody signed in still finishes a wipe and hears about a new one. + * When another account stays signed in, the note about lost mail is a toast here; + * otherwise the sign-in page shows it. Not mounted in Lite. + */ +export function DeviceWipeHost() { + const t = useTranslations('offlineWipe'); + const tRef = useRef(t); + tRef.current = t; + const signedIn = useAuthStore((state) => state.isAuthenticated); + + useEffect(() => startDeviceWipe(), []); + + useEffect(() => { + if (!signedIn) return; + const note = consumeWipeNote(); + if (note) toast.warning(wipeNoteText(note, tRef.current), { duration: 0 }); + }, [signedIn]); + + // An account beside this one signed out by itself: once, when it's known what waits. + useEffect(() => { + const look = () => { + for (const wait of takeSiblingToasts(useAuthStore.getState().activeAccountId)) { + const values = { name: wait.label, date: waitDate(wait.until) }; + toast.warning(wait.unsent ? tRef.current('sibling_waiting', { ...values, count: wait.unsent }) : tRef.current('sibling_kept', values), { duration: 0 }); + } + }; + look(); + return onRefusedLoginsChanged(look); + }, []); + + return null; +} diff --git a/components/offline/offline-settings.tsx b/components/offline/offline-settings.tsx index 5271e670f..1bfd3706a 100644 --- a/components/offline/offline-settings.tsx +++ b/components/offline/offline-settings.tsx @@ -8,13 +8,14 @@ import { Button } from '@/components/ui/button'; import { IS_LITE } from '@/lib/lite'; import { isDesktopApp } from '@/lib/desktop/bridge'; import { signedInAccountIds } from '@/lib/device-policy'; -import { offlineSupported, readPersistence, refreshUsage, requestPersistence, safariMayDelete } from '@/lib/offline/offline-mode'; +import { offlineAllowed, offlineSupported, readPersistence, refreshUsage, requestPersistence, safariMayDelete } from '@/lib/offline/offline-mode'; import { useOfflineStore } from '@/lib/offline/state'; import { useDevicePolicy } from '@/hooks/use-device-policy'; import { useAccountStore } from '@/stores/account-store'; import { useAuthStore } from '@/stores/auth-store'; import { AccountStorage } from './account-storage'; import { OutboxList } from './outbox-list'; +import { WipeDeviceSection } from './wipe-device-section'; /** * Settings > Backup & reset > Offline (#523): for each account signed in here, @@ -81,6 +82,7 @@ export function OfflineSettings() { heading={several ? labels.find((entry) => entry.id === account)?.email || labels.find((entry) => entry.id === account)?.label || account : null} /> ))} + {[active, ...accounts].some((account) => offlineAllowed(account)) && <WipeDeviceSection />} </> )} <OutboxList /> diff --git a/components/offline/wipe-device-section.tsx b/components/offline/wipe-device-section.tsx new file mode 100644 index 000000000..d620843cf --- /dev/null +++ b/components/offline/wipe-device-section.tsx @@ -0,0 +1,75 @@ +'use client'; + +import { useState } from 'react'; +import { useTranslations } from 'next-intl'; +import { Button } from '@/components/ui/button'; +import { ConfirmDialog } from '@/components/ui/confirm-dialog'; +import { wipeWholeDevice } from '@/lib/offline/device-wipe'; +import { unsentForWipe } from '@/lib/offline/offline-mode'; + +/** The question doesn't wait as long for the count as the wipe itself does. */ +const QUESTION_WAIT_MS = 2_000; + +/** + * "Remove everything from this device", for someone giving a computer away or + * selling it. It signs out, so the question says exactly what goes. + */ +export function WipeDeviceSection() { + const t = useTranslations('offlineWipe'); + const [asking, setAsking] = useState(false); + // Null: the store couldn't say, which isn't the same as none. + const [unsent, setUnsent] = useState<number | null>(0); + const [wiping, setWiping] = useState(false); + + const ask = async () => { + setUnsent(await unsentForWipe('all', QUESTION_WAIT_MS).catch(() => null)); + setAsking(true); + }; + + const confirmed = () => { + setAsking(false); + setWiping(true); + void wipeWholeDevice('user').finally(() => setWiping(false)); + }; + + return ( + <div className="flex flex-wrap items-center justify-between gap-3 border-t border-border py-3" data-testid="wipe-device-section"> + <div className="min-w-0 flex-1"> + <p className="text-sm font-medium text-foreground">{t('settings_title')}</p> + <p className="mt-1 text-xs text-muted-foreground">{t('settings_description')}</p> + </div> + <Button + type="button" + variant="outline" + size="sm" + className="text-destructive" + disabled={wiping} + onClick={() => { void ask(); }} + data-testid="wipe-device-button" + > + {wiping ? t('settings_wiping') : t('settings_button')} + </Button> + <ConfirmDialog + isOpen={asking} + onClose={() => setAsking(false)} + onConfirm={confirmed} + title={t('confirm_title')} + message={t('confirm_message')} + details={( + <ul className="list-disc space-y-1 ps-5 text-sm text-muted-foreground" data-testid="wipe-device-details"> + <li>{t('confirm_mail')}</li> + {unsent === null && <li className="font-medium text-foreground">{t('confirm_unsent_unknown')}</li>} + {unsent !== null && unsent > 0 && <li className="font-medium text-foreground">{t('confirm_unsent', { count: unsent })}</li>} + <li>{t('confirm_keys')}</li> + <li>{t('confirm_plugins')}</li> + <li>{t('confirm_files')}</li> + <li>{t('confirm_templates')}</li> + <li>{t('confirm_accounts')}</li> + </ul> + )} + confirmText={t('confirm_button')} + variant="destructive" + /> + </div> + ); +} diff --git a/components/plugins/app-side-panel.tsx b/components/plugins/app-side-panel.tsx index 2db5e2829..35ce18c5b 100644 --- a/components/plugins/app-side-panel.tsx +++ b/components/plugins/app-side-panel.tsx @@ -348,6 +348,7 @@ export function useAppSidePanel({ view, context, dock = true, hidden = false, on aria-label={panelLabelOf(shownIds, t('plugin_panel'))} data-app-side-panel={overlay ? 'overlay' : 'docked'} data-app-side-panel-view={view} + data-window-end-column="" className={cn( 'flex flex-col h-full border-s border-border bg-background overflow-hidden shrink-0', overlay && 'absolute inset-y-0 end-0 z-30 shadow-xl', diff --git a/components/plugins/plugin-side-panels.tsx b/components/plugins/plugin-side-panels.tsx index b81d389e2..d6d4bee15 100644 --- a/components/plugins/plugin-side-panels.tsx +++ b/components/plugins/plugin-side-panels.tsx @@ -142,6 +142,7 @@ export function PluginSidePanel() { {active && ( <aside data-plugin-side-panel={active.pluginId} + data-window-end-column="" className="flex w-[300px] shrink-0 flex-col overflow-hidden border-s border-border bg-background" aria-label={active.title} > @@ -150,6 +151,7 @@ export function PluginSidePanel() { )} {inRail.length > 0 && <nav data-plugin-side-rail="" + data-window-end-column="" className="flex w-12 shrink-0 flex-col items-center gap-1 border-s border-border bg-background pt-2" aria-label={t('mv_side_panel')} > diff --git a/components/popout/__tests__/popout-compose-app.test.tsx b/components/popout/__tests__/popout-compose-app.test.tsx index 3ff5cf883..7fb96e09b 100644 --- a/components/popout/__tests__/popout-compose-app.test.tsx +++ b/components/popout/__tests__/popout-compose-app.test.tsx @@ -1,10 +1,12 @@ -import { act, cleanup, render, screen, waitFor } from '@testing-library/react'; +import { act, cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react'; import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; import { FakeBroadcastChannel } from '@/lib/__tests__/fixtures/fake-broadcast-channel'; import { openPopoutChannel, type PopoutMessage, type RescuedDraft } from '@/lib/popout/channel'; import { createComposeHandoff, rememberComposePayload } from '@/lib/popout/compose-handoff'; import { useAuthStore } from '@/stores/auth-store'; +import { useIdentityStore } from '@/stores/identity-store'; import { usePluginStore } from '@/stores/plugin-store'; +import { emailHooks } from '@/lib/plugin-hooks'; // The composer's window: when it tells the opening window to let go, and what // happens on a reload. The composer itself is stubbed; its own tests cover it. @@ -25,9 +27,29 @@ vi.mock('@/components/error', () => ({ ErrorBoundary: ({ children }: { children: vi.mock('../popout-shell', () => ({ PopoutShell: ({ children }: { children: React.ReactNode }) => <>{children}</>, PopoutSkeleton: () => <div data-testid="skeleton" />, + PopoutNotice: ({ title, children }: { title: string; children: React.ReactNode }) => <div><h1>{title}</h1>{children}</div>, })); vi.mock('@/hooks/use-document-title', () => ({ useDocumentTitle: vi.fn() })); +const identityMocks = vi.hoisted(() => ({ + multi: { enabled: false, allIdentities: [] as unknown[], groups: [] as unknown[] }, + bump: undefined as undefined | (() => void), +})); +vi.mock('@/hooks/use-pro-multi-account-identities', async () => { + const { useReducer } = await import('react'); + return { + useProMultiAccountIdentities: () => { + const [, bump] = useReducer((n: number) => n + 1, 0); + identityMocks.bump = bump; + return identityMocks.multi; + }, + stripCrossAccountIdentityPrefix: (id: string) => { + const at = id.indexOf('::'); + return at >= 0 ? { localAccountId: id.slice(0, at), rawId: id.slice(at + 2) } : { localAccountId: null, rawId: id }; + }, + }; +}); + const { PopoutComposeApp } = await import('../popout-compose-app'); const original = useAuthStore.getState(); @@ -67,6 +89,153 @@ function openAt(handoffId: string) { render(<PopoutComposeApp />); } +describe('a composer coming back on its draft', () => { + const closeSelf = vi.fn(); + const setRestore = vi.fn(); + const LOGIN = 'alice@example.org@mail.example.org'; + const MAILBOXES = [ + { id: 'mDrafts', role: 'drafts' }, + { id: 'mSent', role: 'sent' }, + { id: 'mTrash', role: 'trash' }, + { id: 'mInbox', role: 'inbox' }, + ]; + + beforeEach(() => { + closeSelf.mockClear(); + setRestore.mockClear(); + identityMocks.multi = { enabled: false, allIdentities: [], groups: [] }; + useIdentityStore.setState({ identities: [{ id: 'id-1', email: 'me@example.org', name: 'Me' }] } as never); + window.bulwarkDesktop = { version: 1, platform: 'win32', windows: { closeSelf, setRestore } } as never; + }); + + afterEach(() => { + window.bulwarkDesktop = undefined; + vi.useRealTimers(); + }); + + const draft = { + id: 'd1', subject: 'Half-written', to: [{ email: 'a@example.org' }], cc: [], bcc: [], from: [{ name: 'Me', email: 'me@example.org' }], + keywords: { $draft: true }, mailboxIds: { mDrafts: true }, + bodyValues: { t: { value: 'Text' } }, textBody: [{ partId: 't', type: 'text/plain' }], htmlBody: [], attachments: [{ blobId: 'b1', name: 'a.pdf', type: 'application/pdf', size: 3 }], + }; + + const openDraft = (getEmail: ReturnType<typeof vi.fn>, search = `draft=d1&account=${encodeURIComponent(LOGIN)}&owner=group`) => { + const client = { getEmail, getMailboxes: vi.fn(async () => MAILBOXES) }; + useAuthStore.setState({ client: { other: true } as never, getClientForAccount: (id: string) => (id === LOGIN ? client : undefined) } as never); + window.history.replaceState(null, '', `/en/popout/compose?${search}`); + render(<PopoutComposeApp />); + return client; + }; + + it('reads the draft from where it lives, and opens the composer on it, id and all', async () => { + const getEmail = vi.fn(async () => draft); + openDraft(getEmail); + await waitFor(() => expect(screen.getByTestId('composer').textContent).toBe('Half-written')); + expect(getEmail).toHaveBeenCalledWith('d1', 'group'); + // Saving goes over this draft, not next to it, and its files stay. + expect(composer?.initialData).toMatchObject({ draftId: 'd1', draftAccountId: 'group', draftLocalAccountId: LOGIN, to: 'a@example.org' }); + expect((composer?.initialData as unknown as { attachments: unknown[] }).attachments).toHaveLength(1); + }); + + // Sending keeps the id. A composer on it would destroy the Sent copy at the next + // autosave, Send would mail it twice, and Discard would delete it. + it.each([ + ['a message that was sent', { keywords: { $seen: true }, mailboxIds: { mSent: true } }], + ['a sent message still marked as a draft', { keywords: { $draft: true }, mailboxIds: { mSent: true } }], + ['a draft in the Trash', { keywords: { $draft: true }, mailboxIds: { mTrash: true } }], + ['mail in the Inbox that is no draft at all', { keywords: {}, mailboxIds: { mInbox: true } }], + ])('%s is not opened', async (_name, shape) => { + openDraft(vi.fn(async () => ({ ...draft, ...shape }))); + await waitFor(() => expect(closeSelf).toHaveBeenCalledTimes(1)); + expect(screen.queryByTestId('composer')).toBeNull(); + }); + + it('a send brought back has no $draft, and in Drafts it opens', async () => { + openDraft(vi.fn(async () => ({ ...draft, keywords: {}, mailboxIds: { mDrafts: true } }))); + await waitFor(() => expect(screen.getByTestId('composer')).toBeTruthy()); + }); + + it('an address with no login opens nothing, not the active account\'s mail under the same id', async () => { + const getEmail = vi.fn(async () => draft); + useAuthStore.setState({ client: { getEmail, getMailboxes: async () => MAILBOXES } as never, getClientForAccount: () => undefined } as never); + window.history.replaceState(null, '', '/en/popout/compose?draft=d1'); + render(<PopoutComposeApp />); + await waitFor(() => expect(closeSelf).toHaveBeenCalledTimes(1)); + expect(getEmail).not.toHaveBeenCalled(); + }); + + it('a draft gone since closes the window', async () => { + openDraft(vi.fn(async () => null)); + await waitFor(() => expect(closeSelf).toHaveBeenCalledTimes(1)); + expect(screen.queryByTestId('composer')).toBeNull(); + }); + + it('a server not answering keeps the window and the entry, and Try again works', async () => { + let up = false; + const getEmail = vi.fn(async () => { + if (!up) throw new Error('offline'); + return draft; + }); + openDraft(getEmail); + await screen.findByText('unavailable_title'); + expect(closeSelf).not.toHaveBeenCalled(); + // On the list for next time. + expect(setRestore.mock.lastCall![0]).toEqual([expect.stringContaining('draft=d1')]); + up = true; + fireEvent.click(screen.getByText('try_again')); + await waitFor(() => expect(screen.getByTestId('composer')).toBeTruthy()); + }); + + it('plugins get their say on the draft, as when it opens from the list', async () => { + const hook = emailHooks.onBeforeEditDraft.register('test', ((value: unknown) => ({ ...(value as object), subject: 'Changed by a plugin' })) as never); + try { + openDraft(vi.fn(async () => draft)); + await waitFor(() => expect(screen.getByTestId('composer').textContent).toBe('Changed by a plugin')); + } finally { + hook.dispose(); + } + }); + + describe('with several accounts', () => { + const OTHER = { id: 'other@x@h::id-9', email: 'other@example.org', name: 'Other', localAccountId: LOGIN }; + + it('waits for the identity that wrote it, however late it loads, and starts on that', async () => { + identityMocks.multi = { enabled: true, allIdentities: [], groups: [] }; + const fromOther = { ...draft, from: [{ name: 'Other', email: 'other@example.org' }] }; + openDraft(vi.fn(async () => fromOther)); + await settle(); + // Not on the default in the meantime: it would save that. + expect(screen.queryByTestId('composer')).toBeNull(); + act(() => { + identityMocks.multi = { enabled: true, allIdentities: [OTHER], groups: [] }; + identityMocks.bump?.(); + }); + await waitFor(() => expect(screen.getByTestId('composer')).toBeTruthy()); + expect(composer?.initialData).toMatchObject({ selectedIdentityId: OTHER.id }); + expect((composer?.initialData as unknown as { fromOverrideEnabled?: boolean }).fromOverrideEnabled).toBeUndefined(); + }); + + it('an address no identity has any more stays as the From, not the default', async () => { + identityMocks.multi = { enabled: true, allIdentities: [], groups: [] }; + vi.useFakeTimers({ shouldAdvanceTime: true }); + openDraft(vi.fn(async () => ({ ...draft, from: [{ name: 'Gone', email: 'gone@example.org' }] }))); + await act(async () => { + await vi.advanceTimersByTimeAsync(4100); + }); + await waitFor(() => expect(screen.getByTestId('composer')).toBeTruthy()); + expect(composer?.initialData).toMatchObject({ selectedIdentityId: null, fromOverrideEnabled: true, fromOverrideEmail: 'gone@example.org', fromOverrideName: 'Gone' }); + }); + }); + + it('a save moves the address on, or a reload would look for a version that is gone', async () => { + openDraft(vi.fn(async () => draft)); + await waitFor(() => expect(screen.getByTestId('composer')).toBeTruthy()); + act(() => (composer as unknown as { ownWindow: { onDraftSaved: (id: string) => void } }).ownWindow.onDraftSaved('d2')); + expect(new URLSearchParams(window.location.search).get('draft')).toBe('d2'); + expect(new URLSearchParams(window.location.search).get('account')).toBe(LOGIN); + }); +}); + describe('PopoutComposeApp', () => { it('tells the opening window to let go only with the composer on screen', async () => { const handoff = createComposeHandoff()!; diff --git a/components/popout/__tests__/popout-message-app.test.tsx b/components/popout/__tests__/popout-message-app.test.tsx index 8d877a955..82e6a7d69 100644 --- a/components/popout/__tests__/popout-message-app.test.tsx +++ b/components/popout/__tests__/popout-message-app.test.tsx @@ -78,6 +78,21 @@ afterEach(() => { window.history.replaceState(null, '', '/'); }); +describe('a message opened from a bulwark:// link', () => { + it('asks for nothing automatic: such a link may show a message, not act on it', async () => { + window.history.replaceState(null, '', '/en/popout/message/m%2F1?account=login-b&via=link'); + render(<PopoutMessageApp id="m/1" />); + await settle(); + expect((view as unknown as { noAutomaticActions?: boolean }).noAutomaticActions).toBe(true); + }); + + it('an ordinary pop-out acts as ever', async () => { + render(<PopoutMessageApp id="m/1" />); + await settle(); + expect((view as unknown as { noAutomaticActions?: boolean }).noAutomaticActions).toBeFalsy(); + }); +}); + describe('PopoutMessageApp', () => { it('opens the message of the address, through its login and account', async () => { render(<PopoutMessageApp id="rendered-for-another-id" />); diff --git a/components/popout/popout-compose-app.tsx b/components/popout/popout-compose-app.tsx index 6f0bebeff..11e02e952 100644 --- a/components/popout/popout-compose-app.tsx +++ b/components/popout/popout-compose-app.tsx @@ -18,7 +18,15 @@ import { announceMailChanged, announceSentToMainWindow, askRescuedDraftId, watch import { acknowledgeComposeHandoff, receiveComposeHandoff, rememberComposePayload, rememberedComposePayload, watchHandoffCancel } from "@/lib/popout/compose-handoff"; import type { ComposePopoutPayload } from "@/lib/popout/compose-payload"; import { closePopoutWindow } from "@/lib/popout/window-role"; -import { PopoutShell, PopoutSkeleton } from "./popout-shell"; +import { Button } from "@/components/ui/button"; +import { composerDataFromDraft, isRestorableDraft } from "@/lib/draft-composer-data"; +import { noteOpenDraft } from "@/lib/desktop/window-restore"; +import { findDraftIdentityIdForLogin } from "@/lib/draft-source"; +import { emailHooks } from "@/lib/plugin-hooks"; +import { useProMultiAccountIdentities } from "@/hooks/use-pro-multi-account-identities"; +import { useIdentityStore } from "@/stores/identity-store"; +import type { Email } from "@/lib/jmap/types"; +import { PopoutNotice, PopoutShell, PopoutSkeleton } from "./popout-shell"; /** A warning with no main window left to show it stays this long before the window goes. */ const WARNING_READ_MS = 8000; @@ -31,10 +39,126 @@ const EMPTY_PAYLOAD: ComposePopoutPayload = { mode: "compose" }; /** How long a reloaded window waits to hear what became of the text it handed over on the way out. */ const RESCUE_ANSWER_MS = 2000; -function readLaunch(): { handoffId: string | null; accountId?: string } { +function readLaunch(): { handoffId: string | null; accountId?: string; draftId?: string; ownerAccountId?: string } { if (typeof window === "undefined") return { handoffId: null }; const search = new URLSearchParams(window.location.search); - return { handoffId: search.get("handoff"), accountId: search.get("account") ?? undefined }; + return { + handoffId: search.get("handoff"), + accountId: search.get("account") ?? undefined, + draftId: search.get("draft") ?? undefined, + ownerAccountId: search.get("owner") ?? undefined, + }; +} + +/** How long a restored draft waits for the identity that wrote it to load. */ +const IDENTITY_WAIT_MS = 4000; + +/** + * The composer that was open when the desktop app quit, back on its draft. A draft + * that has gone since (sent or deleted elsewhere) means there's nothing to show. + * A server that doesn't answer says nothing about it: the window stays, offers to try + * again, and the draft stays on the list for the next start. + * + * Only through the login the address names, and never without one: ids repeat across + * accounts, so another login could hold someone else's message under this id. + * + * The From stays what it was. With several accounts the other accounts' identities + * load later, and the composer would otherwise start on the default and save that. + */ +function RestoredDraft({ draftId, accountId, ownerAccountId, onReady }: { + draftId: string; + accountId?: string; + ownerAccountId?: string; + onReady: (payload: ComposePopoutPayload) => void; +}) { + const t = useTranslations(); + const tRestore = useTranslations("desktopUi.restore"); + const tWindows = useTranslations("pwaWindows"); + const client = useAuthStore((s) => (accountId ? s.getClientForAccount(accountId) : undefined)); + const ownIdentities = useIdentityStore((s) => s.identities); + const multi = useProMultiAccountIdentities(); + const identities = multi.enabled ? multi.allIdentities : ownIdentities; + const [draft, setDraft] = useState<Email | null>(null); + const [failed, setFailed] = useState(false); + const [attempt, setAttempt] = useState(0); + const [waitOver, setWaitOver] = useState(false); + + // Until the composer takes over, this window still stands for the draft. + useEffect(() => { + const key = `restored-${draftId}`; + noteOpenDraft(key, { draftId, localAccountId: accountId, ownerAccountId }); + return () => noteOpenDraft(key, null); + }, [draftId, accountId, ownerAccountId]); + + useEffect(() => { + if (!accountId) { + closePopoutWindow(); + return; + } + if (!client) return; + let cancelled = false; + setFailed(false); + void Promise.all([client.getEmail(draftId, ownerAccountId), client.getMailboxes(ownerAccountId)]).then(async ([found, mailboxes]) => { + if (cancelled) return; + if (!found || !isRestorableDraft(found, mailboxes)) { + closePopoutWindow(); + return; + } + const transformed = await emailHooks.onBeforeEditDraft.transform(found); + if (!cancelled) setDraft(transformed); + }).catch((error) => { + debug.error("Failed to reopen a draft:", error); + if (!cancelled) setFailed(true); + }); + return () => { + cancelled = true; + }; + }, [client, accountId, draftId, ownerAccountId, attempt]); + + // Back online: try by itself. + useEffect(() => { + if (!failed) return; + const retry = () => setAttempt((n) => n + 1); + window.addEventListener("online", retry); + return () => window.removeEventListener("online", retry); + }, [failed]); + + useEffect(() => { + const timer = setTimeout(() => setWaitOver(true), IDENTITY_WAIT_MS); + return () => clearTimeout(timer); + }, []); + + useEffect(() => { + if (!draft) return; + const from = draft.from?.[0]; + const matched = findDraftIdentityIdForLogin(identities, from, accountId); + // The identity may still be on its way: wait for it, then keep the address as it was. + if (!matched && from && !waitOver) return; + const data = composerDataFromDraft(draft, { + accountId: ownerAccountId, + localAccountId: accountId, + identities, + noSubject: t("email_composer.no_subject"), + }); + onReady({ + mode: "compose", + initialData: !matched && from?.email + ? { ...data, fromOverrideEnabled: true, fromOverrideEmail: from.email, fromOverrideName: from.name ?? "" } + : data, + }); + // onReady swaps this component out; `t` changes nothing here. + // eslint-disable-next-line react-hooks/exhaustive-deps + }, [draft, identities, waitOver]); + + if (failed) { + return ( + <PopoutNotice title={tRestore("unavailable_title")} body={tRestore("unavailable_body")}> + <Button onClick={() => setAttempt((n) => n + 1)}>{tRestore("try_again")}</Button> + <Button variant="ghost" onClick={closePopoutWindow}>{tRestore("close")}</Button> + </PopoutNotice> + ); + } + return <PopoutSkeleton label={tWindows("opening")} />; } /** The composer alone, in its own window: sending, autosave and discard go through the shared stores, as in a Pro tab. */ @@ -153,7 +277,15 @@ function PopoutComposer({ payload, handoffId }: { payload: ComposePopoutPayload; onUnloadState: (state: ComposerDraftData) => { if (handoffId) rememberComposePayload(handoffId, { ...payload, initialData: state, prefill: null }); }, - onDraftSaved: () => announceMailChanged(useAuthStore.getState().activeAccountId), + onDraftSaved: (draftId: string) => { + announceMailChanged(useAuthStore.getState().activeAccountId); + // A save makes a new id, and this address is what a reload starts from. + const url = new URL(window.location.href); + if (url.searchParams.has("draft")) { + url.searchParams.set("draft", draftId); + window.history.replaceState(null, "", `${url.pathname}${url.search}`); + } + }, }), [handoffId, mainWindow, payload]); return ( @@ -181,8 +313,8 @@ function PopoutComposer({ payload, handoffId }: { payload: ComposePopoutPayload; /** `/popout/compose`: a draft handed over by another window, or a new message. */ export function PopoutComposeApp() { const t = useTranslations("pwaWindows"); - const [{ handoffId, accountId }] = useState(readLaunch); - const [payload, setPayload] = useState<ComposePopoutPayload | null>(handoffId ? null : EMPTY_PAYLOAD); + const [{ handoffId, accountId, draftId, ownerAccountId }] = useState(readLaunch); + const [payload, setPayload] = useState<ComposePopoutPayload | null>(handoffId || draftId ? null : EMPTY_PAYLOAD); useEffect(() => { if (!handoffId) return; @@ -216,7 +348,9 @@ export function PopoutComposeApp() { return ( <PopoutShell kind="compose" accountId={accountId}> - {payload ? <PopoutComposer payload={payload} handoffId={handoffId} /> : <PopoutSkeleton label={t("opening")} />} + {payload ? <PopoutComposer payload={payload} handoffId={handoffId} /> + : draftId ? <RestoredDraft draftId={draftId} accountId={accountId} ownerAccountId={ownerAccountId} onReady={setPayload} /> + : <PopoutSkeleton label={t("opening")} />} </PopoutShell> ); } diff --git a/components/popout/popout-message-app.tsx b/components/popout/popout-message-app.tsx index c7841a2b1..4f0ae12ad 100644 --- a/components/popout/popout-message-app.tsx +++ b/components/popout/popout-message-app.tsx @@ -24,7 +24,7 @@ const CHECK_INTERVAL_MS = 60_000; * The id from the address bar: a page the service worker kept for a start * without the network was rendered for another id. */ -function readLaunch(paramId: string): { emailId: string; accountId?: string; ownerAccountId?: string } { +function readLaunch(paramId: string): { emailId: string; accountId?: string; ownerAccountId?: string; fromLink?: boolean } { if (typeof window === "undefined") return { emailId: paramId }; const segments = window.location.pathname.split("/").filter(Boolean); const at = segments.lastIndexOf("message"); @@ -35,7 +35,7 @@ function readLaunch(paramId: string): { emailId: string; accountId?: string; own // A malformed address: the route's own value. } const search = new URLSearchParams(window.location.search); - return { emailId, accountId: search.get("account") ?? undefined, ownerAccountId: search.get("owner") ?? undefined }; + return { emailId, accountId: search.get("account") ?? undefined, ownerAccountId: search.get("owner") ?? undefined, fromLink: search.get("via") === "link" }; } type Presence = "present" | "gone"; @@ -96,7 +96,7 @@ function useMessagePresence(emailId: string, ownerAccountId: string | undefined) return { presence, mailboxIds, liveState }; } -function PopoutMessage({ emailId, accountId, ownerAccountId }: { emailId: string; accountId?: string; ownerAccountId?: string }) { +function PopoutMessage({ emailId, accountId, ownerAccountId, fromLink }: { emailId: string; accountId?: string; ownerAccountId?: string; fromLink?: boolean }) { const t = useTranslations("pwaWindows"); const tSidebar = useTranslations("sidebar"); const login = useAuthStore((s) => accountId ?? s.activeAccountId ?? undefined); @@ -194,6 +194,7 @@ function PopoutMessage({ emailId, accountId, ownerAccountId }: { emailId: string onOpenCompose={openCompose} liveState={liveState} onMailChanged={handleMailChanged} + noAutomaticActions={fromLink} className="min-h-0 w-full flex-1" /> </> @@ -205,7 +206,7 @@ export function PopoutMessageApp({ id }: { id: string }) { const [launch] = useState(() => readLaunch(id)); return ( <PopoutShell kind="message" accountId={launch.accountId}> - <PopoutMessage emailId={launch.emailId} accountId={launch.accountId} ownerAccountId={launch.ownerAccountId} /> + <PopoutMessage emailId={launch.emailId} accountId={launch.accountId} ownerAccountId={launch.ownerAccountId} fromLink={launch.fromLink} /> </PopoutShell> ); } diff --git a/components/popout/popout-spare-app.tsx b/components/popout/popout-spare-app.tsx new file mode 100644 index 000000000..26f67104e --- /dev/null +++ b/components/popout/popout-spare-app.tsx @@ -0,0 +1,45 @@ +"use client"; + +import { useEffect, useState } from "react"; +import { getDesktopBridge } from "@/lib/desktop/bridge"; +import { withBasePath } from "@/lib/browser-navigation"; +import { PopoutComposeApp } from "./popout-compose-app"; +import { PopoutMessageApp } from "./popout-message-app"; + +/** The message id a pop-out address names. */ +function messageIdOf(pathname: string): string { + const segments = pathname.split("/").filter(Boolean); + const at = segments.lastIndexOf("message"); + return at >= 0 && segments[at + 1] ? decodeURIComponent(segments[at + 1]) : ""; +} + +/** + * The desktop app's warm spare: a hidden window with the pop-out code loaded and + * nothing signed in. When a pop-out is wanted the shell gives it an address. The + * address bar changes without a load, which is where the pop-outs read their + * arguments from, and the right one renders in a window that's already up. + */ +export function PopoutSpareApp() { + const [target, setTarget] = useState<URL | null>(null); + + useEffect(() => { + const spare = getDesktopBridge()?.windows?.spare; + if (!spare) { + // Someone typed the address, or a browser followed a link. + window.location.replace(withBasePath("/")); + return; + } + const stop = spare.onActivate((url) => { + const next = new URL(url, window.location.href); + window.history.replaceState(null, "", `${next.pathname}${next.search}`); + setTarget(next); + spare.taken(); + }); + spare.ready(); + return stop; + }, []); + + if (!target) return <div data-popout-spare="" className="h-dvh bg-background" />; + if (/\/popout\/compose\/?$/.test(target.pathname)) return <PopoutComposeApp />; + return <PopoutMessageApp id={messageIdOf(target.pathname)} />; +} diff --git a/components/pro/pro-email-tab-body.tsx b/components/pro/pro-email-tab-body.tsx index 97a8c6b67..4a8adc45f 100644 --- a/components/pro/pro-email-tab-body.tsx +++ b/components/pro/pro-email-tab-body.tsx @@ -34,6 +34,8 @@ import { saveQuickReplyDraft } from '@/lib/outgoing/quick-reply-envelope'; import { canDownload } from '@/lib/device-policy'; import { useOpenEmailInWindow } from '@/hooks/use-popouts-available'; import { isFilePreviewable } from '@/lib/file-preview'; +import { useDesktopCommands } from '@/lib/desktop/commands'; +import { isPopoutWindow } from '@/lib/popout/window-role'; import dynamic from 'next/dynamic'; // Only needed when the device policy turns downloads off. @@ -77,6 +79,8 @@ interface ProEmailViewProps { liveState?: Pick<Email, 'keywords' | 'mailboxIds'> | null; /** This view changed the message's flags, for a host other windows should hear from. */ onMailChanged?: () => void; + /** See EmailViewer. */ + noAutomaticActions?: boolean; /** * The message left this view: deleted, archived, moved, or reopened in the * composer. The host decides what that means (close the tab / clear the @@ -132,7 +136,7 @@ function buildReplyContext(email: Email): ProReplyContext { * Hosted by `ProEmailTabBody` (a dedicated email tab) and by the folder tab's * reading pane. */ -export function ProEmailView({ emailId, client: clientOverride, clientAccountId, accountId, onLoaded, onOpenCompose, liveState, onMailChanged, onClose, className }: ProEmailViewProps) { +export function ProEmailView({ emailId, client: clientOverride, clientAccountId, accountId, onLoaded, onOpenCompose, liveState, onMailChanged, noAutomaticActions, onClose, className }: ProEmailViewProps) { const t = useTranslations(); const tNotifications = useTranslations('notifications'); const tRemove = useTranslations('email_list.confirm_remove'); @@ -450,6 +454,29 @@ export function ProEmailView({ emailId, client: clientOverride, clientAccountId, setEmail({ ...email, keywords }); }, [email, setEmailKeywordsLocal]); + // In a pop-out this message is all there is, so the menu bar's Message menu means it. + const inOwnWindow = typeof window !== 'undefined' && isPopoutWindow(); + const seen = !!email?.keywords?.$seen; + useDesktopCommands({ + 'message.reply': () => handleReply(), + 'message.replyAll': handleReplyAll, + 'message.forward': handleForward, + 'message.markRead': () => { if (email) void handleMarkAsRead(email.id, true); }, + 'message.markUnread': () => { if (email) void handleMarkAsRead(email.id, false); }, + 'message.star': () => void handleToggleStar(), + 'message.archive': archiveActionEnabled ? () => void handleArchive() : undefined, + 'message.delete': () => void handleDelete(), + }, { + 'message.reply': !!email, + 'message.replyAll': !!email, + 'message.forward': !!email, + 'message.markRead': !!email && !seen, + 'message.markUnread': !!email && seen, + 'message.star': !!email, + 'message.archive': !!email && archiveActionEnabled, + 'message.delete': !!email, + }, inOwnWindow); + const handleMoveToMailbox = useCallback(async (mailboxId: string) => { if (!client || !email) return; try { @@ -549,6 +576,7 @@ export function ProEmailView({ emailId, client: clientOverride, clientAccountId, <div className={cn("flex h-full flex-col bg-background", className)}> <ErrorBoundary fallback={EmailViewerErrorFallback}> <EmailViewer + noAutomaticActions={noAutomaticActions} email={email} blobSource={blobSource} isLoading={isLoading} diff --git a/components/pro/pro-tab-bar.tsx b/components/pro/pro-tab-bar.tsx index 755f7b556..254f94473 100644 --- a/components/pro/pro-tab-bar.tsx +++ b/components/pro/pro-tab-bar.tsx @@ -228,6 +228,7 @@ export function ProTabBar({ style={{ borderBottom: '1px solid rgba(128, 128, 128, 0.3)' }} role="tablist" data-pane-strip={paneId} + data-window-top-row onDragLeave={handleStripDragLeave} > {tabs.map((tab, index) => { diff --git a/components/protocol/protocol-launch-handler-provider.tsx b/components/protocol/protocol-launch-handler-provider.tsx index d3d8f4942..f3940efaa 100644 --- a/components/protocol/protocol-launch-handler-provider.tsx +++ b/components/protocol/protocol-launch-handler-provider.tsx @@ -7,6 +7,7 @@ import { usePathname, useRouter } from "@/i18n/navigation"; import { ConfirmDialog } from "@/components/ui/confirm-dialog"; import { useConfig } from "@/hooks/use-config"; import { useConfirmDialog } from "@/hooks/use-confirm-dialog"; +import { startOsCommands } from "@/lib/desktop/os-commands"; import { flushComposers } from "@/lib/compose-flush-registry"; import { isPopoutPath } from "@/lib/popout/window-role"; import { isStandaloneDisplayMode } from "@/lib/standalone-display"; @@ -110,6 +111,7 @@ export function ProtocolLaunchHandlerProvider({ children }: ProtocolLaunchHandle const router = useRouter(); const pathname = usePathname(); const tLaunch = useTranslations("pwaLaunch"); + const tDesktop = useTranslations("desktopOs"); const sentToTarget = useRef(new Set<string>()); const { dialogProps, confirm } = useConfirmDialog(); const [offer, setOffer] = useState<ShareOffer | null>(null); @@ -201,6 +203,22 @@ export function ProtocolLaunchHandlerProvider({ children }: ProtocolLaunchHandle return subscribeHandoff("any", goToTarget); }, [pathname, leaveFor]); + // The desktop app: what the OS asks for arrives over the bridge, not launchQueue. + const osEnv = useRef({ leaveFor, push: router.push as (path: string) => void, pathname }); + osEnv.current = { leaveFor, push: router.push as (path: string) => void, pathname }; + useEffect(() => { + if (isPopoutPath(window.location.pathname)) return; + return startOsCommands({ + leaveFor: (path) => osEnv.current.leaveFor(path), + push: (path) => { + if (osEnv.current.pathname !== path) osEnv.current.push(path); + }, + notifyFailed: () => toast.error(tLaunch("open_failed")), + notifyReplyLost: () => toast.error(tDesktop("reply_lost")), + }); + // eslint-disable-next-line react-hooks/exhaustive-deps + }, []); + useEffect(() => { if (pathname.startsWith("/protocol/") || isPopoutPath(pathname)) return; diff --git a/components/providers/calendar-alert-provider.tsx b/components/providers/calendar-alert-provider.tsx index cb0b72b6a..561586746 100644 --- a/components/providers/calendar-alert-provider.tsx +++ b/components/providers/calendar-alert-provider.tsx @@ -1,12 +1,15 @@ "use client"; +import { MissedRemindersDialog } from '@/components/calendar/missed-reminders-dialog'; import { useCalendarAlerts } from '@/hooks/use-calendar-alerts'; +import { useStoreReminders } from '@/hooks/use-store-reminders'; import { ToastContainer } from '@/components/ui/toast'; import { LiveRegions } from '@/components/ui/live-regions'; import { useToastStore } from '@/stores/toast-store'; export function CalendarAlertProvider({ children }: { children: React.ReactNode }) { useCalendarAlerts(); + useStoreReminders(); const toasts = useToastStore((s) => s.toasts); const removeToast = useToastStore((s) => s.removeToast); @@ -15,6 +18,7 @@ export function CalendarAlertProvider({ children }: { children: React.ReactNode <> {children} <ToastContainer toasts={toasts} onClose={removeToast} /> + <MissedRemindersDialog /> <LiveRegions /> </> ); diff --git a/components/session/__tests__/session-timeout-guard.test.tsx b/components/session/__tests__/session-timeout-guard.test.tsx index cad5348f1..887ccbf2a 100644 --- a/components/session/__tests__/session-timeout-guard.test.tsx +++ b/components/session/__tests__/session-timeout-guard.test.tsx @@ -184,7 +184,7 @@ describe('session timeout guard', () => { await advance(500); expect(order).toEqual(['draft saved', 'signed out']); - expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false }); + expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false, keepLocalData: true, sessionLimit: true }); expect(consumeSessionEnd()).toEqual({ kind: 'idle', minutes: 1 }); }); @@ -196,7 +196,7 @@ describe('session timeout guard', () => { await advance(DRAFT_FLUSH_TIMEOUT_MS - 1); expect(logoutAll).not.toHaveBeenCalled(); await advance(1); - expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false }); + expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false, keepLocalData: true, sessionLimit: true }); }); it('uses the strictest of the signed-in accounts', async () => { @@ -258,7 +258,7 @@ describe('session timeout guard', () => { expect(screen.queryByText('max_title')).toBeNull(); await advance(60 * SECOND); await advance(0); - expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false }); + expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false, keepLocalData: true, sessionLimit: true }); expect(consumeSessionEnd()).toEqual({ kind: 'max', hours: 1 }); }); @@ -276,7 +276,7 @@ describe('session timeout guard', () => { fireEvent.pointerDown(window); await advance(0); - expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false }); + expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false, keepLocalData: true, sessionLimit: true }); expect(consumeSessionEnd()).toEqual({ kind: 'idle', minutes: 1 }); }); @@ -319,7 +319,7 @@ describe('session timeout guard', () => { // Later in the body than the overlay, so it paints on top at a higher z-index too. expect(overlay.compareDocumentPosition(warning) & Node.DOCUMENT_POSITION_FOLLOWING).toBeTruthy(); await advance(30 * SECOND); - expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false }); + expect(logoutAll).toHaveBeenCalledWith({ endProviderSession: false, keepLocalData: true, sessionLimit: true }); } finally { overlay.remove(); hasFocus.mockRestore(); diff --git a/components/session/session-timeout-guard.tsx b/components/session/session-timeout-guard.tsx index 08b0dd983..c208a810a 100644 --- a/components/session/session-timeout-guard.tsx +++ b/components/session/session-timeout-guard.tsx @@ -92,7 +92,8 @@ const IDLE_STATE: SessionTimerState = { phase: "active", kind: null, deadline: n * (policy.json `organisation.session`). Activity in any Bulwark tab keeps * every tab signed in; a warning counts down first; at zero the open and * minimised composers save their drafts and every account signs out, with - * the reason on the login page. + * the reason on the login page. What the accounts keep on the device hides until + * the next sign-in, unless the organisation asks for deletion at once. */ export function SessionTimeoutGuard() { const isAuthenticated = useAuthStore((s) => s.isAuthenticated); @@ -149,7 +150,8 @@ export function SessionTimeoutGuard() { rememberSessionEnd(endReason(kind, current, false)); const flushed = await flushComposers(DRAFT_FLUSH_TIMEOUT_MS); if (flushed.failed > 0 || flushed.timedOut) rememberSessionEnd(endReason(kind, current, true)); - await useAuthStore.getState().logoutAll({ endProviderSession: false }); + // Nobody asked: the mail hides until the next sign-in, and unsent messages with it. + await useAuthStore.getState().logoutAll({ endProviderSession: false, keepLocalData: true, sessionLimit: true }); }, []); // The clock, while there is a limit to count. diff --git a/components/settings/__tests__/desktop-telemetry-settings.test.tsx b/components/settings/__tests__/desktop-telemetry-settings.test.tsx new file mode 100644 index 000000000..94fabcccb --- /dev/null +++ b/components/settings/__tests__/desktop-telemetry-settings.test.tsx @@ -0,0 +1,189 @@ +import { readFileSync } from 'node:fs'; +import path from 'node:path'; +import { fireEvent, render, screen, waitFor } from '@testing-library/react'; +import { afterEach, describe, expect, it, vi } from 'vitest'; +import type { DesktopCrashFile, DesktopCrashSendResult, DesktopPrivacyState } from '@/lib/desktop/types'; +import { DesktopTelemetrySettings } from '../desktop-telemetry-settings'; + +// The desktop app's two switches. A browser sees nothing. The shell decides and asks; this +// page only shows what it says, and sends a crash file only when the button is pressed. + +const toast = vi.hoisted(() => ({ success: vi.fn(), error: vi.fn(), info: vi.fn(), warning: vi.fn() })); +vi.mock('@/stores/toast-store', () => ({ toast })); +vi.mock('next-intl', async (importOriginal) => ({ + ...(await importOriginal<typeof import('next-intl')>()), + useTranslations: () => (key: string) => key, + useFormatter: () => ({ dateTime: (date: Date) => date.toISOString() }), +})); +vi.mock('../settings-section', async (importOriginal) => ({ + ...(await importOriginal<typeof import('../settings-section')>()), + SettingsSection: ({ children }: { children: React.ReactNode }) => <div>{children}</div>, +})); + +const OFF: DesktopPrivacyState = { + telemetry: { on: false, forcedOff: false }, + crashReports: { on: false, forcedOff: false, uploadUrl: '' }, +}; +const CRASH_ON: DesktopPrivacyState = { ...OFF, crashReports: { on: true, forcedOff: false, uploadUrl: '' } }; +const FILE: DesktopCrashFile = { id: 'a1', createdAt: Date.parse('2026-11-03T10:00:00Z'), bytes: 2048 }; + +function bridge(state: DesktopPrivacyState, crashes: DesktopCrashFile[] = [], mode: 'standalone' | 'instance' = 'standalone') { + const privacy = { + get: vi.fn(async () => state), + setTelemetry: vi.fn(async (on: boolean) => ({ ...state, telemetry: { ...state.telemetry, on } })), + setCrashReports: vi.fn(async (on: boolean) => ({ ...state, crashReports: { ...state.crashReports, on } })), + setCrashUploadUrl: vi.fn(async (_url: string) => ({ ok: true, state })), + listCrashes: vi.fn(async () => crashes), + sendCrash: vi.fn(async (_id: string): Promise<DesktopCrashSendResult> => ({ ok: true })), + deleteCrashes: vi.fn(async () => {}), + onChange: vi.fn(() => () => {}), + }; + (window as unknown as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', mode, privacy }; + return privacy; +} + +afterEach(() => { + delete (window as unknown as { bulwarkDesktop?: unknown }).bulwarkDesktop; + toast.success.mockClear(); + toast.error.mockClear(); +}); + +const checked = (id: string) => screen.getByTestId(id).getAttribute('aria-checked'); + +describe('usage info and crash reports', () => { + it('shows nothing in a browser', async () => { + const { container } = render(<DesktopTelemetrySettings />); + await new Promise((resolve) => setTimeout(resolve, 5)); + expect(container.textContent).toBe(''); + }); + + it('shows nothing under a shell without the bridge member', async () => { + (window as unknown as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32' }; + const { container } = render(<DesktopTelemetrySettings />); + await new Promise((resolve) => setTimeout(resolve, 5)); + expect(container.textContent).toBe(''); + }); + + it('starts with both off, and says what a crash file can hold', async () => { + bridge(OFF); + render(<DesktopTelemetrySettings />); + await screen.findByTestId('desktop-telemetry-toggle'); + expect(checked('desktop-telemetry-toggle')).toBe('false'); + expect(checked('desktop-crash-toggle')).toBe('false'); + expect(screen.getByText('crash_memory')).toBeTruthy(); + }); + + it('asks the shell and shows its answer', async () => { + const privacy = bridge(OFF); + render(<DesktopTelemetrySettings />); + fireEvent.click(await screen.findByTestId('desktop-telemetry-toggle')); + await waitFor(() => expect(privacy.setTelemetry).toHaveBeenCalledWith(true)); + await waitFor(() => expect(checked('desktop-telemetry-toggle')).toBe('true')); + expect(privacy.setCrashReports).not.toHaveBeenCalled(); + }); + + it('shows a switch still off when the user said no in the shell\'s dialog', async () => { + const privacy = bridge(OFF); + privacy.setCrashReports.mockResolvedValue(OFF); + render(<DesktopTelemetrySettings />); + fireEvent.click(await screen.findByTestId('desktop-crash-toggle')); + await waitFor(() => expect(privacy.setCrashReports).toHaveBeenCalledWith(true)); + expect(checked('desktop-crash-toggle')).toBe('false'); + }); + + it('locks both when a policy forces them off, and says who did', async () => { + const privacy = bridge({ + telemetry: { on: false, forcedOff: true }, + crashReports: { on: false, forcedOff: true, uploadUrl: '' }, + }); + render(<DesktopTelemetrySettings />); + const toggle = await screen.findByTestId('desktop-telemetry-toggle'); + expect(toggle.hasAttribute('disabled')).toBe(true); + expect(screen.getByTestId('desktop-crash-toggle').hasAttribute('disabled')).toBe(true); + expect(screen.getAllByText('forced_off')).toHaveLength(2); + fireEvent.click(toggle); + expect(privacy.setTelemetry).not.toHaveBeenCalled(); + }); + + it('adds the note about the instance\'s own admin only on an instance', async () => { + bridge(OFF, [], 'instance'); + render(<DesktopTelemetrySettings />); + await screen.findByTestId('desktop-telemetry-toggle'); + expect(screen.getByText(/instance_note/)).toBeTruthy(); + }); +}); + +describe('crash files', () => { + it('sends only when the button is pressed', async () => { + const privacy = bridge(CRASH_ON, [FILE]); + render(<DesktopTelemetrySettings />); + const send = await screen.findByTestId('desktop-crash-send'); + expect(privacy.sendCrash).not.toHaveBeenCalled(); + fireEvent.click(send); + await waitFor(() => expect(privacy.sendCrash).toHaveBeenCalledWith('a1')); + await waitFor(() => expect(toast.success).toHaveBeenCalledWith('sent')); + }); + + it('says so when no address is set', async () => { + const privacy = bridge(CRASH_ON, [FILE]); + privacy.sendCrash.mockResolvedValue({ ok: false, reason: 'no-url' }); + render(<DesktopTelemetrySettings />); + fireEvent.click(await screen.findByTestId('desktop-crash-send')); + await waitFor(() => expect(toast.error).toHaveBeenCalledWith('send_no_url')); + }); + + it('says nothing when the user said no in the dialog', async () => { + const privacy = bridge(CRASH_ON, [FILE]); + privacy.sendCrash.mockResolvedValue({ ok: false, reason: 'cancelled' }); + render(<DesktopTelemetrySettings />); + fireEvent.click(await screen.findByTestId('desktop-crash-send')); + await waitFor(() => expect(privacy.sendCrash).toHaveBeenCalled()); + await new Promise((resolve) => setTimeout(resolve, 5)); + expect(toast.error).not.toHaveBeenCalled(); + expect(toast.success).not.toHaveBeenCalled(); + }); + + it('asks for the address only with crash reports on, and shows a bad one\'s answer', async () => { + const privacy = bridge(CRASH_ON); + privacy.setCrashUploadUrl.mockResolvedValue({ ok: false, state: CRASH_ON }); + render(<DesktopTelemetrySettings />); + const input = await screen.findByTestId('desktop-crash-url'); + fireEvent.change(input, { target: { value: 'ftp://nope' } }); + fireEvent.click(screen.getByRole('button', { name: 'url_save' })); + await waitFor(() => expect(privacy.setCrashUploadUrl).toHaveBeenCalledWith('ftp://nope')); + await screen.findByText('url_invalid'); + }); + + it('hides the address with crash reports off', async () => { + bridge(OFF); + render(<DesktopTelemetrySettings />); + await screen.findByTestId('desktop-telemetry-toggle'); + expect(screen.queryByTestId('desktop-crash-url')).toBeNull(); + }); + + it('deletes through the shell', async () => { + const privacy = bridge(CRASH_ON, [FILE]); + render(<DesktopTelemetrySettings />); + fireEvent.click(await screen.findByRole('button', { name: 'delete_all' })); + await waitFor(() => expect(privacy.deleteCrashes).toHaveBeenCalledTimes(1)); + }); +}); + +describe('the text', () => { + const en = JSON.parse(readFileSync(path.join(process.cwd(), 'locales/en/common.json'), 'utf8')).desktopTelemetry as Record<string, string>; + + it('names everything a heartbeat holds, in plain words', () => { + for (const word of [/a random ID/, /app version/, /Node version/, /operating system/, /how long the app has been running/, /how many plugins and themes/]) { + expect(en.telemetry_description).toMatch(word); + } + expect(en.telemetry_description).not.toMatch(/uptime/i); + }); + + it('says crash reports carry a random ID too', () => { + expect(en.crash_description).toMatch(/a random ID/); + }); + + it('says a crash file can still hold the text of mail after scrubbing', () => { + expect(en.crash_memory).toMatch(/can still contain the text of your mail/); + }); +}); diff --git a/components/settings/desktop-os-settings.tsx b/components/settings/desktop-os-settings.tsx new file mode 100644 index 000000000..1703487e6 --- /dev/null +++ b/components/settings/desktop-os-settings.tsx @@ -0,0 +1,120 @@ +"use client"; + +import { useEffect, useState } from "react"; +import { useTranslations } from "next-intl"; +import { Button } from "@/components/ui/button"; +import { getDesktopBridge } from "@/lib/desktop/bridge"; +import type { DesktopOsDefaultAppStatus, DesktopOsSettings as Settings, DesktopOsStatus } from "@/lib/desktop/types"; +import { SettingItem, SettingsSection, ToggleSwitch } from "./settings-section"; + +/** On Windows and Linux this is what a press of the keys shows; macOS maps it to Cmd. */ +const SHOW_SHORTCUT = "CommandOrControl+Shift+B"; + +function shortcutLabel(platform: string | undefined): string { + return platform === "darwin" ? "⇧⌘B" : "Ctrl+Shift+B"; +} + +/** + * The desktop app's own settings, on the General page: only where there's an app to + * set. A browser never sees it, and it renders nothing until the bridge has answered. + * Quick compose adds its shortcut here later. + */ +export function DesktopOsSettings() { + const t = useTranslations("desktopOs"); + const [status, setStatus] = useState<DesktopOsStatus | null>(null); + const [defaultApp, setDefaultApp] = useState<DesktopOsDefaultAppStatus | null>(null); + const bridge = getDesktopBridge(); + const os = bridge?.os; + + useEffect(() => { + if (!os) return; + let stale = false; + void os.getStatus().then((next) => { + if (!stale) setStatus(next); + }); + void os.defaultAppStatus().then((next) => { + if (!stale) setDefaultApp(next); + }); + const stop = os.onStatusChange(setStatus); + return () => { + stale = true; + stop(); + }; + }, [os]); + + if (!os || !status) return null; + const { settings } = status; + const change = (patch: Partial<Settings>) => { + void os.setSettings(patch).then(setStatus); + }; + + return ( + <SettingsSection id="desktop-app" title={t("section_title")} description={t("section_description")}> + <SettingItem label={t("close_to_tray_label")} description={t("close_to_tray_description")}> + <ToggleSwitch checked={settings.closeToTray} onChange={(closeToTray) => change({ closeToTray })} /> + </SettingItem> + <SettingItem label={t("start_at_login_label")} description={t("start_at_login_description")}> + <ToggleSwitch checked={settings.startAtLogin} onChange={(startAtLogin) => change({ startAtLogin })} /> + </SettingItem> + {settings.startAtLogin && ( + <SettingItem nested label={t("start_minimized_label")} description={t("start_minimized_description")}> + <ToggleSwitch checked={settings.startMinimized} onChange={(startMinimized) => change({ startMinimized })} /> + </SettingItem> + )} + <SettingItem + label={bridge?.platform === "darwin" ? t("attention_mac_label") : t("attention_label")} + description={t("attention_description")} + > + <ToggleSwitch checked={settings.attentionOnNewMail} onChange={(attentionOnNewMail) => change({ attentionOnNewMail })} /> + </SettingItem> + <SettingItem label={t("quiet_hours_label")} description={t("quiet_hours_description")}> + <ToggleSwitch checked={settings.quietHoursEnabled} onChange={(quietHoursEnabled) => change({ quietHoursEnabled })} /> + </SettingItem> + {settings.quietHoursEnabled && ( + <SettingItem nested label={t("quiet_hours_from")}> + <div className="flex items-center gap-2"> + <input + type="time" + aria-label={t("quiet_hours_from")} + value={settings.quietHoursStart} + onChange={(event) => change({ quietHoursStart: event.target.value })} + className="rounded-md border border-border bg-background px-2 py-1 text-sm" + /> + <span className="text-sm text-muted-foreground">{t("quiet_hours_to")}</span> + <input + type="time" + aria-label={t("quiet_hours_to")} + value={settings.quietHoursEnd} + onChange={(event) => change({ quietHoursEnd: event.target.value })} + className="rounded-md border border-border bg-background px-2 py-1 text-sm" + /> + </div> + </SettingItem> + )} + <SettingItem + label={t("show_shortcut_label")} + description={settings.showShortcut && !status.shortcutActive + ? t("show_shortcut_taken", { keys: shortcutLabel(bridge?.platform) }) + : t("show_shortcut_description", { keys: shortcutLabel(bridge?.platform) })} + > + <ToggleSwitch + checked={!!settings.showShortcut} + onChange={(on) => change({ showShortcut: on ? SHOW_SHORTCUT : null })} + /> + </SettingItem> + <SettingItem + label={t("default_app_label")} + description={defaultApp?.mailto ? t("default_app_is_default") : t("default_app_description")} + > + <Button + variant="outline" + size="sm" + onClick={() => void os.openDefaultAppSettings().then(setDefaultApp)} + className="text-xs h-7" + > + {t("default_app_button")} + </Button> + </SettingItem> + </SettingsSection> + ); +} diff --git a/components/settings/desktop-telemetry-settings.tsx b/components/settings/desktop-telemetry-settings.tsx new file mode 100644 index 000000000..cc2dda5f3 --- /dev/null +++ b/components/settings/desktop-telemetry-settings.tsx @@ -0,0 +1,173 @@ +"use client"; + +import { useCallback, useEffect, useState } from "react"; +import { useFormatter, useTranslations } from "next-intl"; +import { Button } from "@/components/ui/button"; +import { Input } from "@/components/ui/input"; +import { getDesktopBridge } from "@/lib/desktop/bridge"; +import type { DesktopCrashFile, DesktopCrashSendResult, DesktopPrivacyState } from "@/lib/desktop/types"; +import { toast } from "@/stores/toast-store"; +import { SettingItem, SettingsSection, ToggleSwitch } from "./settings-section"; + +const SEND_ERROR: Record<Exclude<DesktopCrashSendResult, { ok: true }>["reason"], string | null> = { + "no-consent": "send_no_consent", + "no-url": "send_no_url", + "not-found": "send_failed", + failed: "send_failed", + // The user said no in the dialog: nothing to tell them. + cancelled: null, +}; + +/** + * Usage info and crash reports in the desktop app: each with its own switch, both off + * until the user says yes, and only where there's an app. A browser never sees this, and + * it renders nothing until the bridge has answered. The shell does the deciding, the + * asking and the sending. + */ +export function DesktopTelemetrySettings() { + const t = useTranslations("desktopTelemetry"); + const format = useFormatter(); + const bridge = getDesktopBridge(); + const privacy = bridge?.privacy; + const [state, setState] = useState<DesktopPrivacyState | null>(null); + const [crashes, setCrashes] = useState<DesktopCrashFile[]>([]); + const [url, setUrl] = useState(""); + const [urlInvalid, setUrlInvalid] = useState(false); + const [sending, setSending] = useState<string | null>(null); + + const refreshCrashes = useCallback(() => { + void privacy?.listCrashes().then(setCrashes, () => {}); + }, [privacy]); + + useEffect(() => { + if (!privacy) return; + let stale = false; + const apply = (next: DesktopPrivacyState) => { + if (stale) return; + setState(next); + setUrl(next.crashReports.uploadUrl); + }; + void privacy.get().then(apply, () => {}); + refreshCrashes(); + const stop = privacy.onChange((next) => { + apply(next); + refreshCrashes(); + }); + return () => { + stale = true; + stop(); + }; + }, [privacy, refreshCrashes]); + + if (!privacy || !state) return null; + const { telemetry, crashReports } = state; + + const saveUrl = async () => { + const result = await privacy.setCrashUploadUrl(url.trim()); + setUrlInvalid(!result.ok); + if (result.ok) setState(result.state); + }; + + const send = async (id: string) => { + setSending(id); + try { + const result = await privacy.sendCrash(id); + if (result.ok) toast.success(t("sent")); + else if (SEND_ERROR[result.reason]) toast.error(t(SEND_ERROR[result.reason]!)); + } finally { + setSending(null); + } + }; + + const showCrashFiles = crashReports.on || crashes.length > 0; + + return ( + <SettingsSection id="desktop-privacy" title={t("section_title")} description={t("section_description")}> + <SettingItem + label={t("telemetry_label")} + description={telemetry.forcedOff ? t("forced_off") : t("telemetry_description")} + locked={telemetry.forcedOff} + > + <ToggleSwitch + checked={telemetry.on} + disabled={telemetry.forcedOff} + testId="desktop-telemetry-toggle" + onChange={(on) => void privacy.setTelemetry(on).then(setState)} + /> + </SettingItem> + <SettingItem + label={t("crash_label")} + description={crashReports.forcedOff ? t("forced_off") : t("crash_description")} + locked={crashReports.forcedOff} + > + <ToggleSwitch + checked={crashReports.on} + disabled={crashReports.forcedOff} + testId="desktop-crash-toggle" + onChange={(on) => void privacy.setCrashReports(on).then((next) => { + setState(next); + refreshCrashes(); + })} + /> + </SettingItem> + {!crashReports.forcedOff && ( + <p className="py-2 text-xs text-muted-foreground"> + {t("crash_memory")} + {bridge?.mode === "instance" && ` ${t("instance_note")}`} + </p> + )} + {crashReports.on && ( + <SettingItem nested label={t("url_label")} description={urlInvalid ? t("url_invalid") : t("url_description")}> + <div className="flex items-center gap-2"> + <Input + type="url" + value={url} + placeholder="https://crash.example.org/upload" + data-testid="desktop-crash-url" + onChange={(event) => { + setUrl(event.target.value); + setUrlInvalid(false); + }} + className="w-64" + /> + <Button variant="outline" size="sm" onClick={() => void saveUrl()}>{t("url_save")}</Button> + </div> + </SettingItem> + )} + {showCrashFiles && ( + <SettingItem nested label={t("files_label")} description={t("files_description")}> + {crashes.length > 0 && ( + <Button + variant="outline" + size="sm" + onClick={() => void privacy.deleteCrashes().then(refreshCrashes)} + > + {t("delete_all")} + </Button> + )} + </SettingItem> + )} + {showCrashFiles && crashes.length === 0 && ( + <p className="ms-4 ps-3 py-2 text-xs text-muted-foreground">{t("files_empty")}</p> + )} + {crashes.map((crash) => ( + <SettingItem + key={crash.id} + nested + label={format.dateTime(new Date(crash.createdAt), { dateStyle: "medium", timeStyle: "short" })} + description={t("file_size", { size: Math.max(1, Math.round(crash.bytes / 1024)) })} + > + <Button + variant="outline" + size="sm" + disabled={sending !== null} + data-testid="desktop-crash-send" + onClick={() => void send(crash.id)} + > + {t("send")} + </Button> + </SettingItem> + ))} + </SettingsSection> + ); +} diff --git a/components/settings/desktop-window-settings.tsx b/components/settings/desktop-window-settings.tsx new file mode 100644 index 000000000..3d604728c --- /dev/null +++ b/components/settings/desktop-window-settings.tsx @@ -0,0 +1,26 @@ +"use client"; + +import { useEffect, useState } from "react"; +import { useTranslations } from "next-intl"; +import { hasDesktopWindows } from "@/lib/popout/support"; +import { setDesktopPref, useDesktopPrefs } from "@/lib/desktop/preferences"; +import { SettingItem, SettingsSection, ToggleSwitch } from "./settings-section"; + +/** How the desktop app's windows behave. Only there: a browser has nothing to set. */ +export function DesktopWindowSettings() { + const t = useTranslations("desktopUi.settings"); + const prefs = useDesktopPrefs(); + const [shown, setShown] = useState(false); + useEffect(() => setShown(hasDesktopWindows()), []); + if (!shown) return null; + return ( + <SettingsSection id="desktop-windows" title={t("title")}> + <SettingItem label={t("double_click_label")} description={t("double_click_description")}> + <ToggleSwitch checked={prefs.openOnDoubleClick} onChange={(checked) => setDesktopPref("openOnDoubleClick", checked)} /> + </SettingItem> + <SettingItem label={t("restore_label")} description={t("restore_description")}> + <ToggleSwitch checked={prefs.restoreWindows} onChange={(checked) => setDesktopPref("restoreWindows", checked)} /> + </SettingItem> + </SettingsSection> + ); +} diff --git a/components/settings/general-settings.tsx b/components/settings/general-settings.tsx index 0a03272bf..3813cadc9 100644 --- a/components/settings/general-settings.tsx +++ b/components/settings/general-settings.tsx @@ -5,11 +5,14 @@ import { useSettingsStore } from '@/stores/settings-store'; import { SettingsSection, SettingItem, ToggleSwitch } from './settings-section'; import { LanguageSettings } from './language-settings'; import { DesktopKeystoreSettings } from './desktop-keystore-settings'; +import { DesktopTelemetrySettings } from './desktop-telemetry-settings'; import { ProtocolHandlerSettings } from './protocol-handler-settings'; +import { DesktopOsSettings } from './desktop-os-settings'; import { useTour } from '@/components/tour/tour-provider'; import { Button } from '@/components/ui/button'; import { PlayCircle } from '@/components/icons'; import { IS_LITE } from '@/lib/lite'; +import { DesktopWindowSettings } from './desktop-window-settings'; /** * The General page: language and time, which links the browser hands to @@ -25,9 +28,13 @@ export function GeneralSettings({ supportsCalendar }: { supportsCalendar: boolea <div className="space-y-8"> <LanguageSettings /> + <DesktopOsSettings /> + {!IS_LITE && <ProtocolHandlerSettings supportsCalendar={supportsCalendar} />} <DesktopKeystoreSettings /> + <DesktopTelemetrySettings /> + <DesktopWindowSettings /> <SettingsSection id="tour" title={tTour('settings_section')}> <SettingItem label={tTour('restart_title')} description={tTour('restart_desc')}> <Button diff --git a/components/settings/settings-app.tsx b/components/settings/settings-app.tsx index cea0b8fec..815d79061 100644 --- a/components/settings/settings-app.tsx +++ b/components/settings/settings-app.tsx @@ -1208,8 +1208,8 @@ export function SettingsApp({ linkSegments: routeSegments }: SettingsAppProps = row. The same element with or without the panel, so a page keeps what was typed when the panel starts or stops docking. */} <div className="flex-1 min-w-0 flex flex-col" data-settings-side-panel-column=""> - {sidePanel.docks && ( - <div className="flex items-center gap-2 h-14 box-content border-b border-border px-2 sm:px-4 lg:px-6 shrink-0" data-settings-panel-row=""> + {(sidePanel.docks || !isEmbedded) && ( + <div data-window-only={sidePanel.docks ? undefined : ""} className={cn("items-center gap-2 h-14 box-content border-b border-border px-2 sm:px-4 lg:px-6 shrink-0", sidePanel.docks ? "flex" : "hidden")} data-settings-panel-row=""> {/* The page's h1 below names it for screen readers. */} <div className="flex-1 min-w-0 truncate text-sm font-semibold" aria-hidden="true">{activeTabLabel}</div> {sidePanel.toggle} diff --git a/components/ui/__tests__/toast-extra-actions.test.tsx b/components/ui/__tests__/toast-extra-actions.test.tsx new file mode 100644 index 000000000..10354d4f3 --- /dev/null +++ b/components/ui/__tests__/toast-extra-actions.test.tsx @@ -0,0 +1,33 @@ +import { describe, expect, it, vi } from 'vitest'; +import { fireEvent, render, screen } from '@testing-library/react'; +import { ToastItem } from '../toast'; + +describe('a toast with more than three actions', () => { + it('shows them in order, and each closes it', () => { + vi.useFakeTimers(); + const clicked = vi.fn(); + const onDismiss = vi.fn(); + const action = (label: string) => ({ label, onClick: () => clicked(label) }); + render( + <ToastItem + onClose={vi.fn()} + toast={{ + id: 't', + type: 'info', + title: 'Standup', + duration: 0, + onDismiss, + tertiaryAction: action('five'), + secondaryAction: action('ten'), + action: action('fifteen'), + extraActions: [action('join'), action('open')], + }} + />, + ); + expect(screen.getAllByRole('button').map((button) => button.textContent).filter(Boolean)).toEqual(['five', 'ten', 'fifteen', 'join', 'open']); + fireEvent.click(screen.getByText('join')); + expect(clicked).toHaveBeenCalledWith('join'); + expect(onDismiss).toHaveBeenCalledTimes(1); + vi.useRealTimers(); + }); +}); diff --git a/components/ui/context-menu.tsx b/components/ui/context-menu.tsx index c22f3dfc9..2a6028415 100644 --- a/components/ui/context-menu.tsx +++ b/components/ui/context-menu.tsx @@ -17,6 +17,9 @@ import { import { createPortal } from "react-dom"; import { cn } from "@/lib/utils"; import { ChevronRight } from "@/components/icons"; +import { useTranslations } from "next-intl"; +import { nativeMenusAvailable, readSettledMenu, showNativeMenu } from "@/lib/desktop/native-menu"; +import { toast } from "@/stores/toast-store"; interface Position { x: number; @@ -199,6 +202,9 @@ interface MenuLevel { const MenuLevelContext = createContext<MenuLevel | null>(null); const neverTouched = () => false; +/** The desktop app shows this menu natively: it renders hidden, submenus and all, to be read. */ +const NativeMenuContext = createContext(false); + function useMenuLevel(recentTouch: () => boolean): MenuLevel { const [openId, setOpenId] = useState<string | null>(null); const timer = useRef<ReturnType<typeof setTimeout> | null>(null); @@ -245,11 +251,55 @@ export const ContextMenu = forwardRef<HTMLDivElement, ContextMenuProps>( const recentTouch = useCallback(() => Date.now() - lastTouchAt.current < 800, []); const level = useMenuLevel(recentTouch); const { request: requestLevel } = level; + const [nativeRefused, setNativeRefused] = useState(false); + const nativeMode = isOpen && mounted && !nativeRefused && nativeMenusAvailable(); + const positionRef = useRef(position); + positionRef.current = position; + const tDesktop = useTranslations("desktopUi.menu"); + const tDesktopRef = useRef(tDesktop); + tDesktopRef.current = tDesktop; useEffect(() => { setMounted(true); }, []); + useEffect(() => { + if (!isOpen) setNativeRefused(false); + }, [isOpen]); + + // In the desktop app: read what rendered and show that natively. See lib/desktop/native-menu.ts. + useEffect(() => { + if (!nativeMode) return; + const root = localRef.current; + if (!root) return; + let cancelled = false; + void (async () => { + const read = await readSettledMenu(root, () => cancelled); + if (cancelled) return; + if (read.unsupported) { + setNativeRefused(true); + return; + } + const { anchor: at } = positionRef.current; + // From a right-click it opens at the pointer, which the OS knows best. + const place = at + ? { x: at.align === "end" ? Math.max(0, at.right - root.getBoundingClientRect().width) : at.left, y: at.bottom + ANCHOR_GAP } + : undefined; + const outcome = await showNativeMenu(read, root, place, tDesktopRef.current("from_plugins")); + if (cancelled) return; + // "More from plugins": the menu itself, with what only it can show. + if (outcome === "html") { + setNativeRefused(true); + return; + } + if (outcome === "gone") toast.warning(tDesktopRef.current("pick_gone")); + onCloseRef.current(); + })(); + return () => { + cancelled = true; + }; + }, [nativeMode]); + const anchor = position.anchor; const anchorKey = anchor ? `${anchor.left},${anchor.top},${anchor.right},${anchor.bottom},${anchor.align ?? ""}` : ""; @@ -443,11 +493,11 @@ export const ContextMenu = forwardRef<HTMLDivElement, ContextMenuProps>( // Once placed (it is invisible, and can't take the focus, before), the // first item gets the focus. useEffect(() => { - if (!isOpen || !isPositioned) return; + if (!isOpen || !isPositioned || nativeMode) return; const root = localRef.current; if (!root || root.contains(document.activeElement)) return; return focusFirstItem(root); - }, [isOpen, isPositioned]); + }, [isOpen, isPositioned, nativeMode]); const setRefs = (node: HTMLDivElement | null) => { localRef.current = node; @@ -463,6 +513,7 @@ export const ContextMenu = forwardRef<HTMLDivElement, ContextMenuProps>( const renderPosition = adjustedPosition ?? position; return createPortal( + <NativeMenuContext.Provider value={nativeMode}> <MenuLevelContext.Provider value={level}> <div ref={setRefs} @@ -478,7 +529,7 @@ export const ContextMenu = forwardRef<HTMLDivElement, ContextMenuProps>( left: renderPosition.x, top: renderPosition.y, maxWidth: `calc(100vw - ${2 * VIEWPORT_MARGIN}px)`, - visibility: isPositioned ? "visible" : "hidden", + visibility: isPositioned && !nativeMode ? "visible" : "hidden", }} role="menu" aria-label={label} @@ -493,7 +544,8 @@ export const ContextMenu = forwardRef<HTMLDivElement, ContextMenuProps>( {children} </div> </div> - </MenuLevelContext.Provider>, + </MenuLevelContext.Provider> + </NativeMenuContext.Provider>, document.body ); } @@ -578,11 +630,11 @@ export function ContextMenuItem({ {Icon && <Icon className="w-4 h-4 flex-shrink-0" />} {hint ? ( <span className="flex-1 min-w-0"> - <span className="block">{label}</span> + <span className="block" data-menu-label="">{label}</span> <span className="block text-xs text-muted-foreground">{hint}</span> </span> ) : ( - <span className="flex-1">{label}</span> + <span className="flex-1" data-menu-label="">{label}</span> )} {/* Key hints mean nothing without a keyboard: hidden on touch (R8). */} {shortcut && ( @@ -625,6 +677,7 @@ export function ContextMenuSubMenu({ hint, }: ContextMenuSubMenuProps) { const parent = useContext(MenuLevelContext); + const native = useContext(NativeMenuContext); const id = useId(); // Outside a ContextMenu (a host's own panel) it keeps its own state. const [localOpen, setLocalOpen] = useState(false); @@ -704,16 +757,21 @@ export function ContextMenuSubMenu({ {Icon && <Icon className="w-4 h-4 flex-shrink-0" />} {hint ? ( <span className="flex-1 min-w-0"> - <span className="block">{label}</span> + <span className="block" data-menu-label="">{label}</span> <span className="block text-xs text-muted-foreground">{hint}</span> </span> ) : ( - <span className="flex-1">{label}</span> + <span className="flex-1" data-menu-label="">{label}</span> )} <ChevronRight className="w-4 h-4 text-muted-foreground" /> </div> - {isOpen && !disabled && ( + {native && !disabled && ( + <div data-submenu-panel="" role="menu" aria-label={label} hidden={false}> + {children} + </div> + )} + {!native && isOpen && !disabled && ( <MenuLevelContext.Provider value={ownLevel}> <SubMenuPanel ref={panelRef} @@ -822,7 +880,7 @@ interface ContextMenuHeaderProps { export function ContextMenuHeader({ children }: ContextMenuHeaderProps) { return ( - <div className="px-3 py-2 text-xs font-medium text-muted-foreground border-b border-border"> + <div data-context-menu-header="" className="px-3 py-2 text-xs font-medium text-muted-foreground border-b border-border"> {children} </div> ); diff --git a/components/ui/dialog.tsx b/components/ui/dialog.tsx index 88fba7e0c..dd5510b33 100644 --- a/components/ui/dialog.tsx +++ b/components/ui/dialog.tsx @@ -155,8 +155,8 @@ export function Dialog({ return createPortal( <div className={cn( - "fixed inset-0 bg-black/50 backdrop-blur-[1px] flex items-center justify-center z-[60] p-4 pt-[calc(1rem+var(--titlebar-inset))] animate-in fade-in duration-150", - size === "full-on-phone" && "max-sm:p-0 max-sm:pt-[var(--titlebar-inset)]" + "fixed inset-0 bg-black/50 backdrop-blur-[1px] flex items-center justify-center z-[60] p-4 pt-[calc(1rem+var(--titlebar-row-height))] animate-in fade-in duration-150", + size === "full-on-phone" && "max-sm:p-0 max-sm:pt-[var(--titlebar-row-height)]" )} onMouseDown={(e) => { pressedOnBackdrop.current = e.target === e.currentTarget; diff --git a/components/ui/toast.tsx b/components/ui/toast.tsx index 28bb16c0a..a3d96a2be 100644 --- a/components/ui/toast.tsx +++ b/components/ui/toast.tsx @@ -36,6 +36,8 @@ export interface Toast { * that has one lays its actions out on a row of their own. */ tertiaryAction?: ToastAction; + /** More actions at the end of that row. Needs a tertiaryAction. */ + extraActions?: ToastAction[]; /** * Work in progress, e.g. an upload: 0..1, or null while the amount is * unknown. The bottom line then shows progress instead of a countdown, @@ -291,6 +293,7 @@ export function ToastItem({ toast, onClose, held = false, onFocusLost }: ToastPr {actionButton(toast.tertiaryAction)} {toast.secondaryAction && actionButton(toast.secondaryAction)} {toast.action && actionButton(toast.action)} + {toast.extraActions?.map((action) => <span key={action.label} className="contents">{actionButton(action)}</span>)} </div> )} </div> diff --git a/hooks/__tests__/use-calendar-alerts-hooks.test.tsx b/hooks/__tests__/use-calendar-alerts-hooks.test.tsx index 331953d64..0f3ca9527 100644 --- a/hooks/__tests__/use-calendar-alerts-hooks.test.tsx +++ b/hooks/__tests__/use-calendar-alerts-hooks.test.tsx @@ -76,6 +76,54 @@ afterEach(() => { vi.restoreAllMocks(); }); +describe('the 24-hour fetch', () => { + it('fires the occurrence of a series the server answered with its master', async () => { + const now = Date.now(); + const occurrenceStart = new Date(now + 5 * 60_000); + const stamp = (date: Date) => { + const pad = (value: number) => String(value).padStart(2, '0'); + return `${date.getFullYear()}-${pad(date.getMonth() + 1)}-${pad(date.getDate())}T${pad(date.getHours())}:${pad(date.getMinutes())}:00`; + }; + // The same weekday and time, years ago: only the expansion finds today's. + const first = new Date(occurrenceStart.getTime() - 52 * 7 * 24 * 3_600_000); + const master = { + id: 'series', + uid: 'uid-series', + title: 'Weekly', + start: stamp(first), + duration: 'PT30M', + calendarIds: { c1: true }, + useDefaultAlerts: false, + recurrenceRules: [{ '@type': 'RecurrenceRule', frequency: 'weekly' }], + alerts: { + a1: { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT6M', relativeTo: 'start' } }, + }, + } as unknown as CalendarEvent; + useCalendarStore.setState({ events: [], calendars: [], supportsCalendar: true }); + useAuthStore.setState({ isAuthenticated: true, client: { queryCalendarEvents: vi.fn(async () => [master]) } as never }); + + renderHook(() => useCalendarAlerts()); + + await waitFor(() => expect(useToastStore.getState().toasts.map((toast) => toast.title)).toEqual(['Weekly'])); + }); +}); + +describe('two tabs', () => { + it('rings in one, also when an id changed between the two', async () => { + const synthetic = { ...event, id: 'synthetic-2' } as CalendarEvent; + renderHook(() => useCalendarAlerts()); + await waitFor(() => expect(useToastStore.getState().toasts).toHaveLength(1)); + + // The other tab has the same reminder under the id the server gives it now. + useCalendarStore.setState({ events: [synthetic] }); + renderHook(() => useCalendarAlerts()); + await act(async () => { + await new Promise((resolve) => setTimeout(resolve, 700)); + }); + expect(useToastStore.getState().toasts).toHaveLength(1); + }); +}); + describe('reminder hooks', () => { it('reports a fired reminder once, and its dismissal when the user closes it', async () => { const fired = vi.fn(); diff --git a/hooks/__tests__/use-email-drag-routing.test.tsx b/hooks/__tests__/use-email-drag-routing.test.tsx index e53285031..e3757d946 100644 --- a/hooks/__tests__/use-email-drag-routing.test.tsx +++ b/hooks/__tests__/use-email-drag-routing.test.tsx @@ -731,4 +731,32 @@ describe('message row drag hover wiring', () => { expect(retry.payload.get('DownloadURL')).toMatch(/^message\/rfc822:Message.eml:blob:/); expect(await text(payloadBlob(retry.payload))).toBe(bytes('shared-b', authB)); }); + + it("in the desktop app an Alt drag is the OS's own with the real bytes, and a plain one stays the page's", async () => { + const email = mail({ subject: 'Hello world' }); + const nativeDrag = vi.fn(async (_files: { name: string; data: Uint8Array }[]) => true); + window.bulwarkDesktop = { version: 1, platform: 'win32', os: { startDrag: nativeDrag } } as never; + const { result } = renderHook(() => useEmailDrag({ email, sourceMailboxId: 'inbox' })); + await warm(result); + try { + startDrag.mockClear(); + // Plain: still a move to a folder, still DownloadURL for Explorer. + expect(drag(result.current.dragHandlers).has('DownloadURL')).toBe(true); + expect(startDrag).toHaveBeenCalled(); + expect(nativeDrag).not.toHaveBeenCalled(); + + startDrag.mockClear(); + const preventDefault = vi.fn(); + const dataTransfer = { setData: vi.fn(), setDragImage: vi.fn(), effectAllowed: '' }; + act(() => result.current.dragHandlers.onDragStart({ altKey: true, preventDefault, dataTransfer } as unknown as DragEvent<HTMLDivElement>)); + expect(preventDefault).toHaveBeenCalled(); + expect(startDrag).not.toHaveBeenCalled(); + await waitFor(() => expect(nativeDrag).toHaveBeenCalled(), { container: document.createElement('div') }); + const [files] = nativeDrag.mock.calls[0]; + expect(files[0].name).toBe('Hello world.eml'); + expect(new TextDecoder().decode(files[0].data)).toBe(bytes('primary-a', authA)); + } finally { + window.bulwarkDesktop = undefined; + } + }); }); diff --git a/hooks/__tests__/use-new-mail-alerts.test.tsx b/hooks/__tests__/use-new-mail-alerts.test.tsx index c98b51dca..40c1fcee7 100644 --- a/hooks/__tests__/use-new-mail-alerts.test.tsx +++ b/hooks/__tests__/use-new-mail-alerts.test.tsx @@ -39,6 +39,14 @@ describe('new mail alerts', () => { vi.useRealTimers(); }); + it('in the desktop app leaves the sound to the notification path, so it plays once', () => { + window.bulwarkDesktop = { version: 1, platform: 'win32', os: {} } as never; + renderHook(() => useNewMailAlerts()); + arrive('a'); + expect(playNotificationSound).not.toHaveBeenCalled(); + window.bulwarkDesktop = undefined; + }); + it('tells screen readers once how many messages came, never what they say', () => { renderHook(() => useNewMailAlerts()); arrive('a'); diff --git a/hooks/__tests__/use-store-reminders-review.test.tsx b/hooks/__tests__/use-store-reminders-review.test.tsx new file mode 100644 index 000000000..dfdafce43 --- /dev/null +++ b/hooks/__tests__/use-store-reminders-review.test.tsx @@ -0,0 +1,442 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { act, fireEvent, render, renderHook, screen } from '@testing-library/react'; +import { MissedRemindersDialog } from '@/components/calendar/missed-reminders-dialog'; +import { ToastContainer } from '@/components/ui/toast'; +import { useCalendarAlerts } from '../use-calendar-alerts'; +import { useStoreReminders } from '../use-store-reminders'; +import { claimKey, claimNow } from '@/lib/calendar-reminders/claims'; +import { useMissedReminders, useReminderSource } from '@/lib/calendar-reminders/state'; +import { setAppLockCheck } from '@/lib/desktop/app-lock-state'; +import type { BulwarkDesktopBridge, DesktopOsNotification, DesktopOsNotifyResult } from '@/lib/desktop/types'; +import { clearAllHooks, uiHooks } from '@/lib/plugin-hooks'; +import { useOfflineStore } from '@/lib/offline/state'; +import { CALENDAR_SESSION, FakeCalendarJmap } from '@/lib/store/__tests__/helpers/fake-calendar'; +import { InProcessStore } from '@/lib/store/__tests__/helpers/in-process-store'; +import { setStoreBackend } from '@/lib/store/client/api'; +import { useAccountStore } from '@/stores/account-store'; +import { useAuthStore } from '@/stores/auth-store'; +import { useCalendarNotificationStore } from '@/stores/calendar-notification-store'; +import { useCalendarStore } from '@/stores/calendar-store'; +import { useEmailStore } from '@/stores/email-store'; +import { usePolicyStore } from '@/stores/policy-store'; +import { useSettingsStore } from '@/stores/settings-store'; +import { useToastStore } from '@/stores/toast-store'; + +const sounds = vi.hoisted(() => ({ play: vi.fn() })); +vi.mock('@/lib/notification-sound', () => ({ playNotificationSound: sounds.play })); +vi.mock('@/lib/title-alert', () => ({ startTitleAlert: vi.fn() })); +// Real crypto takes real time, and fake time would run ahead of it. +vi.mock('@/lib/pwa-notify/login-fingerprint', () => ({ loginFingerprint: async () => 'fingerprint' })); +vi.mock('@/lib/offline/offline-mode', () => ({ offlineActive: () => true })); +const policy = vi.hoisted(() => ({ pushWithoutContent: false })); +vi.mock('@/lib/device-policy', async (original) => ({ + ...await original<typeof import('@/lib/device-policy')>(), + devicesForAccount: () => ({ pushWithoutContent: policy.pushWithoutContent }), +})); + +const MIN = 60_000; +const ACCOUNT = 'acc'; +const START = Date.UTC(2026, 10, 10, 9); +const FIRE = START - 15 * MIN; +const ALERT = { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } }; +const FOREIGN_LINK = { virtualLocations: { v: { '@type': 'VirtualLocation', uri: 'https://calls.example.org/room' } } }; + +function event(partial: Record<string, unknown> = {}) { + return { id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', timeZone: 'Europe/Berlin', duration: 'PT30M', alerts: { a: ALERT }, ...partial }; +} + +let store: InProcessStore; +let server: FakeCalendarJmap; +let notifyResult: DesktopOsNotifyResult; +const notify = vi.fn(async (_notification: DesktopOsNotification) => notifyResult); +const openExternal = vi.fn(); + +function desktop() { + window.bulwarkDesktop = { version: 1, platform: 'win32', windows: { focus: vi.fn() }, shell: { openExternal }, os: { notify } } as unknown as BulwarkDesktopBridge; +} + +function setVisibility(state: 'visible' | 'hidden') { + Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => state }); +} + +function Toasts() { + const toasts = useToastStore((s) => s.toasts); + const removeToast = useToastStore((s) => s.removeToast); + return <ToastContainer toasts={toasts} onClose={removeToast} />; +} + +async function advance(ms: number) { + await act(async () => { + await vi.advanceTimersByTimeAsync(ms); + }); +} + +async function syncedWith(...events: Record<string, unknown>[]) { + for (const partial of events) server.addEvent(partial); + await store.sync(ACCOUNT); +} + +const toastTitles = () => useToastStore.getState().toasts.map((toast) => toast.title); + +/** The login fingerprint is real crypto, in real time. Fake time must not run ahead of it. */ +async function untilToast() { + for (let tries = 0; tries < 500 && toastTitles().length === 0; tries += 1) { + await act(async () => { + await new Promise((resolve) => setImmediate(resolve)); + }); + } +} + +/** Two alerts due with the app closed. Leaves the hook unmounted and the clock moved on. */ +async function missedTwo(...extra: Record<string, unknown>[]) { + await syncedWith(event(extra[0] ?? {}), event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + const before = renderHook(() => useStoreReminders()); + await advance(0); + before.unmount(); + vi.setSystemTime(FIRE + 3 * 60 * MIN); +} + +beforeEach(() => { + vi.useFakeTimers({ now: FIRE - 30 * MIN, toFake: ['Date', 'setTimeout', 'clearTimeout', 'setInterval', 'clearInterval'] }); + vi.clearAllMocks(); + clearAllHooks(); + localStorage.clear(); + setAppLockCheck(null); + setVisibility('visible'); + policy.pushWithoutContent = false; + notifyResult = { shown: true, playSound: false }; + useToastStore.setState({ toasts: [] }); + useReminderSource.setState({ driven: {} }); + useMissedReminders.getState().close(); + useCalendarNotificationStore.getState().clearAll(); + useOfflineStore.setState({ enabled: [ACCOUNT] }); + useAuthStore.setState({ isAuthenticated: true, client: null, activeAccountId: ACCOUNT }); + useCalendarStore.setState({ events: [], calendars: [] }); + usePolicyStore.setState({ loaded: true, policy: { ...usePolicyStore.getState().policy, features: { ...usePolicyStore.getState().policy.features, calendarEnabled: true } } }); + useAccountStore.setState({ accounts: [{ id: ACCOUNT, cookieSlot: 1, serverUrl: 'https://one.example', username: 'a@example.org' }] as never }); + useEmailStore.setState({ isPushConnected: true }); + useSettingsStore.setState({ + calendarNotificationsEnabled: true, calendarNotificationSound: true, enableCalendarTasks: true, + doNotDisturb: false, visualAlerts: false, timeZone: 'Europe/Berlin', + }); + server = new FakeCalendarJmap('1.0'); + store = new InProcessStore(server, CALENDAR_SESSION); + setStoreBackend(store); +}); + +afterEach(() => { + setStoreBackend(null); + window.bulwarkDesktop = undefined; + setAppLockCheck(null); + vi.unstubAllGlobals(); + vi.useRealTimers(); + Reflect.deleteProperty(navigator, 'serviceWorker'); +}); + +function grantNotifications() { + const showNotification = vi.fn(async (_title: string, _options: NotificationOptions) => {}); + vi.stubGlobal('Notification', Object.assign(vi.fn(), { permission: 'granted' })); + Object.defineProperty(navigator, 'serviceWorker', { + configurable: true, + value: { getRegistration: async () => ({ showNotification, getNotifications: async () => [] }) }, + }); + return showNotification; +} + +describe('Join', () => { + beforeEach(desktop); + + it('says the host of a link to a service nobody knows', async () => { + await syncedWith(event(FOREIGN_LINK)); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + const join = notify.mock.calls[0][0].actions!.find((action) => action.id === 'join')!; + expect(join.label).toBe('join_host'); + }); + + it('asks the link check, and a stopped link opens nothing and leaves the reminder standing', async () => { + await syncedWith(event(FOREIGN_LINK)); + notifyResult = { shown: false, reason: 'focused', playSound: false }; + uiHooks.onBeforeExternalLink.register('t', () => false); + render(<Toasts />); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + await untilToast(); + const dismiss = vi.spyOn(store, 'area'); + fireEvent.click(screen.getByText('join_host')); + await advance(100); + expect(openExternal).not.toHaveBeenCalled(); + expect(dismiss.mock.calls.filter(([, name]) => name === 'reminders.dismiss')).toEqual([]); + }); + + it('goes out through the app when the link check lets it', async () => { + await syncedWith(event(FOREIGN_LINK)); + notifyResult = { shown: false, reason: 'focused', playSound: false }; + render(<Toasts />); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + await untilToast(); + const area = vi.spyOn(store, 'area'); + fireEvent.click(screen.getByText('join_host')); + await advance(100); + expect(openExternal).toHaveBeenCalledWith('https://calls.example.org/room'); + expect(area.mock.calls.filter(([, name]) => name === 'reminders.dismiss')).toHaveLength(1); + }); + + it('names each Join in the summary for a screen reader', async () => { + await missedTwo(FOREIGN_LINK); + notifyResult = { shown: false, reason: 'focused', playSound: false }; + render(<><Toasts /><MissedRemindersDialog /></>); + renderHook(() => useStoreReminders()); + await advance(20_000); + await untilToast(); + fireEvent.click(screen.getByText('missed_show')); + await advance(0); + expect(screen.getByText('join_host').getAttribute('aria-label')).toBe('join_named'); + }); +}); + +describe('with pushWithoutContent', () => { + it('keeps the title off a browser system notification, on the store path', async () => { + policy.pushWithoutContent = true; + const shown = grantNotifications(); + setVisibility('hidden'); + await syncedWith(event()); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() + 3000); + expect(shown).toHaveBeenCalledTimes(1); + expect(shown.mock.calls[0][0]).toBe('generic_title'); + expect(shown.mock.calls[0][1].body).toBe(''); + expect(toastTitles()).toEqual(['Standup']); + }); + + it('keeps the titles off the summary as well', async () => { + policy.pushWithoutContent = true; + await missedTwo(); + const shown = grantNotifications(); + setVisibility('hidden'); + renderHook(() => useStoreReminders()); + await advance(20_000 + 3000); + expect(shown).toHaveBeenCalledTimes(1); + expect(JSON.stringify(shown.mock.calls[0])).not.toContain('Standup'); + }); + + it('keeps it off on the path without a store', async () => { + policy.pushWithoutContent = true; + useOfflineStore.setState({ enabled: [] }); + const shown = grantNotifications(); + setVisibility('hidden'); + useCalendarStore.setState({ + events: [{ id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', utcStart: new Date(START).toISOString(), duration: 'PT30M', calendarIds: { c: true }, useDefaultAlerts: false, alerts: { a: { '@type': 'Alert', action: 'display', trigger: { '@type': 'AbsoluteTrigger', when: new Date(FIRE).toISOString() } } } }] as never, + }); + renderHook(() => useCalendarAlerts()); + await advance(FIRE - Date.now() + 3000); + expect(shown).toHaveBeenCalledTimes(1); + expect(shown.mock.calls[0][0]).toBe('alert_title'); + expect(shown.mock.calls[0][1].body).toBe(''); + }); +}); + +describe('when the OS refuses or fails', () => { + beforeEach(desktop); + + it('a rejected notify keeps a reminder for the summary', async () => { + await syncedWith(event()); + notify.mockRejectedValueOnce(new Error('main is gone')); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + await advance(5 * MIN); + expect(notify.mock.calls.at(-1)![0].id).toMatch(/^reminder-missed:/); + }); + + it('a failed toast keeps a reminder for the summary', async () => { + await syncedWith(event()); + notifyResult = { shown: false, reason: 'failed', playSound: false }; + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + notifyResult = { shown: true, playSound: false }; + await advance(5 * MIN); + expect(notify.mock.calls.at(-1)![0].id).toMatch(/^reminder-missed:/); + expect(notify.mock.calls.at(-1)![0].body).toBe('Standup'); + }); + + it('a rejected notify puts a summary straight back', async () => { + await missedTwo(); + notify.mockRejectedValueOnce(new Error('main is gone')); + renderHook(() => useStoreReminders()); + await advance(20_000); + expect(notify).toHaveBeenCalledTimes(1); + await advance(5 * MIN); + expect(notify).toHaveBeenCalledTimes(2); + }); +}); + +describe('a summary in the app', () => { + beforeEach(desktop); + + it('comes back after a reload that lost the toast', async () => { + await missedTwo(); + notifyResult = { shown: false, reason: 'focused', playSound: false }; + const page = renderHook(() => useStoreReminders()); + await advance(20_000); + await untilToast(); + expect(toastTitles()).toEqual(['missed_title']); + + // A reload: the toast and the page are gone, nobody dismissed anything. + page.unmount(); + useToastStore.setState({ toasts: [] }); + renderHook(() => useStoreReminders()); + await advance(10 * MIN); + expect(toastTitles()).toEqual(['missed_title']); + }); + + it('stays one toast for as long as it is on screen', async () => { + await missedTwo(); + notifyResult = { shown: false, reason: 'focused', playSound: false }; + renderHook(() => useStoreReminders()); + await advance(20_000); + await untilToast(); + await advance(30 * MIN); + expect(toastTitles()).toEqual(['missed_title']); + }); + + it('does not come back after it was closed', async () => { + await missedTwo(); + notifyResult = { shown: false, reason: 'focused', playSound: false }; + render(<Toasts />); + const page = renderHook(() => useStoreReminders()); + await advance(20_000); + await untilToast(); + act(() => useToastStore.getState().toasts[0].onDismiss!()); + useToastStore.setState({ toasts: [] }); + await advance(30 * MIN); + page.unmount(); + renderHook(() => useStoreReminders()); + await advance(30 * MIN); + expect(toastTitles()).toEqual([]); + }); + + it('leaves out what the path without a store already rang', async () => { + await missedTwo(); + claimNow(claimKey(ACCOUNT, 'uid-1', 'a', FIRE), FIRE); + renderHook(() => useStoreReminders()); + await advance(20_000); + expect(notify.mock.calls[0][0].body).toBe('Review'); + }); + + it('says nothing at all when that was all of it', async () => { + await missedTwo(); + claimNow(claimKey(ACCOUNT, 'uid-1', 'a', FIRE), FIRE); + claimNow(claimKey(ACCOUNT, 'uid-2', 'a', FIRE), FIRE); + renderHook(() => useStoreReminders()); + await advance(20_000 + 10 * MIN); + expect(notify).not.toHaveBeenCalled(); + expect(toastTitles()).toEqual([]); + }); +}); + +describe('the organisation has the calendar off', () => { + beforeEach(() => { + usePolicyStore.setState({ policy: { ...usePolicyStore.getState().policy, features: { ...usePolicyStore.getState().policy.features, calendarEnabled: false } } }); + }); + + it('the store path stays quiet, and nothing counts as missed later', async () => { + desktop(); + await syncedWith(event(), event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() + MIN); + expect(notify).not.toHaveBeenCalled(); + await advance(20 * MIN); + expect(notify).not.toHaveBeenCalled(); + expect(toastTitles()).toEqual([]); + }); + + it('the path without a store stays quiet', async () => { + useOfflineStore.setState({ enabled: [] }); + useCalendarStore.setState({ + events: [{ id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', utcStart: new Date(START).toISOString(), duration: 'PT30M', calendarIds: { c: true }, useDefaultAlerts: false, alerts: { a: { '@type': 'Alert', action: 'display', trigger: { '@type': 'AbsoluteTrigger', when: new Date(FIRE).toISOString() } } } }] as never, + }); + renderHook(() => useCalendarAlerts()); + await advance(FIRE - Date.now() + MIN); + expect(toastTitles()).toEqual([]); + }); +}); + +describe('the path without a store on the desktop', () => { + const plain = () => useCalendarStore.setState({ + events: [{ id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', utcStart: new Date(START).toISOString(), duration: 'PT30M', calendarIds: { c: true }, useDefaultAlerts: false, alerts: { a: { '@type': 'Alert', action: 'display', trigger: { '@type': 'AbsoluteTrigger', when: new Date(FIRE).toISOString() } } } }] as never, + }); + + beforeEach(() => { + desktop(); + useOfflineStore.setState({ enabled: [] }); + plain(); + }); + + it('stands down while locked: nothing fires, nothing is used up', async () => { + let locked = true; + setAppLockCheck(() => locked); + renderHook(() => useCalendarAlerts()); + await advance(FIRE - Date.now() + MIN); + expect(notify).not.toHaveBeenCalled(); + expect(toastTitles()).toEqual([]); + + locked = false; + await advance(MIN); + expect(toastTitles()).toEqual(['Standup']); + }); + + it('sends an id that names nothing when the title is hidden', async () => { + policy.pushWithoutContent = true; + renderHook(() => useCalendarAlerts()); + await advance(FIRE - Date.now()); + expect(JSON.stringify(notify.mock.calls[0][0])).not.toContain('e1'); + expect(JSON.stringify(notify.mock.calls[0][0])).not.toContain('Standup'); + }); + + it('plays no sound in quiet hours or a pause', async () => { + notifyResult = { shown: false, reason: 'quiet-hours', playSound: false }; + renderHook(() => useCalendarAlerts()); + await advance(FIRE - Date.now()); + expect(notify.mock.calls[0][0].sound).toBe(true); + expect(sounds.play).not.toHaveBeenCalled(); + }); + + it('plays the sound main asks for', async () => { + notifyResult = { shown: true, playSound: true }; + renderHook(() => useCalendarAlerts()); + await advance(FIRE - Date.now()); + expect(sounds.play).toHaveBeenCalledTimes(1); + }); +}); + +describe('the click on a browser notification', () => { + it('carries the address in the user language', async () => { + const shown = grantNotifications(); + setVisibility('hidden'); + await syncedWith(event()); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() + 3000); + expect((shown.mock.calls[0][1].data as { url: string }).url).toMatch(/\/calendar$/); + }); +}); + +describe('without a push channel', () => { + it('syncs every few minutes, so an event made elsewhere still rings', async () => { + useEmailStore.setState({ isPushConnected: false }); + await syncedWith(); + const sync = vi.spyOn(store, 'sync'); + renderHook(() => useStoreReminders()); + await advance(11 * MIN); + expect(sync.mock.calls.length).toBeGreaterThanOrEqual(2); + }); + + it('leaves it to the push channel when there is one', async () => { + useEmailStore.setState({ isPushConnected: true }); + await syncedWith(); + const sync = vi.spyOn(store, 'sync'); + renderHook(() => useStoreReminders()); + await advance(11 * MIN); + expect(sync).not.toHaveBeenCalled(); + }); +}); diff --git a/hooks/__tests__/use-store-reminders.test.tsx b/hooks/__tests__/use-store-reminders.test.tsx new file mode 100644 index 000000000..229b8ab80 --- /dev/null +++ b/hooks/__tests__/use-store-reminders.test.tsx @@ -0,0 +1,383 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { act, fireEvent, render, renderHook, screen } from '@testing-library/react'; +import { MissedRemindersDialog } from '@/components/calendar/missed-reminders-dialog'; +import { ToastContainer } from '@/components/ui/toast'; +import { useCalendarAlerts } from '../use-calendar-alerts'; +import { useStoreReminders } from '../use-store-reminders'; +import { useMissedReminders, useReminderSource } from '@/lib/calendar-reminders/state'; +import { setAppLockCheck } from '@/lib/desktop/app-lock-state'; +import type { BulwarkDesktopBridge, DesktopOsNotification, DesktopOsNotifyResult } from '@/lib/desktop/types'; +import { calendarHooks, clearAllHooks } from '@/lib/plugin-hooks'; +import { useOfflineStore } from '@/lib/offline/state'; +import { emitStoreEvent } from '@/lib/offline/store-events'; +import { CALENDAR_SESSION, FakeCalendarJmap } from '@/lib/store/__tests__/helpers/fake-calendar'; +import { InProcessStore } from '@/lib/store/__tests__/helpers/in-process-store'; +import { setStoreBackend } from '@/lib/store/client/api'; +import { useAuthStore } from '@/stores/auth-store'; +import { useCalendarNotificationStore } from '@/stores/calendar-notification-store'; +import { useCalendarStore } from '@/stores/calendar-store'; +import { useSettingsStore } from '@/stores/settings-store'; +import { useToastStore } from '@/stores/toast-store'; + +const sounds = vi.hoisted(() => ({ play: vi.fn() })); +vi.mock('@/lib/notification-sound', () => ({ playNotificationSound: sounds.play })); +vi.mock('@/lib/title-alert', () => ({ startTitleAlert: vi.fn() })); +// Real crypto takes real time, and fake time would run ahead of it. +vi.mock('@/lib/pwa-notify/login-fingerprint', () => ({ loginFingerprint: async () => 'fingerprint' })); +vi.mock('@/lib/offline/offline-mode', () => ({ offlineActive: () => true })); +const popout = vi.hoisted(() => ({ value: false })); +vi.mock('@/lib/popout/window-role', async (original) => ({ + ...await original<typeof import('@/lib/popout/window-role')>(), + isPopoutWindow: () => popout.value, +})); + +const MIN = 60_000; +const ACCOUNT = 'acc'; +const START = Date.UTC(2026, 10, 10, 9); +const FIRE = START - 15 * MIN; +const ALERT = { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } }; +const LINK = { virtualLocations: { v: { '@type': 'VirtualLocation', uri: 'https://meet.jit.si/standup' } } }; + +function event(partial: Record<string, unknown> = {}) { + return { id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', timeZone: 'Europe/Berlin', duration: 'PT30M', alerts: { a: ALERT }, ...partial }; +} + +let store: InProcessStore; +let server: FakeCalendarJmap; +let notifyResult: DesktopOsNotifyResult; +const notify = vi.fn(async (_notification: DesktopOsNotification) => notifyResult); +const openExternal = vi.fn(); + +function desktop() { + window.bulwarkDesktop = { version: 1, platform: 'win32', windows: { focus: vi.fn() }, shell: { openExternal }, os: { notify } } as unknown as BulwarkDesktopBridge; +} + +function setVisibility(state: 'visible' | 'hidden') { + Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => state }); +} + +function Toasts() { + const toasts = useToastStore((s) => s.toasts); + const removeToast = useToastStore((s) => s.removeToast); + return <ToastContainer toasts={toasts} onClose={removeToast} />; +} + +async function advance(ms: number) { + await act(async () => { + await vi.advanceTimersByTimeAsync(ms); + }); +} + +async function syncedWith(...events: Record<string, unknown>[]) { + for (const partial of events) server.addEvent(partial); + await store.sync(ACCOUNT); +} + +const toastTitles = () => useToastStore.getState().toasts.map((toast) => toast.title); + +beforeEach(() => { + vi.useFakeTimers({ now: FIRE - 30 * MIN, toFake: ['Date', 'setTimeout', 'clearTimeout', 'setInterval', 'clearInterval'] }); + vi.clearAllMocks(); + popout.value = false; + clearAllHooks(); + localStorage.clear(); + setAppLockCheck(null); + setVisibility('visible'); + notifyResult = { shown: true, playSound: false }; + useToastStore.setState({ toasts: [] }); + useReminderSource.setState({ driven: {} }); + useMissedReminders.getState().close(); + useCalendarNotificationStore.getState().clearAll(); + useOfflineStore.setState({ enabled: [ACCOUNT] }); + useAuthStore.setState({ isAuthenticated: true, client: null, activeAccountId: ACCOUNT }); + useCalendarStore.setState({ events: [], calendars: [] }); + useSettingsStore.setState({ + calendarNotificationsEnabled: true, calendarNotificationSound: true, enableCalendarTasks: true, + doNotDisturb: false, visualAlerts: false, timeZone: 'Europe/Berlin', + }); + server = new FakeCalendarJmap('1.0'); + store = new InProcessStore(server, CALENDAR_SESSION); + setStoreBackend(store); +}); + +afterEach(() => { + setStoreBackend(null); + window.bulwarkDesktop = undefined; + setAppLockCheck(null); + vi.unstubAllGlobals(); + vi.useRealTimers(); +}); + +describe('in the desktop app', () => { + beforeEach(desktop); + + it('fires a native notification with the window hidden, at the time, with the network gone', async () => { + await syncedWith(event(LINK)); + await store.setOnline(false); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() - 1000); + expect(notify).not.toHaveBeenCalled(); + await advance(1000); + expect(notify).toHaveBeenCalledTimes(1); + const sent = notify.mock.calls[0][0]; + expect(sent.title).toBe('Standup'); + expect(sent.actions!.map((action) => action.id)).toEqual(['join', 'open', 'snooze-5', 'snooze-10', 'snooze-15']); + expect(toastTitles()).toEqual([]); + }); + + it('shows no Join for an event without a link', async () => { + await syncedWith(event()); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + expect(notify.mock.calls[0][0].actions!.map((action) => action.id)).not.toContain('join'); + }); + + it('plays the sound main asks for, and asks for none in Do not disturb', async () => { + await syncedWith(event()); + notifyResult = { shown: true, playSound: true }; + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + expect(notify.mock.calls[0][0].sound).toBe(true); + expect(sounds.play).toHaveBeenCalledTimes(1); + + useSettingsStore.setState({ doNotDisturb: true }); + await syncedWith(event({ id: 'e2', uid: 'uid-2', start: '2026-11-10T10:01:00' })); + emitStoreEvent({ type: 'changed', account: ACCOUNT, collections: ['CalendarEvent'] }); + await advance(MIN); + expect(notify.mock.calls[1][0].sound).toBe(false); + }); + + it('shows it in the app when the window is in front, with the same choices', async () => { + await syncedWith(event(LINK)); + notifyResult = { shown: false, reason: 'focused', playSound: true }; + render(<Toasts />); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + expect(toastTitles()).toEqual(['Standup']); + expect(sounds.play).toHaveBeenCalledTimes(1); + expect(screen.getAllByRole('button').map((button) => button.textContent).filter(Boolean)).toEqual(['snooze', 'snooze', 'snooze', 'join', 'open']); + fireEvent.click(screen.getByText('join')); + await advance(0); + expect(openExternal).toHaveBeenCalledWith('https://meet.jit.si/standup'); + }); + + it('snoozing from the in-app toast brings it back, and closing it does not', async () => { + await syncedWith(event()); + notifyResult = { shown: false, reason: 'focused', playSound: false }; + render(<Toasts />); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + fireEvent.click(screen.getAllByText('snooze')[0]); + await advance(5 * MIN); + expect(notify).toHaveBeenCalledTimes(2); + + await advance(1000); + const again = useToastStore.getState().toasts.at(-1)!; + act(() => again.onDismiss!()); + await advance(60 * MIN); + expect(notify).toHaveBeenCalledTimes(2); + }); + + it('holds what fires while paused or in quiet hours for the summary afterwards', async () => { + await syncedWith(event()); + notifyResult = { shown: false, reason: 'quiet-hours', playSound: false }; + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + expect(notify).toHaveBeenCalledTimes(1); + expect(toastTitles()).toEqual([]); + + // Still quiet: the summary is tried and put back. + await advance(5 * MIN); + const tried = notify.mock.calls.length; + expect(notify.mock.calls.at(-1)![0].id).toMatch(/^reminder-missed:/); + + notifyResult = { shown: true, playSound: false }; + await advance(5 * MIN); + expect(notify.mock.calls.length).toBe(tried + 1); + expect(notify.mock.calls.at(-1)![0].body).toBe('Standup'); + + await advance(30 * MIN); + expect(notify.mock.calls.length).toBe(tried + 1); + }); + + it('says nothing of the event while locked, and tells afterwards', async () => { + await syncedWith(event()); + let locked = true; + setAppLockCheck(() => locked); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + expect(notify).toHaveBeenCalledTimes(1); + expect(JSON.stringify(notify.mock.calls[0][0])).not.toContain('Standup'); + expect(notify.mock.calls[0][0].actions).toBeUndefined(); + expect(toastTitles()).toEqual([]); + + await advance(10 * MIN); + expect(notify).toHaveBeenCalledTimes(1); + + locked = false; + await advance(5 * MIN); + expect(notify).toHaveBeenCalledTimes(2); + expect(notify.mock.calls[1][0].body).toBe('Standup'); + }); + + it('summarises what was missed once, with a native notification, across a restart', async () => { + await syncedWith(event(), event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + const before = renderHook(() => useStoreReminders()); + await advance(0); + before.unmount(); + vi.setSystemTime(FIRE + 3 * 60 * MIN); + + const after = renderHook(() => useStoreReminders()); + await advance(20_000); + expect(notify).toHaveBeenCalledTimes(1); + expect(notify.mock.calls[0][0]).toMatchObject({ title: 'missed_title', body: 'Standup, Review' }); + after.unmount(); + + renderHook(() => useStoreReminders()); + await advance(60 * MIN); + expect(notify).toHaveBeenCalledTimes(1); + }); + + it('summarises in the app when the window is in front, and the dialog lists them', async () => { + await syncedWith(event(LINK), event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + notifyResult = { shown: false, reason: 'focused', playSound: false }; + const before = renderHook(() => useStoreReminders()); + await advance(0); + before.unmount(); + vi.setSystemTime(FIRE + 3 * 60 * MIN); + render(<><Toasts /><MissedRemindersDialog /></>); + renderHook(() => useStoreReminders()); + await advance(20_000); + expect(toastTitles()).toEqual(['missed_title']); + fireEvent.click(screen.getByText('missed_show')); + await advance(0); + const list = screen.getByTestId('missed-reminders'); + expect(list.textContent).toContain('Standup'); + expect(list.textContent).toContain('Review'); + expect(screen.getAllByText('join')).toHaveLength(1); + fireEvent.click(screen.getByText('done')); + await advance(0); + expect(screen.queryByTestId('missed-reminders')).toBeNull(); + }); + + it('tells plugins, and lets one take the reminder over', async () => { + await syncedWith(event()); + const fired = vi.fn(); + calendarHooks.onCalendarAlert.register('t', fired); + calendarHooks.onBeforeCalendarAlert.register('t', () => false); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + expect(fired).toHaveBeenCalledWith(expect.objectContaining({ id: 'a', eventId: 'e1', eventTitle: 'Standup' })); + expect(notify).not.toHaveBeenCalled(); + }); + + function calendarStoreHas(uid: string, title: string) { + useCalendarStore.setState({ + events: [{ id: 'e1', uid, title, start: '2026-11-10T10:00:00', utcStart: new Date(START).toISOString(), duration: 'PT30M', calendarIds: { c: true }, useDefaultAlerts: false, alerts: { a: { '@type': 'Alert', action: 'display', trigger: { '@type': 'AbsoluteTrigger', when: new Date(FIRE).toISOString() } } } }] as never, + }); + } + + it('makes the old path stand down once the store has this account', async () => { + await syncedWith(event()); + // Not the same event as far as the claim can tell: only standing down keeps it quiet. + calendarStoreHas('another-uid', 'Old path'); + renderHook(() => { + useCalendarAlerts(); + useStoreReminders(); + }); + await advance(FIRE - Date.now() + 2 * MIN); + expect(notify).toHaveBeenCalledTimes(1); + expect(toastTitles()).toEqual([]); + }); + + it('lets the two paths tell each other what fired, for the moment the store takes over', async () => { + await syncedWith(event()); + calendarStoreHas('uid-1', 'Standup'); + const { claimKey, claimNow } = await import('@/lib/calendar-reminders/claims'); + // The old path got there just before the store was ready. + expect(claimNow(claimKey(ACCOUNT, 'uid-1', 'a', FIRE), FIRE)).toBe(true); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() + 2 * MIN); + expect(notify).not.toHaveBeenCalled(); + }); +}); + +describe('in a browser', () => { + function grantNotifications(showNotification = vi.fn(async () => {})) { + vi.stubGlobal('Notification', Object.assign(vi.fn(), { permission: 'granted' })); + Object.defineProperty(navigator, 'serviceWorker', { + configurable: true, + value: { getRegistration: async () => ({ showNotification, getNotifications: async () => [] }) }, + }); + return showNotification; + } + + afterEach(() => { + Reflect.deleteProperty(navigator, 'serviceWorker'); + }); + + it('keeps the in-app toast, without desktop buttons', async () => { + await syncedWith(event(LINK)); + render(<Toasts />); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + const toast = useToastStore.getState().toasts[0]; + expect(toast.title).toBe('Standup'); + expect(toast.action).toBeUndefined(); + expect(toast.extraActions).toBeUndefined(); + expect(sounds.play).toHaveBeenCalledTimes(1); + }); + + it('adds a system notification only where permission is granted and the tab is out of view', async () => { + await syncedWith(event()); + const shown = grantNotifications(); + setVisibility('hidden'); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() + 3000); + expect(toastTitles()).toEqual(['Standup']); + expect(shown).toHaveBeenCalledTimes(1); + expect(shown).toHaveBeenCalledWith('Standup', expect.objectContaining({ data: expect.objectContaining({ kind: 'calendar-reminder' }), silent: false })); + }); + + it('asks for no permission and shows none when it was not granted', async () => { + await syncedWith(event()); + const request = vi.fn(); + vi.stubGlobal('Notification', Object.assign(vi.fn(), { permission: 'default', requestPermission: request })); + setVisibility('hidden'); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() + 3000); + expect(toastTitles()).toEqual(['Standup']); + expect(request).not.toHaveBeenCalled(); + }); + + it('fires in one of two tabs', async () => { + await syncedWith(event()); + renderHook(() => useStoreReminders()); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() + MIN); + expect(toastTitles()).toEqual(['Standup']); + }); + + it('closes the toast in this window when another acknowledges the reminder', async () => { + await syncedWith(event()); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now()); + expect(toastTitles()).toEqual(['Standup']); + const key = `${Object.keys(CALENDAR_SESSION.accounts)[0]}:uid-1:a:${FIRE}`; + const other = new BroadcastChannel('bulwark-calendar-reminders'); + other.postMessage({ kind: 'acknowledged', keys: [key] }); + other.close(); + vi.useRealTimers(); + await vi.waitFor(() => expect(toastTitles()).toEqual([])); + }); + + it('gives nothing to a pop-out', async () => { + popout.value = true; + await syncedWith(event()); + const area = vi.spyOn(store, 'area'); + renderHook(() => useStoreReminders()); + await advance(FIRE - Date.now() + MIN); + expect(area).not.toHaveBeenCalled(); + expect(toastTitles()).toEqual([]); + }); +}); diff --git a/hooks/use-app-badge.ts b/hooks/use-app-badge.ts index 927a869b5..d8a33b320 100644 --- a/hooks/use-app-badge.ts +++ b/hooks/use-app-badge.ts @@ -2,6 +2,8 @@ import { useEffect } from 'react'; import { debug } from '@/lib/debug'; +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { isPopoutWindow } from '@/lib/popout/window-role'; /** * Badges the *installed* PWA's icon — the shortcut Chrome/Edge pin next to @@ -35,6 +37,13 @@ export function useAppBadge(count: number, enabled = true): void { const effectiveCount = enabled ? count : 0; + // The desktop app's own icon. A pop-out has its own account and no say in it. + const desktopOs = getDesktopBridge()?.os; + if (desktopOs) { + if (!isPopoutWindow()) desktopOs.setBadge(effectiveCount); + return; + } + void (async () => { try { if (effectiveCount > 0) { diff --git a/hooks/use-attachment-drag.ts b/hooks/use-attachment-drag.ts index 83cdce627..6136c4453 100644 --- a/hooks/use-attachment-drag.ts +++ b/hooks/use-attachment-drag.ts @@ -1,6 +1,7 @@ "use client"; import { useCallback, useEffect, useRef, DragEvent } from "react"; +import { canDragNativeFiles, copyFilesToClipboard, startNativeFileDrag } from "@/lib/desktop/file-drag"; // Chromium ships the `DownloadURL` DataTransfer entry, which the OS reads on // drop to materialize a real file. Firefox and Safari ignore it, so we only @@ -33,6 +34,8 @@ export interface AttachmentDragSource { name: string; type: string; getBlobUrl: () => Promise<string | null>; + /** The bytes themselves, for the desktop app's native drag. */ + getBlob?: () => Promise<Blob | null>; } export interface UseAttachmentDragResult { @@ -40,6 +43,8 @@ export interface UseAttachmentDragResult { onPointerEnter: () => void; onDragStart: (e: DragEvent<HTMLDivElement>) => void; onDragEnd: (e: DragEvent<HTMLDivElement>) => void; + /** The desktop app: put the file on the clipboard, for pasting into Explorer or Finder. */ + onCopyAsFile?: () => Promise<boolean>; } const NOOP_HANDLERS: UseAttachmentDragResult = { @@ -56,6 +61,8 @@ export function useAttachmentDrag( const urlRef = useRef<string | null>(null); const ownedRef = useRef<boolean>(false); const inFlightRef = useRef<Promise<string | null> | null>(null); + const blobRef = useRef<Blob | null>(null); + const nativeDrag = canDragNativeFiles() && !!source.getBlob; useEffect(() => { return () => { @@ -70,6 +77,19 @@ export function useAttachmentDrag( const prefetch = useCallback(() => { if (!enabled) return; + if (nativeDrag) { + if (blobRef.current || inFlightRef.current) return; + inFlightRef.current = source.getBlob!() + .then((blob) => { + blobRef.current = blob; + return null; + }) + .catch(() => null) + .finally(() => { + inFlightRef.current = null; + }); + return; + } if (urlRef.current || inFlightRef.current) return; inFlightRef.current = source .getBlobUrl() @@ -87,7 +107,7 @@ export function useAttachmentDrag( .finally(() => { inFlightRef.current = null; }); - }, [enabled, source]); + }, [enabled, source, nativeDrag]); const handleDragStart = useCallback( (e: DragEvent<HTMLDivElement>) => { @@ -95,6 +115,15 @@ export function useAttachmentDrag( const name = source.name || "download"; const type = source.type || "application/octet-stream"; + // In the desktop app the OS's own drag, with the real file on disk first. The bytes + // aren't here yet: fetch them for the next try, as below. + if (nativeDrag) { + e.preventDefault(); + if (blobRef.current) void startNativeFileDrag([{ name, blob: blobRef.current }]); + else prefetch(); + return; + } + if (!url) { // Blob isn't materialized yet. Kick off the fetch so the next attempt // works, but cancel this drag so the user doesn't get a silent failure @@ -111,7 +140,7 @@ export function useAttachmentDrag( e.dataTransfer.setData("DownloadURL", `${type}:${name}:${url}`); e.dataTransfer.effectAllowed = "copyMove"; }, - [source.name, source.type, prefetch], + [source.name, source.type, prefetch, nativeDrag], ); const handleDragEnd = useCallback(() => { @@ -125,6 +154,11 @@ export function useAttachmentDrag( } }, []); + const copyAsFile = useCallback(async () => { + const blob = blobRef.current ?? await source.getBlob?.(); + return blob ? copyFilesToClipboard([{ name: source.name || "download", blob }]) : false; + }, [source]); + if (!enabled) return NOOP_HANDLERS; return { @@ -132,5 +166,6 @@ export function useAttachmentDrag( onPointerEnter: prefetch, onDragStart: handleDragStart, onDragEnd: handleDragEnd, + ...(nativeDrag ? { onCopyAsFile: copyAsFile } : {}), }; } diff --git a/hooks/use-calendar-alerts.ts b/hooks/use-calendar-alerts.ts index 8c65c12ee..60a4a38c1 100644 --- a/hooks/use-calendar-alerts.ts +++ b/hooks/use-calendar-alerts.ts @@ -2,19 +2,28 @@ import { useEffect, useRef, useCallback } from 'react'; import { useTranslations, useLocale } from 'next-intl'; -import { parseISO } from 'date-fns'; +import { format, parseISO } from 'date-fns'; import { isPopoutWindow } from '@/lib/popout/window-role'; import { useAuthStore } from '@/stores/auth-store'; import { useCalendarStore } from '@/stores/calendar-store'; +import { usePolicyStore } from '@/stores/policy-store'; import { useSettingsStore } from '@/stores/settings-store'; import { useTaskStore } from '@/stores/task-store'; import { useCalendarNotificationStore } from '@/stores/calendar-notification-store'; import { useToastStore } from '@/stores/toast-store'; import { getPendingAlerts, getPendingTaskAlerts, getNextAlertFireTime, buildAlertKey } from '@/lib/calendar-alerts'; +import { claimAlert, claimKey } from '@/lib/calendar-reminders/claims'; +import { useReminderSource } from '@/lib/calendar-reminders/state'; +import { showSystemReminder } from '@/lib/calendar-reminders/system-notification'; +import { notifyWithoutStore } from '@/lib/desktop/reminder-notifications'; +import { expandRecurringEvents } from '@/lib/recurrence-expansion'; import { playNotificationSound } from '@/lib/notification-sound'; import { lastingToastDuration } from '@/lib/toast-duration'; import { startTitleAlert } from '@/lib/title-alert'; import { getPathPrefix } from '@/lib/browser-navigation'; +import { isAppLocked } from '@/lib/desktop/app-lock-state'; +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { contentHiddenFor } from '@/lib/desktop/mail-notifications'; import type { CalendarEvent } from '@/lib/jmap/types'; import type { CalendarAlertView } from '@/lib/plugin-types'; import { calendarHooks } from '@/lib/plugin-hooks'; @@ -23,6 +32,8 @@ import { changesAnyType, subscribePushStateChanges } from '@/lib/push-events'; const CHECK_INTERVAL_MS = 60 * 1000; const PROACTIVE_FETCH_HOURS = 24; const PROACTIVE_THROTTLE_MS = CHECK_INTERVAL_MS * 5; +// Wall clocks: an occurrence's can be a day off the instant it's at. +const EXPAND_MARGIN_MS = 27 * 60 * 60 * 1000; // Longest single wait for the next reminder; the periodic check covers the rest. const MAX_WAKE_DELAY_MS = 6 * 60 * 60 * 1000; /** How long a reminder stays at the shortest "Notification duration". */ @@ -42,7 +53,7 @@ export function reminderToastDuration(): number { * Whether a reminder plays its sound. Do not disturb keeps reminders on * screen (they were asked for) but silent. */ -function reminderSoundOn(soundSetting: boolean): boolean { +export function reminderSoundOn(soundSetting: boolean): boolean { return soundSetting && !useSettingsStore.getState().doNotDisturb; } @@ -51,7 +62,7 @@ function reminderSoundOn(soundSetting: boolean): boolean { * is in the background. Reminders were asked for, so Do not disturb keeps * this too. */ -function reminderTitleAlert(text: string): void { +export function reminderTitleAlert(text: string): void { if (useSettingsStore.getState().visualAlerts) startTitleAlert(text); } @@ -61,7 +72,7 @@ function reminderTitleAlert(text: string): void { * itself does. onCalendarAlert fires either way. With no plugin asked, the * reminder is shown at once. */ -function remind(view: CalendarAlertView, show: () => void): void { +export function remind(view: CalendarAlertView, show: () => void): void { void calendarHooks.onCalendarAlert.emit(view); if (calendarHooks.onBeforeCalendarAlert.size === 0) { show(); @@ -73,11 +84,14 @@ function remind(view: CalendarAlertView, show: () => void): void { } export function useCalendarAlerts() { - const { isAuthenticated: signedIn, client } = useAuthStore(); + const { isAuthenticated: signedIn, client, activeAccountId } = useAuthStore(); + // Reminders of an account with a local store come from there: useStoreReminders. + const fromStore = useReminderSource((s) => !!activeAccountId && !!s.driven[activeAccountId]); + const calendarAllowed = usePolicyStore((s) => s.isFeatureEnabled('calendarEnabled')); // The main window rings; a pop-out would ring the same alert again. - const isAuthenticated = signedIn && !isPopoutWindow(); + const isAuthenticated = signedIn && !isPopoutWindow() && !fromStore && calendarAllowed; const { events, calendars, supportsCalendar } = useCalendarStore(); - const { calendarNotificationsEnabled, calendarNotificationSound, enableCalendarTasks, notificationSoundChoice } = useSettingsStore(); + const { calendarNotificationsEnabled, calendarNotificationSound, enableCalendarTasks } = useSettingsStore(); const { tasks: storeTasks } = useTaskStore(); const { acknowledgedAlerts, acknowledgeAlert, cleanupStaleAlerts } = useCalendarNotificationStore(); const addToast = useToastStore((s) => s.addToast); @@ -91,12 +105,35 @@ export function useCalendarAlerts() { const wakeTimerRef = useRef<ReturnType<typeof setTimeout> | null>(null); const checkAlertsRef = useRef<() => void>(() => {}); + // Beside the toast: the desktop app's native notification, a browser's system one. + const tellOutsideTheWindow = useCallback((key: string, fireTimeMs: number, title: string, body: string, wantsSound: boolean) => { + const sound = reminderSoundOn(wantsSound); + const { notificationSoundChoice: choice } = useSettingsStore.getState(); + if (getDesktopBridge()?.os) { + // Main knows about pauses and quiet hours, and says whether a sound is in order. + void notifyWithoutStore({ key, fireTimeMs, title, body, sound }, { generic: t('alert_title') }, activeAccountId).then((result) => { + if (result?.playSound) playNotificationSound(choice); + }); + return; + } + if (sound) playNotificationSound(choice); + void showSystemReminder({ + key, + title, + body, + silent: !sound, + hidden: contentHiddenFor(activeAccountId) ? { title: t('alert_title') } : undefined, + }, `${getPathPrefix(locale)}/${locale}/calendar`); + }, [t, locale, activeAccountId]); + const checkAlerts = useCallback(() => { if (wakeTimerRef.current) { clearTimeout(wakeTimerRef.current); wakeTimerRef.current = null; } if (!calendarNotificationsEnabled || !isAuthenticated) return; + // Nothing may show now, so nothing is used up: the periodic check comes back to it. + if (isAppLocked()) return; try { const now = Date.now(); @@ -127,27 +164,29 @@ export function useCalendarAlerts() { ? `${timeLabel} · ${alert.calendarName}` : timeLabel; - remind({ - id: alert.alertId, - eventId: alert.eventId, - eventTitle: alert.event.title || '', - triggerTime: new Date(alert.fireTimeMs).toISOString(), - }, () => { - if (reminderSoundOn(calendarNotificationSound)) { - playNotificationSound(notificationSoundChoice); - } - reminderTitleAlert(t('title_alert', { title: alert.event.title || t('alert_title') })); - addToast({ - type: 'info', - title: alert.event.title || t('alert_title'), - message, - duration: reminderToastDuration(), - onClick: () => { - window.location.href = `${getPathPrefix(locale)}/${locale}/calendar`; - }, - onDismiss: () => { - void calendarHooks.onCalendarAlertAcknowledge.emit({ alertId: alert.alertId, eventId: alert.eventId }); - }, + const uid = alert.event.uid || alert.event.originalId || alert.eventId; + claimAlert(claimKey(activeAccountId, uid, alert.alertId, alert.fireTimeMs), alert.fireTimeMs, () => { + remind({ + id: alert.alertId, + eventId: alert.eventId, + eventTitle: alert.event.title || '', + triggerTime: new Date(alert.fireTimeMs).toISOString(), + }, () => { + const title = alert.event.title || t('alert_title'); + reminderTitleAlert(t('title_alert', { title })); + addToast({ + type: 'info', + title, + message, + duration: reminderToastDuration(), + onClick: () => { + window.location.href = `${getPathPrefix(locale)}/${locale}/calendar`; + }, + onDismiss: () => { + void calendarHooks.onCalendarAlertAcknowledge.emit({ alertId: alert.alertId, eventId: alert.eventId }); + }, + }); + tellOutsideTheWindow(key, alert.fireTimeMs, title, message, calendarNotificationSound); }); }); } @@ -166,27 +205,29 @@ export function useCalendarAlerts() { ? `${t('task_due')} · ${taskAlert.calendarName}` : t('task_due'); - remind({ - id: taskAlert.alertId, - taskId: taskAlert.taskId, - taskTitle: taskAlert.task.title || '', - triggerTime: new Date(taskAlert.fireTimeMs).toISOString(), - }, () => { - if (reminderSoundOn(calendarNotificationSound)) { - playNotificationSound(notificationSoundChoice); - } - reminderTitleAlert(t('title_alert', { title: taskAlert.task.title || t('alert_title') })); - addToast({ - type: 'info', - title: taskAlert.task.title || t('alert_title'), - message: taskMsg, - duration: reminderToastDuration(), - onClick: () => { - window.location.href = `${getPathPrefix(locale)}/${locale}/calendar`; - }, - onDismiss: () => { - void calendarHooks.onCalendarAlertAcknowledge.emit({ alertId: taskAlert.alertId, taskId: taskAlert.taskId }); - }, + const uid = taskAlert.task.uid || taskAlert.taskId; + claimAlert(claimKey(activeAccountId, uid, taskAlert.alertId, taskAlert.fireTimeMs), taskAlert.fireTimeMs, () => { + remind({ + id: taskAlert.alertId, + taskId: taskAlert.taskId, + taskTitle: taskAlert.task.title || '', + triggerTime: new Date(taskAlert.fireTimeMs).toISOString(), + }, () => { + const title = taskAlert.task.title || t('alert_title'); + reminderTitleAlert(t('title_alert', { title })); + addToast({ + type: 'info', + title, + message: taskMsg, + duration: reminderToastDuration(), + onClick: () => { + window.location.href = `${getPathPrefix(locale)}/${locale}/calendar`; + }, + onDismiss: () => { + void calendarHooks.onCalendarAlertAcknowledge.emit({ alertId: taskAlert.alertId, taskId: taskAlert.taskId }); + }, + }); + tellOutsideTheWindow(key, taskAlert.fireTimeMs, title, taskMsg, calendarNotificationSound); }); }); } @@ -195,9 +236,9 @@ export function useCalendarAlerts() { // Silently ignore alert evaluation errors } }, [ - calendarNotificationsEnabled, calendarNotificationSound, notificationSoundChoice, - isAuthenticated, events, calendars, acknowledgedAlerts, - acknowledgeAlert, addToast, t, locale, enableCalendarTasks, storeTasks, + calendarNotificationsEnabled, calendarNotificationSound, + isAuthenticated, activeAccountId, events, calendars, acknowledgedAlerts, + acknowledgeAlert, addToast, t, locale, enableCalendarTasks, storeTasks, tellOutsideTheWindow, ]); checkAlertsRef.current = checkAlerts; @@ -211,7 +252,10 @@ export function useCalendarAlerts() { const start = new Date(now - 10 * 60 * 1000).toISOString(); const end = new Date(now + PROACTIVE_FETCH_HOURS * 60 * 60 * 1000).toISOString(); const fetched = await client.queryCalendarEvents({ after: start, before: end }); - proactiveEventsRef.current = fetched; + // Without synthetic ids the server answers with a series' master, whose start can + // be years ago: only its occurrences have a fire time. Passes real occurrences through. + const stamp = (ms: number) => format(new Date(ms), "yyyy-MM-dd'T'HH:mm:ss"); + proactiveEventsRef.current = expandRecurringEvents(fetched, stamp(now - EXPAND_MARGIN_MS), stamp(now + PROACTIVE_FETCH_HOURS * 60 * 60 * 1000 + EXPAND_MARGIN_MS)); lastProactiveFetchRef.current = Date.now(); checkAlertsRef.current(); } catch { diff --git a/hooks/use-context-menu.ts b/hooks/use-context-menu.ts index dfdc02348..eb412b42d 100644 --- a/hooks/use-context-menu.ts +++ b/hooks/use-context-menu.ts @@ -2,6 +2,7 @@ import { useState, useCallback, useEffect, useRef } from "react"; import type { ContextMenuPosition } from "@/components/ui/context-menu"; +import { nativeMenuIsOpen } from "@/lib/desktop/native-menu"; interface ContextMenuState<T> { isOpen: boolean; @@ -134,12 +135,14 @@ export function useContextMenu<T>(): UseContextMenuReturn<T> { }; const handleClickOutside = (e: MouseEvent) => { + if (nativeMenuIsOpen()) return; if (menuRef.current && !menuRef.current.contains(e.target as Node)) { closeContextMenu(); } }; const handleScroll = (e: Event) => { + if (nativeMenuIsOpen()) return; if (menuRef.current && e.target instanceof Node && menuRef.current.contains(e.target)) { return; } @@ -150,6 +153,8 @@ export function useContextMenu<T>(): UseContextMenuReturn<T> { // A focused control in the menu may have opened a system dialog that // took the focus from the window, such as a color input's (#1366). if (menuRef.current?.contains(document.activeElement)) return; + // In the desktop app the menu is native: it closes itself, and says what was picked. + if (nativeMenuIsOpen()) return; closeContextMenu(); }; diff --git a/hooks/use-email-drag.ts b/hooks/use-email-drag.ts index 25450a031..6debff52c 100644 --- a/hooks/use-email-drag.ts +++ b/hooks/use-email-drag.ts @@ -9,6 +9,7 @@ import { useAuthStore } from "@/stores/auth-store"; import { useDragDropContext } from "@/contexts/drag-drop-context"; import { useUIStore } from "@/stores/ui-store"; import { isDragOutSupported } from "@/hooks/use-attachment-drag"; +import { canDragNativeFiles, forgetDragBlob, keepDragBlob, keptDragBlob, startNativeFileDrag } from "@/lib/desktop/file-drag"; import { canExport } from "@/lib/device-policy"; import { appUrl, buildMailPath } from "@/lib/deep-links"; import { @@ -103,7 +104,10 @@ function selectionKey(emails: RoutedEmail[], bundleOptions: EmailFilenameOptions function revokeLater(url: string): void { // Chromium may read the URL asynchronously after the drop completes. - setTimeout(() => URL.revokeObjectURL(url), 60_000); + setTimeout(() => { + URL.revokeObjectURL(url); + forgetDragBlob(url); + }, 60_000); } async function buildEmailZip(emails: RoutedEmail[]): Promise<string> { @@ -126,7 +130,7 @@ async function buildEmailZip(emails: RoutedEmail[]): Promise<string> { }), ); const zipBlob = await zip.generateAsync({ type: "blob", mimeType: "application/zip" }); - return URL.createObjectURL(zipBlob); + return keepDragBlob(URL.createObjectURL(zipBlob), zipBlob); } function prefetchEmailBundle( @@ -224,8 +228,11 @@ export function useEmailDrag({ email, sourceMailboxId, threadEmails }: UseEmailD if (previous?.url) revokeLater(previous.url); const entry: BundleEntry = { key: route.key, name: route.name, url: null, promise: null }; singleRef.current = entry; - entry.promise = route.client - .fetchBlobAsObjectUrl(target.blobId, route.name, "message/rfc822", route.accountId) + // The desktop app's native drag needs the bytes as well as the address. + const fetched = canDragNativeFiles() + ? route.client.fetchBlob(target.blobId, route.name, "message/rfc822", route.accountId).then((blob) => keepDragBlob(URL.createObjectURL(blob), blob)) + : route.client.fetchBlobAsObjectUrl(target.blobId, route.name, "message/rfc822", route.accountId); + entry.promise = fetched .then((url) => { if (url) { if (singleRef.current === entry && routeEmail(target, filenameOptions).key === entry.key) entry.url = url; @@ -295,6 +302,14 @@ export function useEmailDrag({ email, sourceMailboxId, threadEmails }: UseEmailD const url = singleRef.current?.key === route.key ? singleRef.current.url : null; if (url) { const name = emailExportFilename(emailsToDrag[0], filenameOptions); + // Desktop app, Alt held: the OS's own drag with the real file. A plain drag has + // to stay the page's, because it also moves the message to a folder. + const blob = e.altKey ? keptDragBlob(url) : undefined; + if (blob) { + e.preventDefault(); + void startNativeFileDrag([{ name, blob }]); + return; + } // `DownloadURL` format: <mime>:<filename>:<url>. Chromium expects // the filename raw - URL-encoding it ends up literally on disk // (e.g. `%20` instead of a space). The sanitiser already removed @@ -313,6 +328,12 @@ export function useEmailDrag({ email, sourceMailboxId, threadEmails }: UseEmailD const routed = emailsToDrag.map((em) => routeEmail(em, filenameOptions)); const ready = getReadyBundle(routed, bundleOptions); if (ready) { + const blob = e.altKey ? keptDragBlob(ready.url) : undefined; + if (blob) { + e.preventDefault(); + void startNativeFileDrag([{ name: ready.name, blob }]); + return; + } e.dataTransfer.setData( "DownloadURL", `application/zip:${ready.name}:${ready.url}`, diff --git a/hooks/use-new-mail-alerts.ts b/hooks/use-new-mail-alerts.ts index 0b118372c..b2fd6801f 100644 --- a/hooks/use-new-mail-alerts.ts +++ b/hooks/use-new-mail-alerts.ts @@ -8,6 +8,7 @@ import { playNotificationSound } from "@/lib/notification-sound"; import { announce } from "@/lib/announce"; import { startTitleAlert } from "@/lib/title-alert"; import { debug } from "@/lib/debug"; +import { desktopPlaysMailSound } from "@/lib/desktop/mail-notifications"; /** * Mail that arrives within this time is told about once ("3 new messages"), @@ -51,7 +52,8 @@ export function useNewMailAlerts(): void { const s = useSettingsStore.getState(); if (s.doNotDisturb) return; if (batchTimer === null) { - if (s.emailNotificationsEnabled && s.emailNotificationSound) { + // The desktop app sounds it with the notification, in Do Not Disturb not at all. + if (s.emailNotificationsEnabled && s.emailNotificationSound && !desktopPlaysMailSound()) { playNotificationSound(s.notificationSoundChoice); } batchTimer = setTimeout(flush, NEW_MAIL_BATCH_MS); diff --git a/hooks/use-policy-refresh.ts b/hooks/use-policy-refresh.ts index 3ae942946..f7115e422 100644 --- a/hooks/use-policy-refresh.ts +++ b/hooks/use-policy-refresh.ts @@ -1,6 +1,7 @@ 'use client'; import { useEffect } from 'react'; +import { isDesktopApp } from '@/lib/desktop/bridge'; import { usePolicyStore } from '@/stores/policy-store'; /** How often an open, visible tab fetches the policy again. */ @@ -13,7 +14,9 @@ let mounted = 0; let interval: ReturnType<typeof setInterval> | null = null; function refresh(force = false): void { - if (typeof document !== 'undefined' && document.visibilityState === 'hidden') return; + // A browser tab out of view waits until it's back. The desktop app in the tray is + // out of view for days and still has to hear about a wipe or a changed policy. + if (typeof document !== 'undefined' && document.visibilityState === 'hidden' && !isDesktopApp()) return; const now = Date.now(); if (!force && now - lastRefresh < FOCUS_THROTTLE_MS) return; const state = usePolicyStore.getState(); @@ -27,7 +30,7 @@ const onVisible = () => refresh(); /** * Fetches the policy again when the tab comes back into view and every 15 - * minutes while it is visible, so an announcement (or any other change the + * minutes while it is visible (in the desktop app, also while hidden), so an announcement (or any other change the * admin saves) reaches tabs that stay open. One timer for the page however * many components use it. */ diff --git a/hooks/use-store-reminders.ts b/hooks/use-store-reminders.ts new file mode 100644 index 000000000..3c5d0c437 --- /dev/null +++ b/hooks/use-store-reminders.ts @@ -0,0 +1,326 @@ +"use client"; + +import { useEffect, useRef } from 'react'; +import { useLocale, useTranslations } from 'next-intl'; +import { remind, reminderSoundOn, reminderTitleAlert, reminderToastDuration } from '@/hooks/use-calendar-alerts'; +import { getPathPrefix } from '@/lib/browser-navigation'; +import { onAcknowledged } from '@/lib/calendar-reminders/channel'; +import { claimKey, firedWithoutStore, noteStoreFired } from '@/lib/calendar-reminders/claims'; +import { createReminderRunner } from '@/lib/calendar-reminders/runner'; +import { reminderTimeZone, setReminderPoke, useMissedReminders, useReminderSource } from '@/lib/calendar-reminders/state'; +import { closeSystemReminders, showSystemReminder } from '@/lib/calendar-reminders/system-notification'; +import { isAppLocked } from '@/lib/desktop/app-lock-state'; +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { contentHiddenFor } from '@/lib/desktop/mail-notifications'; +import { + buildMissedNotification, + buildReminderNotification, + dismissReminders, + joinLabel, + joinMeeting, + missedBody, + SNOOZE_MINUTES, + snoozeReminder, + type ReminderLabels, +} from '@/lib/desktop/reminder-notifications'; +import { addWakeHandler } from '@/lib/desktop/system-events'; +import { playNotificationSound } from '@/lib/notification-sound'; +import { offlineActive } from '@/lib/offline/offline-mode'; +import { visibleAccounts, useOfflineStore } from '@/lib/offline/state'; +import { addStoreEventListener } from '@/lib/offline/store-events'; +import { calendarHooks } from '@/lib/plugin-hooks'; +import type { CalendarAlertView } from '@/lib/plugin-types'; +import { isPopoutWindow } from '@/lib/popout/window-role'; +import { getStore } from '@/lib/store/client/api'; +import type { MissedBatch, ReminderAlert } from '@/lib/store/reminders/ledger'; +import { useAuthStore } from '@/stores/auth-store'; +import { useEmailStore } from '@/stores/email-store'; +import { usePolicyStore } from '@/stores/policy-store'; +import { useSettingsStore } from '@/stores/settings-store'; +import { useToastStore } from '@/stores/toast-store'; + +/** Under the store's LEASE_MS, with room for a hidden tab's slow timers. */ +const LOAN_RENEW_MS = 60_000; + +function viewOf(alert: ReminderAlert): CalendarAlertView { + const triggerTime = new Date(alert.fireTimeMs).toISOString(); + return alert.kind === 'task' + ? { id: alert.alertId, taskId: alert.baseEventId, taskTitle: alert.title, triggerTime } + : { id: alert.alertId, eventId: alert.baseEventId, eventTitle: alert.title, triggerTime }; +} + +function acknowledgeView(alert: ReminderAlert) { + return alert.kind === 'task' + ? { alertId: alert.alertId, taskId: alert.baseEventId } + : { alertId: alert.alertId, eventId: alert.baseEventId }; +} + +/** + * Reminders from the local store: on time with no network, and in the desktop app with + * the window hidden. For accounts without a store useCalendarAlerts carries on as before. + */ +export function useStoreReminders(): void { + const signedIn = useAuthStore((s) => s.isAuthenticated); + const t = useTranslations('desktopReminders'); + const tAlert = useTranslations('calendar.notifications'); + const locale = useLocale(); + const addToast = useToastStore((s) => s.addToast); + const removeToast = useToastStore((s) => s.removeToast); + const enabledKey = useOfflineStore((s) => s.enabled.join('\n')); + + const labels: ReminderLabels = { + generic: t('generic_title'), + untitled: tAlert('alert_title'), + when: (alert) => { + const minutes = alert.startMs === null ? 0 : Math.round((alert.startMs - Date.now()) / 60_000); + const time = alert.kind === 'task' + ? tAlert('task_due') + : minutes <= 0 ? tAlert('alert_now') : tAlert('alert_in_minutes', { count: minutes }); + return alert.calendarName ? `${time} · ${alert.calendarName}` : time; + }, + snooze: (minutes) => t('snooze', { count: minutes }), + snoozeShort: (minutes) => t('snooze_short', { count: minutes }), + open: t('open'), + join: t('join'), + joinHost: (host) => t('join_host', { host }), + missedTitle: (count) => t('missed_title', { count }), + missedMore: (count) => t('missed_more', { count }), + }; + const labelsRef = useRef(labels); + labelsRef.current = labels; + const calendarUrl = `${getPathPrefix(locale)}/${locale}/calendar`; + const calendarUrlRef = useRef(calendarUrl); + calendarUrlRef.current = calendarUrl; + const runnerRef = useRef<ReturnType<typeof createReminderRunner> | null>(null); + + useEffect(() => { + if (!signedIn || isPopoutWindow()) return; + const toastsByKey = new Map<string, string>(); + const loans = new Set<ReturnType<typeof setInterval>>(); + + const inAppReminder = (account: string, alert: ReminderAlert) => { + const current = labelsRef.current; + const desktop = !!getDesktopBridge()?.os; + // Set when a button says what happens next, so closing the toast doesn't undo it. + let handled = false; + const snoozeAction = (minutes: number) => ({ + label: current.snooze(minutes), + onClick: () => { + handled = true; + void snoozeReminder(account, alert.key, minutes).catch(() => {}); + }, + }); + const [five, ten, fifteen] = SNOOZE_MINUTES.map(snoozeAction); + const id = addToast({ + type: 'info', + title: alert.title || current.untitled, + message: current.when(alert), + duration: reminderToastDuration(), + onClick: () => { + window.location.href = calendarUrlRef.current; + }, + onDismiss: () => { + toastsByKey.delete(alert.key); + void calendarHooks.onCalendarAlertAcknowledge.emit(acknowledgeView(alert)); + if (!handled) dismissReminders(account, [alert.key]); + }, + ...(desktop ? { + tertiaryAction: five, + secondaryAction: ten, + action: fifteen, + extraActions: [ + ...(alert.joinUrl ? [{ + label: joinLabel(alert, current), + onClick: () => { + handled = true; + // Nothing opened, say a plugin stopped it: the reminder stands. + void joinMeeting(alert.joinUrl!).then((opened) => { + if (opened) dismissReminders(account, [alert.key]); + }); + }, + }] : []), + { label: current.open, onClick: () => { window.location.href = calendarUrlRef.current; } }, + ], + } : {}), + }); + toastsByKey.set(alert.key, id); + }; + + const showReminder = async (account: string, alert: ReminderAlert) => { + const settings = useSettingsStore.getState(); + const sound = reminderSoundOn(settings.calendarNotificationSound); + const os = getDesktopBridge()?.os; + const hold = () => getStore().area(account, 'reminders.hold', { keys: [alert.key] }).catch(() => {}); + if (os) { + const locked = isAppLocked(); + const result = await os.notify(await buildReminderNotification(account, alert, labelsRef.current, sound)).catch(() => null); + // Paused, quiet hours, a toast that failed, or nothing may be said now: the summary says it later. + if (!result || locked || result.reason === 'paused' || result.reason === 'quiet-hours' || result.reason === 'failed') { + await hold(); + return; + } + if (result.reason === 'duplicate') return; + if (result.playSound) playNotificationSound(settings.notificationSoundChoice); + if (result.shown) return; + inAppReminder(account, alert); + return; + } + if (sound) playNotificationSound(settings.notificationSoundChoice); + reminderTitleAlert(tAlert('title_alert', { title: alert.title || labelsRef.current.untitled })); + inAppReminder(account, alert); + void showSystemReminder({ + key: alert.key, + title: alert.title || labelsRef.current.untitled, + body: labelsRef.current.when(alert), + silent: !sound, + hidden: contentHiddenFor(account) ? { title: labelsRef.current.generic } : undefined, + }, calendarUrlRef.current); + }; + + const showMissed = async (account: string) => { + if (isAppLocked()) return; + const timeZone = reminderTimeZone(useSettingsStore.getState().timeZone); + const taken = await getStore().area<MissedBatch | null>(account, 'reminders.takeMissed', { timeZone }); + if (!taken) return; + // What the path without a store already rang, before the store took over, was seen. + const rung = taken.alerts.filter((alert) => firedWithoutStore(claimKey(account, alert.uid, alert.alertId, alert.fireTimeMs))); + if (rung.length > 0) await getStore().area(account, 'reminders.dismiss', { keys: rung.map((alert) => alert.key) }); + const batch: MissedBatch = { batch: taken.batch, alerts: taken.alerts.filter((alert) => !rung.includes(alert)) }; + if (batch.alerts.length === 0) return; + const current = labelsRef.current; + const os = getDesktopBridge()?.os; + if (os) { + const release = () => getStore().area(account, 'reminders.releaseMissed', { batch: batch.batch }); + const result = await os.notify(await buildMissedNotification(account, batch, current)).catch(() => null); + // Told nobody, so it has to wait for a time when it can. + if (!result || result.reason === 'paused' || result.reason === 'quiet-hours' || result.reason === 'duplicate' || result.reason === 'failed') { + await release(); + return; + } + if (result.shown) { + await getStore().area(account, 'reminders.settleMissed', { batch: batch.batch }); + return; + } + } + const keys = batch.alerts.map((alert) => alert.key); + let opened = false; + const body = missedBody(batch.alerts, current); + const id = addToast({ + type: 'info', + title: current.missedTitle(batch.alerts.length), + message: body, + duration: 0, + action: { + label: t('missed_show'), + onClick: () => { + opened = true; + useMissedReminders.getState().show(account, batch.alerts); + }, + }, + onDismiss: () => { + for (const key of keys) toastsByKey.delete(key); + if (!opened) dismissReminders(account, keys); + }, + }); + for (const key of keys) toastsByKey.set(key, id); + keepOnLoan(account, batch.batch, id, keys); + if (!os) { + void showSystemReminder({ + key: `missed:${batch.batch}`, + title: current.missedTitle(batch.alerts.length), + body, + silent: true, + hidden: contentHiddenFor(account) ? { title: current.missedTitle(batch.alerts.length) } : undefined, + }, calendarUrlRef.current); + } + }; + + // Stays with this window while it's on screen here. A reload loses the toast, the + // renewals stop, and the store hands the summary out again. + const keepOnLoan = (account: string, batch: number, toastId: string, keys: string[]) => { + const onScreen = () => useToastStore.getState().toasts.some((toast) => toast.id === toastId) + || useMissedReminders.getState().alerts.some((alert) => keys.includes(alert.key)); + const loan = setInterval(() => { + if (!onScreen()) { + clearInterval(loan); + loans.delete(loan); + return; + } + void getStore().area(account, 'reminders.renewMissed', { batch }).catch(() => {}); + }, LOAN_RENEW_MS); + loans.add(loan); + }; + + const runner = createReminderRunner({ + accounts: () => visibleAccounts().filter((account) => offlineActive(account)), + store: () => getStore(), + params: () => { + const settings = useSettingsStore.getState(); + return { + timeZone: reminderTimeZone(settings.timeZone), + tasks: settings.enableCalendarTasks, + muted: !settings.calendarNotificationsEnabled || !usePolicyStore.getState().isFeatureEnabled('calendarEnabled'), + }; + }, + // Only this account's client has a stream the page can see. For the others, look. + needsPolling: (account) => !(account === useAuthStore.getState().activeAccountId && useEmailStore.getState().isPushConnected), + hidden: () => document.visibilityState === 'hidden', + offline: () => navigator.onLine === false, + onDue: (account, alerts) => { + for (const alert of alerts) { + // The other path may have got there first, at a handover. + if (!noteStoreFired(claimKey(account, alert.uid, alert.alertId, alert.fireTimeMs), alert.fireTimeMs)) continue; + remind(viewOf(alert), () => { + void showReminder(account, alert).catch((error) => { + console.error('Failed to show a reminder:', error); + }); + }); + } + }, + onMissed: showMissed, + onSource: (account, driven) => useReminderSource.getState().setDriven(account, driven), + }); + runnerRef.current = runner; + setReminderPoke(() => runner.poke()); + runner.start(); + + const stopEvents = addStoreEventListener((event) => { + if (event.type === 'synced') runner.synced(event.account); + else if (event.type === 'changed' && event.collections.some((name) => name === 'CalendarEvent' || name === 'Calendar')) runner.poke(); + }); + const stopWake = addWakeHandler(() => runner.wake()); + const onOnline = () => runner.wake(); + const onVisible = () => { + if (document.visibilityState === 'visible') runner.poke(); + }; + window.addEventListener('online', onOnline); + document.addEventListener('visibilitychange', onVisible); + const stopAcks = onAcknowledged((keys) => { + for (const key of keys) { + const id = toastsByKey.get(key); + if (id) removeToast(id); + toastsByKey.delete(key); + } + void closeSystemReminders(keys); + }); + + return () => { + runner.stop(); + for (const loan of loans) clearInterval(loan); + runnerRef.current = null; + setReminderPoke(null); + stopEvents(); + stopWake(); + stopAcks(); + window.removeEventListener('online', onOnline); + document.removeEventListener('visibilitychange', onVisible); + }; + // Labels go through a ref: a language change mustn't restart the check. + // eslint-disable-next-line react-hooks/exhaustive-deps + }, [signedIn]); + + // An account just turned on or off. + useEffect(() => { + runnerRef.current?.poke(); + }, [enabledKey]); +} diff --git a/instrumentation.node.ts b/instrumentation.node.ts index a1f36ff11..971184ac8 100644 --- a/instrumentation.node.ts +++ b/instrumentation.node.ts @@ -134,6 +134,9 @@ migrateLegacyAdminLayout() { name: "telemetry-errors", start: instantErrors.startInstantErrors, stop: instantErrors.stopInstantErrors }, { name: "version-check", start: versionCheck.startScheduler, stop: versionCheck.stopScheduler }, ]); + if (process.env.NEXT_PUBLIC_BULWARK_DESKTOP === "1") { + (await import("./lib/desktop/server-links")).installDesktopServerLinks(); + } }) .catch((err) => { logger.warn("Admin dashboard init skipped", { error: err instanceof Error ? err.message : String(err) }); diff --git a/integration/tests/23-do-pwa-windows.spec.ts b/integration/tests/23-do-pwa-windows.spec.ts index a573d1707..a3ac99641 100644 --- a/integration/tests/23-do-pwa-windows.spec.ts +++ b/integration/tests/23-do-pwa-windows.spec.ts @@ -176,7 +176,7 @@ async function draftsCalled(subject: string): Promise<Array<{ id: string; subjec test.beforeAll(() => requireEntEnv()); -test.describe('the manifest and the title bar', () => { +test.describe('the manifest and the window controls', () => { test('the manifest asks for the overlay and falls back to standalone', async ({ request, baseURL }) => { const res = await request.get(`${baseURL ?? process.env.IT_WEBMAIL_URL}/manifest.webmanifest`); const manifest = await res.json(); @@ -186,7 +186,8 @@ test.describe('the manifest and the title bar', () => { test('without an overlay nothing changes', async ({ browser }) => { const page = await appPage(browser); - await expect(page.locator('[data-window-title-bar]')).toHaveCount(0); + await expect(page.locator('html[data-window-controls]')).toHaveCount(0); + await expect(page.locator('[data-window-row]')).toHaveCount(0); const padding = await page.evaluate(() => { const root = document.querySelector('[class*="--app-top-inset"]') as HTMLElement; return { padding: getComputedStyle(root).paddingTop, top: root.getBoundingClientRect().top }; @@ -195,27 +196,24 @@ test.describe('the manifest and the title bar', () => { await page.context().close(); }); - test('with one, the app starts below a drag strip that leaves the controls free', async ({ browser }) => { + test('with one, the app runs to the top and its rightmost row leaves the controls free', async ({ browser }) => { const page = await appPage(browser, OVERLAY); - const strip = page.locator('[data-window-title-bar]'); - await expect(strip).toBeVisible(); - const box = await strip.boundingBox(); - expect(box).toMatchObject({ x: 0, y: 0, height: 40 }); - expect(box!.width).toBe(1440 - 140); - const region = await strip.evaluate((el) => { + await expect(page.locator('html[data-window-controls]')).toHaveCount(1); + const root = await page.evaluate(() => { + const el = document.querySelector('[class*="--app-top-inset"]') as HTMLElement; + return { padding: getComputedStyle(el).paddingTop, top: el.getBoundingClientRect().top }; + }); + expect(root).toEqual({ padding: '0px', top: 0 }); + const row = page.locator('[data-window-row-right]').first(); + await expect(row).toBeVisible(); + const seen = await row.evaluate((el) => { const style = getComputedStyle(el) as CSSStyleDeclaration & { appRegion?: string; webkitAppRegion?: string }; - return style.appRegion ?? style.webkitAppRegion; + return { region: style.appRegion ?? style.webkitAppRegion, padding: parseFloat(style.paddingRight), right: el.getBoundingClientRect().right }; }); - expect(region).toBe('drag'); - // The window title, in small text. - await expect(strip).toContainText(/\S/); - const rail = await page.evaluate(() => { - const root = document.querySelector('[class*="--app-top-inset"]') as HTMLElement; - return { padding: getComputedStyle(root).paddingTop }; - }); - expect(rail.padding).toBe('40px'); - await shot(page, 'pwa-windows-title-bar'); - // A full-page dialog keeps clear of it too. + expect(seen.region).toBe('drag'); + expect(seen.right).toBe(1440); + expect(seen.padding).toBeGreaterThanOrEqual(140); + await shot(page, 'pwa-windows-controls'); await page.context().close(); }); }); diff --git a/integration/tests/24-do-export.spec.ts b/integration/tests/24-do-export.spec.ts new file mode 100644 index 000000000..682ad72fe --- /dev/null +++ b/integration/tests/24-do-export.spec.ts @@ -0,0 +1,428 @@ +/** + * Export of the local store, through the real UI, as dso-export, against a VM 106 + * Stalwart: a folder written with the browser offline is the bytes the server has, + * the private files never hold readable mail, what has no original here is counted + * and can be tried again online, and "No export" holds. + * + * An account of its own: other specs running at the same time work in the ent-* + * accounts, and folders of this one went missing there mid-run. Check or create it + * on the VM first (~/desktop-offline/dso_export_provision.py), then run + * desktop-offline-rig/run-spec.sh with IT_DSO_PASSWORD from the vault item + * "Stalwart test – dso-* throwaway accounts". Works in its own folder and deletes + * it with its mail at the end. + */ +import { test, expect, type Browser, type BrowserContext, type Page } from '@playwright/test'; +import { readFileSync } from 'node:fs'; +import { adminContext, contextOptions, requireEntEnv, shot, withPolicy } from './helpers/ent'; +import { accountSwitcher, neutralizeDevOverlay } from './helpers/app'; +import { JMAP_URL } from './helpers/config'; +import { JmapClient } from './helpers/jmap'; +import { listZipEntries, readZipEntry } from '../../lib/mail-import/zip-reader'; +import { MboxSplitter } from '../../lib/mail-import/mbox'; +import { withoutStateHeaders } from '../../lib/mail-import/mbox-status'; + +requireEntEnv(); +test.describe.configure({ mode: 'serial' }); +test.setTimeout(300_000); + +const USER = 'dso-export@example.org'; +const PASSWORD = process.env.IT_DSO_PASSWORD ?? ''; +if (!PASSWORD) throw new Error('Set IT_DSO_PASSWORD, and check the account on the VM first: see the top of this file'); +const STAMP = `D10-${Date.now().toString(36)}`; +const FOLDER = `${STAMP}-folder`; +const SECRET = `Secret${STAMP.replace(/\W/g, '')}`; +const COUNT = 3; +const DEVICES_OFF = { noDownloads: false, noExport: false, noPrint: false, noInstallPrompt: false, pushWithoutContent: false, watermark: false, noOffline: false }; + +const auth = () => 'Basic ' + Buffer.from(`${USER}:${PASSWORD}`).toString('base64'); +let jmap: Promise<JmapClient> | null = null; +const account = () => (jmap ??= JmapClient.connect(USER, PASSWORD)); + +/** Bytes a rebuilt message wouldn't have: a Latin-1 byte, a bare LF, odd spacing, signature-like headers, mbox traps. */ +function rawMessage(n: number): Buffer { + return Buffer.concat([ + Buffer.from(`From: Seed <seed@example.org>\r\nTo: ${USER}\r\nSubject: ${SECRET} subject ${n} \r\nDate: Mon, 1 Jan 2018 08:00:0${n} +0000\r\nMessage-ID: <${STAMP}-${n}@example.org>\r\nDKIM-Signature: v=1; a=rsa-sha256; b=abc${n}\r\nContent-Type: text/plain; charset=iso-8859-1\r\n\r\n`), + Buffer.from([0xe4, 0x0a]), + Buffer.from(`From the start of a line ${n}\r\n>From quoted once\n${SECRET} body ${n}\r\n`), + ]); +} + +let mailbox = ''; +const blobIds: string[] = []; +const originals: Buffer[] = []; + +test.beforeAll(async () => { + const client = await account(); + mailbox = await client.createMailbox(FOLDER); + for (let n = 1; n <= COUNT; n += 1) { + const up = await fetch(`${JMAP_URL}/jmap/upload/${client.accountId}/`, { method: 'POST', headers: { Authorization: auth(), 'Content-Type': 'message/rfc822' }, body: rawMessage(n) }); + expect(up.ok).toBe(true); + const { blobId } = await up.json(); + const res = await client.request([['Email/import', { accountId: client.accountId, emails: { e: { blobId, mailboxIds: { [mailbox]: true }, keywords: { $seen: true }, receivedAt: new Date(Date.now() + n * 1000).toISOString().replace(/\.\d+Z/, 'Z') } } }, '0']]); + const created = res.methodResponses[0][1].created?.e; + expect(created?.id, JSON.stringify(res.methodResponses[0][1])).toBeTruthy(); + blobIds.push(created.blobId); + const download = await fetch(`${JMAP_URL}/jmap/download/${client.accountId}/${created.blobId}/m.eml?accept=message/rfc822`, { headers: { Authorization: auth() } }); + expect(download.ok).toBe(true); + // What the server has is the reference, whatever it did with the upload. + originals.push(Buffer.from(await download.arrayBuffer())); + } +}); + +test.afterAll(async () => { + const client = await account(); + await client.request([['Mailbox/set', { accountId: client.accountId, destroy: [mailbox], onDestroyRemoveEmails: true }, '0']]).catch(() => {}); +}); + +/** Every write to a private file is kept, and the export has no save picker, so it goes to the spool. */ +const INIT = () => { + const proto = FileSystemWritableFileStream.prototype as unknown as { write(data: unknown): Promise<void> }; + const write = proto.write; + const seen: Uint8Array[] = []; + (window as unknown as { __spoolWrites: Uint8Array[] }).__spoolWrites = seen; + proto.write = function patched(data: unknown) { + if (data instanceof Uint8Array) seen.push(data.slice()); + return write.call(this, data); + }; + delete (window as { showSaveFilePicker?: unknown }).showSaveFilePicker; +}; + +let page: Page; +let context: BrowserContext; + +async function settings(target: Page): Promise<void> { + await target.goto('/settings/backup/offline'); + await expect(target.getByTestId('offline-switch')).toBeVisible({ timeout: 30_000 }); +} + +/** A page load with no network: the app shell from the service worker, the rest from the device. */ +async function startOffline(): Promise<void> { + await page.reload(); + await expect(page.getByTestId('offline-banner')).toContainText("You're offline", { timeout: 60_000 }); + // The shell can open Settings on its first page: from there through the menu, as a person would. + if (!(await page.getByTestId('offline-switch').waitFor({ state: 'visible', timeout: 5_000 }).then(() => true, () => false))) { + await page.getByText('Backup & reset', { exact: true }).first().click(); + } + await expect(page.getByTestId('offline-switch')).toBeVisible({ timeout: 30_000 }); +} + +async function openDialog(): Promise<void> { + await page.getByTestId('local-export-open').click(); + await expect(page.getByTestId('local-export-dialog')).toBeVisible(); + await expect(page.getByTestId('local-export-summary')).toBeVisible({ timeout: 30_000 }); + // The test's folder only. + await page.getByTestId('local-export-all').click(); + await page.locator(`[data-folder="${FOLDER}"]`).click(); +} + +async function closeSetup(): Promise<void> { + await page.getByTestId('local-export-dialog').getByRole('button', { name: 'Cancel', exact: true }).click(); + await expect(page.getByTestId('local-export-dialog')).toBeHidden(); +} + +async function closeSummary(): Promise<void> { + await page.getByTestId('local-export-dialog').getByRole('button', { name: 'Close', exact: true }).last().click(); + await expect(page.getByTestId('local-export-dialog')).toBeHidden(); +} + +async function waitForOriginals(wanted: string): Promise<void> { + await expect.poll(async () => { + await openDialog(); + const text = await page.getByTestId('local-export-kept').textContent(); + await closeSetup(); + return text; + }, { timeout: 240_000, intervals: [5_000] }).toContain(wanted); +} + +async function exported(format: 'mbox' | 'eml'): Promise<Buffer> { + await page.getByTestId(`local-export-format-${format}`).check(); + const download = page.waitForEvent('download', { timeout: 60_000 }); + await page.getByTestId('local-export-start').click(); + const file = await download; + expect(file.suggestedFilename()).toBe(`${FOLDER}.${format === 'mbox' ? 'mbox' : 'zip'}`); + await expect(page.getByTestId('mail-export-status')).toBeVisible(); + return readFileSync(await file.path()); +} + +function mboxMessages(bytes: Buffer): Buffer[] { + const splitter = new MboxSplitter(); + return [...splitter.push(new Uint8Array(bytes)), ...splitter.end()].map((message) => Buffer.concat(withoutStateHeaders(message.parts))); +} + +function expectOriginals(messages: Buffer[]): void { + expect(messages.length).toBe(COUNT); + for (let i = 0; i < COUNT; i += 1) expect(messages[i].equals(originals[i]), `message ${i + 1} differs`).toBe(true); +} + +/** What this run wrote to the private files, for looking inside it. */ +async function spoolBytes(): Promise<Buffer> { + const base64 = await page.evaluate(() => { + const writes = (window as unknown as { __spoolWrites: Uint8Array[] }).__spoolWrites; + let binary = ''; + for (const write of writes) for (const byte of write) binary += String.fromCharCode(byte); + return btoa(binary); + }); + return Buffer.from(base64, 'base64'); +} + +async function forgetSpoolWrites(): Promise<void> { + await page.evaluate(() => { (window as unknown as { __spoolWrites: Uint8Array[] }).__spoolWrites.length = 0; }); +} + +async function spoolReport(): Promise<{ left: string[]; bytes: number; readable: boolean }> { + return page.evaluate(async (secret) => { + const writes = (window as unknown as { __spoolWrites: Uint8Array[] }).__spoolWrites; + const decoder = new TextDecoder('latin1'); + const root = await navigator.storage.getDirectory(); + const left: string[] = []; + try { + const dir = await root.getDirectoryHandle('bulwark-exports'); + for await (const name of (dir as unknown as { keys(): AsyncIterable<string> }).keys()) left.push(name); + } catch { /* never made */ } + return { + left, + bytes: writes.reduce((sum, write) => sum + write.length, 0), + readable: writes.some((write) => decoder.decode(write).includes(secret)), + }; + }, SECRET); +} + +test.beforeAll(async ({ browser }: { browser: Browser }) => { + context = await browser.newContext(contextOptions()); + page = await context.newPage(); + await neutralizeDevOverlay(page); + await page.goto('/'); + await page.fill('#username', USER); + await page.fill('#password', PASSWORD); + await page.click('button[type="submit"]'); + await accountSwitcher(page).waitFor({ state: 'visible', timeout: 60_000 }); + await context.addInitScript(INIT); + await settings(page); + const toggle = page.getByTestId('offline-switch'); + if ((await toggle.getAttribute('aria-checked')) !== 'true') await toggle.click(); + await expect(toggle).toHaveAttribute('aria-checked', 'true'); + await expect(page.getByTestId('offline-status')).toContainText('updated', { timeout: 180_000 }); + await waitForOriginals(`${COUNT} of ${COUNT}`); +}); + +test.afterAll(async () => { + await context?.close(); +}); + +test('a folder exported offline as mbox is the bytes the server has, and the private files hold nothing readable', async () => { + await context.setOffline(true); + await openDialog(); + await expect(page.getByTestId('local-export-kept')).toContainText(`${COUNT} of ${COUNT}`); + await expect(page.getByTestId('local-export-missing')).toHaveCount(0); + await shot(page, 'd10-export-setup'); + const mbox = await exported('mbox'); + expectOriginals(mboxMessages(mbox)); + await expect(page.getByTestId('mail-export-status')).toContainText(`Messages exported: ${COUNT}`); + await shot(page, 'd10-export-done'); + const report = await spoolReport(); + expect(report.bytes).toBeGreaterThan(0); + expect(report.readable).toBe(false); + // Gone the moment the export was done, with the download still free to read its Blob. + expect(report.left).toEqual([]); + await closeSummary(); +}); + +test('the same folder as a ZIP of .eml files has the same bytes', async () => { + await forgetSpoolWrites(); + await openDialog(); + const zip = new Blob([new Uint8Array(await exported('eml'))]); + const entries = await listZipEntries(zip); + expect(entries.map((entry) => entry.name).every((name) => name.startsWith(`${FOLDER}/`) && name.endsWith('.eml'))).toBe(true); + expectOriginals(await Promise.all(entries.map(async (entry) => Buffer.from(await readZipEntry(zip, entry))))); + const report = await spoolReport(); + expect(report.left).toEqual([]); + // Deflated mail wouldn't show up in a search for its text: it has to be no ZIP at all. + const spool = await spoolBytes(); + expect(spool.length).toBeGreaterThan(0); + expect(spool.includes(Buffer.from('PK\x03\x04', 'latin1'))).toBe(false); + expect(spool.includes(Buffer.from(FOLDER))).toBe(false); + await expect(listZipEntries(new Blob([new Uint8Array(spool)]))).rejects.toThrow(); + await closeSummary(); +}); + +/** + * The picker's dialog is the only fake: what it answers is a real file handle, with + * a real writable and a real remove. `keepRemove: false` is a browser without remove. + */ +async function pickerAnswers(name: string, keepRemove = true): Promise<void> { + await page.evaluate(async ({ name: file, keepRemove: keep }) => { + const root = await navigator.storage.getDirectory(); + const window_ = window as unknown as { showSaveFilePicker: unknown; __pickerClicks: number }; + window_.__pickerClicks = 0; + window_.showSaveFilePicker = async () => { + // The real one refuses a call that lost the click. + if (!navigator.userActivation.isActive) throw new DOMException('Must be handling a user gesture', 'SecurityError'); + window_.__pickerClicks += 1; + const handle = await root.getFileHandle(file, { create: true }); + return keep ? handle : { name: handle.name, createWritable: () => handle.createWritable() }; + }; + }, { name, keepRemove }); +} + +async function pickedFile(name: string): Promise<Buffer | null> { + const base64 = await page.evaluate(async (file) => { + const root = await navigator.storage.getDirectory(); + try { + const bytes = new Uint8Array(await (await (await root.getFileHandle(file)).getFile()).arrayBuffer()); + let binary = ''; + for (const byte of bytes) binary += String.fromCharCode(byte); + return btoa(binary); + } catch { + return null; + } + }, name); + return base64 === null ? null : Buffer.from(base64, 'base64'); +} + +async function noPicker(): Promise<void> { + await page.evaluate(() => { delete (window as { showSaveFilePicker?: unknown }).showSaveFilePicker; }); +} + +test('with a save picker, it writes straight to the chosen file, from the click, and no spool is left', async () => { + await pickerAnswers(`${STAMP}-picked.mbox`); + await openDialog(); + await page.getByTestId('local-export-format-mbox').check(); + await page.getByTestId('local-export-start').click(); + await expect(page.getByTestId('mail-export-status')).toContainText(`Messages exported: ${COUNT}`); + expect(await page.evaluate(() => (window as unknown as { __pickerClicks: number }).__pickerClicks)).toBe(1); + expectOriginals(mboxMessages((await pickedFile(`${STAMP}-picked.mbox`))!)); + expect((await spoolReport()).left).toEqual([]); + await closeSummary(); + await noPicker(); +}); + +test('with attachments off it says offline why it can\'t; a connection lost during the run is counted; the retry writes them all', async () => { + await context.setOffline(false); + await page.getByTestId('offline-attachments').click(); + await expect(page.getByTestId('offline-attachments')).toHaveAttribute('aria-checked', 'false'); + // A choice reaches the store after a short wait, so a quick change of mind costs nothing. + await waitForOriginals(`0 of ${COUNT}`); + await context.setOffline(true); + await openDialog(); + await expect(page.getByTestId('local-export-kept')).toContainText(`0 of ${COUNT}`); + await expect(page.getByTestId('local-export-missing')).toContainText(`offline: ${COUNT}`); + await expect(page.getByTestId('local-export-reason')).toContainText('Keep attachments'); + // Nothing could be written, so it doesn't offer to. + await expect(page.getByTestId('local-export-start')).toBeDisabled(); + await shot(page, 'd10-export-offline-missing'); + + // The browser says online, and the server goes as the export starts. + await context.setOffline(false); + await expect(page.getByTestId('local-export-start')).toBeEnabled({ timeout: 30_000 }); + const SERVER = `${new URL(JMAP_URL).origin}/**`; + await context.route(SERVER, (route) => route.abort('internetdisconnected')); + let downloads = 0; + const counted = () => { downloads += 1; }; + page.on('download', counted); + await page.getByTestId('local-export-format-mbox').check(); + await page.getByTestId('local-export-start').click(); + await expect(page.getByTestId('local-export-not-kept-attachments')).toContainText(`attachments aren't kept on this device: ${COUNT}`, { timeout: 60_000 }); + await expect(page.getByTestId('mail-export-status')).toContainText('Messages exported: 0'); + // No empty file that looks like a backup. + await expect(page.getByTestId('mail-export-file')).toHaveCount(0); + await expect(page.getByTestId('mail-export-download')).toHaveCount(0); + page.off('download', counted); + expect(downloads).toBe(0); + await shot(page, 'd10-export-not-kept'); + + await context.unroute(SERVER); + // The browser going off says so in the summary, and coming back opens the retry. + await context.setOffline(true); + await expect(page.getByTestId('local-export-retry')).toBeDisabled(); + await expect(page.getByTestId('local-export-retry-hint')).toHaveText("You can try again when you're online."); + await context.setOffline(false); + await expect(page.getByTestId('local-export-retry')).toBeEnabled({ timeout: 60_000 }); + await page.getByTestId('local-export-retry').click(); + // The same folder is still the one chosen. + await expect(page.getByTestId('local-export-kept')).toContainText(`0 of ${COUNT}`, { timeout: 30_000 }); + await expect(page.getByTestId('local-export-missing')).toContainText(`To download from the server: ${COUNT}`); + const again = await exported('mbox'); + expectOriginals(mboxMessages(again)); + await closeSummary(); + + // The same with a save picker: a run that wrote nothing takes the file the picker made with it. + const removed = `${STAMP}-removed.mbox`; + const stays = `${STAMP}-stays.mbox`; + for (const [file, keepRemove] of [[removed, true], [stays, false]] as const) { + await pickerAnswers(file, keepRemove); + await openDialog(); + await page.getByTestId('local-export-format-mbox').check(); + // The server goes once it has counted as reachable: offline with nothing here there's no Export to click. + await expect(page.getByTestId('local-export-start')).toBeEnabled({ timeout: 60_000 }); + await context.route(SERVER, (route) => route.abort('internetdisconnected')); + await page.getByTestId('local-export-start').click(); + await expect(page.getByTestId('local-export-not-kept-attachments')).toBeVisible({ timeout: 60_000 }); + await context.unroute(SERVER); + if (keepRemove) { + expect(await pickedFile(file), 'the picked file is gone').toBeNull(); + await expect(page.getByTestId('local-export-leftover')).toHaveCount(0); + } else { + await expect(page.getByTestId('local-export-leftover')).toContainText(file); + await shot(page, 'd10-export-leftover'); + } + await context.setOffline(true); + await context.setOffline(false); + await closeSummary(); + } + await noPicker(); + + await page.getByTestId('offline-attachments').click(); + await expect(page.getByTestId('offline-attachments')).toHaveAttribute('aria-checked', 'true'); +}); + +test('at 390 px the dialog fits, and works by keyboard', async () => { + await page.setViewportSize({ width: 390, height: 844 }); + await page.getByTestId('local-export-open').scrollIntoViewIfNeeded(); + await page.getByTestId('local-export-open').focus(); + await page.keyboard.press('Enter'); + const dialog = page.getByTestId('local-export-dialog'); + await expect(dialog).toBeVisible(); + await expect(page.getByTestId('local-export-summary')).toBeVisible({ timeout: 30_000 }); + const widths = await page.evaluate(() => { + const panel = document.querySelector('[data-testid="local-export-dialog"]') as HTMLElement; + return { page: document.documentElement.scrollWidth, panel: panel.getBoundingClientRect().width, inner: panel.scrollWidth }; + }); + expect(widths.page).toBeLessThanOrEqual(390); + expect(widths.panel).toBeLessThanOrEqual(390); + expect(widths.inner).toBeLessThanOrEqual(390); + await shot(page, 'd10-export-phone'); + await page.keyboard.press('Escape'); + await expect(dialog).toBeHidden(); + await page.setViewportSize({ width: 1440, height: 900 }); +}); + +test('"No export" locks it, also once offline', async ({ browser }) => { + const admin = await adminContext(browser); + try { + await withPolicy(admin, { organisation: { devices: { ...DEVICES_OFF, noExport: true } } }, async () => { + await settings(page); + await expect(page.getByTestId('local-export-open')).toBeDisabled({ timeout: 30_000 }); + await expect(page.getByText('Set by your organisation').first()).toBeVisible(); + // A start with no network: all it has is the policy it kept from the last fetch. + await context.setOffline(true); + await startOffline(); + await expect(page.getByTestId('local-export-open')).toBeDisabled({ timeout: 30_000 }); + await expect(page.getByTestId('local-export-dialog')).toHaveCount(0); + await shot(page, 'd10-export-locked-offline-start'); + await context.setOffline(false); + }); + } finally { + await admin.close(); + } + await settings(page); + await expect(page.getByTestId('local-export-open')).toBeEnabled({ timeout: 30_000 }); + // The other way round: a start with no network, allowed by the kept policy, exports. + await waitForOriginals(`${COUNT} of ${COUNT}`); + await context.setOffline(true); + await startOffline(); + await expect(page.getByTestId('local-export-open')).toBeEnabled({ timeout: 60_000 }); + await openDialog(); + expectOriginals(mboxMessages(await exported('mbox'))); + await closeSummary(); + await context.setOffline(false); +}); diff --git a/integration/tests/24-do-reminders.spec.ts b/integration/tests/24-do-reminders.spec.ts new file mode 100644 index 000000000..44976d7e6 --- /dev/null +++ b/integration/tests/24-do-reminders.spec.ts @@ -0,0 +1,226 @@ +import { test, expect, type BrowserContext, type Page } from '@playwright/test'; +import { ENT, jmapAs, requireEntEnv, shot, userPage } from './helpers/ent'; + +/** + * Calendar reminders from the local store, in a real browser on a production build and + * a VM 106 test Stalwart, with real time passing: the store's worker has its own clock. + * + * The account is ent-dave, whom the other specs leave alone. Snooze and the native + * buttons belong to the desktop app: repos/desktop test/reminders-real.spec.ts. + */ + +test.describe.configure({ mode: 'serial' }); +test.setTimeout(900_000); +// The headless shell denies notifications; full Chromium really shows them. +test.use({ channel: 'chromium' }); + +const RUN = Date.now().toString(36); +const USER = ENT.dave; +const ZONE = 'Europe/Berlin'; +const CORE = 'urn:ietf:params:jmap:core'; +const CALENDARS = 'urn:ietf:params:jmap:calendars'; +/** ledger.ts AWAY_MS and a margin. */ +const AWAY_MS = 6.5 * 60_000; +/** How long a change on the server may take to reach the store. */ +const SYNC_MS = 30_000; + +type J = Awaited<ReturnType<typeof jmapAs>>; +let client: J; +let context: BrowserContext; +let page: Page; +const created: string[] = []; + +async function call(calls: [string, Record<string, unknown>, string][]) { + const response = await client.request(calls, [CORE, CALENDARS]); + for (const [name, result] of response.methodResponses) { + if (name === 'error') throw new Error(`JMAP error: ${JSON.stringify(result)}`); + } + return response.methodResponses as [string, Record<string, unknown>, string][]; +} + +/** A wall clock in the event's zone. */ +function wall(ms: number): string { + const parts = new Intl.DateTimeFormat('sv-SE', { + timeZone: ZONE, year: 'numeric', month: '2-digit', day: '2-digit', hour: '2-digit', minute: '2-digit', second: '2-digit', + }).format(new Date(ms)); + return parts.replace(' ', 'T'); +} + +const OFFSET_MIN = 5; + +/** An event whose alert fires at `fireAt`. */ +async function eventFiringAt(title: string, fireAt: number, extra: Record<string, unknown> = {}): Promise<string> { + const [[, calendars]] = await call([['Calendar/get', { accountId: client.accountId, properties: ['isDefault'] }, '0']]); + const list = calendars.list as Array<{ id: string; isDefault: boolean }>; + const calendar = list.find((entry) => entry.isDefault) ?? list[0]; + const [[, result]] = await call([['CalendarEvent/set', { + accountId: client.accountId, + create: { + e: { + '@type': 'Event', + calendarIds: { [calendar.id]: true }, + timeZone: ZONE, + title, + start: wall(fireAt + OFFSET_MIN * 60_000), + duration: 'PT30M', + useDefaultAlerts: false, + alerts: { a1: { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: `-PT${OFFSET_MIN}M`, relativeTo: 'start' } } }, + ...extra, + }, + }, + sendSchedulingMessages: false, + }, '0']]); + const id = (result.created as Record<string, { id: string }> | undefined)?.e?.id; + if (!id) throw new Error(`Event not created: ${JSON.stringify(result)}`); + created.push(id); + return id; +} + +/** Settings > Backup & reset > Offline, switched on, and the first sync done. */ +async function enableOffline(target: Page): Promise<void> { + await target.goto('/settings/backup/offline'); + const toggle = target.getByTestId('offline-switch'); + await toggle.waitFor({ state: 'visible', timeout: 60_000 }); + if ((await toggle.getAttribute('aria-checked')) !== 'true') await toggle.click(); + await expect(target.getByTestId('offline-status')).toContainText('updated', { timeout: 180_000 }); +} + +const toast = (target: Page, text: string) => target.locator('.toast-item').filter({ hasText: text }); + +test.beforeAll(async ({ browser }) => { + requireEntEnv(); + client = await jmapAs(USER); + page = await userPage(browser, USER); + context = page.context(); + await enableOffline(page); + await page.goto('/'); +}); + +test.afterAll(async () => { + if (created.length > 0) { + await call([['CalendarEvent/set', { accountId: client.accountId, destroy: created, sendSchedulingMessages: false }, '0']]).catch(() => {}); + } + await context?.close(); +}); + +test('an occurrence of a series fires from the store with the network gone', async () => { + const title = `rem-series-${RUN}`; + const fireAt = Date.now() + SYNC_MS + 30_000; + // The series began weeks ago, so only an expansion finds today's occurrence. + const [day, time] = wall(fireAt + OFFSET_MIN * 60_000).split('T'); + const weeksAgo = new Date(Date.parse(`${day}T00:00:00Z`) - 28 * 24 * 3_600_000).toISOString().slice(0, 10); + await eventFiringAt(title, fireAt, { + start: `${weeksAgo}T${time}`, + recurrenceRule: { '@type': 'RecurrenceRule', frequency: 'weekly' }, + }); + await page.waitForTimeout(SYNC_MS); + await context.setOffline(true); + try { + expect(await page.evaluate(() => navigator.onLine)).toBe(false); + await page.waitForTimeout(Math.max(fireAt - Date.now() - 3000, 0)); + await expect(toast(page, title)).toHaveCount(0); + await expect(toast(page, title)).toBeVisible({ timeout: 30_000 }); + await shot(page, 'desktop-reminders-offline-toast'); + } finally { + await context.setOffline(false); + } + await toast(page, title).getByRole('button').first().click().catch(() => {}); +}); + +test('fires in one tab of two', async () => { + const second = await context.newPage(); + await second.goto('/'); + const title = `rem-tabs-${RUN}`; + const fireAt = Date.now() + SYNC_MS + 20_000; + await eventFiringAt(title, fireAt); + // A reminder's toast leaves after a while, so note the most each tab ever showed. + const most = [0, 0]; + const deadline = fireAt + 40_000; + let lastSeen = 0; + while (Date.now() < deadline && (lastSeen === 0 || Date.now() < lastSeen + 8000)) { + const counts = await Promise.all([page, second].map((target) => toast(target, title).count())); + counts.forEach((count, index) => { + most[index] = Math.max(most[index], count); + }); + if (lastSeen === 0 && counts.some((count) => count > 0)) lastSeen = Date.now(); + await second.waitForTimeout(250); + } + expect(most[0] + most[1]).toBe(1); + await second.close(); + await page.bringToFront(); +}); + +test('adds a system notification when permission is granted and the tab is not in front', async () => { + await context.grantPermissions(['notifications']); + await page.reload(); + await page.evaluate(() => { + document.hasFocus = () => false; + }); + const title = `rem-system-${RUN}`; + const fireAt = Date.now() + SYNC_MS + 15_000; + await eventFiringAt(title, fireAt); + await expect(toast(page, title)).toBeVisible({ timeout: fireAt - Date.now() + 30_000 }); + const shown = await page.evaluate(async (wanted) => { + const registration = await navigator.serviceWorker.ready; + return (await registration.getNotifications()).filter((item) => item.title === wanted).map((item) => ({ tag: item.tag, data: item.data as unknown })); + }, title); + expect(shown).toHaveLength(1); + expect(shown[0].tag).toContain('calendar-reminder:'); + expect(shown[0].data).toMatchObject({ kind: 'calendar-reminder', url: expect.stringMatching(/\/calendar$/) }); + await context.clearPermissions(); +}); + +test('what came due with the app closed is summarised once, and not as a burst', async () => { + const one = `rem-missed-a-${RUN}`; + const two = `rem-missed-b-${RUN}`; + const fireAt = Date.now() + SYNC_MS + 20_000; + await eventFiringAt(one, fireAt); + await eventFiringAt(two, fireAt + 20_000, { virtualLocations: { v: { '@type': 'VirtualLocation', name: 'Meet', uri: 'https://meet.jit.si/rem-test' } } }); + await page.waitForTimeout(SYNC_MS); + + // Closed like an app: nothing of the page is left, and the store's data stays. + const closedAt = Date.now(); + await page.close(); + await new Promise((resolve) => setTimeout(resolve, Math.max(fireAt + 20_000 + AWAY_MS - closedAt, AWAY_MS))); + + page = await context.newPage(); + await page.goto('/'); + const summary = page.locator('.toast-item').filter({ hasText: one }); + await expect(summary).toBeVisible({ timeout: 60_000 }); + await expect(summary).toContainText(two); + await expect(toast(page, one)).toHaveCount(1); + await shot(page, 'desktop-reminders-missed-toast'); + + await summary.getByRole('button', { name: 'Show' }).click(); + const list = page.getByTestId('missed-reminders'); + await expect(list).toContainText(one); + await expect(list).toContainText(two); + await expect(list.getByRole('button', { name: 'Join' })).toHaveCount(1); + await shot(page, 'desktop-reminders-missed'); + await page.getByRole('button', { name: 'Done' }).click(); + await expect(list).toHaveCount(0); + + // Once: not after a reload, nor from a new tab. + await page.reload(); + await page.waitForTimeout(30_000); + await expect(page.locator('.toast-item').filter({ hasText: 'rem-missed' })).toHaveCount(0); + await expect(page.getByTestId('missed-reminders')).toHaveCount(0); +}); + +test('with the store off, the app reminds as it always did', async () => { + await page.goto('/settings/backup/offline'); + const toggle = page.getByTestId('offline-switch'); + await toggle.waitFor({ state: 'visible', timeout: 60_000 }); + await toggle.click(); + const confirm = page.getByRole('button', { name: /turn off|switch off|delete/i }).last(); + if (await confirm.isVisible({ timeout: 3000 }).catch(() => false)) await confirm.click(); + await expect(toggle).toHaveAttribute('aria-checked', 'false', { timeout: 30_000 }); + await page.goto('/'); + const title = `rem-plain-${RUN}`; + const fireAt = Date.now() + 20_000; + await eventFiringAt(title, fireAt); + // The in-app path reads the server every five minutes, or on a push. + await expect(toast(page, title)).toBeVisible({ timeout: 120_000 }); + await page.waitForTimeout(5000); + await expect(toast(page, title)).toHaveCount(1); +}); diff --git a/integration/tests/24-do-remote-wipe.spec.ts b/integration/tests/24-do-remote-wipe.spec.ts new file mode 100644 index 000000000..e70d36270 --- /dev/null +++ b/integration/tests/24-do-remote-wipe.spec.ts @@ -0,0 +1,382 @@ +import { test, expect, type BrowserContext, type Page } from '@playwright/test'; +import { ENT, ENT_PASSWORD, adminContext, contextOptions, deliver, requireEntEnv, shot, userPage } from './helpers/ent'; +import { JMAP_URL } from './helpers/config'; + +/** + * Remote wipe, through the real UI on a production build, on both VM 106 + * Stalwarts, with the ent-* accounts: + * - a browser with offline on registers; the admin wipes it from + * Organisation > Devices; at its next connect the raw OPFS files, the key + * database, plugin databases and the handoff cache are gone, sign-in is + * required, the login page gives the count of lost mail, the instance has the + * confirmation and the audit log has both entries; + * - at a start the wipe comes before anything from the device is shown; + * - with the instance out of reach mail stays and the wipe keeps waiting, and it + * happens once the device is back; + * - "Remove everything from this device" in settings. + */ + +test.describe.configure({ mode: 'serial' }); +test.setTimeout(300_000); + +const RUN = Date.now().toString(36); + +interface Device { + id: string; + user: string; + platform: string; + firstSeen: string; + wipe: { requestedAt: string } | null; + wipedAt: string | null; + wipeReason: string | null; +} + +async function devicesOf(admin: BrowserContext, email: string): Promise<Device[]> { + const res = await admin.request.get(`/api/admin/devices?q=${encodeURIComponent(email)}`); + expect(res.ok(), `listing devices: ${res.status()}`).toBe(true); + return (await res.json() as { devices: Device[] }).devices; +} + +/** Rows earlier runs left. */ +async function forgetDevices(admin: BrowserContext, email: string): Promise<void> { + for (const device of await devicesOf(admin, email)) { + const res = await admin.request.post('/api/admin/devices', { data: { action: 'forget', id: device.id } }); + expect(res.ok()).toBe(true); + } +} + +async function theDevice(admin: BrowserContext, email: string): Promise<Device> { + let found: Device | undefined; + await expect.poll(async () => { + found = (await devicesOf(admin, email))[0]; + return found?.id ?? ''; + }, { timeout: 60_000, message: `${email} registers` }).not.toBe(''); + return found!; +} + +async function adminWipe(admin: BrowserContext, id: string): Promise<void> { + const res = await admin.request.post('/api/admin/devices', { data: { action: 'wipe', id } }); + expect(res.ok()).toBe(true); +} + +async function enableOffline(page: Page): Promise<void> { + await page.goto('/settings/backup/offline'); + const toggle = page.getByTestId('offline-switch'); + await expect(toggle).toBeVisible({ timeout: 30_000 }); + if ((await toggle.getAttribute('aria-checked')) !== 'true') await toggle.click(); + await expect(toggle).toHaveAttribute('aria-checked', 'true'); + await expect(page.getByTestId('offline-status')).toContainText('updated', { timeout: 180_000 }); +} + +async function toMail(page: Page, subject: string): Promise<void> { + await page.goto('/mail'); + await expect(page.locator('[data-testid="email-list-item"]', { hasText: subject }).first()).toBeVisible({ timeout: 60_000 }); +} + +async function seedMail(to: string, subject: string): Promise<void> { + await deliver({ from: ENT.bob, to: [to], subject, text: `Body of ${subject}` }); +} + +/** What's in the browser's storage for this origin, read raw, opening nothing that would create it. */ +async function rawStorage(page: Page): Promise<{ databases: string[]; storeFiles: string[]; caches: string[]; keyRecords: number }> { + return page.evaluate(async () => { + const databases = (await indexedDB.databases()).map((database) => database.name ?? ''); + const storeFiles: string[] = []; + const root = await navigator.storage.getDirectory(); + const list = async (dir: FileSystemDirectoryHandle, prefix: string): Promise<void> => { + for await (const handle of (dir as unknown as { values(): AsyncIterable<FileSystemHandle> }).values()) { + if (handle.kind === 'directory') await list(handle as FileSystemDirectoryHandle, `${prefix}${handle.name}/`); + else storeFiles.push(`${prefix}${handle.name}`); + } + }; + await list(root, ''); + let keyRecords = 0; + if (databases.includes('bulwark-store')) { + keyRecords = await new Promise<number>((resolve) => { + const open = indexedDB.open('bulwark-store'); + open.onerror = () => resolve(-1); + open.onsuccess = () => { + const db = open.result; + const count = db.transaction('accounts').objectStore('accounts').count(); + count.onsuccess = () => { db.close(); resolve(count.result); }; + count.onerror = () => { db.close(); resolve(-1); }; + }; + }); + } + return { databases, storeFiles, caches: await caches.keys(), keyRecords }; + }); +} + +async function expectStoreGone(page: Page): Promise<void> { + await expect.poll(async () => { + const raw = await rawStorage(page); + return { + keys: raw.keyRecords, + store: raw.databases.includes('bulwark-store'), + legacy: raw.databases.includes('bulwark-offline'), + files: raw.storeFiles, + }; + }, { timeout: 30_000, message: 'nothing of the store is left' }).toEqual({ keys: 0, store: false, legacy: false, files: [] }); +} + +async function expectSignedOut(page: Page): Promise<void> { + await expect(page.locator('#username')).toBeVisible({ timeout: 60_000 }); + const cookies = (await page.context().cookies()).map((cookie) => cookie.name); + expect(cookies.filter((name) => /^jmap_(session|stalwart_ctx|rt|at)/.test(name))).toEqual([]); + // And it stays that way. + await page.reload(); + await expect(page.locator('#username')).toBeVisible({ timeout: 60_000 }); +} + +test.beforeAll(() => { + requireEntEnv(); +}); + +test('the admin wipes a device: at its next connect everything on it goes, and the instance hears', async ({ browser }) => { + const subject = `Wipe me ${RUN}`; + const unsent = `Unsent secret ${RUN}`; + const admin = await adminContext(browser); + await forgetDevices(admin, ENT.dave); + await forgetDevices(admin, ENT.alice); + await seedMail(ENT.dave, subject); + + // A second user, so the page shows what an admin really sees. + const other = await userPage(browser, ENT.alice); + await enableOffline(other); + const otherDevice = await theDevice(admin, ENT.alice); + + const page = await userPage(browser, ENT.dave); + await enableOffline(page); + await toMail(page, subject); + const device = await theDevice(admin, ENT.dave); + expect(device.user).toBe(ENT.dave); + expect(device.platform).toContain('Chrom'); + expect(device.wipe).toBeNull(); + + const before = await rawStorage(page); + expect(before.keyRecords).toBe(1); + expect(before.storeFiles.length).toBeGreaterThan(0); + + // What plugins and the launch handoff would have left. + await page.evaluate(async (run) => { + for (const name of ['smime-plugin-store', 'bulwark-openpgp', `plugin-made-${run}`]) { + await new Promise<void>((resolve, reject) => { + const open = indexedDB.open(name, 1); + open.onupgradeneeded = () => { open.result.createObjectStore('keys'); }; + open.onsuccess = () => { open.result.close(); resolve(); }; + open.onerror = () => reject(open.error); + }); + } + const cache = await caches.open('bulwark-launch-handoff-v1'); + await cache.put('/handoff-test', new Response('secret file')); + }, RUN); + + // A message waits in the outbox, so the note has something to count. + await page.context().setOffline(true); + await page.keyboard.press('c'); + const composer = page.locator('[data-testid="email-composer"]'); + await composer.waitFor({ state: 'visible', timeout: 15_000 }); + const to = page.locator('[data-testid="composer-to"] input').first(); + await to.click(); + await to.fill(ENT.bob); + await to.press('Enter'); + await page.locator('[data-testid="composer-subject"]').first().fill(unsent); + await composer.locator('[contenteditable="true"]').first().click(); + await page.keyboard.type('Never sent'); + await page.locator('[data-testid="composer-subject"]').first().focus(); + await page.keyboard.press('Control+Enter'); + await expect(page.getByTestId('offline-banner-outbox')).toHaveText('1 message in the outbox', { timeout: 30_000 }); + + // The admin's side, through the page. + const adminPage = await admin.newPage(); + await adminPage.goto('/admin/org-devices'); + const section = adminPage.locator('[data-user="ent-dave@example.org"]'); + await expect(section.getByTestId('device-row')).toBeVisible({ timeout: 30_000 }); + await expect(adminPage.locator('[data-user="ent-alice@example.org"]').getByTestId('device-row')).toBeVisible(); + await section.scrollIntoViewIfNeeded(); + await shot(adminPage, 'desktop-offline-admin-devices'); + await section.getByTestId('device-wipe').click(); + await expect(adminPage.getByRole('dialog').or(adminPage.getByRole('alertdialog')).first()).toContainText('imported in that browser or app go for every account'); + await adminPage.getByRole('button', { name: 'Wipe', exact: true }).last().click(); + await expect(section.getByTestId('device-row')).toContainText('Wipe waiting', { timeout: 15_000 }); + await shot(adminPage, 'desktop-offline-admin-devices-waiting'); + expect((await devicesOf(admin, ENT.dave))[0].wipe).not.toBeNull(); + + // Back on the network, with the mail server gone: the word comes from the + // instance and needs nothing of the mail server. The outbox can't leave either. + await page.context().route(`${new URL(JMAP_URL).origin}/**`, (route) => route.abort('internetdisconnected')); + await page.context().setOffline(false); + + await expect(page.locator('#username')).toBeVisible({ timeout: 90_000 }); + await expect(page.getByTestId('device-wipe-note')).toContainText('Unsent messages deleted: 1'); + expect(await page.getByTestId('device-wipe-note').textContent()).not.toContain(unsent); + + await expectStoreGone(page); + const raw = await rawStorage(page); + expect(raw.databases).not.toContain('smime-plugin-store'); + expect(raw.databases).not.toContain('bulwark-openpgp'); + expect(raw.databases).not.toContain(`plugin-made-${RUN}`); + expect(raw.caches).not.toContain('bulwark-launch-handoff-v1'); + const stored = await page.evaluate(() => JSON.stringify({ ...localStorage }) + JSON.stringify({ ...sessionStorage })); + expect(stored).not.toContain(unsent); + await page.context().unroute(`${new URL(JMAP_URL).origin}/**`); + + await expectSignedOut(page); + + // The note shows once. + await expect(page.getByTestId('device-wipe-note')).toHaveCount(0); + + const confirmed = (await devicesOf(admin, ENT.dave))[0]; + expect(confirmed.id).toBe(device.id); + expect(confirmed.wipe).toBeNull(); + expect(confirmed.wipedAt).not.toBeNull(); + expect(confirmed.wipeReason).toBe('admin'); + + // The other user's row isn't touched. + expect((await devicesOf(admin, ENT.alice)).find((row) => row.id === otherDevice.id)?.wipe).toBeNull(); + + const audit = async (action: string) => { + const res = await admin.request.get(`/api/admin/audit?action=${action}&limit=50`); + expect(res.ok()).toBe(true); + return (await res.json() as { entries: Array<{ detail: Record<string, unknown> }> }).entries.filter((entry) => entry.detail.device === device.id); + }; + expect(await audit('device.wipe.request')).toHaveLength(1); + const confirmations = await audit('device.wipe.confirm'); + expect(confirmations).toHaveLength(1); + expect(confirmations[0].detail).toMatchObject({ user: ENT.dave, reason: 'admin', unsentDeleted: 1 }); + + await adminPage.reload(); + await expect(adminPage.locator('[data-user="ent-dave@example.org"]').getByTestId('device-row')).toContainText('Wiped', { timeout: 30_000 }); + + // A new sign-in is a new device. + await page.fill('#username', ENT.dave); + await page.fill('#password', ENT_PASSWORD); + await page.click('button[type="submit"]'); + await expect(page.locator('#username')).toBeHidden({ timeout: 60_000 }); + await enableOffline(page); + await expect.poll(async () => (await devicesOf(admin, ENT.dave)).length, { timeout: 60_000 }).toBe(2); + + await Promise.all([page.context().close(), other.context().close(), admin.close()]); +}); + +test('at a start, the wipe comes before anything from the device is shown', async ({ browser }) => { + const subject = `Start wipe ${RUN}`; + const admin = await adminContext(browser); + await forgetDevices(admin, ENT.alice); + await seedMail(ENT.alice, subject); + const page = await userPage(browser, ENT.alice); + await enableOffline(page); + await toMail(page, subject); + const device = await theDevice(admin, ENT.alice); + const context = page.context(); + + // The mail was on screen here a moment ago, and comes from the device at a start. + await context.addInitScript(() => { + const look = () => { + if (document.querySelector('[data-testid="email-list-item"]')) sessionStorage.setItem('wipe-test-saw-mail', 'yes'); + }; + new MutationObserver(look).observe(document, { childList: true, subtree: true }); + }); + await page.close(); + await adminWipe(admin, device.id); + + const next = await context.newPage(); + await next.goto('/mail'); + await expect(next.locator('#username')).toBeVisible({ timeout: 60_000 }); + expect(await next.evaluate(() => sessionStorage.getItem('wipe-test-saw-mail'))).toBeNull(); + await expect(next.getByTestId('device-wipe-note')).toContainText('removed this account'); + await expectStoreGone(next); + await expect.poll(async () => (await devicesOf(admin, ENT.alice))[0].wipedAt, { timeout: 30_000 }).not.toBeNull(); + + await Promise.all([context.close(), admin.close()]); +}); + +test('with the instance out of reach the mail stays and the wipe waits, until the device is back', async ({ browser }) => { + const subject = `Waits ${RUN}`; + const admin = await adminContext(browser); + await forgetDevices(admin, ENT.carol); + await seedMail(ENT.carol, subject); + const page = await userPage(browser, ENT.carol); + await enableOffline(page); + await toMail(page, subject); + const device = await theDevice(admin, ENT.carol); + await adminWipe(admin, device.id); + + // A start with no network at all: the local copy, as ever. + await page.context().setOffline(true); + await page.reload(); + await expect(page.locator('[data-testid="email-list-item"]', { hasText: subject }).first()).toBeVisible({ timeout: 60_000 }); + expect((await rawStorage(page)).keyRecords).toBe(1); + + // The device never got the message, and the row keeps saying so. + const waiting = (await devicesOf(admin, ENT.carol))[0]; + expect(waiting.wipe).not.toBeNull(); + expect(waiting.wipedAt).toBeNull(); + + await page.context().setOffline(false); + await expect(page.locator('#username')).toBeVisible({ timeout: 90_000 }); + await expectStoreGone(page); + await expect.poll(async () => (await devicesOf(admin, ENT.carol))[0].wipedAt, { timeout: 30_000 }).not.toBeNull(); + + await Promise.all([page.context().close(), admin.close()]); +}); + +test('the user removes everything from this device, from settings', async ({ browser }) => { + const admin = await adminContext(browser); + await forgetDevices(admin, ENT.bob); + const page = await userPage(browser, ENT.bob); + // Switched on and no more: this account has a lot of mail, so the wipe lands in + // the middle of its first sync, with the worker busy writing. + await page.goto('/settings/backup/offline'); + const toggle = page.getByTestId('offline-switch'); + await expect(toggle).toBeVisible({ timeout: 30_000 }); + if ((await toggle.getAttribute('aria-checked')) !== 'true') await toggle.click(); + await expect(toggle).toHaveAttribute('aria-checked', 'true'); + await expect.poll(async () => (await rawStorage(page)).keyRecords, { timeout: 60_000 }).toBe(1); + await expect(page.getByTestId('offline-status')).toBeVisible({ timeout: 30_000 }); + const device = await theDevice(admin, ENT.bob); + + await page.getByTestId('wipe-device-button').scrollIntoViewIfNeeded(); + await page.getByTestId('wipe-device-button').click(); + const details = page.getByTestId('wipe-device-details'); + await expect(details).toContainText('S/MIME and OpenPGP keys'); + await expect(details).toContainText('All accounts are signed out'); + await shot(page, 'desktop-offline-remove-everything'); + // Nothing has happened yet. + expect((await rawStorage(page)).keyRecords).toBe(1); + await page.getByRole('button', { name: 'Remove everything', exact: true }).last().click(); + + await expect(page.locator('#username')).toBeVisible({ timeout: 60_000 }); + await expectStoreGone(page); + await expectSignedOut(page); + await expect.poll(async () => (await devicesOf(admin, ENT.bob)).find((row) => row.id === device.id)?.wipeReason, { timeout: 30_000 }).toBe('user'); + + await Promise.all([page.context().close(), admin.close()]); +}); + +test('the sign-in page says what waits for a new password, in numbers', async ({ browser }) => { + const context = await browser.newContext(contextOptions()); + const page = await context.newPage(); + await page.goto('/login'); + await expect(page.locator('#username')).toBeVisible({ timeout: 30_000 }); + const at = Date.now(); + await page.evaluate((now) => { + localStorage.setItem('bulwark-offline-evicted', JSON.stringify({ 'someone@example.org': now })); + localStorage.setItem('bulwark-credentials-refused', JSON.stringify({ 'someone@example.org': { at: now, unsent: 3, certain: true } })); + }, at); + await page.reload(); + const note = page.getByTestId('login-refused-waiting'); + await expect(note).toBeVisible({ timeout: 30_000 }); + await expect(note).toContainText('3 unsent messages wait for your new password'); + await expect(note).not.toContainText('someone'); + await context.close(); +}); + +test('an account without offline mode has no row', async ({ browser }) => { + const admin = await adminContext(browser); + await forgetDevices(admin, ENT.carol); + const page = await userPage(browser, ENT.carol); + await page.waitForTimeout(3_000); + expect(await devicesOf(admin, ENT.carol)).toEqual([]); + await Promise.all([page.context().close(), admin.close()]); +}); diff --git a/lib/__tests__/collector-validator.ts b/lib/__tests__/collector-validator.ts new file mode 100644 index 000000000..9e895510e --- /dev/null +++ b/lib/__tests__/collector-validator.ts @@ -0,0 +1,26 @@ +// Not a test: loads the collector's real validator for the tests that check against it. +import { spawnSync } from 'node:child_process'; +import { existsSync, mkdtempSync, writeFileSync } from 'node:fs'; +import { tmpdir } from 'node:os'; +import path from 'node:path'; +import { pathToFileURL } from 'node:url'; + +export interface CollectorValidator { + validate(input: unknown): { schema: string; build: string | null; platform: string; version: string; os_family: string; node_version: string | null } | null; + validateErrorBatch(input: unknown): { errors: { name: string; count: string; days: number; version: string; frames: unknown[] }[] } | null; +} + +/** + * The validator on the branch the desktop app ships against, read from git so it doesn't + * matter what the dashboard checkout has out. Null where there's no dashboard repo (CI). + */ +export async function loadCollectorValidator(): Promise<CollectorValidator | null> { + const repo = process.env.BULWARK_DASHBOARD_DIR ?? 'C:/Users/info/Downloads/jmap-webmail/repos/dashboard'; + const ref = process.env.BULWARK_DASHBOARD_REF ?? 'feat/desktop-platform'; + if (!existsSync(repo)) return null; + const shown = spawnSync('git', ['-C', repo, 'show', `${ref}:telemetry-collector/src/validate.ts`], { encoding: 'utf8' }); + if (shown.status !== 0) throw new Error(`no validator at ${ref}: ${shown.stderr}`); + const file = path.join(mkdtempSync(path.join(tmpdir(), 'bw-validator-')), 'validate.ts'); + writeFileSync(file, shown.stdout); + return await import(/* @vite-ignore */ pathToFileURL(file).href) as CollectorValidator; +} diff --git a/lib/__tests__/outgoing-hosts-mode.test.ts b/lib/__tests__/outgoing-hosts-mode.test.ts index fd4b4d713..182cb26e1 100644 --- a/lib/__tests__/outgoing-hosts-mode.test.ts +++ b/lib/__tests__/outgoing-hosts-mode.test.ts @@ -82,6 +82,10 @@ const probes: Record<string, () => Promise<boolean>> = { await GET(new NextRequest('https://webmail.example/api/bimi?domain=probe.org')); return bimiResolve.mock.calls.length > 0; }, + 'spellcheck-dictionaries': async () => { + const { dictionaryDownloadAllowed } = await import('@/lib/desktop/dictionary-download'); + return dictionaryDownloadAllowed(); + }, translate: async () => { const { POST } = await import('@/app/api/translate/route'); await POST(new NextRequest('https://webmail.example/api/translate', { diff --git a/lib/__tests__/telemetry-desktop-endpoint.test.ts b/lib/__tests__/telemetry-desktop-endpoint.test.ts new file mode 100644 index 000000000..7fa525dd2 --- /dev/null +++ b/lib/__tests__/telemetry-desktop-endpoint.test.ts @@ -0,0 +1,129 @@ +// @vitest-environment node +import { mkdtempSync, rmSync } from 'node:fs'; +import { tmpdir } from 'node:os'; +import path from 'node:path'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; + +// What's on disk can't aim the desktop app's telemetry anywhere: a state file or a config +// file is something any program on the machine can write. Nothing here reaches a network. + +const flag = vi.hoisted(() => ({ IS_DESKTOP_BUILD: true, dsn: '' })); +vi.mock('@/lib/desktop/flag', () => ({ + get IS_DESKTOP_BUILD() { + return flag.IS_DESKTOP_BUILD; + }, +})); +vi.mock('@/lib/admin/third-party-mode', () => ({ isNoThirdPartyTrafficOn: async () => false })); +vi.mock('@/lib/admin/plugin-registry', () => ({ + getPluginRegistry: async () => ({ plugins: [] }), + getThemeRegistry: async () => ({ themes: [] }), +})); +vi.mock('@/lib/admin/config-manager', () => ({ + configManager: { + ensureLoaded: async () => {}, + getPolicy: () => ({ features: {} }), + getAll: () => ({}), + get: (key: string, fallback: unknown) => (key === 'errorReportingDsn' ? flag.dsn : fallback), + }, +})); +const sent = vi.fn(async (_url: string, _init?: { body?: string }) => new Response('{"ok":true}')); +vi.mock('@/lib/telemetry/endpoint-guard', async (importOriginal) => { + const actual = await importOriginal<typeof import('@/lib/telemetry/endpoint-guard')>(); + return { + ...actual, + resolveEndpointAllowed: vi.fn(async () => ({ ok: true })), + fetchTelemetryTarget: (url: string, init?: { body?: string }) => sent(url, init), + }; +}); + +import { DEFAULT_ENDPOINT, loadState, saveState, sendOnce } from '@/lib/telemetry'; +import { resetInstantErrorsForTests, sendInstantErrors } from '@/lib/telemetry/instant-errors'; +import { flushErrors, recordError, resetAggregateForTests } from '@/lib/error-reporting/aggregate'; +import { browserErrorSettings, errorReportingSettings } from '@/lib/error-reporting/settings'; +import { captureDesktopMainError } from '@/lib/error-reporting/server'; + +const PRIVACY = Symbol.for('bulwark.desktop.privacy'); +const holder = globalThis as unknown as Record<symbol, unknown>; +const EVIL = 'https://collector.evil.example/v1/heartbeat'; +const DSN = 'https://6f0b9c79ed3a4315b76595bc2536ac40@bugsink.evil.example/3'; + +let dir = ''; + +beforeEach(async () => { + flag.IS_DESKTOP_BUILD = true; + flag.dsn = ''; + sent.mockClear(); + dir = mkdtempSync(path.join(tmpdir(), 'bw-telemetry-endpoint-')); + vi.stubEnv('TELEMETRY_DATA_DIR', dir); + vi.stubEnv('BULWARK_TELEMETRY', ''); + resetAggregateForTests(); + resetInstantErrorsForTests(); + holder[PRIVACY] = { telemetry: true, crashReports: true, appVersion: '0.3.0', build: 'desktop.standalone.stable' }; + await saveState({ consent: 'off', endpoint: EVIL, consentedAt: null, lastSentAt: null, nextScheduledAt: null }); +}); + +afterEach(() => { + delete holder[PRIVACY]; + vi.unstubAllEnvs(); + vi.unstubAllGlobals(); + rmSync(dir, { recursive: true, force: true }); +}); + +describe('the desktop build', () => { + it('sends a heartbeat to the project\'s collector, whatever the state file names', async () => { + expect((await sendOnce()).ok).toBe(true); + expect(sent.mock.calls.map(([url]) => url)).toEqual([DEFAULT_ENDPOINT]); + }); + + it('isn\'t switched off by a blank endpoint in the state file either: consent is the switch', async () => { + await saveState({ ...(await loadState()), endpoint: '' }); + expect((await sendOnce()).ok).toBe(true); + expect(sent.mock.calls.map(([url]) => url)).toEqual([DEFAULT_ENDPOINT]); + }); + + it('sends error counts there too', async () => { + recordError({ name: 'TypeError', frames: [] }, 'server', '1.20.0+desktop'); + await flushErrors(); + await sendInstantErrors(); + expect(sent.mock.calls.map(([url]) => url)).toEqual([new URL('errors', DEFAULT_ENDPOINT).toString()]); + }); + + it('has no DSN, whatever a config file names', async () => { + flag.dsn = DSN; + expect(errorReportingSettings().dsn).toBe(''); + expect((await browserErrorSettings()).dsn).toBe(''); + }); + + it('sends a main-process error to no config-file DSN, with consent on', async () => { + flag.dsn = DSN; + const fetchSpy = vi.fn().mockResolvedValue(new Response(null)); + vi.stubGlobal('fetch', fetchSpy); + await captureDesktopMainError({ name: 'TypeError', message: 'x', stack: 'TypeError: x\n at f (/desktop/main.mjs:1:2)' }); + expect(fetchSpy).not.toHaveBeenCalled(); + }); +}); + +describe('a server build', () => { + beforeEach(() => { + flag.IS_DESKTOP_BUILD = false; + vi.stubEnv('BULWARK_TELEMETRY', 'on'); + }); + + it('still uses the endpoint its admin stored', async () => { + await saveState({ ...(await loadState()), endpoint: 'https://collector.example.org/v1/heartbeat' }); + await sendOnce(); + expect(sent.mock.calls.map(([url]) => url)).toEqual(['https://collector.example.org/v1/heartbeat']); + }); + + it('still takes a blank endpoint as off', async () => { + await saveState({ ...(await loadState()), endpoint: '' }); + expect(await sendOnce()).toMatchObject({ ok: false, error: 'endpoint blank' }); + expect(sent).not.toHaveBeenCalled(); + }); + + it('still has its admin\'s DSN', async () => { + flag.dsn = DSN; + expect(errorReportingSettings().dsn).toBe(DSN); + expect((await browserErrorSettings()).dsn).toBe(DSN); + }); +}); diff --git a/lib/__tests__/telemetry-desktop.test.ts b/lib/__tests__/telemetry-desktop.test.ts new file mode 100644 index 000000000..9d1c66860 --- /dev/null +++ b/lib/__tests__/telemetry-desktop.test.ts @@ -0,0 +1,397 @@ +// @vitest-environment node +import { mkdtempSync, readFileSync, rmSync } from 'node:fs'; +import { createServer, type Server } from 'node:http'; +import type { AddressInfo } from 'node:net'; +import { tmpdir } from 'node:os'; +import path from 'node:path'; +import { afterAll, afterEach, beforeAll, beforeEach, describe, expect, it, vi } from 'vitest'; + +// The desktop app's heartbeat and error counts, on a real socket: what counts is what +// reaches the collector, so these listen on a port rather than stubbing fetch. Consent +// comes from the shell, not from a file or the environment. The bodies go through the +// collector's real validator. + +const flag = vi.hoisted(() => ({ IS_DESKTOP_BUILD: true })); +vi.mock('@/lib/desktop/flag', () => ({ + get IS_DESKTOP_BUILD() { + return flag.IS_DESKTOP_BUILD; + }, +})); +vi.mock('@/lib/admin/third-party-mode', () => ({ isNoThirdPartyTrafficOn: async () => false })); +vi.mock('@/lib/admin/plugin-registry', () => ({ + getPluginRegistry: async () => ({ plugins: [] }), + getThemeRegistry: async () => ({ themes: [] }), +})); +vi.mock('@/lib/admin/config-manager', () => ({ + configManager: { + ensureLoaded: async () => {}, + getPolicy: () => ({ features: { calendarEnabled: true } }), + getAll: () => ({}), + get: (_key: string, fallback: unknown) => fallback, + }, +})); + +import { buildPayload, loadState, saveState, sendOnce, startScheduler, stopScheduler } from '@/lib/telemetry'; +import { resetInstantErrorsForTests, sendInstantErrors } from '@/lib/telemetry/instant-errors'; +import { flushErrors, recordError, resetAggregateForTests } from '@/lib/error-reporting/aggregate'; +import { shouldCollectErrors } from '@/lib/error-reporting/settings'; +import { fetchTelemetryTarget } from '@/lib/telemetry/endpoint-guard'; +import { OUTGOING_HOSTS } from '@/lib/admin/outgoing-hosts-registry'; +import { DESKTOP_CATCH_UP_MAX_MS, DESKTOP_CATCH_UP_MIN_MS } from '@/lib/desktop/desktop-telemetry'; +import { loadCollectorValidator } from './collector-validator'; + +const collector = await loadCollectorValidator(); + +interface Received { + path: string; + body: Record<string, unknown>; +} + +let server: Server; +let received: Received[] = []; +let answer = 200; +let base = ''; +let dir = ''; + +const PRIVACY = Symbol.for('bulwark.desktop.privacy'); +const TRUSTED = Symbol.for('bulwark.desktop.trustedJmapOrigins'); +const holder = globalThis as unknown as Record<symbol, unknown>; + +function shellSays(privacy: { telemetry: boolean; crashReports: boolean } | null): void { + holder[PRIVACY] = privacy ? { ...privacy, appVersion: '0.3.0', build: 'desktop.standalone.beta', endpoint: `${base}/v1/heartbeat` } : undefined; +} + +beforeAll(async () => { + server = createServer((req, res) => { + let raw = ''; + req.on('data', (chunk) => { raw += chunk; }); + req.on('end', () => { + received.push({ path: req.url ?? '', body: JSON.parse(raw) }); + res.writeHead(answer, { 'content-type': 'application/json' }); + res.end('{"ok":true}'); + }); + }); + await new Promise<void>((resolve) => server.listen(0, '127.0.0.1', resolve)); + base = `http://127.0.0.1:${(server.address() as AddressInfo).port}`; +}); + +afterAll(async () => { + await new Promise((resolve) => server.close(resolve)); +}); + +beforeEach(async () => { + flag.IS_DESKTOP_BUILD = true; + received = []; + answer = 200; + dir = mkdtempSync(path.join(tmpdir(), 'bw-telemetry-desktop-')); + vi.stubEnv('TELEMETRY_DATA_DIR', dir); + vi.stubEnv('BULWARK_TELEMETRY_ALLOW_PRIVATE', '1'); + vi.stubEnv('BULWARK_TELEMETRY', ''); + vi.stubEnv('BULWARK_TELEMETRY_DISABLED', ''); + vi.stubEnv('BULWARK_TELEMETRY_ERRORS', ''); + shellSays(null); + resetAggregateForTests(); + resetInstantErrorsForTests(); + // Never used on the desktop build. Reaching it would show up as a failed send. + await saveState({ consent: 'off', endpoint: 'http://127.0.0.1:1/ignored', consentedAt: null, lastSentAt: null, nextScheduledAt: null }); +}); + +afterEach(async () => { + await stopScheduler(); + delete holder[PRIVACY]; + delete holder[TRUSTED]; + vi.unstubAllEnvs(); + rmSync(dir, { recursive: true, force: true }); +}); + +describe('nothing leaves before consent', () => { + it('sends no heartbeat when the shell has said nothing', async () => { + expect((await sendOnce()).ok).toBe(false); + expect(received).toEqual([]); + }); + + it('sends no heartbeat on a no from the shell, whatever the file or the environment say', async () => { + shellSays({ telemetry: false, crashReports: false }); + vi.stubEnv('BULWARK_TELEMETRY', 'on'); + await saveState({ ...(await loadState()), consent: 'on' }); + expect((await sendOnce()).ok).toBe(false); + expect(received).toEqual([]); + }); + + it('sends no error counts when the shell has said nothing', async () => { + recordError({ name: 'TypeError', frames: [] }, 'server', '1.0.0'); + await flushErrors(); + await sendInstantErrors(); + expect(received).toEqual([]); + expect(await shouldCollectErrors()).toBe(false); + }); +}); + +describe('the heartbeat with consent', () => { + it('goes out, and stops the moment consent goes', async () => { + shellSays({ telemetry: true, crashReports: false }); + expect((await sendOnce()).ok).toBe(true); + expect(received).toHaveLength(1); + expect(received[0].path).toBe('/v1/heartbeat'); + shellSays({ telemetry: false, crashReports: false }); + expect((await sendOnce()).ok).toBe(false); + expect(received).toHaveLength(1); + }); + + it('says desktop, the app version, mode and channel, in schema 1', async () => { + shellSays({ telemetry: true, crashReports: false }); + await sendOnce(); + expect(received[0].body).toMatchObject({ schema: '1', platform: 'desktop', version: '0.3.0', build: 'desktop.standalone.beta' }); + expect(received[0].body).not.toHaveProperty('errors'); + expect(received[0].body).not.toHaveProperty('mode'); + expect(received[0].body).not.toHaveProperty('channel'); + }); + + it.skipIf(!collector)('is what the real collector accepts, and it keeps the build', async () => { + shellSays({ telemetry: true, crashReports: false }); + await sendOnce(); + const clean = collector!.validate(received[0].body)!; + expect(clean).not.toBeNull(); + expect(clean.schema).toBe('1'); + expect(clean.build).toBe('desktop.standalone.beta'); + expect(clean.version).toBe('0.3.0'); + expect(clean.platform).toBe('desktop'); + // Schema 2 refuses any extra key, so this proves there is none. + expect(collector!.validate({ ...received[0].body, schema: '2', errors: [] })).not.toBeNull(); + }); + + it('stays schema 1 with crash reports on too', async () => { + shellSays({ telemetry: true, crashReports: true }); + expect((await buildPayload()).schema).toBe('1'); + }); +}); + +describe('quit within an hour of each start', () => { + const nextIn = async () => new Date((await loadState()).nextScheduledAt!).getTime() - Date.now(); + + it.each([ + [0, DESKTOP_CATCH_UP_MIN_MS], + [0.5, (DESKTOP_CATCH_UP_MIN_MS + DESKTOP_CATCH_UP_MAX_MS) / 2], + [0.999999, DESKTOP_CATCH_UP_MAX_MS], + ])('after a restart with a slot in the past, at random %s it goes after about %s ms, not an hour', async (random, expected) => { + shellSays({ telemetry: true, crashReports: false }); + vi.spyOn(Math, 'random').mockReturnValue(random); + await saveState({ ...(await loadState()), nextScheduledAt: new Date(Date.now() - 3 * 86_400_000).toISOString() }); + await startScheduler(); + const wait = await nextIn(); + vi.restoreAllMocks(); + expect(wait).toBeGreaterThan(expected - 5_000); + expect(wait).toBeLessThanOrEqual(expected); + }); + + it('the wait is between 30 s and 10 min, and differs from start to start', () => { + expect(DESKTOP_CATCH_UP_MIN_MS).toBe(30_000); + expect(DESKTOP_CATCH_UP_MAX_MS).toBe(600_000); + }); + + it('the first run with consent does not wait an hour either', async () => { + shellSays({ telemetry: true, crashReports: false }); + await startScheduler(); + expect(await nextIn()).toBeLessThanOrEqual(DESKTOP_CATCH_UP_MAX_MS); + }); + + it('a slot still ahead stays where it is', async () => { + shellSays({ telemetry: true, crashReports: false }); + const slot = new Date(Date.now() + 5 * 3_600_000).toISOString(); + await saveState({ ...(await loadState()), nextScheduledAt: slot }); + await startScheduler(); + expect(await nextIn()).toBeGreaterThan(4 * 3_600_000); + }); + + it('a server build still waits the hour', async () => { + flag.IS_DESKTOP_BUILD = false; + vi.stubEnv('BULWARK_TELEMETRY', 'on'); + await saveState({ ...(await loadState()), endpoint: `${base}/v1/heartbeat`, nextScheduledAt: new Date(Date.now() - 86_400_000).toISOString() }); + await startScheduler(); + const wait = await nextIn(); + expect(wait).toBeGreaterThan(59 * 60_000); + expect(wait).toBeLessThanOrEqual(3_600_000); + }); +}); + +describe('BULWARK_TELEMETRY=off', () => { + beforeEach(() => { + vi.stubEnv('BULWARK_TELEMETRY', 'off'); + shellSays({ telemetry: true, crashReports: true }); + }); + + it('beats the user\'s yes for the heartbeat', async () => { + expect((await sendOnce()).ok).toBe(false); + expect(received).toEqual([]); + }); + + it('beats it for error counts too, and nothing is collected', async () => { + expect(await shouldCollectErrors()).toBe(false); + recordError({ name: 'TypeError', frames: [] }, 'server', '1.20.0+desktop'); + await flushErrors(); + await sendInstantErrors(); + expect(received).toEqual([]); + }); + + it('the legacy variable does the same', async () => { + vi.stubEnv('BULWARK_TELEMETRY', ''); + vi.stubEnv('BULWARK_TELEMETRY_DISABLED', '1'); + expect((await sendOnce()).ok).toBe(false); + expect(await shouldCollectErrors()).toBe(false); + expect(received).toEqual([]); + }); + + it('=on is no yes by itself', async () => { + vi.stubEnv('BULWARK_TELEMETRY', 'on'); + shellSays({ telemetry: false, crashReports: false }); + expect((await sendOnce()).ok).toBe(false); + expect(received).toEqual([]); + }); + + it('the list of outgoing hosts says how the desktop app differs', () => { + const entry = OUTGOING_HOSTS.find((host) => host.id === 'telemetry')!; + expect(entry.usedBy).toMatch(/crash report consent alone/i); + expect(entry.off).toMatch(/desktop app/i); + expect(entry.off).toMatch(/no admin page/i); + }); +}); + +describe('a refusal from the collector', () => { + it('isn\'t retried on every tick', async () => { + answer = 400; + shellSays({ telemetry: false, crashReports: true }); + recordError({ name: 'TypeError', frames: [] }, 'server', '0.3.0-beta.1+desktop'); + await flushErrors(); + await sendInstantErrors(); + await sendInstantErrors(); + await sendInstantErrors(); + expect(received).toHaveLength(1); + }); + + it('a passing failure is tried again', async () => { + answer = 503; + shellSays({ telemetry: false, crashReports: true }); + recordError({ name: 'TypeError', frames: [] }, 'server', '1.20.0+desktop'); + await flushErrors(); + await sendInstantErrors(); + await sendInstantErrors(); + expect(received).toHaveLength(2); + }); + + it('rate limiting is tried again', async () => { + answer = 429; + shellSays({ telemetry: false, crashReports: true }); + recordError({ name: 'TypeError', frames: [] }, 'server', '1.20.0+desktop'); + await flushErrors(); + await sendInstantErrors(); + await sendInstantErrors(); + expect(received).toHaveLength(2); + }); + + it.skipIf(!collector)('a beta version with the tag is what the patched collector takes', async () => { + shellSays({ telemetry: false, crashReports: true }); + recordError({ name: 'TypeError', frames: [] }, 'server', '0.3.0-beta.1+desktop'); + await flushErrors(); + await sendInstantErrors(); + expect(collector!.validateErrorBatch(received[0].body)!.errors[0].version).toBe('0.3.0-beta.1+desktop'); + }); + + it('a server build still retries as before', async () => { + flag.IS_DESKTOP_BUILD = false; + vi.stubEnv('BULWARK_TELEMETRY', 'on'); + vi.stubEnv('BULWARK_TELEMETRY_ERRORS', 'instant'); + answer = 400; + await saveState({ ...(await loadState()), endpoint: `${base}/v1/heartbeat` }); + recordError({ name: 'TypeError', frames: [] }, 'server', '1.20.0'); + await flushErrors(); + await sendInstantErrors(); + await sendInstantErrors(); + expect(received).toHaveLength(2); + }); +}); + +describe('crash reports have their own consent', () => { + const mainFrame = { path: '/desktop/main.mjs', line: 4, column: 2 }; + const bundleFrame = { path: '/.next/server/chunks/1.js', line: 9, column: 1 }; + + it('collects and sends error counts with telemetry off, and no heartbeat', async () => { + shellSays({ telemetry: false, crashReports: true }); + expect(await shouldCollectErrors()).toBe(true); + recordError({ name: 'TypeError', frames: [bundleFrame] }, 'server', '1.20.0+desktop'); + await flushErrors(); + await sendInstantErrors(); + expect(received.map((r) => r.path)).toEqual(['/v1/errors']); + expect((await sendOnce()).ok).toBe(false); + expect(received).toHaveLength(1); + }); + + it('telemetry alone collects no errors', async () => { + shellSays({ telemetry: true, crashReports: false }); + expect(await shouldCollectErrors()).toBe(false); + recordError({ name: 'TypeError', frames: [] }, 'server', '1.20.0+desktop'); + await flushErrors(); + await sendInstantErrors(); + expect(received).toEqual([]); + }); + + it.skipIf(!collector)('a batch with a main-process error is what the real collector accepts', async () => { + shellSays({ telemetry: false, crashReports: true }); + recordError({ name: 'TypeError', frames: [mainFrame, bundleFrame] }, 'server', '1.20.0+desktop'); + await flushErrors(); + await sendInstantErrors(); + const clean = collector!.validateErrorBatch(received[0].body)!; + expect(clean).not.toBeNull(); + expect(clean.errors[0].version).toBe('1.20.0+desktop'); + // The unpatched collector refuses a whole batch over a frame outside the bundles. + expect(clean.errors[0].frames).toEqual([expect.objectContaining({ path: '/.next/server/chunks/1.js' })]); + }); + + it('keeps main-process frames in what stays on this computer', async () => { + shellSays({ telemetry: false, crashReports: true }); + recordError({ name: 'TypeError', frames: [mainFrame] }, 'server', '1.20.0+desktop'); + await flushErrors(); + const stored = JSON.parse(readFileSync(path.join(dir, 'errors.json'), 'utf8')) as Record<string, Record<string, { frames: { path: string }[] }>>; + const entry = Object.values(Object.values(stored)[0])[0]; + expect(entry.frames[0].path).toBe('/desktop/main.mjs'); + }); +}); + +describe('the endpoint guard', () => { + it('still refuses a private address when the shell trusts it as a mail server', async () => { + vi.stubEnv('BULWARK_TELEMETRY_ALLOW_PRIVATE', ''); + holder[TRUSTED] = new Set([base, 'http://192.168.1.5']); + await expect(fetchTelemetryTarget(`${base}/v1/heartbeat`, { method: 'POST', body: '{}' })).rejects.toThrow(); + await expect(fetchTelemetryTarget('http://192.168.1.5/v1/heartbeat', { method: 'POST', body: '{}' })).rejects.toThrow(); + expect(received).toEqual([]); + }); + + it('a stored endpoint on a private address goes nowhere with consent', async () => { + vi.stubEnv('BULWARK_TELEMETRY_ALLOW_PRIVATE', ''); + shellSays({ telemetry: true, crashReports: false }); + holder[TRUSTED] = new Set([base]); + const result = await sendOnce(); + expect(result.ok).toBe(false); + expect(result.error).toContain('endpoint blocked'); + expect(received).toEqual([]); + }); +}); + +describe('a server build', () => { + it('ignores what a shell would have said, so the admin\'s consent stands', async () => { + flag.IS_DESKTOP_BUILD = false; + shellSays({ telemetry: true, crashReports: true }); + vi.stubEnv('BULWARK_TELEMETRY', ''); + expect((await sendOnce()).ok).toBe(false); + expect(received).toEqual([]); + expect(await shouldCollectErrors()).toBe(false); + await saveState({ ...(await loadState()), consent: 'on', endpoint: `${base}/v1/heartbeat` }); + expect((await sendOnce()).ok).toBe(true); + expect(received[0].body.platform).not.toBe('desktop'); + expect(received[0].body.build).not.toBe('desktop.standalone.beta'); + }); +}); + +// So a typo in the path can't quietly turn the checks above off on a machine with the repo. +it.skipIf(process.env.CI)('finds the collector on this machine', () => { + expect(collector).not.toBeNull(); +}); diff --git a/lib/__tests__/window-controls-host.test.tsx b/lib/__tests__/window-controls-host.test.tsx new file mode 100644 index 000000000..b4d6f8673 --- /dev/null +++ b/lib/__tests__/window-controls-host.test.tsx @@ -0,0 +1,340 @@ +import { act, cleanup, fireEvent, render, screen, waitFor } from '@testing-library/react'; +import { readdirSync, readFileSync, statSync } from 'node:fs'; +import { join } from 'node:path'; +import { afterEach, describe, expect, it, vi } from 'vitest'; +import { WindowControlsHost } from '@/components/layout/window-controls-host'; +import { WindowMenuBar } from '@/components/layout/window-menu-bar'; +import { CONTROLS_ATTRIBUTE, CONTROLS_LEFT_ATTRIBUTE, ROW_ATTRIBUTE, ROW_LEFT_ATTRIBUTE, ROW_RIGHT_ATTRIBUTE, TITLEBAR_RIGHT_VAR, TITLEBAR_ROW_VAR, markWindowRows, readTitlebarArea, watchWindowRows } from '@/lib/window-controls-overlay'; + +class FakeOverlay extends EventTarget { + visible = true; + rect = { x: 0, y: 0, width: 867, height: 40 }; + getTitlebarAreaRect() { + return this.rect; + } + change(next: Partial<FakeOverlay>) { + Object.assign(this, next); + this.dispatchEvent(new Event('geometrychange')); + } +} + +function installOverlay(overlay: FakeOverlay | undefined) { + Object.defineProperty(navigator, 'windowControlsOverlay', { value: overlay, configurable: true }); +} + +const root = document.documentElement; +const rightInset = () => root.style.getPropertyValue(TITLEBAR_RIGHT_VAR); + +afterEach(() => { + cleanup(); + installOverlay(undefined); + root.style.removeProperty(TITLEBAR_RIGHT_VAR); + root.style.removeProperty(TITLEBAR_ROW_VAR); + root.removeAttribute(CONTROLS_ATTRIBUTE); + root.removeAttribute(CONTROLS_LEFT_ATTRIBUTE); +}); + +describe('the menu strip in the desktop app', () => { + type BarEvent = { visible: boolean; open?: string }; + + function withBar() { + let send: (event: BarEvent) => void = () => {}; + const open = vi.fn(); + window.bulwarkDesktop = { + version: 1, + platform: 'win32', + menu: { + setState: () => {}, + bar: { + entries: async () => [{ id: 'file', label: 'File', mnemonic: 'f' }, { id: 'edit', label: 'Edit', mnemonic: 'e' }], + open, + onEvent: (listener: (event: BarEvent) => void) => { + send = listener; + return () => {}; + }, + }, + }, + } as never; + return { open, send: (event: BarEvent) => send(event) }; + } + + afterEach(() => { + window.bulwarkDesktop = undefined; + }); + + const overlayOn = () => { + Object.defineProperty(navigator, 'windowControlsOverlay', { + configurable: true, + value: Object.assign(new EventTarget(), { visible: true, getTitlebarAreaRect: () => ({ x: 0, y: 0, width: 800, height: 36 }) }), + }); + }; + + afterEach(() => { + delete (navigator as unknown as { windowControlsOverlay?: unknown }).windowControlsOverlay; + }); + + it('Alt shows the names with the focus on the first, and Escape gives it back', async () => { + overlayOn(); + const bar = withBar(); + const before = document.createElement('button'); + document.body.appendChild(before); + before.focus(); + render(<WindowMenuBar />); + await act(async () => bar.send({ visible: true })); + const file = await screen.findByRole('menuitem', { name: 'File' }); + await waitFor(() => expect(document.activeElement).toBe(file)); + fireEvent.keyDown(file, { key: 'ArrowRight' }); + expect(document.activeElement).toBe(screen.getByRole('menuitem', { name: 'Edit' })); + fireEvent.keyDown(document.activeElement!, { key: 'Escape' }); + expect(screen.queryByRole('menubar')).toBeNull(); + expect(document.activeElement).toBe(before); + before.remove(); + }); + + it('a name opens that menu natively', async () => { + overlayOn(); + const bar = withBar(); + render(<WindowMenuBar />); + await act(async () => bar.send({ visible: true })); + fireEvent.click(await screen.findByRole('menuitem', { name: 'Edit' })); + expect(bar.open).toHaveBeenCalledWith('edit', expect.objectContaining({ x: expect.any(Number), y: expect.any(Number) })); + }); + + it('Alt and a letter opens that one right away', async () => { + overlayOn(); + const bar = withBar(); + render(<WindowMenuBar />); + await act(async () => bar.send({ visible: true, open: 'file' })); + await waitFor(() => expect(bar.open).toHaveBeenCalledWith('file', expect.anything())); + }); + + it('the shell can take it away again', async () => { + overlayOn(); + const bar = withBar(); + render(<WindowMenuBar />); + await act(async () => bar.send({ visible: true })); + await screen.findByRole('menubar'); + await act(async () => bar.send({ visible: false })); + expect(screen.queryByRole('menubar')).toBeNull(); + }); + + it('with no bridge there is none, and the title stays', async () => { + overlayOn(); + render(<WindowMenuBar />); + expect(screen.queryByRole('menubar')).toBeNull(); + }); +}); + +describe('the window controls over the app', () => { + const overlayAt = (x: number, width: number, height = 56) => { + const fake = Object.assign(new EventTarget(), { visible: true, getTitlebarAreaRect: () => ({ x, y: 0, width, height }) }); + installOverlay(fake as never); + return fake; + }; + + it('the root layout has no messages: the host there reads none, and the bar sits below', () => { + const read = (file: string) => readFileSync(join(process.cwd(), file), 'utf8'); + expect(read('components/layout/window-controls-host.tsx')).not.toContain('next-intl'); + expect(read('app/(main)/layout.tsx')).toContain('<WindowControlsHost />'); + expect(read('app/(main)/layout.tsx')).not.toContain('<WindowMenuBar'); + for (const layout of ['app/(main)/[locale]/layout.tsx', 'app/(main)/admin/layout.tsx']) expect(read(layout)).toContain('<WindowMenuBar />'); + }); + + it('does nothing without the API', () => { + installOverlay(undefined); + render(<WindowControlsHost />); + expect(root.hasAttribute(CONTROLS_ATTRIBUTE)).toBe(false); + expect(rightInset()).toBe(''); + expect(readTitlebarArea()).toBeNull(); + }); + + it('does nothing when the overlay is there but hidden', () => { + installOverlay(Object.assign(new EventTarget(), { visible: false, getTitlebarAreaRect: () => ({ x: 0, y: 0, width: 800, height: 56 }) }) as never); + render(<WindowControlsHost />); + expect(root.hasAttribute(CONTROLS_ATTRIBUTE)).toBe(false); + }); + + it('draws no row of its own: no title, no strip, nothing on the page at all', () => { + overlayAt(0, window.innerWidth - 138); + document.title = 'A subject - Bulwark'; + const { container } = render(<WindowControlsHost />); + expect(container.innerHTML).toBe(''); + expect(document.body.textContent).not.toContain('A subject'); + }); + + it('says how much room the controls take, on the right', () => { + overlayAt(0, window.innerWidth - 138); + render(<WindowControlsHost />); + expect(root.hasAttribute(CONTROLS_ATTRIBUTE)).toBe(true); + expect(rightInset()).toBe('138px'); + expect(root.style.getPropertyValue(TITLEBAR_ROW_VAR)).toBe('56px'); + expect(root.hasAttribute(CONTROLS_LEFT_ATTRIBUTE)).toBe(false); + }); + + it('and on the left, on macOS', () => { + overlayAt(78, window.innerWidth - 78); + render(<WindowControlsHost />); + expect(rightInset()).toBe('0px'); + expect(root.hasAttribute(CONTROLS_LEFT_ATTRIBUTE)).toBe(true); + }); + + it('follows geometrychange, and takes everything back when the overlay goes', () => { + const fake = overlayAt(0, window.innerWidth - 138); + render(<WindowControlsHost />); + act(() => { + (fake as unknown as { getTitlebarAreaRect: () => object }).getTitlebarAreaRect = () => ({ x: 0, y: 0, width: window.innerWidth - 100, height: 56 }); + fake.dispatchEvent(new Event('geometrychange')); + }); + expect(rightInset()).toBe('100px'); + act(() => { + (fake as unknown as { visible: boolean }).visible = false; + fake.dispatchEvent(new Event('geometrychange')); + }); + expect(root.hasAttribute(CONTROLS_ATTRIBUTE)).toBe(false); + expect(rightInset()).toBe(''); + }); +}); + +describe('which rows hold the controls', () => { + const W = window.innerWidth; + const AREA = { x: 0, y: 0, width: W - 138, height: 56 }; + const row = (className: string, rect: { left: number; right: number; top?: number; height?: number }, parent: HTMLElement = document.body, attrs: Record<string, string> = {}) => { + const el = document.createElement('div'); + el.className = className; + for (const [name, value] of Object.entries(attrs)) el.setAttribute(name, value); + const top = rect.top ?? 0; + const height = rect.height ?? 56; + el.getBoundingClientRect = () => ({ left: rect.left, right: rect.right, top, bottom: top + height, width: rect.right - rect.left, height, x: rect.left, y: top, toJSON: () => ({}) }); + parent.appendChild(el); + return el; + }; + + afterEach(() => { + document.body.innerHTML = ''; + }); + + it('three panes: all are rows to drag by, and only the reader\'s toolbar makes room', () => { + const sidebar = row('h-14', { left: 56, right: 300 }); + const list = row('h-14', { left: 300, right: 700 }); + const reader = row('h-14', { left: 700, right: W }); + markWindowRows(AREA); + for (const el of [sidebar, list, reader]) expect(el.hasAttribute(ROW_ATTRIBUTE)).toBe(true); + expect(sidebar.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(false); + expect(list.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(false); + expect(reader.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(true); + }); + + it('with no reader, the list\'s header is the one', () => { + const list = row('h-14', { left: 300, right: W }); + markWindowRows(AREA); + expect(list.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(true); + }); + + it('a row further down is no row of the window\'s', () => { + const lower = row('h-14', { left: 0, right: W, top: 100 }); + markWindowRows(AREA); + expect(lower.hasAttribute(ROW_ATTRIBUTE)).toBe(false); + expect(lower.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(false); + }); + + it('a tall box at the top is a pane, unless it says otherwise', () => { + const pane = row('h-14', { left: 0, right: W, height: 600 }); + const header = row('', { left: 0, right: W, height: 72 }, document.body, { 'data-window-top-row': '' }); + markWindowRows(AREA); + expect(pane.hasAttribute(ROW_ATTRIBUTE)).toBe(false); + expect(header.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(true); + }); + + it('the outermost box of a row takes it, not one inside it too', () => { + const outer = row('h-14', { left: 0, right: W }); + const inner = row('h-14', { left: 0, right: W }, outer); + markWindowRows(AREA); + expect(outer.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(true); + expect(inner.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(false); + }); + + it('macOS: the row under the traffic lights makes room on the left', () => { + const sidebar = row('h-14', { left: 56, right: 300 }); + const list = row('h-14', { left: 300, right: W }); + markWindowRows({ x: 78, y: 0, width: W - 78, height: 56 }); + expect(sidebar.hasAttribute(ROW_LEFT_ATTRIBUTE)).toBe(true); + expect(list.hasAttribute(ROW_LEFT_ATTRIBUTE)).toBe(false); + expect(list.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(false); + }); + + it('a mark goes when the row no longer lies there', () => { + const reader = row('h-14', { left: 700, right: W }); + markWindowRows(AREA); + expect(reader.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(true); + reader.getBoundingClientRect = () => ({ left: 500, right: 800, top: 0, bottom: 56, width: 300, height: 56, x: 700, y: 0, toJSON: () => ({}) }); + markWindowRows(AREA); + expect(reader.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(false); + }); + + it('a pane that finishes changing width, with nothing else changing, is noticed', async () => { + const list = row('h-14', { left: 300, right: 700 }); + const stop = watchWindowRows(AREA); + expect(list.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(false); + list.getBoundingClientRect = () => ({ left: 300, right: W, top: 0, bottom: 56, width: W - 300, height: 56, x: 300, y: 0, toJSON: () => ({}) }); + document.body.dispatchEvent(new Event('transitionend', { bubbles: true })); + await Promise.resolve(); + expect(list.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(true); + stop(); + }); + + it('a row that appears is marked before the next paint', async () => { + const stop = watchWindowRows(AREA); + const dialogRow = row('h-12', { left: 0, right: W }); + // A mutation callback, then a microtask: both ahead of any paint. + await Promise.resolve(); + await new Promise((resolve) => setTimeout(resolve, 0)); + expect(dialogRow.hasAttribute(ROW_RIGHT_ATTRIBUTE)).toBe(true); + stop(); + }); +}); + +describe('the page roots and the stylesheet', () => { + const root = process.cwd(); + const css = readFileSync(join(root, 'app/globals.css'), 'utf8'); + + it('keeps no row: the inset is 0, and the page roots are on the safe area alone', () => { + expect(css).toMatch(/--titlebar-inset:\s*0px/); + expect(css).toMatch(/--app-top-inset:\s*env\(safe-area-inset-top, 0px\)/); + expect(css).not.toMatch(/--titlebar-inset:\s*env/); + }); + + it('takes the room from env(), so it holds from the first paint', () => { + expect(css).toContain('--titlebar-right-inset: calc(100vw - env(titlebar-area-x, 0px) - env(titlebar-area-width, 100vw))'); + expect(css).toContain('--titlebar-left-inset: env(titlebar-area-x, 0px)'); + }); + + it('does not key on the display-mode media query, which is false in Electron', () => { + expect(css).not.toMatch(/display-mode:\s*window-controls-overlay/); + }); + + it('drags by the app\'s own rows, and leaves what\'s clickable alone', () => { + expect(css).toMatch(/:is\(\[data-window-row\], \[data-window-rail\]\) \{\s*app-region: drag;/); + expect(css).toMatch(/\[contenteditable="true"\][\s\S]*?app-region: no-drag;/); + expect(css).not.toContain('.window-title-bar'); + }); + + function tsxFiles(dir: string): string[] { + return readdirSync(dir).flatMap((name) => { + const path = join(dir, name); + if (name === '__tests__' || name === 'node_modules') return []; + return statSync(path).isDirectory() ? tsxFiles(path) : name.endsWith('.tsx') ? [path] : []; + }); + } + + it('leaves no page root or top bar on the bare safe area, skeletons included', () => { + const left = [...tsxFiles(join(root, 'components')), ...tsxFiles(join(root, 'app'))] + .filter((path) => /pt-\[(?:calc\([^\]]*)?env\(safe-area-inset-top/.test(readFileSync(path, 'utf8'))); + expect(left).toEqual([]); + }); + + it('gives each skeleton the same top inset as the page it stands in for', () => { + for (const file of ['components/boot-skeleton/shell.tsx', 'components/boot-skeleton/pro-skeleton.tsx', 'components/boot-skeleton/admin-skeleton.tsx', 'components/mail/mail-app.tsx']) { + expect(readFileSync(join(root, file), 'utf8'), file).toContain('pt-[var(--app-top-inset)]'); + } + }); +}); diff --git a/lib/__tests__/window-title-bar.test.tsx b/lib/__tests__/window-title-bar.test.tsx deleted file mode 100644 index b0d4bb11b..000000000 --- a/lib/__tests__/window-title-bar.test.tsx +++ /dev/null @@ -1,130 +0,0 @@ -import { act, cleanup, render } from '@testing-library/react'; -import { readdirSync, readFileSync, statSync } from 'node:fs'; -import { join } from 'node:path'; -import { afterEach, describe, expect, it } from 'vitest'; -import { WindowTitleBar } from '@/components/layout/window-title-bar'; -import { TITLEBAR_INSET_VAR, readTitlebarArea } from '@/lib/window-controls-overlay'; - -class FakeOverlay extends EventTarget { - visible = true; - rect = { x: 0, y: 0, width: 867, height: 40 }; - getTitlebarAreaRect() { - return this.rect; - } - change(next: Partial<FakeOverlay>) { - Object.assign(this, next); - this.dispatchEvent(new Event('geometrychange')); - } -} - -function installOverlay(overlay: FakeOverlay | undefined) { - Object.defineProperty(navigator, 'windowControlsOverlay', { value: overlay, configurable: true }); -} - -const inset = () => document.documentElement.style.getPropertyValue(TITLEBAR_INSET_VAR); -const strip = () => document.querySelector<HTMLElement>('[data-window-title-bar]'); - -afterEach(() => { - cleanup(); - installOverlay(undefined); - document.documentElement.style.removeProperty(TITLEBAR_INSET_VAR); -}); - -describe('the title bar', () => { - it('shows nothing and touches nothing without the API', () => { - installOverlay(undefined); - expect(readTitlebarArea()).toBeNull(); - render(<WindowTitleBar />); - expect(strip()).toBeNull(); - expect(inset()).toBe(''); - }); - - it('shows nothing when the overlay is there but hidden', () => { - const overlay = new FakeOverlay(); - overlay.visible = false; - installOverlay(overlay); - render(<WindowTitleBar />); - expect(strip()).toBeNull(); - expect(inset()).toBe(''); - }); - - it('draws the strip next to the controls and pushes the page down', () => { - installOverlay(new FakeOverlay()); - document.title = 'Inbox - Mail'; - render(<WindowTitleBar />); - const bar = strip()!; - expect(bar.style.width).toBe('867px'); - expect(bar.style.height).toBe('40px'); - expect(bar.textContent).toBe('Inbox - Mail'); - expect(bar.classList.contains('window-title-bar')).toBe(true); - expect(inset()).toBe('40px'); - }); - - it('stays out of the accessibility tree and the tab order', () => { - installOverlay(new FakeOverlay()); - render(<WindowTitleBar />); - expect(strip()!.getAttribute('aria-hidden')).toBe('true'); - expect(strip()!.querySelector('a, button, input, [tabindex]')).toBeNull(); - }); - - it('follows geometrychange, and takes everything back when the overlay goes', () => { - const overlay = new FakeOverlay(); - installOverlay(overlay); - render(<WindowTitleBar />); - act(() => overlay.change({ rect: { x: 72, y: 0, width: 500, height: 32 } })); - expect(strip()!.style.left).toBe('72px'); - expect(inset()).toBe('32px'); - act(() => overlay.change({ visible: false })); - expect(strip()).toBeNull(); - expect(inset()).toBe(''); - }); - - it('follows the window title as the surface changes it', async () => { - installOverlay(new FakeOverlay()); - document.title = 'First'; - render(<WindowTitleBar />); - await act(async () => { - document.title = 'Second'; - await new Promise((resolve) => setTimeout(resolve, 0)); - }); - expect(strip()!.textContent).toBe('Second'); - }); -}); - -describe('the page roots and the stylesheet', () => { - const root = process.cwd(); - const css = readFileSync(join(root, 'app/globals.css'), 'utf8'); - - it('is 0 without an overlay, and exactly the old safe area then', () => { - expect(css).toContain('--titlebar-inset: env(titlebar-area-height, 0px);'); - expect(css).toContain('--app-top-inset: max(env(safe-area-inset-top), var(--titlebar-inset));'); - }); - - it('does not key on the display-mode media query, which is false in Electron', () => { - expect(css).not.toMatch(/display-mode:\s*window-controls-overlay/); - }); - - it('makes the strip the part that drags the window', () => { - expect(css).toMatch(/\.window-title-bar\s*\{[^}]*app-region:\s*drag/); - }); - - function tsxFiles(dir: string): string[] { - return readdirSync(dir).flatMap((name) => { - const path = join(dir, name); - if (name === '__tests__' || name === 'node_modules') return []; - return statSync(path).isDirectory() ? tsxFiles(path) : name.endsWith('.tsx') ? [path] : []; - }); - } - - it('leaves no page root or top bar on the bare safe area, skeletons included', () => { - const left = [...tsxFiles(join(root, 'components')), ...tsxFiles(join(root, 'app'))] - .filter((path) => /pt-\[(?:calc\([^\]]*)?env\(safe-area-inset-top/.test(readFileSync(path, 'utf8'))); - expect(left).toEqual([]); - }); - - it('gives each skeleton the same top inset as the page it stands in for', () => { - for (const file of ['components/boot-skeleton/shell.tsx', 'components/boot-skeleton/pro-skeleton.tsx', 'components/boot-skeleton/admin-skeleton.tsx', 'components/mail/mail-app.tsx']) { - expect(readFileSync(join(root, file), 'utf8'), file).toContain('pt-[var(--app-top-inset)]'); - } - }); -}); diff --git a/lib/admin/__tests__/server-device-offline-caps.test.ts b/lib/admin/__tests__/server-device-offline-caps.test.ts index a6661ea25..1364b243b 100644 --- a/lib/admin/__tests__/server-device-offline-caps.test.ts +++ b/lib/admin/__tests__/server-device-offline-caps.test.ts @@ -1,11 +1,24 @@ import { describe, expect, it } from 'vitest'; import { DEFAULT_POLICY, type SettingsPolicy } from '../types'; import { ALL_DEVICE_LIMITS, strictestOfAllScopes } from '../server-device-policy'; +import { sanitizeOrganisationPartial } from '../organisation-policy'; // The offline caps are numbers in a section that used to hold only booleans. const scope = (id: string, devices: Record<string, unknown>) => ({ id, label: id, match: { domains: [`${id}.example.org`] }, policy: { organisation: { devices } } }); +describe('wipeOnForcedSignOut', () => { + it('is off unless asked for, and survives the sanitizer', () => { + expect(DEFAULT_POLICY.organisation?.devices?.wipeOnForcedSignOut ?? false).toBe(false); + expect(sanitizeOrganisationPartial({ devices: { wipeOnForcedSignOut: true } }).devices).toMatchObject({ wipeOnForcedSignOut: true }); + expect(sanitizeOrganisationPartial({ devices: { wipeOnForcedSignOut: 'yes' } }).devices?.wipeOnForcedSignOut).not.toBe(true); + }); + + it('isn\'t set by the stand-in for a login nobody can read: that\'s for what stays on the server', () => { + expect(ALL_DEVICE_LIMITS.wipeOnForcedSignOut).toBe(false); + }); +}); + describe('strictest of all scopes', () => { it('keeps the lowest cap, and a boolean switch still turns on', () => { const policy = { diff --git a/lib/admin/admin-nav.ts b/lib/admin/admin-nav.ts index c0d5edf9a..b0c07c7ec 100644 --- a/lib/admin/admin-nav.ts +++ b/lib/admin/admin-nav.ts @@ -243,6 +243,7 @@ export const ADMIN_PAGES: readonly AdminPageDef[] = [ sections: [ { id: 'devices', title: 'Downloads, printing and notifications', keywords: 'download attachment export print watermark install prompt push sender subject' }, { id: 'offline', title: 'Offline mode', keywords: 'offline cache device keep mail outbox' }, + { id: 'registered', title: 'Registered devices', keywords: 'device registry wipe remote lost stolen laptop remove desktop app browser' }, ], }, { diff --git a/lib/admin/organisation-policy.ts b/lib/admin/organisation-policy.ts index b49c3f812..0fe813574 100644 --- a/lib/admin/organisation-policy.ts +++ b/lib/admin/organisation-policy.ts @@ -175,6 +175,12 @@ export interface OrganisationPolicy { offlineMaxAttachmentMb: number; /** All attachments and files of one account on a device, in MB. 0 is no cap. */ offlineMaxTotalMb: number; + /** + * A device deletes an account's offline data as soon as it signs out with nobody + * asking (the server refused the login, or the idle or session limit ran out), + * instead of hiding it for 30 days until the next sign-in. Unsent mail goes with it. + */ + wipeOnForcedSignOut: boolean; }; calendars: { /** Adds up across scopes by id. */ @@ -200,6 +206,7 @@ export const DEFAULT_ORGANISATION_POLICY: OrganisationPolicy = { noDownloads: false, noExport: false, noPrint: false, noInstallPrompt: false, pushWithoutContent: false, watermark: false, noOffline: false, offlineMaxDays: 0, noOfflineAttachments: false, offlineMaxAttachmentMb: 0, offlineMaxTotalMb: 0, + wipeOnForcedSignOut: false, }, calendars: { feeds: [], freeBusyGroup: '' }, }; @@ -544,6 +551,7 @@ export function sanitizeOrganisationPartial(raw: unknown): DeepPartial<Organisat noOfflineAttachments: bool(dev.noOfflineAttachments), offlineMaxAttachmentMb: count(dev.offlineMaxAttachmentMb, MAX_OFFLINE_MB), offlineMaxTotalMb: count(dev.offlineMaxTotalMb, MAX_OFFLINE_MB), + wipeOnForcedSignOut: bool(dev.wipeOnForcedSignOut), }); const cal = section('calendars'); diff --git a/lib/admin/outgoing-hosts-registry.ts b/lib/admin/outgoing-hosts-registry.ts index 053a8df61..810cfc250 100644 --- a/lib/admin/outgoing-hosts-registry.ts +++ b/lib/admin/outgoing-hosts-registry.ts @@ -39,8 +39,8 @@ export const OUTGOING_HOSTS: readonly OutgoingHost[] = [ host: 'telemetry.bulwarkmail.org', files: ['lib/telemetry/types.ts'], side: 'server', - usedBy: 'Anonymous daily heartbeat, sent only after an admin turned telemetry on; with instant error counts on, also the current day\'s error counts as they change.', - off: 'Off by default. BULWARK_TELEMETRY=off, or System > Usage stats (switch it off or clear the collector URL).', + usedBy: 'Anonymous daily heartbeat, sent only after an admin turned telemetry on; with instant error counts on, also the current day\'s error counts as they change. In the desktop app the user decides: the heartbeat with its usage info switch, and with crash report consent alone the error counts, with no heartbeat.', + off: 'Off by default. BULWARK_TELEMETRY=off, or System > Usage stats (switch it off or clear the collector URL). The desktop app has no admin page and takes no collector URL: its two switches in Settings, the TelemetryAllowed and CrashReportsAllowed policies, or BULWARK_TELEMETRY=off in its environment, which stops both.', inMode: 'Never sent, whatever the telemetry setting says.', lite: false, }, @@ -106,6 +106,16 @@ export const OUTGOING_HOSTS: readonly OutgoingHost[] = [ inMode: 'Avatars show no brand logos; /api/bimi answers 403 before any lookup.', lite: false, }, + { + id: 'spellcheck-dictionaries', + host: 'redirector.gvt1.com', + files: ['lib/desktop/dictionary-download.ts'], + side: 'browser', + usedBy: 'Desktop app only: a spellcheck dictionary from Google, for a language the OS has no checker for, after the user said yes when the composer asked. The text being written is not sent.', + off: 'Answer no when the composer asks once. Nothing is fetched until a yes.', + inMode: 'The composer does not ask, and the app has no address to fetch dictionaries from.', + lite: false, + }, { id: 'translate', host: 'api.mymemory.translated.net', diff --git a/lib/admin/server-device-policy.ts b/lib/admin/server-device-policy.ts index f72376d44..7027c7222 100644 --- a/lib/admin/server-device-policy.ts +++ b/lib/admin/server-device-policy.ts @@ -85,10 +85,16 @@ export function strictestOfAllScopes(policy: SettingsPolicy): ServerDevicePolicy return out; } -/** Everything on, and each cap as low as it goes: when not even the policy can be read. */ -export const ALL_DEVICE_LIMITS: ServerDevicePolicy = Object.fromEntries( - Object.entries(DEFAULT_ORGANISATION_POLICY.devices).map(([key, off]) => [key, typeof off === 'number' ? 1 : true]), -) as ServerDevicePolicy; +/** + * Everything on, and each cap as low as it goes: when not even the policy can be + * read. Except deleting a device's mail, which is no limit on anything the server does. + */ +export const ALL_DEVICE_LIMITS: ServerDevicePolicy = { + ...Object.fromEntries( + Object.entries(DEFAULT_ORGANISATION_POLICY.devices).map(([key, off]) => [key, typeof off === 'number' ? 1 : true]), + ), + wipeOnForcedSignOut: false, +} as ServerDevicePolicy; /** * The device policy that applies to this login. When its session can't be diff --git a/lib/calendar-reminders/__tests__/claims.test.ts b/lib/calendar-reminders/__tests__/claims.test.ts new file mode 100644 index 000000000..7e60f078c --- /dev/null +++ b/lib/calendar-reminders/__tests__/claims.test.ts @@ -0,0 +1,142 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { claimAlert, claimKey, claimNow, CLAIMS_STORAGE_KEY, firedWithoutStore, HIDDEN_GRACE_MS, noteStoreFired } from '../claims'; + +const FIRE = Date.UTC(2026, 10, 10, 9); + +function setVisibility(state: 'visible' | 'hidden') { + Object.defineProperty(document, 'visibilityState', { configurable: true, get: () => state }); +} + +/** A Web Lock: one holder at a time, across "tabs". */ +function fakeLocks() { + let tail: Promise<unknown> = Promise.resolve(); + return { + request: vi.fn(<T,>(_name: string, callback: () => T | Promise<T>) => { + const run = tail.then(callback); + tail = run.catch(() => {}); + return run; + }), + }; +} + +beforeEach(() => { + localStorage.clear(); + setVisibility('visible'); +}); + +afterEach(() => { + vi.unstubAllGlobals(); + vi.useRealTimers(); + Reflect.deleteProperty(navigator, 'locks'); +}); + +describe('claimNow', () => { + it('says yes once', () => { + const key = claimKey('acc', 'uid-1', 'a', FIRE); + expect(claimNow(key, FIRE)).toBe(true); + expect(claimNow(key, FIRE)).toBe(false); + }); + + it('tells occurrences and accounts apart', () => { + expect(claimNow(claimKey('acc', 'uid-1', 'a', FIRE), FIRE)).toBe(true); + expect(claimNow(claimKey('acc', 'uid-1', 'a', FIRE + 1000), FIRE + 1000)).toBe(true); + expect(claimNow(claimKey('other', 'uid-1', 'a', FIRE), FIRE)).toBe(true); + }); + + it('forgets what is a day old', () => { + vi.useFakeTimers({ now: FIRE }); + claimNow('old', FIRE - 25 * 3_600_000); + claimNow('new', FIRE); + expect(Object.keys(JSON.parse(localStorage.getItem(CLAIMS_STORAGE_KEY)!))).toEqual(['new']); + }); + + it('tells what the store path rang from what the other path rang', () => { + const key = claimKey('acc', 'uid-1', 'a', FIRE); + expect(noteStoreFired(key, FIRE)).toBe(true); + // The path without a store won't ring it again... + expect(claimNow(key, FIRE)).toBe(false); + // ...and a summary still may, since the store path keeps its own record. + expect(firedWithoutStore(key)).toBe(false); + expect(noteStoreFired(key, FIRE)).toBe(true); + const other = claimKey('acc', 'uid-2', 'a', FIRE); + claimNow(other, FIRE); + expect(firedWithoutStore(other)).toBe(true); + expect(noteStoreFired(other, FIRE)).toBe(false); + }); + + it('holds only the key, nothing of the event', () => { + claimNow(claimKey('acc', 'uid-1', 'a', FIRE), FIRE); + expect(localStorage.getItem(CLAIMS_STORAGE_KEY)).toBe(JSON.stringify({ [`acc:uid-1:a:${FIRE}`]: FIRE })); + }); +}); + +describe('claimAlert', () => { + it('reads and writes the list only with the lock held, one tab at a time', async () => { + let release = () => {}; + const held = new Promise<void>((resolve) => { + release = resolve; + }); + const asked: string[] = []; + let queue: Promise<unknown> = held; + Object.defineProperty(navigator, 'locks', { + configurable: true, + value: { + request: <T,>(name: string, callback: () => T | Promise<T>) => { + asked.push(name); + const run = queue.then(callback); + queue = run; + return run; + }, + }, + }); + const won = vi.fn(); + claimAlert('k', FIRE, () => won('tab 1')); + claimAlert('k', FIRE, () => won('tab 2')); + await new Promise((resolve) => setTimeout(resolve, 0)); + // Another tab has the lock: nothing has looked at the list yet. + expect(localStorage.getItem(CLAIMS_STORAGE_KEY)).toBeNull(); + expect(won).not.toHaveBeenCalled(); + expect(asked).toEqual(['bulwark-calendar-alert-claim', 'bulwark-calendar-alert-claim']); + + release(); + await vi.waitFor(() => expect(won).toHaveBeenCalled()); + await new Promise((resolve) => setTimeout(resolve, 0)); + expect(won.mock.calls).toEqual([['tab 1']]); + }); + + it('still rings when the lock fails, rather than losing the reminder', async () => { + Object.defineProperty(navigator, 'locks', { configurable: true, value: { request: () => Promise.reject(new Error('Locks are off in this context')) } }); + const won = vi.fn(); + claimAlert('k', FIRE, won); + await vi.waitFor(() => expect(won).toHaveBeenCalledTimes(1)); + }); + + it('runs at once where there is no Web Lock', () => { + const won = vi.fn(); + claimAlert('k', FIRE, won); + expect(won).toHaveBeenCalledTimes(1); + }); + + it('lets a tab in view go first', () => { + vi.useFakeTimers({ now: FIRE }); + setVisibility('hidden'); + const hidden = vi.fn(); + claimAlert('k', FIRE, hidden); + setVisibility('visible'); + const visible = vi.fn(); + claimAlert('k', FIRE, visible); + expect(visible).toHaveBeenCalledTimes(1); + vi.advanceTimersByTime(HIDDEN_GRACE_MS); + expect(hidden).not.toHaveBeenCalled(); + }); + + it('still fires in a hidden tab when no other took it', () => { + vi.useFakeTimers({ now: FIRE }); + setVisibility('hidden'); + const won = vi.fn(); + claimAlert('k', FIRE, won); + expect(won).not.toHaveBeenCalled(); + vi.advanceTimersByTime(HIDDEN_GRACE_MS); + expect(won).toHaveBeenCalledTimes(1); + }); +}); diff --git a/lib/calendar-reminders/__tests__/runner.test.ts b/lib/calendar-reminders/__tests__/runner.test.ts new file mode 100644 index 000000000..a9639f899 --- /dev/null +++ b/lib/calendar-reminders/__tests__/runner.test.ts @@ -0,0 +1,356 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { CALENDAR_SESSION, FakeCalendarJmap } from '@/lib/store/__tests__/helpers/fake-calendar'; +import { InProcessStore } from '@/lib/store/__tests__/helpers/in-process-store'; +import type { MissedBatch, ReminderAlert } from '@/lib/store/reminders/ledger'; +import { HIDDEN_GRACE_MS } from '../claims'; +import { createReminderRunner, SUMMARY_WAIT_MS, type ReminderRunner, type ReminderRunnerEnv } from '../runner'; + +const MIN = 60_000; +const ACCOUNT = 'acc'; +const START = Date.UTC(2026, 10, 10, 9); +const FIRE = START - 15 * MIN; +const ALERT = { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } }; + +function event(partial: Record<string, unknown> = {}) { + return { id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', timeZone: 'Europe/Berlin', duration: 'PT30M', alerts: { a: ALERT }, ...partial }; +} + +interface Tab { + runner: ReminderRunner; + due: ReminderAlert[]; + firedAt: number[]; + missed: MissedBatch[]; + source: boolean[]; + env: ReminderRunnerEnv; + hidden: boolean; + offline: boolean; + muted: boolean; +} + +let store: InProcessStore; +let server: FakeCalendarJmap; +const tabs: Tab[] = []; + +function tab(options: Partial<Pick<Tab, 'hidden' | 'offline'>> = {}): Tab { + const made = { due: [], firedAt: [], missed: [], source: [], hidden: false, offline: false, muted: false, ...options } as unknown as Tab; + made.env = { + accounts: () => [ACCOUNT], + store: () => store, + params: () => ({ timeZone: 'Europe/Berlin', tasks: true, muted: made.muted }), + needsPolling: () => false, + hidden: () => made.hidden, + offline: () => made.offline, + onDue: (_account, alerts) => { + made.due.push(...alerts); + made.firedAt.push(...alerts.map(() => Date.now())); + }, + onMissed: async (account) => { + const batch = await store.area<MissedBatch | null>(account, 'reminders.takeMissed', { timeZone: 'Europe/Berlin' }); + if (!batch) return; + made.missed.push(batch); + await store.area(account, 'reminders.settleMissed', { batch: batch.batch }); + }, + onSource: (_account, driven) => { + made.source.push(driven); + }, + }; + made.runner = createReminderRunner(made.env); + tabs.push(made); + return made; +} + +async function syncedStore(...events: Record<string, unknown>[]): Promise<void> { + for (const partial of events) server.addEvent(partial); + await store.sync(ACCOUNT); +} + +beforeEach(() => { + vi.useFakeTimers({ now: FIRE - 30 * MIN, toFake: ['Date', 'setTimeout', 'clearTimeout', 'setInterval', 'clearInterval'] }); + server = new FakeCalendarJmap('1.0'); + store = new InProcessStore(server, CALENDAR_SESSION); +}); + +afterEach(() => { + for (const made of tabs.splice(0)) made.runner.stop(); + vi.useRealTimers(); +}); + +describe('firing from the store', () => { + it('fires at the moment it is due, with the network gone', async () => { + await syncedStore(event()); + await store.setOnline(false); + server.request = (() => { + throw new Error('A reminder needs no server'); + }) as unknown as FakeCalendarJmap['request']; + const one = tab(); + one.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now() - 1000); + expect(one.due).toEqual([]); + await vi.advanceTimersByTimeAsync(1000); + expect(one.due.map((alert) => alert.title)).toEqual(['Standup']); + expect(one.firedAt).toEqual([FIRE]); + }); + + it('takes over from the old path once the store has synced, and gives it back when the store fails', async () => { + const one = tab(); + one.runner.start(); + await vi.advanceTimersByTimeAsync(0); + expect(one.source.at(-1)).toBe(false); + await syncedStore(event()); + one.runner.poke(); + await vi.advanceTimersByTimeAsync(0); + expect(one.source.at(-1)).toBe(true); + store.failArea = () => true; + one.runner.poke(); + await vi.advanceTimersByTimeAsync(0); + expect(one.source.at(-1)).toBe(false); + }); + + it('fires in one tab only, when both ask at the same moment', async () => { + await syncedStore(event()); + const [one, two] = [tab(), tab()]; + one.runner.start(); + two.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now() + MIN); + expect(one.due.length + two.due.length).toBe(1); + }); + + it('leaves it to the tab in view when another is hidden', async () => { + await syncedStore(event()); + const hidden = tab({ hidden: true }); + const visible = tab(); + hidden.runner.start(); + await vi.advanceTimersByTimeAsync(0); + visible.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now() + HIDDEN_GRACE_MS + MIN); + expect(visible.due).toHaveLength(1); + expect(hidden.due).toHaveLength(0); + }); + + it('still fires when only a hidden tab is left', async () => { + await syncedStore(event()); + const hidden = tab({ hidden: true }); + hidden.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now() + HIDDEN_GRACE_MS); + expect(hidden.due).toHaveLength(1); + }); + + it('notices an event that just arrived, and a snooze just set', async () => { + await syncedStore(); + const one = tab(); + one.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now() - 2 * MIN); + await syncedStore(event()); + one.runner.poke(); + await vi.advanceTimersByTimeAsync(2 * MIN); + expect(one.firedAt).toEqual([FIRE]); + + await store.area(ACCOUNT, 'reminders.snooze', { key: one.due[0].key, minutes: 5 }); + one.runner.poke(); + await vi.advanceTimersByTimeAsync(5 * MIN); + expect(one.firedAt).toEqual([FIRE, FIRE + 5 * MIN]); + }); + + it('brings a snoozed reminder back after a restart', async () => { + await syncedStore(event()); + const before = tab(); + before.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now()); + await store.area(ACCOUNT, 'reminders.snooze', { key: before.due[0].key, minutes: 10 }); + before.runner.stop(); + await vi.advanceTimersByTimeAsync(MIN); + + const after = tab(); + after.runner.start(); + await vi.advanceTimersByTimeAsync(10 * MIN); + expect(before.due).toHaveLength(1); + expect(after.firedAt).toEqual([FIRE + 10 * MIN]); + expect(after.due[0].snoozedUntil).toBe(FIRE + 10 * MIN); + }); + + it('stays quiet while reminders are off', async () => { + await syncedStore(event()); + const one = tab(); + one.muted = true; + one.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now() + MIN); + expect(one.due).toEqual([]); + }); +}); + +describe('a tab out of view', () => { + it('waits before any check, also after a wake, so the tab in view gets the alert', async () => { + await syncedStore(event()); + const hidden = tab({ hidden: true }); + const visible = tab(); + hidden.runner.start(); + await vi.advanceTimersByTimeAsync(HIDDEN_GRACE_MS); + visible.runner.start(); + await vi.advanceTimersByTimeAsync(0); + vi.setSystemTime(FIRE + MIN); + hidden.runner.wake(); + visible.runner.wake(); + await vi.advanceTimersByTimeAsync(HIDDEN_GRACE_MS); + expect(hidden.due).toEqual([]); + expect(visible.due).toHaveLength(1); + }); + + it('waits on a poke and on a sync too', async () => { + await syncedStore(event()); + const hidden = tab({ hidden: true }); + hidden.runner.start(); + await vi.advanceTimersByTimeAsync(HIDDEN_GRACE_MS); + const area = vi.spyOn(store, 'area'); + hidden.runner.poke(); + hidden.runner.synced(ACCOUNT); + await vi.advanceTimersByTimeAsync(HIDDEN_GRACE_MS - 1); + expect(area).not.toHaveBeenCalled(); + await vi.advanceTimersByTimeAsync(1); + expect(area).toHaveBeenCalledTimes(1); + }); + + it('a stream of pokes cannot put it off for ever', async () => { + await syncedStore(event()); + const hidden = tab({ hidden: true }); + hidden.runner.start(); + await vi.advanceTimersByTimeAsync(HIDDEN_GRACE_MS); + const area = vi.spyOn(store, 'area'); + for (let i = 0; i < 5; i += 1) { + hidden.runner.poke(); + await vi.advanceTimersByTimeAsync(HIDDEN_GRACE_MS / 2); + } + expect(area).toHaveBeenCalled(); + }); +}); + +describe('going down in the middle', () => { + it('keeps what the store just handed over when the page stopped meanwhile', async () => { + await syncedStore(event()); + const one = tab(); + one.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now() - 1); + const area = store.area.bind(store); + vi.spyOn(store, 'area').mockImplementationOnce(async (account: string, name: string, params?: unknown) => { + const result = await area(account, name, params); + one.runner.stop(); + return result as never; + }); + await vi.advanceTimersByTimeAsync(1); + expect(one.due).toEqual([]); + // Not lost: it waits for the summary. + await vi.advanceTimersByTimeAsync(0); + const next = tab({ offline: true }); + next.runner.start(); + await vi.advanceTimersByTimeAsync(0); + expect(next.missed.flatMap((batch) => batch.alerts.map((alert) => alert.title))).toEqual(['Standup']); + }); + + it('checks again after showing one threw', async () => { + await syncedStore(event(), event({ id: 'e2', uid: 'uid-2', title: 'Review', start: '2026-11-10T10:05:00' })); + const one = tab(); + const plain = one.env.onDue; + let first = true; + one.env.onDue = (account, alerts) => { + if (first) { + first = false; + throw new Error('A plugin threw'); + } + plain(account, alerts); + }; + one.runner.start(); + await vi.advanceTimersByTimeAsync(FIRE - Date.now() + 5 * MIN); + expect(one.due.map((alert) => alert.title)).toEqual(['Review']); + }); +}); + +describe('after being away', () => { + async function awayFromBothAlerts(): Promise<Tab> { + await syncedStore(event(), event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + const before = tab(); + before.runner.start(); + await vi.advanceTimersByTimeAsync(0); + before.runner.stop(); + vi.setSystemTime(FIRE + 60 * MIN); + return before; + } + + it('waits a moment for the first sync, then summarises once, not as a burst', async () => { + await awayFromBothAlerts(); + const one = tab(); + one.runner.start(); + await vi.advanceTimersByTimeAsync(SUMMARY_WAIT_MS - 1000); + expect(one.missed).toEqual([]); + await vi.advanceTimersByTimeAsync(1000); + expect(one.due).toEqual([]); + expect(one.missed.map((batch) => batch.alerts.map((alert) => alert.title))).toEqual([['Standup', 'Review']]); + + await vi.advanceTimersByTimeAsync(30 * MIN); + one.runner.wake(); + await vi.advanceTimersByTimeAsync(SUMMARY_WAIT_MS); + expect(one.missed).toHaveLength(1); + }); + + it('does not wait once the sync is done, and has nothing to wait for offline', async () => { + await awayFromBothAlerts(); + const synced = tab(); + synced.runner.start(); + await vi.advanceTimersByTimeAsync(100); + synced.runner.synced(ACCOUNT); + await vi.advanceTimersByTimeAsync(0); + expect(synced.missed).toHaveLength(1); + }); + + it('gives the summary at once with no network', async () => { + await awayFromBothAlerts(); + const offline = tab({ offline: true }); + offline.runner.start(); + await vi.advanceTimersByTimeAsync(0); + expect(offline.missed).toHaveLength(1); + }); + + it('gives the summary to one window of two, and neither again after a restart', async () => { + await awayFromBothAlerts(); + const [one, two] = [tab({ offline: true }), tab({ offline: true })]; + one.runner.start(); + two.runner.start(); + await vi.advanceTimersByTimeAsync(0); + expect(one.missed.length + two.missed.length).toBe(1); + one.runner.stop(); + two.runner.stop(); + await vi.advanceTimersByTimeAsync(MIN); + const next = tab({ offline: true }); + next.runner.start(); + await vi.advanceTimersByTimeAsync(SUMMARY_WAIT_MS); + expect(next.missed).toEqual([]); + }); + + it('sees a jump of the clock without being told, as after a sleep', async () => { + await syncedStore(event(), event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + const one = tab(); + one.runner.start(); + await vi.advanceTimersByTimeAsync(MIN); + // Asleep: timers stood still and the clock did not. + vi.setSystemTime(FIRE + 60 * MIN); + await vi.advanceTimersByTimeAsync(MIN + SUMMARY_WAIT_MS); + expect(one.due).toEqual([]); + expect(one.missed.map((batch) => batch.alerts.length)).toEqual([1 + 1]); + }); + + it('tries a summary again that could not be shown', async () => { + await awayFromBothAlerts(); + const one = tab({ offline: true }); + let refuse = true; + const plain = one.env.onMissed; + one.env.onMissed = async (account) => { + if (!refuse) return plain(account); + const batch = await store.area<MissedBatch>(account, 'reminders.takeMissed', { timeZone: 'Europe/Berlin' }); + await store.area(account, 'reminders.releaseMissed', { batch: batch.batch }); + }; + one.runner.start(); + await vi.advanceTimersByTimeAsync(0); + expect(one.missed).toEqual([]); + refuse = false; + await vi.advanceTimersByTimeAsync(5 * MIN); + expect(one.missed).toHaveLength(1); + }); +}); diff --git a/lib/calendar-reminders/channel.ts b/lib/calendar-reminders/channel.ts new file mode 100644 index 000000000..9e32f74ac --- /dev/null +++ b/lib/calendar-reminders/channel.ts @@ -0,0 +1,32 @@ +/** + * Telling the other windows that a reminder has been dealt with, so its toast and system + * notification go there too. What's done is recorded in the store; this only clears what's + * on screen. Only keys cross it, and they say nothing about the event but its uid. + */ + +const CHANNEL_NAME = 'bulwark-calendar-reminders'; + +interface AcknowledgedMessage { + kind: 'acknowledged'; + keys: string[]; +} + +function open(): BroadcastChannel | null { + return typeof BroadcastChannel === 'undefined' ? null : new BroadcastChannel(CHANNEL_NAME); +} + +export function announceAcknowledged(keys: readonly string[]): void { + const channel = open(); + if (!channel) return; + channel.postMessage({ kind: 'acknowledged', keys: [...keys] } satisfies AcknowledgedMessage); + channel.close(); +} + +export function onAcknowledged(listener: (keys: string[]) => void): () => void { + const channel = open(); + if (!channel) return () => {}; + channel.onmessage = (event: MessageEvent<AcknowledgedMessage>) => { + if (event.data?.kind === 'acknowledged' && Array.isArray(event.data.keys)) listener(event.data.keys); + }; + return () => channel.close(); +} diff --git a/lib/calendar-reminders/claims.ts b/lib/calendar-reminders/claims.ts new file mode 100644 index 000000000..d50dc4035 --- /dev/null +++ b/lib/calendar-reminders/claims.ts @@ -0,0 +1,95 @@ +/** + * One tab fires a reminder when there's no local store to decide it. The list sits in + * localStorage and holds no more than the event's uid, and the Web Lock makes reading + * and writing it one step across tabs: their timers run out at the same moment, so a + * plain read and write would let both through. + * + * Keys are the series' uid, never the id: synthetic ids reshuffle when an override + * changes, and a reminder fired again inside its ten minutes. + * + * The store path notes what it rang under its own prefix. That keeps the other path off + * it at a handover, and doesn't count against the store's own summary later: a reminder + * it rang and snoozed can still be missed. + */ + +const STORAGE_KEY = 'calendar-alert-claims'; +const LOCK = 'bulwark-calendar-alert-claim'; +const KEEP_MS = 24 * 60 * 60 * 1000; +const STORE_PREFIX = 'store:'; +/** A tab out of view waits, so the one in view is who shows the reminder. */ +export const HIDDEN_GRACE_MS = 2000; + +export function claimKey(account: string | null | undefined, uid: string, alertId: string, fireTimeMs: number): string { + return `${account ?? ''}:${uid}:${alertId}:${fireTimeMs}`; +} + +function readClaims(): Record<string, number> { + try { + const parsed = JSON.parse(localStorage.getItem(STORAGE_KEY) ?? '{}') as unknown; + return parsed && typeof parsed === 'object' ? parsed as Record<string, number> : {}; + } catch { + return {}; + } +} + +function writeClaim(claims: Record<string, number>, key: string, fireTimeMs: number): void { + const now = Date.now(); + const kept = Object.fromEntries(Object.entries(claims).filter(([, fire]) => now - fire < KEEP_MS)); + kept[key] = fireTimeMs; + try { + localStorage.setItem(STORAGE_KEY, JSON.stringify(kept)); + } catch { + // Without storage each tab is on its own, as it always was. + } +} + +/** True for the first to ask. */ +export function claimNow(key: string, fireTimeMs: number): boolean { + const claims = readClaims(); + if (key in claims || `${STORE_PREFIX}${key}` in claims) return false; + writeClaim(claims, key, fireTimeMs); + return true; +} + +/** The path without a store rang this one. */ +export function firedWithoutStore(key: string): boolean { + return key in readClaims(); +} + +/** The store path is ringing this. False when the other path already did. */ +export function noteStoreFired(key: string, fireTimeMs: number): boolean { + const claims = readClaims(); + if (key in claims) return false; + writeClaim(claims, `${STORE_PREFIX}${key}`, fireTimeMs); + return true; +} + +/** Runs `won` in the one tab that gets the reminder. At once, when nothing makes it wait. */ +export function claimAlert(key: string, fireTimeMs: number, won: () => void): void { + const direct = () => { + if (claimNow(key, fireTimeMs)) won(); + }; + const attempt = () => { + const locks = typeof navigator === 'undefined' ? undefined : navigator.locks; + if (!locks) { + direct(); + return; + } + void locks.request(LOCK, () => claimNow(key, fireTimeMs)).then((claimed) => { + if (claimed) won(); + }, direct); + }; + if (typeof document !== 'undefined' && document.visibilityState === 'hidden') setTimeout(attempt, HIDDEN_GRACE_MS); + else attempt(); +} + +/** A sign-out: the next person starts with a clean slate. */ +export function clearClaims(): void { + try { + localStorage.removeItem(STORAGE_KEY); + } catch { + // Nothing was kept, then. + } +} + +export const CLAIMS_STORAGE_KEY = STORAGE_KEY; diff --git a/lib/calendar-reminders/runner.ts b/lib/calendar-reminders/runner.ts new file mode 100644 index 000000000..876f85ade --- /dev/null +++ b/lib/calendar-reminders/runner.ts @@ -0,0 +1,194 @@ +/** + * Asks the local store what's due, at the moment it's due. Runs in the page: in the + * desktop app that's the main window, which keeps its timers while hidden in the tray, + * and the store's worker answers with no network. Every tab or window may run one: the + * store hands each alert to whichever asks first, so a tab out of view waits a moment + * before every check, whatever set it off. + * + * Between checks it sleeps until the store's next fire time, and looks in every few + * minutes in case something changed with nobody saying so. + */ + +import type { StoreBackend } from '@/lib/store/client/api'; +import type { ReminderAlert, TickParams, TickResult } from '@/lib/store/reminders/ledger'; +import { HIDDEN_GRACE_MS } from './claims'; + +const REFRESH_MS = 5 * 60_000; +/** Timers stand still while a machine sleeps. The clock doesn't. */ +const CLOCK_WATCH_MS = 60_000; +const CLOCK_JUMP_MS = 2 * CLOCK_WATCH_MS; +/** + * After a start or a wake, how long a summary waits for the first sync, so it leaves out + * what was deleted elsewhere in the meantime. Reminders that are due don't wait. + */ +export const SUMMARY_WAIT_MS = 20_000; + +export interface ReminderRunnerEnv { + /** The local accounts with a store right now. */ + accounts(): string[]; + store(): Pick<StoreBackend, 'area' | 'sync'>; + params(): TickParams; + /** Out of view: another tab in view should get to go first. */ + hidden(): boolean; + offline(): boolean; + /** No push channel to say the calendar changed, so the store has to go and look. */ + needsPolling(account: string): boolean; + /** Runs in the one tab that got these. */ + onDue(account: string, alerts: ReminderAlert[]): void; + /** There's a summary to give. Resolves when that's been tried. */ + onMissed(account: string): Promise<void>; + /** Whether this account's reminders come from the store now, or the app's old path keeps them. */ + onSource(account: string, driven: boolean): void; +} + +export interface ReminderRunner { + start(): void; + stop(): void; + /** Check now: the calendar changed, a snooze was set. */ + poke(): void; + /** Back from sleep, or back online. */ + wake(): void; + /** The store finished a sync for this account. */ + synced(account: string): void; +} + +export function createReminderRunner(env: ReminderRunnerEnv): ReminderRunner { + let timer: ReturnType<typeof setTimeout> | null = null; + let timerAt = 0; + let clockWatch: ReturnType<typeof setInterval> | null = null; + let lastWatch = 0; + let running = false; + let again = false; + let stopped = true; + let summaryAt = 0; + const presenting = new Set<string>(); + const known = new Set<string>(); + const lastPoll = new Map<string, number>(); + + const schedule = (at: number) => { + if (timer) clearTimeout(timer); + timerAt = at + (env.hidden() ? HIDDEN_GRACE_MS : 0); + timer = setTimeout(() => void run(), Math.max(timerAt - Date.now(), 0)); + }; + + /** At once in a tab in view. Out of view, after the grace, however often it's asked. */ + const request = () => { + if (stopped) return; + if (!env.hidden()) { + void run(); + return; + } + if (timer && timerAt <= Date.now() + HIDDEN_GRACE_MS) return; + schedule(Date.now()); + }; + + const poll = (account: string) => { + const now = Date.now(); + if (!lastPoll.has(account)) lastPoll.set(account, now); + if (now - lastPoll.get(account)! < REFRESH_MS || env.offline() || !env.needsPolling(account)) return; + lastPoll.set(account, now); + void env.store().sync(account).catch(() => {}); + }; + + const check = async (account: string): Promise<number | null> => { + let result: TickResult; + try { + result = await env.store().area<TickResult>(account, 'reminders.tick', env.params()); + } catch { + // The store is out of reach: the old path takes these over until it's back. + if (!stopped) env.onSource(account, false); + return null; + } + // Stopped while asking: the store has given these to this page and nobody will show them. + if (stopped) { + if (result.due.length > 0) { + await env.store().area(account, 'reminders.hold', { keys: result.due.map((alert) => alert.key) }).catch(() => {}); + } + return null; + } + env.onSource(account, result.ready); + if (result.due.length > 0) env.onDue(account, result.due); + if (result.missed === 0) return result.nextAt; + const wait = env.offline() ? 0 : summaryAt - Date.now(); + if (wait > 0) return result.nextAt === null ? summaryAt : Math.min(result.nextAt, summaryAt); + if (!presenting.has(account)) { + presenting.add(account); + void env.onMissed(account) + .catch(() => {}) + .finally(() => presenting.delete(account)); + } + return result.nextAt; + }; + + const run = async () => { + if (stopped) return; + if (running) { + again = true; + return; + } + running = true; + let next = Date.now() + REFRESH_MS; + try { + const accounts = env.accounts(); + for (const gone of [...known]) { + if (!accounts.includes(gone)) { + known.delete(gone); + env.onSource(gone, false); + } + } + for (const account of accounts) { + known.add(account); + poll(account); + const at = await check(account); + if (at !== null) next = Math.min(next, at); + } + } catch (error) { + // A plugin or a toast threw on the way out. The store has the rest for the next check. + console.error('A reminder check failed:', error); + } finally { + running = false; + } + if (stopped) return; + if (again) { + again = false; + request(); + return; + } + schedule(next); + }; + + return { + start() { + stopped = false; + summaryAt = Date.now() + SUMMARY_WAIT_MS; + lastWatch = Date.now(); + clockWatch = setInterval(() => { + const now = Date.now(); + const jumped = now - lastWatch > CLOCK_JUMP_MS; + lastWatch = now; + if (jumped) this.wake(); + }, CLOCK_WATCH_MS); + request(); + }, + stop() { + stopped = true; + if (timer) clearTimeout(timer); + if (clockWatch) clearInterval(clockWatch); + timer = null; + clockWatch = null; + for (const account of known) env.onSource(account, false); + known.clear(); + }, + poke() { + request(); + }, + wake() { + summaryAt = Date.now() + SUMMARY_WAIT_MS; + request(); + }, + synced() { + summaryAt = 0; + request(); + }, + }; +} diff --git a/lib/calendar-reminders/state.ts b/lib/calendar-reminders/state.ts new file mode 100644 index 000000000..109df52ee --- /dev/null +++ b/lib/calendar-reminders/state.ts @@ -0,0 +1,55 @@ +/** + * What the reminder code shares across the page, kept free of the rest of the app so + * useCalendarAlerts can read it without pulling in the local store. + */ + +import { create } from 'zustand'; +import type { ReminderAlert } from '@/lib/store/reminders/ledger'; + +interface ReminderSourceState { + /** Local accounts whose reminders come from the store: useCalendarAlerts leaves those alone. */ + driven: Record<string, true>; + setDriven: (account: string, driven: boolean) => void; +} + +export const useReminderSource = create<ReminderSourceState>()((set) => ({ + driven: {}, + setDriven: (account, driven) => set((state) => { + if (!!state.driven[account] === driven) return state; + const next = { ...state.driven }; + if (driven) next[account] = true; + else delete next[account]; + return { driven: next }; + }), +})); + +interface MissedRemindersState { + account: string | null; + alerts: ReminderAlert[]; + show: (account: string, alerts: ReminderAlert[]) => void; + close: () => void; +} + +/** The summary dialog's contents. Empty: it's closed. */ +export const useMissedReminders = create<MissedRemindersState>()((set) => ({ + account: null, + alerts: [], + show: (account, alerts) => set({ account, alerts }), + close: () => set({ account: null, alerts: [] }), +})); + +let poke: (() => void) | null = null; + +/** The running check, so something done from a toast takes effect at once. */ +export function setReminderPoke(next: (() => void) | null): void { + poke = next; +} + +export function pokeReminders(): void { + poke?.(); +} + +/** The zone that reads a floating event: the setting's, or the system's on `auto`. */ +export function reminderTimeZone(setting: string | undefined): string { + return setting && setting !== 'auto' ? setting : Intl.DateTimeFormat().resolvedOptions().timeZone; +} diff --git a/lib/calendar-reminders/system-notification.ts b/lib/calendar-reminders/system-notification.ts new file mode 100644 index 000000000..2427f7c19 --- /dev/null +++ b/lib/calendar-reminders/system-notification.ts @@ -0,0 +1,73 @@ +/** + * A browser's system notification for a reminder, where the user has already granted the + * permission. This never asks for it. Through the service worker where there is one, since + * Chrome on Android refuses `new Notification`. The tag keeps one per reminder, whichever + * tab asks. + */ + +export interface SystemReminder { + key: string; + title: string; + body: string; + /** Do not disturb: on screen, but quiet. */ + silent: boolean; + /** Says nothing about the event: the app is locked, or the organisation says so. */ + hidden?: { title: string }; +} + +function tagOf(key: string): string { + return `calendar-reminder:${key}`; +} + +function permitted(): boolean { + return typeof Notification !== 'undefined' && Notification.permission === 'granted'; +} + +async function registration(): Promise<ServiceWorkerRegistration | undefined> { + try { + return await navigator.serviceWorker?.getRegistration(); + } catch { + return undefined; + } +} + +/** In front of the user the in-app toast says it already. */ +export function wantsSystemNotification(): boolean { + if (!permitted() || typeof document === 'undefined') return false; + return document.visibilityState === 'hidden' || !document.hasFocus(); +} + +export async function showSystemReminder(reminder: SystemReminder, openUrl: string): Promise<void> { + if (!wantsSystemNotification()) return; + const title = reminder.hidden ? reminder.hidden.title : reminder.title; + const options = { body: reminder.hidden ? '' : reminder.body, tag: tagOf(reminder.key), silent: reminder.silent }; + try { + const worker = await registration(); + if (worker) { + await worker.showNotification(title, { ...options, data: { kind: 'calendar-reminder', url: openUrl } }); + return; + } + const shown = new Notification(title, options); + shown.onclick = () => { + window.focus(); + window.location.href = openUrl; + shown.close(); + }; + } catch (error) { + console.warn('A system notification could not be shown:', error); + } +} + +/** Dealt with elsewhere: it shouldn't stay in the notification list. */ +export async function closeSystemReminders(keys: readonly string[]): Promise<void> { + if (!permitted() || keys.length === 0) return; + const worker = await registration(); + if (!worker) return; + try { + for (const key of keys) { + for (const shown of await worker.getNotifications({ tag: tagOf(key) })) shown.close(); + } + } catch { + // Nothing that matters is left behind. + } +} diff --git a/lib/compose-flush-registry.ts b/lib/compose-flush-registry.ts index b0215caab..ffa595310 100644 --- a/lib/compose-flush-registry.ts +++ b/lib/compose-flush-registry.ts @@ -14,6 +14,21 @@ import { getDesktopBridge } from '@/lib/desktop/bridge'; export type ComposeFlush = () => Promise<void>; +const openedListeners = new Set<() => void>(); + +/** A composer is open in this window. */ +export function composerIsOpen(): boolean { + return flushes.size > 0; +} + +/** Calls `listener` as a composer opens. Returns the unsubscribe. */ +export function onComposerOpened(listener: () => void): () => void { + openedListeners.add(listener); + return () => { + openedListeners.delete(listener); + }; +} + /** Less than the desktop shell waits for a closing window. */ const DESKTOP_FLUSH_MS = 3000; @@ -44,6 +59,7 @@ export function registerComposeFlush(flush: ComposeFlush): () => void { flushes.set(id, flush); for (const waiter of [...waiters]) waiter(flush); syncDesktopFlush(); + for (const listener of [...openedListeners]) listener(); return () => { flushes.delete(id); syncDesktopFlush(); diff --git a/lib/desktop/__tests__/desktop-telemetry.test.ts b/lib/desktop/__tests__/desktop-telemetry.test.ts new file mode 100644 index 000000000..1d7b0bc21 --- /dev/null +++ b/lib/desktop/__tests__/desktop-telemetry.test.ts @@ -0,0 +1,160 @@ +// @vitest-environment node +import { readFileSync } from 'node:fs'; +import path from 'node:path'; +import { describe, expect, it } from 'vitest'; +import { loadCollectorValidator } from '@/lib/__tests__/collector-validator'; +import { + DESKTOP_CATCH_UP_MAX_MS, + DESKTOP_CATCH_UP_MIN_MS, + DESKTOP_HEARTBEAT_INTERVAL_MS, + buildDesktopErrorBatch, + buildDesktopPing, + consentInForce, + desktopBuildTag, + desktopCatchUpMs, + desktopChannel, + desktopOsFamily, + forcedOffByPolicy, + heartbeatDelayMs, +} from '../desktop-telemetry'; + +const collector = await loadCollectorValidator(); + +const NOT_SET = { value: true, locked: false }; +const FORCED_OFF = { value: false, locked: true }; +const FORCED_ON = { value: true, locked: true }; +const RECOMMENDED_OFF = { value: false, locked: false }; + +describe('consent', () => { + it.each([ + [undefined, NOT_SET, false], + [null, NOT_SET, false], + [false, NOT_SET, false], + [true, NOT_SET, true], + // A policy forcing it off beats the user's yes. + [true, FORCED_OFF, false], + // A policy allowing it doesn't answer for the user. + [undefined, FORCED_ON, false], + [true, FORCED_ON, true], + // Only forced counts as forced. + [true, RECOMMENDED_OFF, true], + [undefined, RECOMMENDED_OFF, false], + ])('choice %s under %j is %s', (choice, policy, expected) => { + expect(consentInForce(choice, policy)).toBe(expected); + }); + + it('knows forced off from the rest', () => { + expect(forcedOffByPolicy(FORCED_OFF)).toBe(true); + expect(forcedOffByPolicy(RECOMMENDED_OFF)).toBe(false); + expect(forcedOffByPolicy(FORCED_ON)).toBe(false); + }); +}); + +describe('when a heartbeat is due', () => { + const now = Date.parse('2026-11-03T12:00:00Z'); + const CATCH_UP = 123_000; + + it('soon, with none sent yet or the last one long ago', () => { + expect(heartbeatDelayMs(undefined, now, CATCH_UP)).toBe(CATCH_UP); + expect(heartbeatDelayMs(null, now, CATCH_UP)).toBe(CATCH_UP); + expect(heartbeatDelayMs(now - 3 * DESKTOP_HEARTBEAT_INTERVAL_MS, now, CATCH_UP)).toBe(CATCH_UP); + }); + + it('a day after the last, and not sooner', () => { + expect(heartbeatDelayMs(now - 3_600_000, now, CATCH_UP)).toBe(DESKTOP_HEARTBEAT_INTERVAL_MS - 3_600_000); + }); + + it('soon again if the clock went back', () => { + expect(heartbeatDelayMs(now + 3_600_000, now, CATCH_UP)).toBe(CATCH_UP); + }); + + it('soon means somewhere from 30 s to 10 min, so a start time can\'t be read from it', () => { + expect(desktopCatchUpMs(() => 0)).toBe(30_000); + expect(desktopCatchUpMs(() => 0.5)).toBe(315_000); + expect(desktopCatchUpMs(() => 0.999999)).toBeLessThanOrEqual(600_000); + expect(desktopCatchUpMs(() => 0.999999)).toBeGreaterThan(599_000); + expect(DESKTOP_CATCH_UP_MIN_MS).toBe(30_000); + expect(DESKTOP_CATCH_UP_MAX_MS).toBe(600_000); + const seen = new Set(Array.from({ length: 50 }, () => desktopCatchUpMs())); + expect(seen.size).toBeGreaterThan(1); + for (const value of seen) { + expect(value).toBeGreaterThanOrEqual(30_000); + expect(value).toBeLessThanOrEqual(600_000); + } + expect(heartbeatDelayMs(null, now)).toBeLessThanOrEqual(600_000); + }); +}); + +describe('the shell\'s own heartbeat', () => { + const ping = () => buildDesktopPing({ + instanceId: 'f0c1a2b3-c4d5-4e6f-8a9b-0c1d2e3f4a5b', + appVersion: '0.3.0-beta.1', + nodeVersion: '22.11.0', + osFamily: 'windows', + mode: 'instance', + channel: 'beta', + now: Date.parse('2026-11-03T12:00:00Z'), + }); + + it('claims nothing that is the instance\'s to report', () => { + const body = ping(); + expect(Object.values(body.features)).toEqual([false, false, false, false, false, false]); + expect(body.counts).toEqual({ accounts: '0', accounts_active_7d: '0', extensions_installed: 0, themes_installed: 0 }); + expect(body.stalwart_version).toBeNull(); + expect(body.instance_id).toBe('f0c1a2b3-c4d5-4e6f-8a9b-0c1d2e3f4a5b'); + }); + + it.skipIf(!collector)('is what the real collector accepts, as schema 1 and as schema 2', () => { + const clean = collector!.validate(ping())!; + expect(clean).toMatchObject({ schema: '1', build: 'desktop.instance.beta', version: '0.3.0-beta.1', os_family: 'windows', node_version: '22.11.0' }); + expect(clean.platform).toBe('desktop'); + // Any extra top-level field would make schema 2 refuse the whole heartbeat. + expect(collector!.validate({ ...ping(), schema: '2', errors: [] })).not.toBeNull(); + }); + + it.skipIf(!collector)('main\'s error batch is what the real collector accepts', () => { + const now = Date.now(); + const batch = buildDesktopErrorBatch('f0c1a2b3-c4d5-4e6f-8a9b-0c1d2e3f4a5b', now, [ + { name: 'TypeError', fingerprint: '0123456789abcdef', version: '0.3.0+desktop', count: 7 }, + ]); + const clean = collector!.validateErrorBatch(batch)!; + expect(clean).not.toBeNull(); + expect(collector!.validateErrorBatch(buildDesktopErrorBatch('f0c1a2b3-c4d5-4e6f-8a9b-0c1d2e3f4a5b', now, [ + { name: 'TypeError', fingerprint: '0123456789abcdef', version: '0.3.0-beta.1+desktop', count: 1 }, + ]))).not.toBeNull(); + expect(clean.errors).toEqual([expect.objectContaining({ name: 'TypeError', count: '6-10', version: '0.3.0+desktop', days: 1, frames: [] })]); + }); + + it('fits the collector\'s pattern for build on every mode and channel', () => { + for (const mode of ['standalone', 'instance'] as const) { + for (const channel of ['stable', 'beta'] as const) { + expect(desktopBuildTag(mode, channel)).toMatch(/^[\w.+-]{1,64}$/); + } + } + }); + + it('names the channel: forced, then the user, then the version', () => { + expect(desktopChannel({ value: 'stable', locked: true }, 'beta', '1.0.0-beta.1')).toBe('stable'); + expect(desktopChannel({ value: 'stable', locked: false }, 'beta', '1.0.0')).toBe('beta'); + expect(desktopChannel({ value: 'stable', locked: false }, undefined, '1.0.0-beta.1')).toBe('beta'); + expect(desktopChannel({ value: 'stable', locked: false }, 'nonsense', '1.0.0')).toBe('stable'); + }); + + it('names the OS the way the collector does', () => { + expect(desktopOsFamily('win32')).toBe('windows'); + expect(desktopOsFamily('darwin')).toBe('darwin'); + expect(desktopOsFamily('linux')).toBe('linux'); + expect(desktopOsFamily('freebsd')).toBe('unknown'); + }); + + it('holds no host name, so only one place has the collector', () => { + const source = readFileSync(path.join(__dirname, '..', 'desktop-telemetry.ts'), 'utf8'); + expect(source).not.toContain('bulwarkmail.org'); + }); + + it('the policy says which shell file acts on the two keys', async () => { + const { POLICY_CONSUMERS } = await import('../policy-schema'); + expect(POLICY_CONSUMERS.TelemetryAllowed).toEqual({ repo: 'shell', file: 'src/main/features/privacy.ts' }); + expect(POLICY_CONSUMERS.CrashReportsAllowed).toEqual({ repo: 'shell', file: 'src/main/features/privacy.ts' }); + }); +}); diff --git a/lib/desktop/__tests__/native-ui.test.tsx b/lib/desktop/__tests__/native-ui.test.tsx new file mode 100644 index 000000000..58df7bba2 --- /dev/null +++ b/lib/desktop/__tests__/native-ui.test.tsx @@ -0,0 +1,338 @@ +import { act, render, screen, waitFor } from '@testing-library/react'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { ContextMenu, ContextMenuHeader, ContextMenuItem, ContextMenuSeparator, ContextMenuSubMenu } from '@/components/ui/context-menu'; +import type { BulwarkDesktopBridge, DesktopNativeMenuItem } from '../types'; +import { accentColours, applySystemAccent } from '../system-accent'; +import { mergedDesktopState, registerDesktopSurface, resetDesktopCommands, runDesktopCommand, setDesktopBaseState } from '../commands'; +import { readMenu } from '../native-menu'; +import { noteOpenDraft, resetOpenDrafts, restoreUrlFor } from '../window-restore'; +import { readDesktopPrefs, resetDesktopPrefsCache, setDesktopPref } from '../preferences'; +import { closePopoutWindow, isPopoutPath } from '@/lib/popout/window-role'; +import { toast } from '@/stores/toast-store'; + +function setBridge(bridge: Partial<BulwarkDesktopBridge> | undefined) { + window.bulwarkDesktop = bridge as BulwarkDesktopBridge | undefined; +} + +afterEach(() => { + setBridge(undefined); + resetDesktopCommands(); + resetOpenDrafts(); + localStorage.clear(); + resetDesktopPrefsCache(); + vi.useRealTimers(); +}); + +function testMenu(extra?: React.ReactNode, handlers: { reply?: () => void; inbox?: () => void } = {}) { + return ( + <> + <ContextMenuHeader>Three messages</ContextMenuHeader> + <ContextMenuItem label="Reply" onClick={handlers.reply ?? (() => {})} shortcut="R" hint="to the sender" /> + <ContextMenuItem label="Forward" onClick={() => {}} disabled /> + <ContextMenuSeparator /> + <ContextMenuSubMenu label="Move to"> + <ContextMenuItem label="Inbox" onClick={handlers.inbox ?? (() => {})} /> + <ContextMenuItem label="R&D" onClick={() => {}} /> + </ContextMenuSubMenu> + <ContextMenuSubMenu label="Rules" disabled> + <ContextMenuItem label="Never shown" onClick={() => {}} /> + </ContextMenuSubMenu> + {extra} + </> + ); +} + +describe('an HTML menu shown natively', () => { + let popup: ReturnType<typeof vi.fn>; + let answer: (id: string | null) => void; + + beforeEach(() => { + popup = vi.fn(() => new Promise<string | null>((resolve) => { answer = resolve; })); + setBridge({ version: 1, platform: 'win32', menu: { setState: () => {}, popup: popup as never } }); + }); + + async function openMenu(children: React.ReactNode, onClose = vi.fn()) { + render(<ContextMenu isOpen position={{ x: 10, y: 10 }} onClose={onClose}>{children}</ContextMenu>); + await waitFor(() => expect(popup).toHaveBeenCalled()); + return { items: popup.mock.calls[0][0] as DesktopNativeMenuItem[], at: popup.mock.calls[0][1], onClose }; + } + + it('reads every kind of row, in order, with submenus', async () => { + const { items } = await openMenu(testMenu()); + expect(items.map((item) => item.label ?? item.type)).toEqual(['Three messages', 'Reply', 'Forward', 'separator', 'Move to', 'Rules']); + expect(items[0].enabled).toBe(false); + expect(items[2].enabled).toBe(false); + expect(items[4].submenu?.map((item) => item.label)).toEqual(['Inbox', 'R&D']); + // A disabled submenu shows, and has nothing in it. + expect(items[5].enabled).toBe(false); + expect(items[5].submenu).toBeUndefined(); + }); + + it('takes the label without the shortcut or the hint', async () => { + const { items } = await openMenu(testMenu()); + expect(items[1].label).toBe('Reply'); + }); + + it('at the pointer from a right-click, under the button from a button', async () => { + const { at } = await openMenu(testMenu()); + expect(at).toBeUndefined(); + popup.mockClear(); + render( + <ContextMenu isOpen position={{ x: 0, y: 0, anchor: { left: 40, top: 50, right: 90, bottom: 70 } }} onClose={() => {}}> + <ContextMenuItem label="One" onClick={() => {}} /> + </ContextMenu>, + ); + await waitFor(() => expect(popup).toHaveBeenCalled()); + expect(popup.mock.calls[0][1]).toEqual({ x: 40, y: 74 }); + }); + + it('a pick runs the HTML row, the one a browser would run, and closes the menu', async () => { + const reply = vi.fn(); + const inbox = vi.fn(); + const { items, onClose } = await openMenu(testMenu(undefined, { reply, inbox })); + await act(async () => { + answer(items[4].submenu![0].id!); + }); + await waitFor(() => expect(onClose).toHaveBeenCalled()); + expect(inbox).toHaveBeenCalledTimes(1); + expect(reply).not.toHaveBeenCalled(); + }); + + it('dismissing it runs nothing and closes the menu', async () => { + const reply = vi.fn(); + const { onClose } = await openMenu(testMenu(undefined, { reply })); + await act(async () => { + answer(null); + }); + await waitFor(() => expect(onClose).toHaveBeenCalled()); + expect(reply).not.toHaveBeenCalled(); + }); + + it('the hidden copy is never visible', async () => { + await openMenu(testMenu()); + const menu = document.body.querySelector<HTMLElement>('[role="menu"]'); + expect(menu?.style.visibility).toBe('hidden'); + }); + + it('stays HTML when something in it can\'t be shown natively', async () => { + render( + <ContextMenu isOpen position={{ x: 10, y: 10 }} onClose={() => {}}> + {testMenu(<input type="color" aria-label="Colour" />)} + </ContextMenu>, + ); + await waitFor(() => expect(document.body.querySelector<HTMLElement>('[role="menu"]')?.style.visibility).toBe('visible')); + expect(popup).not.toHaveBeenCalled(); + expect(screen.getByRole('menuitem', { name: /Reply/ })).toBeTruthy(); + }); + + it('a plugin\'s frame keeps the rest native, with a line to the HTML menu', async () => { + const frame = ( + <div data-plugin-slot="context-menu-email"><iframe title="plugin" /></div> + ); + const onClose = vi.fn(); + const { items } = await openMenu(testMenu(frame), onClose); + expect(items.at(-1)).toMatchObject({ label: 'from_plugins' }); + expect(items.map((item) => item.label)).toContain('Reply'); + await act(async () => { + answer(items.at(-1)!.id!); + }); + await waitFor(() => expect(document.body.querySelector<HTMLElement>('[role="menu"]')?.style.visibility).toBe('visible')); + expect(onClose).not.toHaveBeenCalled(); + }); + + it('a frame that is no plugin\'s stays HTML whole', () => { + const root = document.createElement('div'); + root.innerHTML = '<button role="menuitem">Reply</button><iframe></iframe>'; + expect(readMenu(root).unsupported).toBe(true); + }); + + it('a row that went while the menu was up says so, instead of doing nothing', async () => { + const warning = vi.spyOn(toast, 'warning').mockImplementation(() => '' as never); + const reply = vi.fn(); + const { items, onClose } = await openMenu(testMenu(undefined, { reply })); + const row = screen.getAllByRole('menuitem', { hidden: true }).find((el) => el.textContent?.includes('Reply'))!; + row.parentElement!.remove(); + await act(async () => { + answer(items[1].id!); + }); + await waitFor(() => expect(onClose).toHaveBeenCalled()); + expect(reply).not.toHaveBeenCalled(); + expect(warning).toHaveBeenCalledWith('pick_gone'); + warning.mockRestore(); + }); + + it('a row with no words stays HTML too: a colour swatch says nothing in a native menu', () => { + const root = document.createElement('div'); + root.innerHTML = '<button role="menuitem"><svg></svg></button>'; + expect(readMenu(root).unsupported).toBe(true); + }); + + it('a search field over a list is left out, and what it searches stays', () => { + const root = document.createElement('div'); + root.innerHTML = '<input type="search" /><button role="menuitem">Inbox</button>'; + const read = readMenu(root); + expect(read.unsupported).toBe(false); + expect(read.items.map((item) => item.label)).toEqual(['Inbox']); + }); + + it('reads check and radio rows', () => { + const root = document.createElement('div'); + root.innerHTML = '<button role="menuitemcheckbox" aria-checked="true">Show</button><button role="menuitemradio" aria-checked="false">Other</button>'; + expect(readMenu(root).items).toMatchObject([ + { type: 'checkbox', checked: true, label: 'Show' }, + { type: 'radio', checked: false, label: 'Other' }, + ]); + }); +}); + +describe('the same menu in a browser', () => { + it('is the HTML menu, on screen, and no bridge is asked', async () => { + render(<ContextMenu isOpen position={{ x: 10, y: 10 }} onClose={() => {}}>{testMenu()}</ContextMenu>); + await waitFor(() => expect(document.body.querySelector<HTMLElement>('[role="menu"]')?.style.visibility).toBe('visible')); + // A closed submenu's rows aren't in the page. + expect(screen.queryByRole('menuitem', { name: 'Inbox' })).toBeNull(); + }); +}); + +describe('menu commands', () => { + beforeEach(() => { + vi.useFakeTimers(); + }); + + it('the newest surface answers, and an older one is back when it goes', () => { + const older = vi.fn(); + const newer = vi.fn(); + registerDesktopSurface({ handlers: { 'message.reply': older }, state: {} }); + const stop = registerDesktopSurface({ handlers: { 'message.reply': newer }, state: {} }); + expect(runDesktopCommand('message.reply')).toBe(true); + expect(newer).toHaveBeenCalledTimes(1); + expect(older).not.toHaveBeenCalled(); + stop(); + runDesktopCommand('message.reply'); + expect(older).toHaveBeenCalledTimes(1); + }); + + it('says when nothing answered, so the host can take it', () => { + expect(runDesktopCommand('go.calendar')).toBe(false); + }); + + it('the shell gets the state, surfaces over the base', () => { + const setState = vi.fn(); + setBridge({ version: 1, platform: 'win32', menu: { setState } }); + setDesktopBaseState({ 'message.reply': false, 'file.print': true }); + registerDesktopSurface({ handlers: {}, state: { 'message.reply': true } }); + vi.advanceTimersByTime(50); + expect(setState).toHaveBeenLastCalledWith({ 'message.reply': true, 'file.print': true }); + expect(mergedDesktopState()['file.print']).toBe(true); + }); +}); + +describe('composers that come back', () => { + it('tell the shell which draft they hold, and forget it when they go', () => { + const setRestore = vi.fn(); + setBridge({ version: 1, platform: 'win32', windows: { setRestore } }); + noteOpenDraft('a', { draftId: 'd1', localAccountId: 'login', ownerAccountId: 'group' }); + expect(setRestore).toHaveBeenLastCalledWith([expect.stringContaining('draft=d1')]); + expect(setRestore.mock.lastCall![0][0]).toContain('account=login'); + expect(setRestore.mock.lastCall![0][0]).toContain('owner=group'); + noteOpenDraft('a', { draftId: 'd2' }); + expect(setRestore.mock.lastCall![0]).toHaveLength(1); + expect(setRestore.mock.lastCall![0][0]).toContain('draft=d2'); + noteOpenDraft('a', null); + expect(setRestore).toHaveBeenLastCalledWith([]); + }); + + it('are pop-out addresses the window type check recognises', () => { + expect(restoreUrlFor({ draftId: 'x' })).toMatch(/\/popout\/compose\?draft=x$/); + }); + + it('do nothing in a browser', () => { + expect(() => noteOpenDraft('a', { draftId: 'd1' })).not.toThrow(); + }); +}); + +describe('a pop-out closing itself', () => { + it('goes through the shell in the desktop app, not window.close', () => { + const closeSelf = vi.fn(); + const close = vi.spyOn(window, 'close').mockImplementation(() => {}); + setBridge({ version: 1, platform: 'win32', windows: { closeSelf } }); + closePopoutWindow(); + expect(closeSelf).toHaveBeenCalledTimes(1); + expect(close).not.toHaveBeenCalled(); + close.mockRestore(); + }); + + it('uses window.close in a browser', () => { + vi.useFakeTimers(); + const close = vi.spyOn(window, 'close').mockImplementation(() => {}); + closePopoutWindow(); + expect(close).toHaveBeenCalledTimes(1); + close.mockRestore(); + }); + + it('counts the warm spare as a pop-out, which is a guest of the main window', () => { + expect(isPopoutPath('/popout/spare')).toBe(true); + expect(isPopoutPath('/de/popout/spare')).toBe(true); + expect(isPopoutPath('/popout/spare/x')).toBe(false); + }); +}); + +describe('window settings', () => { + it('both default to on, and stay on this computer', () => { + expect(readDesktopPrefs()).toEqual({ openOnDoubleClick: true, restoreWindows: true, dictionaryDownload: 'ask' }); + setDesktopPref('restoreWindows', false); + resetDesktopPrefsCache(); + expect(readDesktopPrefs().restoreWindows).toBe(false); + expect(readDesktopPrefs().openOnDoubleClick).toBe(true); + }); + + it('a damaged value is the default', () => { + localStorage.setItem('bulwark-desktop-window-prefs', '{nope'); + expect(readDesktopPrefs().restoreWindows).toBe(true); + }); +}); + +describe('the OS accent colour', () => { + beforeEach(() => setBridge({ version: 1, platform: 'win32' })); + + const apply = (input: Partial<Parameters<typeof applySystemAccent>[0]>) => { + const root = document.createElement('div'); + applySystemAccent({ accent: '#0078d4', dark: false, followsSystem: true, ...input }, root); + return root.style.getPropertyValue('--color-primary'); + }; + + it('is used while the theme follows the system', () => { + expect(apply({})).toBe('#0078d4'); + }); + + it('not under a theme the user picked', () => { + expect(apply({ followsSystem: false })).toBe(''); + }); + + it('not in a contrast theme', () => { + expect(apply({ highContrast: true })).toBe(''); + }); + + it('not where it would vanish against the page', () => { + expect(accentColours('#fefefe', false)).toBeNull(); + expect(accentColours('#050505', true)).toBeNull(); + }); + + it('text on it is what reads', () => { + expect(accentColours('#0078d4', false)?.foreground).toBe('#ffffff'); + expect(accentColours('#ffd400', true)?.foreground).toBe('#000000'); + }); + + it('a removed accent takes its colours off again', () => { + const root = document.createElement('div'); + applySystemAccent({ accent: '#0078d4', dark: false, followsSystem: true }, root); + applySystemAccent({ dark: false, followsSystem: true }, root); + expect(root.style.getPropertyValue('--color-primary')).toBe(''); + expect(root.style.getPropertyValue('--color-primary-foreground')).toBe(''); + }); + + it('does nothing in a browser', () => { + setBridge(undefined); + expect(apply({})).toBe(''); + }); +}); diff --git a/lib/desktop/__tests__/os-commands.test.ts b/lib/desktop/__tests__/os-commands.test.ts new file mode 100644 index 000000000..d3f717f64 --- /dev/null +++ b/lib/desktop/__tests__/os-commands.test.ts @@ -0,0 +1,273 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import type { BulwarkDesktopBridge, DesktopOsCommand } from '../types'; +import type { NotificationActionRequest, NotificationActionStatus } from '@/lib/pwa-notify/page-actions'; + +/** What the OS asks for, carried out by the parts the app already has. */ + +const runNotificationAction = vi.hoisted(() => vi.fn()); +vi.mock('@/lib/pwa-notify/page-actions', () => ({ runNotificationAction })); + +const accounts = [{ id: 'alice@one', cookieSlot: 3, serverUrl: 'https://one.example', username: 'alice@example.org' }]; +let authenticated = true; +vi.mock('@/stores/account-store', () => ({ useAccountStore: { getState: () => ({ accounts }) } })); +vi.mock('@/stores/auth-store', () => ({ + useAuthStore: { + getState: () => ({ isAuthenticated: authenticated }), + subscribe: () => () => {}, + }, +})); + +const session = vi.hoisted(() => ({ + savePendingMailto: vi.fn(), + notifyPendingMailto: vi.fn(), + savePendingWebcal: vi.fn(), + notifyPendingWebcal: vi.fn(), +})); +vi.mock('@/lib/protocol-handlers/session', () => session); + +async function fingerprint() { + const { loginFingerprint } = await import('@/lib/pwa-notify/login-fingerprint'); + return loginFingerprint('https://one.example', 'alice@example.org'); +} + +const leaveFor = vi.fn(); +const push = vi.fn(); +const notifyFailed = vi.fn(); +const notifyReplyLost = vi.fn(); +const env = { leaveFor, push, notifyFailed, notifyReplyLost }; +const focus = vi.fn(); + +async function run(command: DesktopOsCommand) { + const { handleOsCommand } = await import('../os-commands'); + await handleOsCommand(command, env); +} + +const text = (value: string) => new TextEncoder().encode(value); + +beforeEach(async () => { + vi.clearAllMocks(); + authenticated = true; + window.bulwarkDesktop = { version: 1, platform: 'win32', windows: { focus } } as unknown as BulwarkDesktopBridge; + const { resetMailLinks } = await import('../mail-links'); + resetMailLinks(); + const { clearHandoffs, takeHandoff } = await import('@/lib/launch-handoff'); + clearHandoffs(); + for (const kind of ['compose', 'eml', 'calendar', 'contacts'] as const) takeHandoff(kind); +}); + +afterEach(() => { + window.bulwarkDesktop = undefined; +}); + +describe('launches', () => { + it('New message goes through the launch handoff, with no question asked', async () => { + const { subscribeHandoff } = await import('@/lib/launch-handoff'); + const fired = vi.fn(); + const stop = subscribeHandoff('compose', fired); + await run({ type: 'new-message' }); + expect(fired).toHaveBeenCalled(); + stop(); + }); + + it('a mailto goes through the protocol handler to the mail page', async () => { + await run({ type: 'mailto', url: 'mailto:bob@example.org?subject=Hi&body=Text' }); + expect(session.savePendingMailto).toHaveBeenCalledTimes(1); + expect(session.savePendingMailto.mock.calls[0][0]).toMatchObject({ to: ['bob@example.org'], subject: 'Hi' }); + expect(session.notifyPendingMailto).toHaveBeenCalled(); + expect(push).toHaveBeenCalledWith('/'); + }); + + it('a mailto that is not one does nothing', async () => { + await run({ type: 'mailto', url: 'mailto:' + '%'.repeat(3) }); + expect(push).not.toHaveBeenCalledWith('/calendar'); + }); + + it('a webcal goes to the calendar', async () => { + await run({ type: 'webcal', url: 'webcal://example.org/cal.ics' }); + expect(session.savePendingWebcal).toHaveBeenCalledTimes(1); + expect(session.notifyPendingWebcal).toHaveBeenCalled(); + expect(push).toHaveBeenCalledWith('/calendar'); + }); + + it('a double-clicked .eml, .ics and .vcf each reach their handler', async () => { + const { takeHandoff } = await import('@/lib/launch-handoff'); + await run({ + type: 'files', + reason: 'open', + failed: [], + files: [ + { name: 'letter.eml', data: text('Subject: x') }, + { name: 'party.ics', data: text('BEGIN:VCALENDAR') }, + { name: 'bob.vcf', data: text('BEGIN:VCARD') }, + ], + }); + expect(await takeHandoff('eml')?.files[0].text()).toBe('Subject: x'); + expect(takeHandoff('calendar')?.files[0].name).toBe('party.ics'); + expect(takeHandoff('contacts')?.files[0].name).toBe('bob.vcf'); + expect(notifyFailed).not.toHaveBeenCalled(); + }); + + it('a file dropped on the icon becomes an attachment on a new draft', async () => { + const { takeHandoff } = await import('@/lib/launch-handoff'); + await run({ type: 'files', reason: 'attach', failed: [], files: [{ name: 'report.pdf', data: text('pdf') }] }); + const draft = takeHandoff('compose'); + expect(draft?.files.map((file) => file.name)).toEqual(['report.pdf']); + }); + + it('says so when a file could not be read', async () => { + await run({ type: 'files', reason: 'open', failed: ['gone.eml'], files: [] }); + expect(notifyFailed).toHaveBeenCalledWith(['gone.eml']); + }); +}); + +describe('going somewhere', () => { + it('Calendar and Contacts leave through the save-first path', async () => { + await run({ type: 'navigate', target: 'calendar' }); + expect(leaveFor).toHaveBeenCalledWith('/calendar'); + }); + + it('Inbox opens the folder on the mail page when it is mounted', async () => { + const { setMailLinkOpener } = await import('../mail-links'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + await run({ type: 'navigate', target: 'inbox' }); + expect(opener).toHaveBeenCalledWith({ kind: 'folder', ref: 'inbox' }, undefined); + expect(leaveFor).not.toHaveBeenCalled(); + stop(); + }); + + it('with the mail page not mounted the link waits for it, and the app goes there', async () => { + const { setMailLinkOpener } = await import('../mail-links'); + await run({ type: 'open-message', emailId: 'e1', accountId: 'acc' }); + expect(leaveFor).toHaveBeenCalledWith('/'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + expect(opener).toHaveBeenCalledWith({ kind: 'message', id: 'e1', ownerAccountId: 'acc' }, undefined); + stop(); + }); +}); + +describe('a toast\'s buttons', () => { + const context = async (over: object = {}) => JSON.stringify({ emailId: 'e1', threadId: 't1', accountId: 'acc', slot: 3, login: await fingerprint(), ...over }); + const finishWith = (status: NotificationActionStatus) => { + runNotificationAction.mockImplementation(async (_request: NotificationActionRequest, answer: (s: NotificationActionStatus) => void) => { + answer('accepted'); + answer(status); + }); + }; + + it.each(['archive', 'mark-read', 'delete'] as const)('%s runs through the page\'s notification action and stays out of sight', async (action) => { + const { setMailLinkOpener } = await import('../mail-links'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + finishWith('done'); + await run({ type: 'notification', action, context: await context() }); + expect(runNotificationAction.mock.calls[0][0]).toMatchObject({ action, emailId: 'e1', accountId: 'acc', slot: 3, login: await fingerprint() }); + expect(opener).not.toHaveBeenCalled(); + expect(focus).not.toHaveBeenCalled(); + stop(); + }); + + it('a button that can\'t be carried out opens the message instead', async () => { + const { setMailLinkOpener } = await import('../mail-links'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + finishWith('failed'); + await run({ type: 'notification', action: 'archive', context: await context() }); + expect(focus).toHaveBeenCalled(); + expect(opener).toHaveBeenCalledWith(expect.objectContaining({ kind: 'message', id: 'e1', slot: 3 }), undefined); + stop(); + }); + + it('a reply opens the composer with the typed text, and is not sent', async () => { + const { setMailLinkOpener } = await import('../mail-links'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + await run({ type: 'notification', action: 'reply', context: await context(), reply: 'On my way' }); + expect(runNotificationAction).not.toHaveBeenCalled(); + expect(opener).toHaveBeenCalledWith( + { kind: 'message', id: 'e1', slot: 3, ownerAccountId: 'acc', reply: true }, + { replyText: 'On my way' }, + ); + stop(); + }); + + it('behind the app lock an old toast acts on nothing, and the window comes up', async () => { + const { setAppLockCheck } = await import('../app-lock-state'); + const { setMailLinkOpener } = await import('../mail-links'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + setAppLockCheck(() => true); + for (const action of ['delete', 'archive', 'mark-read', 'open', 'reply']) { + await run({ type: 'notification', action, context: await context(), reply: 'x' }); + } + expect(runNotificationAction).not.toHaveBeenCalled(); + expect(opener).not.toHaveBeenCalled(); + expect(focus).toHaveBeenCalled(); + setAppLockCheck(null); + stop(); + }); + + it('typed text that has nowhere to go says so', async () => { + const { setMailLinkOpener } = await import('../mail-links'); + const stop = setMailLinkOpener(vi.fn()); + await run({ type: 'notification', action: 'reply', context: await context({ login: 'someone-else' }), reply: 'On my way' }); + expect(notifyReplyLost).toHaveBeenCalled(); + notifyReplyLost.mockClear(); + await run({ type: 'notification', action: 'reply', context: await context({ login: 'someone-else' }) }); + expect(notifyReplyLost).not.toHaveBeenCalled(); + stop(); + }); + + it('a click on an old toast whose slot went to someone else opens the Inbox, not their message', async () => { + const { setMailLinkOpener } = await import('../mail-links'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + await run({ type: 'notification', action: 'open', context: await context({ login: 'someone-else' }) }); + expect(opener).toHaveBeenCalledWith({ kind: 'folder', ref: 'inbox' }, undefined); + stop(); + }); + + it('a click on a summary toast opens the Inbox of that login', async () => { + const { setMailLinkOpener } = await import('../mail-links'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + await run({ type: 'notification', action: 'open', context: await context({ emailId: undefined }) }); + expect(opener).toHaveBeenCalledWith({ kind: 'folder', ref: 'inbox', slot: 3 }, undefined); + stop(); + }); + + it('junk in the context does no harm', async () => { + const { setMailLinkOpener } = await import('../mail-links'); + const opener = vi.fn(); + const stop = setMailLinkOpener(opener); + await run({ type: 'notification', action: 'archive', context: '{not json' }); + expect(runNotificationAction).not.toHaveBeenCalled(); + expect(opener).toHaveBeenCalledWith({ kind: 'folder', ref: 'inbox' }, undefined); + stop(); + }); +}); + +describe('listening', () => { + it('does nothing in a browser', async () => { + window.bulwarkDesktop = undefined; + const { startOsCommands } = await import('../os-commands'); + expect(() => startOsCommands(env)()).not.toThrow(); + }); + + it('subscribes, and carries out what arrives', async () => { + let listener: ((command: DesktopOsCommand) => void) | null = null; + window.bulwarkDesktop = { + version: 1, + platform: 'win32', + os: { onCommand: (l: (command: DesktopOsCommand) => void) => { listener = l; return () => { listener = null; }; } }, + } as unknown as BulwarkDesktopBridge; + const { startOsCommands } = await import('../os-commands'); + const stop = startOsCommands(env); + listener!({ type: 'navigate', target: 'contacts' }); + await Promise.resolve(); + expect(leaveFor).toHaveBeenCalledWith('/contacts'); + stop(); + expect(listener).toBeNull(); + }); +}); diff --git a/lib/desktop/__tests__/os-mail.test.ts b/lib/desktop/__tests__/os-mail.test.ts new file mode 100644 index 000000000..da28971f6 --- /dev/null +++ b/lib/desktop/__tests__/os-mail.test.ts @@ -0,0 +1,371 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import type { BulwarkDesktopBridge, DesktopOsNotification } from '../types'; +import type { IJMAPClient } from '@/lib/jmap/client-interface'; +import type { Email, Mailbox } from '@/lib/jmap/types'; + +/** New mail to a native notification: which messages count, what the toast may say. */ + +const playNotificationSound = vi.hoisted(() => vi.fn()); +vi.mock('@/lib/notification-sound', () => ({ playNotificationSound })); + +let pushWithoutContent = false; +vi.mock('@/lib/device-policy', () => ({ devicesForAccount: () => ({ pushWithoutContent }) })); + +const accounts = [{ id: 'alice@one', cookieSlot: 3, serverUrl: 'https://one.example', username: 'alice@example.org', label: 'Work', email: 'alice@example.org' }]; +let client: IJMAPClient; +vi.mock('@/stores/account-store', () => ({ useAccountStore: { getState: () => ({ accounts }) } })); +vi.mock('@/stores/auth-store', () => ({ + useAuthStore: { + getState: () => ({ + activeAccountId: 'alice@one', + client, + getClientForAccount: () => client, + }), + }, +})); + +const INBOX = { id: 'in', role: 'inbox', name: 'Inbox' } as unknown as Mailbox; +const SENT = { id: 'out', role: 'sent', name: 'Sent' } as unknown as Mailbox; +const NEWS = { id: 'news', name: 'News' } as unknown as Mailbox; +const JUNK = { id: 'bad', role: 'junk', name: 'Junk' } as unknown as Mailbox; +const MAILBOXES = [INBOX, SENT, NEWS, JUNK]; + +function email(id: string, over: Partial<Email> = {}): Email { + return { + id, + threadId: `t-${id}`, + subject: `Secret ${id}`, + preview: 'preview text', + from: [{ name: 'Alice Sender', email: 'sender@example.org' }], + mailboxIds: { in: true }, + keywords: {}, + receivedAt: new Date().toISOString(), + ...over, + } as unknown as Email; +} + +function fakeClient(mail: Record<string, Email>, changes: { created: string[]; newState: string }[] = []) { + const queue = [...changes]; + return { + getAccountId: () => 'acc', + getAllMailboxes: vi.fn(async () => MAILBOXES), + getEmails: vi.fn(async () => ({ emails: [], hasMore: false, total: 0, state: 'seeded' })), + getEmailChanges: vi.fn(async (since: string) => { + const next = queue.shift(); + return next ? { oldState: since, newState: next.newState, created: next.created, updated: [], destroyed: [], hasMoreChanges: false } : null; + }), + getSomeEmails: vi.fn(async (ids: string[]) => ids.flatMap((id) => mail[id] ?? [])), + } as unknown as IJMAPClient; +} + +const labels = { + newMail: 'new_mail', + newMailCount: (count: number) => `count:${count}`, + noSubject: 'no_subject', + archive: 'archive', + markRead: 'mark_read', + delete: 'delete', + reply: 'reply', + replyPlaceholder: 'placeholder', +}; + +function setBridge(bridge: Partial<BulwarkDesktopBridge> | undefined) { + window.bulwarkDesktop = bridge as BulwarkDesktopBridge | undefined; +} + +beforeEach(async () => { + vi.clearAllMocks(); + pushWithoutContent = false; + const { useSettingsStore } = await import('@/stores/settings-store'); + useSettingsStore.setState({ + emailNotificationsEnabled: true, + emailNotificationSound: true, + doNotDisturb: false, + pushNotifyInboxOnly: true, + notificationMutes: { accounts: [], mailboxes: {} }, + notificationSoundChoice: 'involved', + }); + const { setAppLockCheck } = await import('../app-lock-state'); + setAppLockCheck(null); + const { usePolicyStore } = await import('@/stores/policy-store'); + usePolicyStore.setState({ loaded: true }); +}); + +afterEach(() => { + setBridge(undefined); + vi.useRealTimers(); +}); + +describe('which new messages notify', () => { + it('a new unread message in the Inbox', async () => { + const { notifyingMailbox } = await import('../new-mail'); + expect(notifyingMailbox(email('a'), 'acc', 'acc', MAILBOXES)?.id).toBe('in'); + }); + + it('nothing already read, a draft, or old mail coming back from an import', async () => { + const { notifyingMailbox } = await import('../new-mail'); + expect(notifyingMailbox(email('a', { keywords: { $seen: true } }), 'acc', 'acc', MAILBOXES)).toBeNull(); + expect(notifyingMailbox(email('a', { keywords: { $draft: true } }), 'acc', 'acc', MAILBOXES)).toBeNull(); + const old = new Date(Date.now() - 3 * 86400_000).toISOString(); + expect(notifyingMailbox(email('a', { receivedAt: old }), 'acc', 'acc', MAILBOXES)).toBeNull(); + }); + + it('with Inbox only on, mail filed elsewhere stays silent; off, it notifies, but never Junk or Sent', async () => { + const { notifyingMailbox } = await import('../new-mail'); + const { useSettingsStore } = await import('@/stores/settings-store'); + const filed = email('a', { mailboxIds: { news: true } }); + expect(notifyingMailbox(filed, 'acc', 'acc', MAILBOXES)).toBeNull(); + useSettingsStore.setState({ pushNotifyInboxOnly: false }); + expect(notifyingMailbox(filed, 'acc', 'acc', MAILBOXES)?.id).toBe('news'); + expect(notifyingMailbox(email('b', { mailboxIds: { bad: true } }), 'acc', 'acc', MAILBOXES)).toBeNull(); + expect(notifyingMailbox(email('c', { mailboxIds: { out: true } }), 'acc', 'acc', MAILBOXES)).toBeNull(); + }); + + it('a muted folder or account stays silent', async () => { + const { notifyingMailbox } = await import('../new-mail'); + const { useSettingsStore } = await import('@/stores/settings-store'); + useSettingsStore.setState({ notificationMutes: { accounts: [], mailboxes: { 'acc/in': true } } }); + expect(notifyingMailbox(email('a'), 'acc', 'acc', MAILBOXES)).toBeNull(); + useSettingsStore.setState({ notificationMutes: { accounts: ['acc'], mailboxes: {} } }); + expect(notifyingMailbox(email('a'), 'acc', 'acc', MAILBOXES)).toBeNull(); + }); +}); + +describe('the watch', () => { + const flush = async () => { + for (let i = 0; i < 20; i += 1) await Promise.resolve(); + await new Promise((resolve) => setTimeout(resolve, 0)); + }; + + it('resolves a push against its baseline, whatever page is open', async () => { + const { startNewMailWatch } = await import('../new-mail'); + const { emitPushStateChange } = await import('@/lib/push-events'); + const fake = fakeClient({ a: email('a') }, [{ created: ['a'], newState: 's2' }]); + const seen: string[] = []; + const watch = startNewMailWatch((mail) => seen.push(...mail.map((m) => m.email.id))); + watch.seed(fake); + await flush(); + emitPushStateChange({ changed: { acc: { Email: 's2' } } } as never, fake, 'background'); + await flush(); + expect(fake.getEmailChanges).toHaveBeenCalledWith('seeded', 'acc', 200); + expect(seen).toEqual(['a']); + watch.stop(); + }); + + it('tells a message once when the store and the push both report it', async () => { + const { startNewMailWatch } = await import('../new-mail'); + const { emitPushStateChange } = await import('@/lib/push-events'); + const fake = fakeClient({ a: email('a') }, [{ created: ['a'], newState: 's2' }]); + const seen: string[] = []; + const watch = startNewMailWatch((mail) => seen.push(...mail.map((m) => m.email.id))); + watch.seed(fake); + await flush(); + watch.noteCreated(fake, 'acc', ['a']); + await flush(); + emitPushStateChange({ changed: { acc: { Email: 's2' } } } as never, fake, 'active'); + await flush(); + expect(seen).toEqual(['a']); + watch.stop(); + }); + + it('a message the store has not got yet is not written off: its created event still tells it', async () => { + const { startNewMailWatch } = await import('../new-mail'); + const { emitPushStateChange } = await import('@/lib/push-events'); + const held: Record<string, Email> = {}; + const fake = fakeClient(held, [{ created: ['a'], newState: 's2' }]); + const seen: string[] = []; + const watch = startNewMailWatch((mail) => seen.push(...mail.map((m) => m.email.id))); + watch.seed(fake); + await flush(); + // The push got here first. The device answers, and it doesn't have the message. + emitPushStateChange({ changed: { acc: { Email: 's2' } } } as never, fake, 'active'); + await flush(); + expect(seen).toEqual([]); + // The store has synced it now. + held.a = email('a'); + watch.noteCreated(fake, 'acc', ['a']); + await flush(); + expect(seen).toEqual(['a']); + watch.stop(); + }); + + it('without a baseline the first push only sets one: old mail is not news', async () => { + const { startNewMailWatch } = await import('../new-mail'); + const { emitPushStateChange } = await import('@/lib/push-events'); + const fake = fakeClient({}, []); + const onMail = vi.fn(); + const watch = startNewMailWatch(onMail); + emitPushStateChange({ changed: { acc: { Email: 's1' } } } as never, fake, 'active'); + await flush(); + expect(fake.getEmailChanges).not.toHaveBeenCalled(); + expect(onMail).not.toHaveBeenCalled(); + watch.stop(); + }); + + it('ignores a change after it stopped', async () => { + const { startNewMailWatch } = await import('../new-mail'); + const { emitPushStateChange } = await import('@/lib/push-events'); + const fake = fakeClient({ a: email('a') }, [{ created: ['a'], newState: 's2' }]); + const onMail = vi.fn(); + const watch = startNewMailWatch(onMail); + watch.seed(fake); + await flush(); + watch.stop(); + emitPushStateChange({ changed: { acc: { Email: 's2' } } } as never, fake, 'active'); + await flush(); + expect(onMail).not.toHaveBeenCalled(); + }); +}); + +describe('what the notification says', () => { + const one = (id = 'a', over: Partial<Email> = {}) => ({ client, accountId: 'acc', email: email(id, over) }); + + beforeEach(() => { + client = fakeClient({}); + }); + + it('sender, subject, the buttons, and what a button needs after a restart', async () => { + const { buildMailNotification } = await import('../mail-notifications'); + const { loginFingerprint } = await import('@/lib/pwa-notify/login-fingerprint'); + const notification = await buildMailNotification([one()], labels); + expect(notification.title).toBe('Alice Sender'); + expect(notification.body).toBe('Secret a'); + expect(notification.actions?.map((a) => a.id)).toEqual(['archive', 'mark-read', 'delete']); + expect(notification.reply?.label).toBe('reply'); + expect(JSON.parse(notification.context)).toEqual({ + accountId: 'acc', + slot: 3, + login: await loginFingerprint('https://one.example', 'alice@example.org'), + emailId: 'a', + threadId: 't-a', + }); + }); + + it('no Archive button where the organisation has it off', async () => { + const { buildMailNotification } = await import('../mail-notifications'); + const notification = await buildMailNotification([one()], { ...labels, archive: null }); + expect(notification.actions?.map((a) => a.id)).toEqual(['mark-read', 'delete']); + }); + + it('while the app is locked: no sender, no subject, no buttons', async () => { + const { buildMailNotification } = await import('../mail-notifications'); + const { setAppLockCheck } = await import('../app-lock-state'); + setAppLockCheck(() => true); + const notification = await buildMailNotification([one()], labels); + const text = JSON.stringify(notification); + expect(notification.title).toBe('new_mail'); + expect(text).not.toContain('Alice Sender'); + expect(text).not.toContain('Secret'); + expect(notification.actions).toBeUndefined(); + expect(notification.reply).toBeUndefined(); + }); + + it('where the organisation keeps content off notifications: the same', async () => { + const { buildMailNotification } = await import('../mail-notifications'); + pushWithoutContent = true; + const notification = await buildMailNotification([one()], labels); + expect(JSON.stringify(notification)).not.toContain('Secret'); + expect(JSON.stringify(notification)).not.toContain('Alice Sender'); + }); + + it('before the policy is known: the same', async () => { + const { buildMailNotification } = await import('../mail-notifications'); + const { usePolicyStore } = await import('@/stores/policy-store'); + usePolicyStore.setState({ loaded: false }); + const notification = await buildMailNotification([one()], labels); + expect(JSON.stringify(notification)).not.toContain('Secret'); + expect(JSON.stringify(notification)).not.toContain('Alice Sender'); + }); + + it('several at once are told about once, and that one has no message to act on', async () => { + const { buildMailNotification } = await import('../mail-notifications'); + const notification = await buildMailNotification([one('a'), one('b'), one('c')], labels); + expect(notification.title).toBe('count:3'); + expect(notification.actions).toBeUndefined(); + expect(JSON.parse(notification.context).emailId).toBeUndefined(); + }); + + it('several at once while locked say only how many', async () => { + const { buildMailNotification } = await import('../mail-notifications'); + const { setAppLockCheck } = await import('../app-lock-state'); + setAppLockCheck(() => true); + const notification = await buildMailNotification([one('a'), one('b')], labels); + expect(notification.title).toBe('count:2'); + expect(notification.body).toBe(''); + }); +}); + +describe('from arrival to toast and sound', () => { + /** The login's fingerprint comes from crypto.subtle, which no fake timer moves. */ + const settle = async () => { + const end = performance.now() + 80; + while (performance.now() < end) await new Promise((resolve) => setImmediate(resolve)); + }; + + async function arrive(over: { result?: { shown: boolean; playSound: boolean } } = {}) { + const { startMailNotifications, MAIL_BATCH_MS } = await import('../mail-notifications'); + const { emitPushStateChange } = await import('@/lib/push-events'); + const notify = vi.fn(async (_n: DesktopOsNotification) => over.result ?? { shown: true, playSound: true }); + setBridge({ version: 1, platform: 'win32', os: { notify } as never }); + client = fakeClient({ a: email('a') }, [{ created: ['a'], newState: 's2' }]); + vi.useFakeTimers({ toFake: ['setTimeout', 'clearTimeout'] }); + const mail = startMailNotifications(labels); + mail.seed(client); + await vi.advanceTimersByTimeAsync(10); + emitPushStateChange({ changed: { acc: { Email: 's2' } } } as never, client, 'active'); + await vi.advanceTimersByTimeAsync(MAIL_BATCH_MS + 10); + await settle(); + mail.stop(); + return notify; + } + + it('asks main, and plays the picked sound when main says so', async () => { + const notify = await arrive(); + expect(notify).toHaveBeenCalledTimes(1); + expect(notify.mock.calls[0][0].sound).toBe(true); + expect(notify.mock.calls[0][0].attention).toBe(true); + expect(playNotificationSound).toHaveBeenCalledWith('involved'); + }); + + it('no sound when main says it is quiet', async () => { + const notify = await arrive({ result: { shown: true, playSound: false } }); + expect(notify).toHaveBeenCalledTimes(1); + expect(playNotificationSound).not.toHaveBeenCalled(); + }); + + it('nothing at all with mail notifications off or the app\'s Do not disturb on', async () => { + const { useSettingsStore } = await import('@/stores/settings-store'); + useSettingsStore.setState({ emailNotificationsEnabled: false }); + expect(await arrive()).not.toHaveBeenCalled(); + useSettingsStore.setState({ emailNotificationsEnabled: true, doNotDisturb: true }); + expect(await arrive()).not.toHaveBeenCalled(); + expect(playNotificationSound).not.toHaveBeenCalled(); + }); + + it("the store's created event reaches a running watch, and nothing else", async () => { + const { startMailNotifications, MAIL_BATCH_MS } = await import('../mail-notifications'); + const { reportStoreCreatedMail: noteStoreCreated } = await import('../system-events'); + const notify = vi.fn(async () => ({ shown: true, playSound: false })); + setBridge({ version: 1, platform: 'win32', os: { notify } as never }); + client = fakeClient({ a: email('a') }); + noteStoreCreated(client, 'acc', ['a']); + vi.useFakeTimers({ toFake: ['setTimeout', 'clearTimeout'] }); + const mail = startMailNotifications(labels); + noteStoreCreated(client, 'acc', ['a']); + await vi.advanceTimersByTimeAsync(MAIL_BATCH_MS + 10); + await settle(); + expect(notify).toHaveBeenCalledTimes(1); + mail.stop(); + noteStoreCreated(client, 'acc', ['b']); + await vi.advanceTimersByTimeAsync(MAIL_BATCH_MS + 10); + await settle(); + expect(notify).toHaveBeenCalledTimes(1); + }); + + it('tells main the sound is off when the user has it off', async () => { + const { useSettingsStore } = await import('@/stores/settings-store'); + useSettingsStore.setState({ emailNotificationSound: false }); + const notify = await arrive({ result: { shown: true, playSound: false } }); + expect(notify.mock.calls[0][0].sound).toBe(false); + }); +}); diff --git a/lib/desktop/__tests__/os-signout.test.ts b/lib/desktop/__tests__/os-signout.test.ts new file mode 100644 index 000000000..d640b50b7 --- /dev/null +++ b/lib/desktop/__tests__/os-signout.test.ts @@ -0,0 +1,24 @@ +import { afterEach, describe, expect, it, vi } from 'vitest'; + +/** A sign-out leaves nothing of the account on the OS's surfaces. */ + +vi.setConfig({ testTimeout: 60_000 }); + +describe('sign-out', () => { + afterEach(() => { + window.bulwarkDesktop = undefined; + }); + + it('clears what the desktop app shows outside its windows', async () => { + const clearSurfaces = vi.fn(); + window.bulwarkDesktop = { version: 1, platform: 'win32', os: { clearSurfaces } } as never; + const { purgeSignedOutData } = await import('@/lib/sign-out-cleanup'); + purgeSignedOutData(); + expect(clearSurfaces).toHaveBeenCalled(); + }); + + it('in a browser there is nothing to clear', async () => { + const { clearDesktopSurfaces } = await import('../bridge'); + expect(() => clearDesktopSurfaces()).not.toThrow(); + }); +}); diff --git a/lib/desktop/__tests__/os-store.test.ts b/lib/desktop/__tests__/os-store.test.ts new file mode 100644 index 000000000..925e4d024 --- /dev/null +++ b/lib/desktop/__tests__/os-store.test.ts @@ -0,0 +1,94 @@ +import 'fake-indexeddb/auto'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import type { StorePageHooks } from '@/lib/store/client/api'; + +/** The local store and the OS integration: mail it found, and a machine going to sleep. */ + +// The first import of offline-mode compiles a good part of the app. +vi.setConfig({ testTimeout: 60_000, hookTimeout: 60_000 }); + +const configured = vi.hoisted(() => ({ hooks: null as StorePageHooks | null })); +const setOnline = vi.hoisted(() => vi.fn(async () => {})); + +vi.mock('@/lib/store/client/api', async (original) => ({ + ...(await original<typeof import('@/lib/store/client/api')>()), + configureStore: (hooks: StorePageHooks | null) => { + if (hooks) configured.hooks = hooks; + }, + getStore: () => ({ + supported: () => true, + setOnline, + ensureOpen: async () => {}, + refresh: () => {}, + sync: async () => {}, + stop: () => {}, + }), +})); + +describe('the store and the OS integration', () => { + const client = { isOfflineOnly: () => false, getAccountId: () => 'acc' }; + + beforeEach(async () => { + vi.clearAllMocks(); + const { useAuthStore } = await import('@/stores/auth-store'); + useAuthStore.setState({ getClientForAccount: () => client as never } as never); + const { registerOfflineHooks } = await import('@/lib/offline/offline-mode'); + registerOfflineHooks(); + }); + + afterEach(async () => { + const { setStoreCreatedListener } = await import('../system-events'); + setStoreCreatedListener(null); + }); + + it("hands the store's new mail to the notification path, with the login's client", async () => { + const { setStoreCreatedListener } = await import('../system-events'); + const listener = vi.fn(); + setStoreCreatedListener(listener); + configured.hooks?.onEvent({ type: 'created', account: 'alice@one', jmap: 'acc', collection: 'Email', ids: ['e1', 'e2'] }); + expect(listener).toHaveBeenCalledWith(client, 'acc', ['e1', 'e2']); + }); + + it('a wipe clears what the OS shows, and a browser has nothing to clear', async () => { + const { clearDesktopSurfaces } = await import('../bridge'); + expect(() => clearDesktopSurfaces()).not.toThrow(); + const clearSurfaces = vi.fn(); + window.bulwarkDesktop = { version: 1, platform: 'win32', os: { clearSurfaces } } as never; + const { wipeAccount } = await import('@/lib/offline/offline-mode'); + const { useOfflineStore } = await import('@/lib/offline/state'); + // Not the last account, so this isn't the wipe of everything, which clears as well. + useOfflineStore.setState({ enabled: ['alice@one', 'bob@two'] }); + await wipeAccount('alice@one').catch(() => {}); + expect(clearSurfaces).toHaveBeenCalled(); + useOfflineStore.setState({ enabled: [] }); + window.bulwarkDesktop = undefined; + }); + + it('other collections are not mail', async () => { + const { setStoreCreatedListener } = await import('../system-events'); + const listener = vi.fn(); + setStoreCreatedListener(listener); + configured.hooks?.onEvent({ type: 'created', account: 'alice@one', jmap: 'acc', collection: 'CalendarEvent', ids: ['c1'] }); + expect(listener).not.toHaveBeenCalled(); + }); + + it('with nothing listening, as in a browser, it does nothing', () => { + expect(() => configured.hooks?.onEvent({ type: 'created', account: 'alice@one', jmap: 'acc', collection: 'Email', ids: ['e1'] })).not.toThrow(); + }); + + it('a sleep takes the engine offline; waking brings it back and syncs through the events it already listens to', async () => { + const { startOfflineMode, offlineSupported } = await import('@/lib/offline/offline-mode'); + expect(offlineSupported()).toBe(true); + const { runSleepHandlers } = await import('../system-events'); + const stop = startOfflineMode(); + runSleepHandlers(); + expect(setOnline).toHaveBeenLastCalledWith(false); + window.bulwarkDesktop = { version: 1, platform: 'win32', os: { onPower: (listener: (event: string) => void) => { listener('resume'); return () => {}; } } } as never; + const { startPowerWatch } = await import('../power'); + const stopPower = startPowerWatch(); + expect(setOnline).toHaveBeenLastCalledWith(true); + stopPower(); + stop(); + window.bulwarkDesktop = undefined; + }); +}); diff --git a/lib/desktop/__tests__/os-window.test.tsx b/lib/desktop/__tests__/os-window.test.tsx new file mode 100644 index 000000000..b6df496bb --- /dev/null +++ b/lib/desktop/__tests__/os-window.test.tsx @@ -0,0 +1,596 @@ +import { act, fireEvent, render, renderHook, screen, waitFor } from '@testing-library/react'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import type { BulwarkDesktopBridge, DesktopOsPowerEvent, DesktopOsStatus } from '../types'; +import type { CalendarEvent } from '@/lib/jmap/types'; + +/** The window's end: badge, dropped and pasted files, drag-out, waking up, the settings section. */ + +vi.mock('next-intl', () => ({ + useTranslations: () => (key: string, values?: Record<string, unknown>) => (values ? `${key}:${JSON.stringify(values)}` : key), + useLocale: () => 'en', +})); + +function setBridge(bridge: Partial<BulwarkDesktopBridge['os']> | undefined, platform: 'win32' | 'darwin' = 'win32') { + window.bulwarkDesktop = bridge ? ({ version: 1, platform, os: bridge } as unknown as BulwarkDesktopBridge) : undefined; +} + +afterEach(() => { + setBridge(undefined); + vi.unstubAllGlobals(); +}); + +describe('the badge', () => { + it('goes to the bridge in the app, and the Badging API is left alone', async () => { + const { useAppBadge } = await import('@/hooks/use-app-badge'); + const setBadge = vi.fn(); + const setAppBadge = vi.fn(async () => {}); + Object.defineProperty(navigator, 'setAppBadge', { value: setAppBadge, configurable: true }); + setBridge({ setBadge }); + const { rerender } = renderHook(({ count, enabled }) => useAppBadge(count, enabled), { initialProps: { count: 4, enabled: true } }); + expect(setBadge).toHaveBeenLastCalledWith(4); + rerender({ count: 4, enabled: false }); + expect(setBadge).toHaveBeenLastCalledWith(0); + expect(setAppBadge).not.toHaveBeenCalled(); + }); + + it('a pop-out has no say in it', async () => { + const { useAppBadge } = await import('@/hooks/use-app-badge'); + const role = await import('@/lib/popout/window-role'); + const popout = vi.spyOn(role, 'isPopoutWindow').mockReturnValue(true); + const setBadge = vi.fn(); + setBridge({ setBadge }); + renderHook(() => useAppBadge(4, true)); + expect(setBadge).not.toHaveBeenCalled(); + popout.mockRestore(); + }); +}); + +describe('new-mail sound', () => { + it('is left to the notification path in the app, not played twice', async () => { + const { desktopPlaysMailSound } = await import('../mail-notifications'); + expect(desktopPlaysMailSound()).toBe(false); + setBridge({ notify: vi.fn() as never }); + expect(desktopPlaysMailSound()).toBe(true); + }); +}); + +describe('the policy keeps refreshing', () => { + const fetchPolicy = vi.fn(async () => {}); + + beforeEach(async () => { + vi.useFakeTimers({ toFake: ['setInterval', 'clearInterval', 'Date'] }); + fetchPolicy.mockClear(); + const { usePolicyStore } = await import('@/stores/policy-store'); + usePolicyStore.setState({ loaded: true, fetching: false, fetchPolicy }); + const { resetPolicyRefresh } = await import('@/hooks/use-policy-refresh'); + resetPolicyRefresh(); + Object.defineProperty(document, 'visibilityState', { value: 'hidden', configurable: true }); + }); + + afterEach(() => { + vi.useRealTimers(); + delete (document as unknown as Record<string, unknown>).visibilityState; + }); + + it('in the desktop app while hidden in the tray', async () => { + const { POLICY_REFRESH_MS, usePolicyRefresh } = await import('@/hooks/use-policy-refresh'); + setBridge({}); + const { unmount } = renderHook(() => usePolicyRefresh()); + vi.advanceTimersByTime(POLICY_REFRESH_MS); + expect(fetchPolicy).toHaveBeenCalledTimes(1); + unmount(); + }); + + it('but not in a browser tab out of view', async () => { + const { POLICY_REFRESH_MS, usePolicyRefresh } = await import('@/hooks/use-policy-refresh'); + const { unmount } = renderHook(() => usePolicyRefresh()); + vi.advanceTimersByTime(POLICY_REFRESH_MS); + expect(fetchPolicy).not.toHaveBeenCalled(); + unmount(); + }); +}); + +function dropEvent(type: string, files: File[]): Event { + const event = new Event(type, { bubbles: true, cancelable: true }); + Object.defineProperty(event, 'dataTransfer', { value: { types: files.length ? ['Files'] : ['text/plain'], files, dropEffect: 'none' } }); + return event; +} + +describe('files on the window', () => { + const file = new File(['x'], 'report.pdf'); + + beforeEach(async () => { + const { clearHandoffs, takeHandoff } = await import('@/lib/launch-handoff'); + clearHandoffs(); + takeHandoff('compose'); + }); + + it('nothing happens in a browser', async () => { + const { startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + const stop = startWindowFiles(); + const event = dropEvent('drop', [file]); + window.dispatchEvent(event); + expect(event.defaultPrevented).toBe(false); + expect(takeHandoff('compose')).toBeNull(); + stop(); + }); + + it('a drop on the window starts a new draft with the file', async () => { + const { startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + setBridge({}); + const stop = startWindowFiles(); + const over = dropEvent('dragover', [file]); + window.dispatchEvent(over); + expect(over.defaultPrevented).toBe(true); + const drop = dropEvent('drop', [file]); + window.dispatchEvent(drop); + expect(drop.defaultPrevented).toBe(true); + expect(takeHandoff('compose')?.files).toEqual([file]); + stop(); + }); + + it('a drop something else took is left alone', async () => { + const { startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + setBridge({}); + const stop = startWindowFiles(); + const event = dropEvent('drop', [file]); + event.preventDefault(); + window.dispatchEvent(event); + expect(takeHandoff('compose')).toBeNull(); + stop(); + }); + + it('text dragged around is not a file', async () => { + const { startWindowFiles } = await import('../window-files'); + setBridge({}); + const stop = startWindowFiles(); + const event = dropEvent('dragover', []); + window.dispatchEvent(event); + expect(event.defaultPrevented).toBe(false); + stop(); + }); + + it('an open composer takes the file itself', async () => { + const { setComposerFileTarget, startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + setBridge({}); + const stop = startWindowFiles(); + const target = vi.fn(); + const clear = setComposerFileTarget(target, () => true); + window.dispatchEvent(dropEvent('drop', [file])); + expect(target).toHaveBeenCalledWith([file]); + expect(takeHandoff('compose')).toBeNull(); + clear(); + stop(); + }); + + it('a composer out of sight on a hidden tab takes nothing', async () => { + const { setComposerFileTarget, startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + setBridge({}); + const stop = startWindowFiles(); + const hidden = vi.fn(); + const clear = setComposerFileTarget(hidden, () => false); + window.dispatchEvent(dropEvent('drop', [file])); + expect(hidden).not.toHaveBeenCalled(); + expect(takeHandoff('compose')?.files).toEqual([file]); + clear(); + stop(); + }); + + it('a pasted file is taken; pasted text is not', async () => { + const { startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + setBridge({}); + const stop = startWindowFiles(); + const paste = (files: File[]) => { + const event = new Event('paste', { bubbles: true, cancelable: true }); + Object.defineProperty(event, 'clipboardData', { value: { files, types: files.length ? ['Files'] : ['text/plain'] } }); + window.dispatchEvent(event); + return event; + }; + expect(paste([]).defaultPrevented).toBe(false); + expect(takeHandoff('compose')).toBeNull(); + expect(paste([file]).defaultPrevented).toBe(true); + expect(takeHandoff('compose')?.files).toEqual([file]); + stop(); + }); + + describe('a paste that is not for us', () => { + const pasteOn = (target: EventTarget, types: string[]) => { + const event = new Event('paste', { bubbles: true, cancelable: true }); + Object.defineProperty(event, 'clipboardData', { value: { files: [file], types } }); + target.dispatchEvent(event); + return event; + }; + + it('text with a file, as a spreadsheet copies, stays text', async () => { + const { startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + setBridge({}); + const stop = startWindowFiles(); + expect(pasteOn(document.body, ['text/plain', 'Files']).defaultPrevented).toBe(false); + expect(takeHandoff('compose')).toBeNull(); + stop(); + }); + + it('in a search field or any other input, a file is not an attachment', async () => { + const { startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + setBridge({}); + const stop = startWindowFiles(); + const input = document.body.appendChild(document.createElement('input')); + expect(pasteOn(input, ['Files']).defaultPrevented).toBe(false); + expect(takeHandoff('compose')).toBeNull(); + input.remove(); + stop(); + }); + + it('in the body of a composer on screen, a bare file attaches', async () => { + const { setComposerFileTarget, startWindowFiles } = await import('../window-files'); + setBridge({}); + const stop = startWindowFiles(); + const target = vi.fn(); + const clear = setComposerFileTarget(target, () => true); + const composer = document.body.appendChild(document.createElement('div')); + composer.setAttribute('data-testid', 'email-composer'); + const body = composer.appendChild(document.createElement('div')); + body.setAttribute('contenteditable', 'true'); + pasteOn(body, ['Files']); + expect(target).toHaveBeenCalledWith([file]); + composer.remove(); + clear(); + stop(); + }); + }); + + it('our own native drag over our own window is not a new file', async () => { + const { setOwnDragActive, startWindowFiles } = await import('../window-files'); + const { takeHandoff } = await import('@/lib/launch-handoff'); + setBridge({}); + const stop = startWindowFiles(); + setOwnDragActive(true); + window.dispatchEvent(dropEvent('drop', [file])); + expect(takeHandoff('compose')).toBeNull(); + setOwnDragActive(false); + stop(); + }); +}); + +describe('dragging an attachment out', () => { + const blobUrl = 'blob:https://app/1'; + const source = { + name: 'report.pdf', + type: 'application/pdf', + getBlobUrl: async () => blobUrl, + getBlob: async () => new Blob([new Uint8Array([1, 2, 3])]), + }; + + async function ready() { + const { useAttachmentDrag } = await import('@/hooks/use-attachment-drag'); + const hook = renderHook(() => useAttachmentDrag(source, true)); + act(() => hook.result.current.onPointerEnter()); + await act(async () => { + await new Promise((resolve) => setTimeout(resolve, 0)); + }); + return hook; + } + + it('in the app: the OS\'s own drag, with the bytes for a real file', async () => { + const startDrag = vi.fn(async () => true); + setBridge({ startDrag, copyFiles: vi.fn() as never }); + const hook = await ready(); + const event = { preventDefault: vi.fn(), dataTransfer: { setData: vi.fn(), effectAllowed: '' } }; + hook.result.current.onDragStart(event as never); + expect(event.preventDefault).toHaveBeenCalled(); + expect(event.dataTransfer.setData).not.toHaveBeenCalled(); + await waitFor(() => expect(startDrag).toHaveBeenCalled()); + const [files] = startDrag.mock.calls[0] as unknown as [{ name: string; data: Uint8Array }[]]; + expect(files[0].name).toBe('report.pdf'); + expect([...files[0].data]).toEqual([1, 2, 3]); + }); + + it('in the app, a drag before the bytes are here starts nothing and fetches them for the next', async () => { + const startDrag = vi.fn(async () => true); + setBridge({ startDrag, copyFiles: vi.fn() as never }); + const { useAttachmentDrag } = await import('@/hooks/use-attachment-drag'); + const hook = renderHook(() => useAttachmentDrag(source, true)); + const event = { preventDefault: vi.fn(), dataTransfer: { setData: vi.fn(), effectAllowed: '' } }; + hook.result.current.onDragStart(event as never); + expect(event.preventDefault).toHaveBeenCalled(); + expect(startDrag).not.toHaveBeenCalled(); + await act(async () => { + await new Promise((resolve) => setTimeout(resolve, 0)); + }); + hook.result.current.onDragStart(event as never); + await waitFor(() => expect(startDrag).toHaveBeenCalled()); + }); + + it('in the app, without getBlob (a decrypted attachment): the browser drag, and no copy button', async () => { + const startDrag = vi.fn(async () => true); + setBridge({ startDrag, copyFiles: vi.fn() as never }); + const { useAttachmentDrag } = await import('@/hooks/use-attachment-drag'); + const { name, type, getBlobUrl } = source; + const hook = renderHook(() => useAttachmentDrag({ name, type, getBlobUrl }, true)); + act(() => hook.result.current.onPointerEnter()); + await act(async () => { + await new Promise((resolve) => setTimeout(resolve, 0)); + }); + const event = { preventDefault: vi.fn(), dataTransfer: { setData: vi.fn(), effectAllowed: '' } }; + hook.result.current.onDragStart(event as never); + expect(startDrag).not.toHaveBeenCalled(); + expect(event.dataTransfer.setData).toHaveBeenCalledWith('DownloadURL', expect.stringContaining(blobUrl)); + expect(hook.result.current.onCopyAsFile).toBeUndefined(); + }); + + it('in a browser: still DownloadURL, and no copy button', async () => { + const hook = await ready(); + const event = { preventDefault: vi.fn(), dataTransfer: { setData: vi.fn(), effectAllowed: '' } }; + hook.result.current.onDragStart(event as never); + expect(event.preventDefault).not.toHaveBeenCalled(); + expect(event.dataTransfer.setData).toHaveBeenCalledWith('DownloadURL', `application/pdf:report.pdf:${blobUrl}`); + expect(hook.result.current.onCopyAsFile).toBeUndefined(); + }); + + it('Copy as file hands the bytes to main', async () => { + const copyFiles = vi.fn(async () => true); + setBridge({ startDrag: vi.fn() as never, copyFiles }); + const hook = await ready(); + await expect(hook.result.current.onCopyAsFile?.()).resolves.toBe(true); + const [files] = copyFiles.mock.calls[0] as unknown as [{ name: string; data: Uint8Array }[]]; + expect(files[0].name).toBe('report.pdf'); + }); +}); + +describe('waking up', () => { + async function started(os: Partial<BulwarkDesktopBridge['os']> = {}) { + let fire: (event: DesktopOsPowerEvent) => void = () => {}; + setBridge({ onPower: (listener: (event: DesktopOsPowerEvent) => void) => { fire = listener; return () => {}; }, ...os }); + const power = await import('../power'); + const events = await import('../system-events'); + return { fire: (event: DesktopOsPowerEvent) => fire(event), power: events, stop: power.startPowerWatch() }; + } + + it('a resume checks for changes at once, the way a tab coming back does, and only once with the unlock', async () => { + const { fire, power, stop } = await started(); + const { usePolicyStore } = await import('@/stores/policy-store'); + const fetchPolicy = vi.fn(async () => {}); + usePolicyStore.setState({ loaded: true, fetching: false, fetchPolicy }); + const visible = vi.fn(); + const online = vi.fn(); + const wake = vi.fn(); + document.addEventListener('visibilitychange', visible); + window.addEventListener('online', online); + const stopWake = power.addWakeHandler(wake); + fire('resume'); + fire('unlock-screen'); + expect(visible).toHaveBeenCalledTimes(1); + expect(online).toHaveBeenCalledTimes(1); + expect(fetchPolicy).toHaveBeenCalledTimes(1); + expect(wake).toHaveBeenCalledTimes(1); + document.removeEventListener('visibilitychange', visible); + window.removeEventListener('online', online); + stopWake(); + stop(); + }); + + it('a suspend tells the sleep handlers and wakes nothing', async () => { + const { fire, power, stop } = await started(); + const sleep = vi.fn(); + const visible = vi.fn(); + const stopSleep = power.addSleepHandler(sleep); + document.addEventListener('visibilitychange', visible); + fire('suspend'); + fire('lock-screen'); + expect(sleep).toHaveBeenCalledTimes(1); + expect(visible).not.toHaveBeenCalled(); + document.removeEventListener('visibilitychange', visible); + stopSleep(); + stop(); + }); + + it('a new kind of network counts as waking; a change in its speed estimate does not', async () => { + const connection = Object.assign(new EventTarget(), { type: 'wifi' }); + vi.stubGlobal('navigator', Object.create(navigator, { connection: { value: connection }, onLine: { value: true } })); + const { power, stop } = await started(); + const wake = vi.fn(); + const stopWake = power.addWakeHandler(wake); + connection.dispatchEvent(new Event('change')); + expect(wake).not.toHaveBeenCalled(); + connection.type = 'ethernet'; + connection.dispatchEvent(new Event('change')); + expect(wake).toHaveBeenCalledTimes(1); + stopWake(); + stop(); + }); + + it('where Chromium gives no type, a change is nothing to go on', async () => { + const connection = new EventTarget(); + vi.stubGlobal('navigator', Object.create(navigator, { connection: { value: connection }, onLine: { value: true } })); + const { power, stop } = await started(); + const wake = vi.fn(); + const stopWake = power.addWakeHandler(wake); + connection.dispatchEvent(new Event('change')); + expect(wake).not.toHaveBeenCalled(); + stopWake(); + stop(); + }); + + it('woken up with no network, it does not say the network is back, and a wake within 30 s is the same wake', async () => { + const online = vi.fn(); + window.addEventListener('online', online); + vi.stubGlobal('navigator', Object.create(navigator, { onLine: { value: false } })); + const { fire, power, stop } = await started(); + const wake = vi.fn(); + const stopWake = power.addWakeHandler(wake); + fire('resume'); + expect(wake).toHaveBeenCalledTimes(1); + expect(online).not.toHaveBeenCalled(); + const now = Date.now(); + const clock = vi.spyOn(Date, 'now').mockReturnValue(now + 29_000); + fire('unlock-screen'); + expect(wake).toHaveBeenCalledTimes(1); + clock.mockReturnValue(now + 31_000); + fire('unlock-screen'); + expect(wake).toHaveBeenCalledTimes(2); + clock.mockRestore(); + window.removeEventListener('online', online); + stopWake(); + stop(); + }); +}); + +describe('the summary', () => { + const event = (id: string, start: string, over: Partial<CalendarEvent> = {}) => ({ id, title: id, start, utcStart: start, status: 'confirmed', showWithoutTime: false, ...over }) as unknown as CalendarEvent; + const now = new Date('2026-11-03T10:00:00Z').getTime(); + + it('the next event is the soonest one still ahead, not cancelled and not all-day', async () => { + const { nextEventOf } = await import('../os-summary'); + const events = [ + event('later', '2026-11-03T15:00:00Z'), + event('past', '2026-11-03T09:00:00Z'), + event('cancelled', '2026-11-03T11:00:00Z', { status: 'cancelled' }), + event('allday', '2026-11-03T10:30:00Z', { showWithoutTime: true }), + event('soon', '2026-11-03T12:00:00Z'), + ]; + expect(nextEventOf(events, now)?.id).toBe('soon'); + expect(nextEventOf([event('past', '2026-11-03T09:00:00Z')], now)).toBeNull(); + }); + + describe('with a login', () => { + const row = { id: 'e1', threadId: 't1', subject: 'Lunch?', from: [{ name: 'Alice', email: 'a@example.org' }] }; + const getEmails = vi.fn(async () => ({ emails: [row], hasMore: false, total: 1 })); + const fake = { getAccountId: () => 'acc', getEmails, queryCalendarEvents: vi.fn(async () => []) }; + + beforeEach(async () => { + getEmails.mockClear(); + const { useAuthStore } = await import('@/stores/auth-store'); + const { useAccountStore } = await import('@/stores/account-store'); + const { useEmailStore } = await import('@/stores/email-store'); + useAuthStore.setState({ isAuthenticated: true, client: fake as never, activeAccountId: 'alice@one' }); + useAccountStore.setState({ accounts: [{ id: 'alice@one', cookieSlot: 3, serverUrl: 'https://one.example', username: 'alice@example.org' }] as never }); + useEmailStore.setState({ mailboxes: [{ id: 'in', role: 'inbox', name: 'Inbox' }] as never }); + const { usePolicyStore } = await import('@/stores/policy-store'); + usePolicyStore.setState({ loaded: true }); + }); + + afterEach(async () => { + const { useAuthStore } = await import('@/stores/auth-store'); + useAuthStore.setState({ isAuthenticated: false, client: null, activeAccountId: null }); + const { setAppLockCheck } = await import('../app-lock-state'); + setAppLockCheck(null); + }); + + it('lists unread mail with what the tray item needs to open it', async () => { + const { readSummary } = await import('../os-summary'); + const summary = await readSummary('en'); + expect(summary.unread).toEqual([expect.objectContaining({ emailId: 'e1', accountId: 'acc', sender: 'Alice', subject: 'Lunch?' })]); + expect(JSON.parse(summary.unread[0].context!)).toMatchObject({ emailId: 'e1', slot: 3 }); + expect(getEmails).toHaveBeenCalledWith('in', undefined, 5, 0, undefined, false, { notKeyword: '$seen' }); + }); + + it('before the policy is known it is empty', async () => { + const { usePolicyStore } = await import('@/stores/policy-store'); + const { readSummary, EMPTY_SUMMARY } = await import('../os-summary'); + usePolicyStore.setState({ loaded: false }); + await expect(readSummary('en')).resolves.toEqual(EMPTY_SUMMARY); + expect(getEmails).not.toHaveBeenCalled(); + }); + + it('a read under way when the login goes doesn\'t bring it back; a policy change reads again', async () => { + const setSummary = vi.fn(); + setBridge({ setSummary }); + const { startOsSummary, EMPTY_SUMMARY } = await import('../os-summary'); + const { useAuthStore } = await import('@/stores/auth-store'); + const { usePolicyStore } = await import('@/stores/policy-store'); + let answer: (value: unknown) => void = () => {}; + getEmails.mockImplementationOnce(() => new Promise((resolve) => { answer = resolve as never; }) as never); + vi.useFakeTimers({ toFake: ['setTimeout', 'clearTimeout', 'setInterval', 'clearInterval'] }); + const summary = startOsSummary(() => 'en'); + await vi.advanceTimersByTimeAsync(2100); + useAuthStore.setState({ isAuthenticated: false, client: null, activeAccountId: null }); + expect(setSummary).toHaveBeenLastCalledWith(EMPTY_SUMMARY); + answer({ emails: [row], hasMore: false, total: 1 }); + await vi.advanceTimersByTimeAsync(10); + await new Promise((resolve) => setImmediate(resolve)); + await vi.advanceTimersByTimeAsync(2100); + expect(setSummary).toHaveBeenLastCalledWith(EMPTY_SUMMARY); + expect(JSON.stringify(setSummary.mock.calls)).not.toContain('Lunch'); + + setSummary.mockClear(); + usePolicyStore.setState({ policy: { ...usePolicyStore.getState().policy } }); + await vi.advanceTimersByTimeAsync(2100); + expect(setSummary).toHaveBeenCalled(); + summary.stop(); + vi.useRealTimers(); + }); + + it('while locked it is empty, without asking anyone anything', async () => { + const { setAppLockCheck } = await import('../app-lock-state'); + const { readSummary, EMPTY_SUMMARY } = await import('../os-summary'); + setAppLockCheck(() => true); + await expect(readSummary('en')).resolves.toEqual(EMPTY_SUMMARY); + expect(getEmails).not.toHaveBeenCalled(); + }); + }); +}); + +describe('the settings section', () => { + const settings = { closeToTray: true, startAtLogin: false, startMinimized: false, attentionOnNewMail: true, quietHoursEnabled: false, quietHoursStart: '22:00', quietHoursEnd: '07:00', showShortcut: null }; + const status = (over = {}): DesktopOsStatus => ({ settings: { ...settings, ...over }, pausedUntil: null, shortcutActive: false }); + + function bridgeFor(current: DesktopOsStatus) { + return { + getStatus: vi.fn(async () => current), + setSettings: vi.fn(async (patch: Partial<DesktopOsStatus['settings']>) => ({ ...current, settings: { ...current.settings, ...patch } })), + onStatusChange: vi.fn(() => () => {}), + defaultAppStatus: vi.fn(async () => ({ registered: false, mailto: false, webcal: false })), + openDefaultAppSettings: vi.fn(async () => ({ registered: true, mailto: false, webcal: false })), + }; + } + + it('a browser never sees it', async () => { + const { DesktopOsSettings } = await import('@/components/settings/desktop-os-settings'); + const { container } = render(<DesktopOsSettings />); + expect(container).toBeEmptyDOMElement(); + }); + + it('in the app it shows the state and changes it', async () => { + const { DesktopOsSettings } = await import('@/components/settings/desktop-os-settings'); + const os = bridgeFor(status()); + setBridge(os as never); + render(<DesktopOsSettings />); + expect(await screen.findByText('section_title')).toBeInTheDocument(); + expect(screen.queryByText('start_minimized_label')).toBeNull(); + // Second in the section, after Close to tray. + fireEvent.click(screen.getAllByRole('switch')[1]); + await waitFor(() => expect(os.setSettings).toHaveBeenCalledWith({ startAtLogin: true })); + expect(await screen.findByText('start_minimized_label')).toBeInTheDocument(); + }); + + it('the button offers the app and opens where the choice is made', async () => { + const { DesktopOsSettings } = await import('@/components/settings/desktop-os-settings'); + const os = bridgeFor(status()); + setBridge(os as never); + render(<DesktopOsSettings />); + fireEvent.click(await screen.findByRole('button', { name: 'default_app_button' })); + await waitFor(() => expect(os.openDefaultAppSettings).toHaveBeenCalled()); + }); + + it('says when another app holds the shortcut', async () => { + const { DesktopOsSettings } = await import('@/components/settings/desktop-os-settings'); + setBridge(bridgeFor(status({ showShortcut: 'CommandOrControl+Shift+B' })) as never); + render(<DesktopOsSettings />); + expect(await screen.findByText(/show_shortcut_taken/)).toBeInTheDocument(); + }); + + it('macOS gets its own word for the bounce', async () => { + const { DesktopOsSettings } = await import('@/components/settings/desktop-os-settings'); + setBridge(bridgeFor(status()) as never, 'darwin'); + render(<DesktopOsSettings />); + expect(await screen.findByText('attention_mac_label')).toBeInTheDocument(); + }); +}); diff --git a/lib/desktop/__tests__/reminder-notifications.test.ts b/lib/desktop/__tests__/reminder-notifications.test.ts new file mode 100644 index 000000000..f609dae3b --- /dev/null +++ b/lib/desktop/__tests__/reminder-notifications.test.ts @@ -0,0 +1,305 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { useMissedReminders } from '@/lib/calendar-reminders/state'; +import { CALENDAR_SESSION, FakeCalendarJmap } from '@/lib/store/__tests__/helpers/fake-calendar'; +import { InProcessStore } from '@/lib/store/__tests__/helpers/in-process-store'; +import { setStoreBackend } from '@/lib/store/client/api'; +import type { ReminderAlert, TickResult } from '@/lib/store/reminders/ledger'; +import { setAppLockCheck } from '../app-lock-state'; +import { + buildMissedNotification, + buildReminderNotification, + handleReminderCommand, + joinMeeting, + missedBody, + notifyWithoutStore, + type ReminderLabels, +} from '../reminder-notifications'; +import type { BulwarkDesktopBridge } from '../types'; + +const ACCOUNT = 'alice@one'; +const accounts = [{ id: ACCOUNT, cookieSlot: 3, serverUrl: 'https://one.example', username: 'alice@example.org' }]; +let activeAccountId: string | null = ACCOUNT; +vi.mock('@/stores/account-store', () => ({ useAccountStore: { getState: () => ({ accounts }) } })); +vi.mock('@/stores/auth-store', () => ({ useAuthStore: { getState: () => ({ activeAccountId }), subscribe: () => () => {} } })); +vi.mock('@/stores/policy-store', () => ({ usePolicyStore: { getState: () => ({ loaded: true }), subscribe: () => () => {} } })); + +const policy = vi.hoisted(() => ({ pushWithoutContent: false })); +vi.mock('@/lib/device-policy', () => ({ devicesForAccount: () => ({ pushWithoutContent: policy.pushWithoutContent }) })); + +const MIN = 60_000; +const START = Date.UTC(2026, 10, 10, 9); +const FIRE = START - 15 * MIN; + +const labels: ReminderLabels = { + generic: 'GENERIC', + when: () => 'In 15 min · Personal', + untitled: 'UNTITLED', + snooze: (minutes) => `Snooze ${minutes} min`, + snoozeShort: (minutes) => `${minutes} min`, + open: 'Open', + join: 'Join', + joinHost: (host) => `Join (${host})`, + missedTitle: (count) => `${count} missed`, + missedMore: (count) => `and ${count} more`, +}; + +function alert(partial: Partial<ReminderAlert> = {}): ReminderAlert { + return { + key: `j1:uid-1:a:${FIRE}`, jmap: 'j1', uid: 'uid-1', kind: 'event', baseEventId: 'e1', recurrenceId: null, alertId: 'a', fireTimeMs: FIRE, + title: 'Secret board meeting', start: '2026-11-10T10:00:00', startMs: START, joinUrl: null, joinHost: null, timeZone: 'Europe/Berlin', calendarId: 'cal1', calendarName: 'Personal', + ...partial, + }; +} + +const focus = vi.fn(); +const openExternal = vi.fn(); +const notify = vi.fn(async () => ({ shown: true, playSound: false })); + +function setPlatform(platform: string) { + window.bulwarkDesktop = { version: 1, platform, windows: { focus }, shell: { openExternal }, os: { notify } } as unknown as BulwarkDesktopBridge; +} + +let store: InProcessStore; +let server: FakeCalendarJmap; +const env = { leaveFor: vi.fn(), push: vi.fn() }; + +beforeEach(() => { + vi.clearAllMocks(); + policy.pushWithoutContent = false; + activeAccountId = ACCOUNT; + setAppLockCheck(null); + setPlatform('win32'); + useMissedReminders.getState().close(); + server = new FakeCalendarJmap('1.0'); + store = new InProcessStore(server, CALENDAR_SESSION); + setStoreBackend(store); +}); + +afterEach(() => { + setStoreBackend(null); + window.bulwarkDesktop = undefined; + setAppLockCheck(null); + vi.useRealTimers(); +}); + +async function contextFor(reminder: ReminderAlert): Promise<string> { + return (await buildReminderNotification(ACCOUNT, reminder, labels, false)).context; +} + +describe('what a reminder says', () => { + it('offers Join only when the event has a link', async () => { + const without = await buildReminderNotification(ACCOUNT, alert(), labels, false); + expect(without.actions!.map((action) => action.id)).toEqual(['open', 'snooze-5', 'snooze-10', 'snooze-15']); + const withLink = await buildReminderNotification(ACCOUNT, alert({ joinUrl: 'https://meet.jit.si/x' }), labels, false); + expect(withLink.actions!.map((action) => action.id)).toEqual(['join', 'open', 'snooze-5', 'snooze-10', 'snooze-15']); + expect(withLink.actions![0].label).toBe('Join'); + const foreign = await buildReminderNotification(ACCOUNT, alert({ joinUrl: 'https://calls.example.org/x', joinHost: 'calls.example.org' }), labels, false); + expect(foreign.actions![0].label).toBe('Join (calls.example.org)'); + }); + + it('uses short snooze labels where five buttons share a row', async () => { + const windows = await buildReminderNotification(ACCOUNT, alert(), labels, false); + expect(windows.actions!.find((action) => action.id === 'snooze-5')!.label).toBe('5 min'); + setPlatform('darwin'); + const mac = await buildReminderNotification(ACCOUNT, alert(), labels, false); + expect(mac.actions!.find((action) => action.id === 'snooze-5')!.label).toBe('Snooze 5 min'); + }); + + it('sends nothing of the event while the app is locked: no title, no time, no key, no buttons', async () => { + setAppLockCheck(() => true); + const locked = await buildReminderNotification(ACCOUNT, alert({ joinUrl: 'https://meet.jit.si/x' }), labels, true); + expect(locked).toMatchObject({ title: 'GENERIC', body: '', context: '', kind: 'reminder' }); + expect(locked.actions).toBeUndefined(); + expect(JSON.stringify(locked)).not.toContain('Secret'); + expect(JSON.stringify(locked)).not.toContain('uid-1'); + }); + + it('keeps the title off when the organisation says so, the buttons stay', async () => { + policy.pushWithoutContent = true; + const hidden = await buildReminderNotification(ACCOUNT, alert(), labels, false); + expect(hidden).toMatchObject({ title: 'GENERIC', body: '' }); + expect(hidden.actions).toHaveLength(4); + }); + + it('gets a new id when it comes back from a snooze, since main drops a repeat', async () => { + const first = await buildReminderNotification(ACCOUNT, alert(), labels, false); + const back = await buildReminderNotification(ACCOUNT, alert({ snoozedUntil: FIRE + 5 * MIN }), labels, false); + expect(back.id).not.toBe(first.id); + }); + + it('falls back on a neutral title for an event without one', async () => { + expect((await buildReminderNotification(ACCOUNT, alert({ title: '' }), labels, false)).title).toBe('UNTITLED'); + }); + + it('keeps titles out of a summary when locked or forbidden, and names three at most', async () => { + const alerts = ['A', 'B', 'C', 'D', 'E'].map((title) => alert({ title, key: title })); + expect(missedBody(alerts, labels)).toBe('A, B, C, and 2 more'); + const open = await buildMissedNotification(ACCOUNT, { batch: 7, alerts }, labels); + expect(open).toMatchObject({ title: '5 missed', body: 'A, B, C, and 2 more' }); + setAppLockCheck(() => true); + expect((await buildMissedNotification(ACCOUNT, { batch: 7, alerts }, labels)).body).toBe(''); + }); + + it('without a store says what it can, and nothing when locked', () => { + notifyWithoutStore({ key: 'e1:a:1', fireTimeMs: 1, title: 'Dentist', body: 'In 5 min', sound: true }, { generic: 'GENERIC' }, ACCOUNT); + expect(notify).toHaveBeenCalledTimes(1); + expect(notify.mock.calls[0]).toEqual([expect.objectContaining({ id: 'reminder:e1:a:1', title: 'Dentist', body: 'In 5 min', context: '{"cal":true}', sound: true })]); + setAppLockCheck(() => true); + notifyWithoutStore({ key: 'e1:a:1', fireTimeMs: 1, title: 'Dentist', body: 'In 5 min', sound: true }, { generic: 'GENERIC' }, ACCOUNT); + expect(notify).toHaveBeenCalledTimes(2); + expect(notify.mock.calls[1]).toEqual([expect.objectContaining({ title: 'GENERIC', body: '' })]); + expect(JSON.stringify(notify.mock.calls[1])).not.toContain('Dentist'); + expect(JSON.stringify(notify.mock.calls[1])).not.toContain('e1'); + }); +}); + +describe('sizes', () => { + it('keeps the context under what main will take, with the longest key the store makes', async () => { + const key = `${'j'.repeat(40)}:#abc:9999:${'a'.repeat(64)}:${FIRE}`; + const { context } = await buildReminderNotification(ACCOUNT, alert({ key, uid: 'u'.repeat(5000) }), labels, false); + expect(context.length).toBeLessThan(1024); + expect(JSON.parse(context).r).toBe(key); + }); +}); + +describe('Join is only ever a web link', () => { + for (const url of ['ms-msdt:/id PCWDiagnostic', 'search-ms:query=x', 'smb://evil.example/share', 'https://meet.google.com@evil.example/x', 'javascript:alert(1)', 'not a link']) { + it(`opens nothing for ${url}, in the app`, async () => { + expect(await joinMeeting(url)).toBe(false); + expect(openExternal).not.toHaveBeenCalled(); + }); + + it(`opens nothing for ${url}, in a browser`, async () => { + window.bulwarkDesktop = undefined; + const open = vi.spyOn(window, 'open').mockImplementation(() => null); + expect(await joinMeeting(url)).toBe(false); + expect(open).not.toHaveBeenCalled(); + open.mockRestore(); + }); + } + + it('opens a web link, in the app and in a browser', async () => { + expect(await joinMeeting('https://meet.jit.si/x')).toBe(true); + expect(openExternal).toHaveBeenCalledWith('https://meet.jit.si/x'); + window.bulwarkDesktop = undefined; + const open = vi.spyOn(window, 'open').mockImplementation(() => null); + expect(await joinMeeting('https://meet.jit.si/y')).toBe(true); + expect(open).toHaveBeenCalledWith('https://meet.jit.si/y', '_blank', 'noopener,noreferrer'); + open.mockRestore(); + }); + + it('leaves the reminder standing when Join from a toast opened nothing', async () => { + vi.useFakeTimers({ now: FIRE - MIN, toFake: ['Date'] }); + server.addEvent({ id: 'e1', uid: 'uid-1', title: 'Standup', virtualLocations: { v: { '@type': 'VirtualLocation', uri: 'https://meet.jit.si/standup' } }, start: '2026-11-10T10:00:00', timeZone: 'Europe/Berlin', alerts: { a: { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } } } }); + await store.sync(ACCOUNT); + const params = { timeZone: 'Europe/Berlin', tasks: true }; + await store.area(ACCOUNT, 'reminders.tick', params); + vi.setSystemTime(FIRE); + const [reminder] = (await store.area<TickResult>(ACCOUNT, 'reminders.tick', params)).due; + const { uiHooks } = await import('@/lib/plugin-hooks'); + const stop = uiHooks.onBeforeExternalLink.register('t', () => false); + const area = vi.spyOn(store, 'area'); + await handleReminderCommand('join', await contextFor(reminder), env); + stop.dispose(); + expect(openExternal).not.toHaveBeenCalled(); + expect(area.mock.calls.filter(([, name]) => name === 'reminders.dismiss')).toEqual([]); + // The window comes up, since the button did nothing else. + expect(focus).toHaveBeenCalled(); + }); +}); + +describe('what its buttons do', () => { + /** A reminder really on record in the store. */ + async function fired(partial: Record<string, unknown> = {}): Promise<ReminderAlert> { + vi.useFakeTimers({ now: FIRE - MIN, toFake: ['Date'] }); + server.addEvent({ id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', timeZone: 'Europe/Berlin', alerts: { a: { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } } }, ...partial }); + await store.sync(ACCOUNT); + const params = { timeZone: 'Europe/Berlin', tasks: true }; + await store.area(ACCOUNT, 'reminders.tick', params); + vi.setSystemTime(FIRE); + return (await store.area<TickResult>(ACCOUNT, 'reminders.tick', params)).due[0]; + } + + it('snoozes from the store with the window left hidden', async () => { + const reminder = await fired(); + expect(await handleReminderCommand('snooze-10', await contextFor(reminder), env)).toBe(true); + expect(focus).not.toHaveBeenCalled(); + expect(env.leaveFor).not.toHaveBeenCalled(); + const params = { timeZone: 'Europe/Berlin', tasks: true }; + vi.setSystemTime(FIRE + 9 * MIN); + expect((await store.area<TickResult>(ACCOUNT, 'reminders.tick', params)).due).toEqual([]); + vi.setSystemTime(FIRE + 10 * MIN); + expect((await store.area<TickResult>(ACCOUNT, 'reminders.tick', params)).due).toHaveLength(1); + }); + + it('refuses a snooze length no button offers', async () => { + const reminder = await fired(); + await handleReminderCommand('snooze-999', await contextFor(reminder), env); + expect(focus).toHaveBeenCalled(); + const params = { timeZone: 'Europe/Berlin', tasks: true }; + vi.setSystemTime(FIRE + 16 * MIN); + expect((await store.area<TickResult>(ACCOUNT, 'reminders.tick', params)).due).toEqual([]); + }); + + it('joins through the OS from what the store holds, with the window left hidden', async () => { + const reminder = await fired({ virtualLocations: { v: { '@type': 'VirtualLocation', uri: 'https://meet.jit.si/standup' } } }); + await handleReminderCommand('join', await contextFor(reminder), env); + expect(openExternal).toHaveBeenCalledWith('https://meet.jit.si/standup'); + expect(focus).not.toHaveBeenCalled(); + }); + + it('opens the event in the account on screen', async () => { + const reminder = await fired(); + await handleReminderCommand('open', await contextFor(reminder), env); + expect(focus).toHaveBeenCalled(); + expect(env.leaveFor).toHaveBeenCalledWith('/calendar'); + expect(env.push).toHaveBeenCalledWith('/calendar/event/e1?calendar=cal1'); + }); + + it('opens only the calendar for an account that is not on screen', async () => { + const reminder = await fired(); + const context = await contextFor(reminder); + activeAccountId = 'someone-else'; + await handleReminderCommand('open', context, env); + expect(env.leaveFor).toHaveBeenCalledWith('/calendar'); + expect(env.push).not.toHaveBeenCalled(); + }); + + it('touches nothing when the slot has gone to another login since', async () => { + const reminder = await fired(); + const context = JSON.parse(await contextFor(reminder)) as { login: string }; + context.login = 'not-this-login'; + await handleReminderCommand('snooze-5', JSON.stringify(context), env); + expect(env.leaveFor).toHaveBeenCalledWith('/calendar'); + const params = { timeZone: 'Europe/Berlin', tasks: true }; + vi.setSystemTime(FIRE + 5 * MIN); + expect((await store.area<TickResult>(ACCOUNT, 'reminders.tick', params)).due).toEqual([]); + }); + + it('opens the summary from a click on its toast, even after a restart', async () => { + vi.useFakeTimers({ now: FIRE - MIN, toFake: ['Date'] }); + server.addEvent({ id: 'e1', uid: 'uid-1', title: 'One', alerts: { a: { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } } } }); + server.addEvent({ id: 'e2', uid: 'uid-2', title: 'Two', alerts: { a: { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } } } }); + await store.sync(ACCOUNT); + const params = { timeZone: 'Europe/Berlin', tasks: true }; + await store.area(ACCOUNT, 'reminders.tick', params); + vi.setSystemTime(FIRE + 60 * MIN); + await store.area(ACCOUNT, 'reminders.tick', params); + const batch = await store.area<{ batch: number; alerts: ReminderAlert[] }>(ACCOUNT, 'reminders.takeMissed', params); + const toast = await buildMissedNotification(ACCOUNT, batch, labels); + + await handleReminderCommand('open', toast.context, env); + expect(focus).toHaveBeenCalled(); + expect(useMissedReminders.getState().alerts.map((a) => a.title)).toEqual(['One', 'Two']); + expect(useMissedReminders.getState().account).toBe(ACCOUNT); + }); + + it('goes to the calendar for a store-less reminder, and leaves mail toasts alone', async () => { + expect(await handleReminderCommand('open', JSON.stringify({ cal: true }), env)).toBe(true); + expect(env.leaveFor).toHaveBeenCalledTimes(1); + expect(env.leaveFor).toHaveBeenCalledWith('/calendar'); + expect(await handleReminderCommand('open', JSON.stringify({ emailId: 'm1', slot: 3 }), env)).toBe(false); + expect(await handleReminderCommand('open', '', env)).toBe(false); + expect(await handleReminderCommand('open', '{broken', env)).toBe(false); + }); +}); diff --git a/lib/desktop/app-lock-state.ts b/lib/desktop/app-lock-state.ts new file mode 100644 index 000000000..72432d62b --- /dev/null +++ b/lib/desktop/app-lock-state.ts @@ -0,0 +1,19 @@ +/** + * Whether the app is locked, for everything that would show mail outside the app. + * + * App lock isn't built yet. When it is, its code calls setAppLockCheck once with a + * function that answers from its own state, and calls bridge.os.setLocked on every + * change: main then clears the tray, the jump list and delivered toasts, and strips + * anything that still comes through. Nothing else needs to change. Until then it + * answers false. + */ + +let check: (() => boolean) | null = null; + +export function setAppLockCheck(next: (() => boolean) | null): void { + check = next; +} + +export function isAppLocked(): boolean { + return check?.() === true; +} diff --git a/lib/desktop/boot.ts b/lib/desktop/boot.ts index 01f68c7a6..a5652ccfe 100644 --- a/lib/desktop/boot.ts +++ b/lib/desktop/boot.ts @@ -4,5 +4,6 @@ * frame. Nothing happens in a browser, which has no bridge. */ export function desktopBootScript(): string { - return `if (window.bulwarkDesktop) document.documentElement.setAttribute('data-desktop', '');`; + return `if (window.bulwarkDesktop) document.documentElement.setAttribute('data-desktop', ''); + if (navigator.windowControlsOverlay && navigator.windowControlsOverlay.visible) document.documentElement.setAttribute('data-window-controls', '');`; } diff --git a/lib/desktop/bridge.ts b/lib/desktop/bridge.ts index 922a5c1b5..33e36bd81 100644 --- a/lib/desktop/bridge.ts +++ b/lib/desktop/bridge.ts @@ -19,6 +19,11 @@ export function forgetDesktopServer(serverUrl: string, reason: 'failed' | 'signe getDesktopBridge()?.servers?.forget?.(serverUrl, reason); } +/** Nothing of an account stays on the OS's surfaces after a sign-out or a wipe. */ +export function clearDesktopSurfaces(): void { + getDesktopBridge()?.os?.clearSurfaces?.(); +} + /** True in any window of the desktop app, standalone or on an instance. */ export function isDesktopApp(): boolean { return getDesktopBridge() !== null; diff --git a/lib/desktop/commands.ts b/lib/desktop/commands.ts new file mode 100644 index 000000000..5013eeb66 --- /dev/null +++ b/lib/desktop/commands.ts @@ -0,0 +1,98 @@ +/** + * The desktop app's menu bar, on the webmail's side. The shell shows the menu and + * sends an id; what runs is the same handler the shortcut or button runs, from + * whichever part of the app registered it. What's on screen decides what's enabled: + * a surface reports that here, and the newest surface wins per command. + * + * Nothing happens in a browser: there's no bridge to publish to, and nobody sends + * an id. + */ + +import { useEffect, useRef } from 'react'; +import { getDesktopBridge } from './bridge'; +import type { DesktopMenuState } from './types'; + +export type DesktopCommandHandlers = Record<string, (() => void) | undefined>; + +interface Surface { + handlers: DesktopCommandHandlers; + state: DesktopMenuState; +} + +const surfaces = new Set<Surface>(); +let base: DesktopMenuState = {}; +let timer: ReturnType<typeof setTimeout> | null = null; + +/** What the shell should show now: the base, with each surface over it, newest last. */ +export function mergedDesktopState(): DesktopMenuState { + const merged: DesktopMenuState = { ...base }; + for (const surface of surfaces) Object.assign(merged, surface.state); + return merged; +} + +function publish(): void { + if (timer) return; + timer = setTimeout(() => { + timer = null; + getDesktopBridge()?.menu?.setState(mergedDesktopState()); + }, 30); +} + +/** What holds whatever is on screen: signed in or not, the device policy. */ +export function setDesktopBaseState(state: DesktopMenuState): void { + base = state; + publish(); +} + +/** Runs a command from the newest surface that has it. False when none does. */ +export function runDesktopCommand(id: string): boolean { + for (const surface of [...surfaces].reverse()) { + const handler = surface.handlers[id]; + if (handler) { + handler(); + return true; + } + } + return false; +} + +export function registerDesktopSurface(surface: Surface): () => void { + surfaces.add(surface); + publish(); + return () => { + surfaces.delete(surface); + publish(); + }; +} + +function sameState(a: DesktopMenuState, b: DesktopMenuState): boolean { + return JSON.stringify(a) === JSON.stringify(b); +} + +/** + * This part of the app answers these commands while `enabled`. Handlers can be new + * on every render: the newest ones run, and only a changed state goes to the shell. + */ +export function useDesktopCommands(handlers: DesktopCommandHandlers, state: DesktopMenuState, enabled = true): void { + const surfaceRef = useRef<Surface>({ handlers, state }); + surfaceRef.current.handlers = handlers; + + useEffect(() => { + if (!enabled || !getDesktopBridge()?.menu) return; + return registerDesktopSurface(surfaceRef.current); + }, [enabled]); + + useEffect(() => { + if (sameState(surfaceRef.current.state, state)) return; + surfaceRef.current.state = state; + publish(); + }); +} + +/** Test helper. */ +export function resetDesktopCommands(): void { + surfaces.clear(); + base = {}; + if (timer) clearTimeout(timer); + timer = null; +} diff --git a/lib/desktop/desktop-telemetry.ts b/lib/desktop/desktop-telemetry.ts new file mode 100644 index 000000000..7eca1d05f --- /dev/null +++ b/lib/desktop/desktop-telemetry.ts @@ -0,0 +1,165 @@ +/** + * What the desktop app's telemetry and crash reports agree on across the webmail and + * the shell: when consent counts, what a heartbeat from the shell holds, and when one + * is due. + * + * No DOM, no Node, no imports: the desktop repo keeps a byte-for-byte copy in + * src/shared/desktop-telemetry.ts. Main can't import lib/telemetry, which needs the + * store and node:dns, and in instance mode no server runs inside the app. It holds no + * host name either: the shell has its own constant, and lib/telemetry/types.ts has this + * side's. + * + * The collector decides the shape (repos/dashboard/telemetry-collector/src/validate.ts). + * Schema 1 drops fields it doesn't know and schema 2 refuses the whole heartbeat over + * one, so mode and channel travel in `build`, the one free field it keeps. It stores + * `platform: 'desktop'` as `unknown` until it has been patched. + */ + +export type DesktopTelemetryMode = 'standalone' | 'instance'; +export type DesktopTelemetryChannel = 'stable' | 'beta'; +export type DesktopOsFamily = 'linux' | 'darwin' | 'windows' | 'unknown'; + +/** What main tells the embedded server, by message. Nothing in a page can write it. */ +export interface DesktopServerPrivacy { + telemetry: boolean; + crashReports: boolean; + /** The desktop app's version. The webmail's own is in `NEXT_PUBLIC_APP_VERSION`. */ + appVersion: string; + /** `desktop.<mode>.<channel>`. */ + build: string; + /** Only a test build of the shell sets this. Nothing on disk can: see `telemetryEndpoint`. */ + endpoint?: string; +} + +/** + * How soon after a start a heartbeat that's due goes out. The server's own hour is right + * for a server: an app quit within an hour of every start would never send. Random, so + * the collector can't read when someone starts their computer from when it arrives. + */ +export const DESKTOP_CATCH_UP_MIN_MS = 30_000; +export const DESKTOP_CATCH_UP_MAX_MS = 600_000; + +export function desktopCatchUpMs(random: () => number = Math.random): number { + return DESKTOP_CATCH_UP_MIN_MS + Math.floor(random() * (DESKTOP_CATCH_UP_MAX_MS - DESKTOP_CATCH_UP_MIN_MS)); +} + +/** A failed send tries again this much later, not a day later. */ +export const DESKTOP_RETRY_MS = 60 * 60_000; +export const DESKTOP_HEARTBEAT_INTERVAL_MS = 24 * 60 * 60_000; + +/** The start of a main-process frame's path. Only the shell's own bundle gets it. */ +export const DESKTOP_FRAME_PREFIX = '/desktop/'; +/** On the version of everything a desktop app reports. The collector's version field allows it. */ +export const DESKTOP_VERSION_SUFFIX = '+desktop'; + +/** A policy that forces something off. A recommendation doesn't: the user's choice beats it. */ +export function forcedOffByPolicy(entry: { value: boolean; locked: boolean }): boolean { + return entry.locked && entry.value === false; +} + +/** + * Whether something opt-in is on. Only a yes counts: no answer is off, and a policy + * allowing it still leaves the question to the user. + */ +export function consentInForce(choice: boolean | null | undefined, policy: { value: boolean; locked: boolean }): boolean { + return choice === true && !forcedOffByPolicy(policy); +} + +export function desktopBuildTag(mode: DesktopTelemetryMode, channel: DesktopTelemetryChannel): string { + return `desktop.${mode}.${channel}`; +} + +/** Forced beats the user's choice, which beats what the version says. */ +export function desktopChannel( + policy: { value: DesktopTelemetryChannel; locked: boolean }, + choice: unknown, + appVersion: string, +): DesktopTelemetryChannel { + if (policy.locked) return policy.value; + if (choice === 'stable' || choice === 'beta') return choice; + return appVersion.includes('-') ? 'beta' : 'stable'; +} + +export function desktopOsFamily(platform: string): DesktopOsFamily { + if (platform === 'win32') return 'windows'; + if (platform === 'darwin') return 'darwin'; + if (platform === 'linux') return 'linux'; + return 'unknown'; +} + +/** How long until the next heartbeat, given when the last one went out. */ +export function heartbeatDelayMs(lastSentAt: number | null | undefined, now: number, catchUp: number = desktopCatchUpMs()): number { + if (!lastSentAt || lastSentAt > now) return catchUp; + const left = lastSentAt + DESKTOP_HEARTBEAT_INTERVAL_MS - now; + return left > 0 ? left : catchUp; +} + +export interface DesktopPingInput { + /** The shell's own UUID, never an instance's. */ + instanceId: string; + appVersion: string; + nodeVersion: string; + osFamily: DesktopOsFamily; + mode: DesktopTelemetryMode; + channel: DesktopTelemetryChannel; + now: number; +} + +/** + * The shell's own heartbeat, for when no server runs inside the app. Features and counts + * are the instance's to report, so these are all empty and nothing is counted twice. + */ +export function buildDesktopPing(input: DesktopPingInput) { + return { + schema: '1' as const, + instance_id: input.instanceId, + ts: new Date(input.now).toISOString(), + version: input.appVersion, + build: desktopBuildTag(input.mode, input.channel), + platform: 'desktop', + node_version: input.nodeVersion, + os_family: input.osFamily, + stalwart_version: null, + features: { calendar: false, contacts: false, files: false, extensions: false, oauth_enabled: false, smime_enabled: false }, + counts: { accounts: '0', accounts_active_7d: '0', extensions_installed: 0, themes_installed: 0 }, + uptime_days: 0, + }; +} + +export function desktopErrorCountBucket(count: number): string { + if (count <= 1) return '1'; + if (count <= 5) return '2-5'; + if (count <= 10) return '6-10'; + if (count <= 50) return '11-50'; + if (count <= 200) return '51-200'; + return '201+'; +} + +export interface DesktopMainError { + name: string; + /** 16 hex digits. */ + fingerprint: string; + version: string; + count: number; +} + +/** + * Main's errors when no server runs inside the app: the collector's /v1/errors takes + * this without a heartbeat, so it works with telemetry off. Name and count only. The + * collector refuses a whole batch over a frame outside the webmail's bundles. + */ +export function buildDesktopErrorBatch(instanceId: string, now: number, errors: readonly DesktopMainError[]) { + return { + schema: '1' as const, + instance_id: instanceId, + day: new Date(now).toISOString().slice(0, 10), + errors: errors.map((error) => ({ + name: error.name, + fingerprint: error.fingerprint, + frames: [], + version: error.version, + count: desktopErrorCountBucket(error.count), + days: 1, + })), + }; +} diff --git a/lib/desktop/dictionary-download.ts b/lib/desktop/dictionary-download.ts new file mode 100644 index 000000000..587b7af39 --- /dev/null +++ b/lib/desktop/dictionary-download.ts @@ -0,0 +1,14 @@ +/** + * Spellcheck dictionaries for languages the OS has no checker for. They'd come from + * this Google host, so nothing is fetched until the user says yes in the composer, + * and never in no-third-party mode. The shell starts every session with the address + * pointing nowhere (src/main/spellcheck.ts in the desktop repo). + */ + +import { noThirdPartyTraffic } from '@/lib/third-party-mode'; + +export const DICTIONARY_HOST_URL = 'https://redirector.gvt1.com/edgedl/chrome/dict/'; + +export function dictionaryDownloadAllowed(): boolean { + return !noThirdPartyTraffic(); +} diff --git a/lib/desktop/file-drag.ts b/lib/desktop/file-drag.ts new file mode 100644 index 000000000..07084646c --- /dev/null +++ b/lib/desktop/file-drag.ts @@ -0,0 +1,67 @@ +/** + * Mail as real files from the page's side: a native drag or a copy to the clipboard. + * Later agents' calls for the taskbar's progress bar live here too. + */ + +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { setOwnDragActive } from '@/lib/desktop/window-files'; + +/** The page's CSP keeps fetch off blob: URLs, so a file travels as its Blob. */ +export interface DragFile { + name: string; + blob: Blob; +} + +const keptBlobs = new Map<string, Blob>(); + +/** In the app, remembers what's behind an object URL made for dragging. */ +export function keepDragBlob(url: string, blob: Blob): string { + if (canDragNativeFiles()) keptBlobs.set(url, blob); + return url; +} + +export function keptDragBlob(url: string): Blob | undefined { + return keptBlobs.get(url); +} + +export function forgetDragBlob(url: string): void { + keptBlobs.delete(url); +} + +export function canDragNativeFiles(): boolean { + return !!getDesktopBridge()?.os?.startDrag; +} + +async function toBytes(file: DragFile): Promise<{ name: string; data: Uint8Array }> { + return { name: file.name, data: new Uint8Array(await file.blob.arrayBuffer()) }; +} + +/** + * Hands the file to main, which writes it to its private folder and starts the OS's + * drag. The mouse is still down, so this has to come straight from `dragstart`. + */ +export async function startNativeFileDrag(files: readonly DragFile[]): Promise<boolean> { + const os = getDesktopBridge()?.os; + if (!os?.startDrag) return false; + setOwnDragActive(true); + try { + return await os.startDrag(await Promise.all(files.map(toBytes))); + } finally { + setOwnDragActive(false); + } +} + +/** Copy attachments as files, for pasting into Explorer or Finder. */ +export async function copyFilesToClipboard(files: readonly DragFile[]): Promise<boolean> { + const os = getDesktopBridge()?.os; + if (!os?.copyFiles) return false; + return os.copyFiles(await Promise.all(files.map(toBytes))); +} + +/** + * The taskbar's progress bar, for an import, an export or a big send. 0 to 1, or null + * to take it away. Does nothing in a browser. + */ +export function setTaskbarProgress(progress: number | null, mode?: 'normal' | 'indeterminate' | 'paused' | 'error'): void { + getDesktopBridge()?.os?.setProgress(progress, mode); +} diff --git a/lib/desktop/keystore-grants.ts b/lib/desktop/keystore-grants.ts index 0a7ad76a4..2fc4cf7df 100644 --- a/lib/desktop/keystore-grants.ts +++ b/lib/desktop/keystore-grants.ts @@ -9,3 +9,11 @@ import { getDesktopBridge } from './bridge'; export function clearKeystoreGrants(): void { void Promise.resolve(getDesktopBridge()?.keystore?.clearGrants?.()).catch(() => {}); } + +/** + * Deletes the crash files on this computer. They can hold the mail of whoever was signed + * in when the app crashed, so the next account at this computer doesn't get to send them. + */ +export function clearDesktopCrashFiles(): void { + void Promise.resolve(getDesktopBridge()?.privacy?.deleteCrashes?.()).catch(() => {}); +} diff --git a/lib/desktop/languages.ts b/lib/desktop/languages.ts new file mode 100644 index 000000000..5c054dc28 --- /dev/null +++ b/lib/desktop/languages.ts @@ -0,0 +1,128 @@ +/** + * What the shell's menus and spellcheck should speak. The interface language and + * its translations of the menus come from the host, and each open composer adds the + * language its text is in, so spelling is checked in what's being written. + */ + +import { getDesktopBridge } from './bridge'; + +let ui = ''; +let labels: Record<string, string> | undefined; +const composers = new Map<string, string>(); + +function push(): void { + const shell = getDesktopBridge()?.shell; + if (!shell?.setLanguages || !ui) return; + shell.setLanguages({ ui, composer: [...new Set(composers.values())], labels }); +} + +export function setDesktopInterfaceLanguage(language: string, translated: Record<string, string>): void { + ui = language; + labels = translated; + push(); +} + +/** With null, this composer has gone. */ +export function noteComposerLanguage(key: string, language: string | null): void { + if (language) { + if (composers.get(key) === language) return; + composers.set(key, language); + } else if (!composers.delete(key)) { + return; + } + push(); +} + +/** The shell's text in the interface language, by its keys in src/main/strings.ts. */ +export function shellLabels(t: (key: string) => string): Record<string, string> { + return { + menuFile: t('desktopUi.menu.file'), + menuEdit: t('desktopUi.menu.edit'), + menuView: t('desktopUi.menu.view'), + menuMessage: t('desktopUi.menu.message'), + menuGo: t('desktopUi.menu.go'), + menuWindow: t('desktopUi.menu.window'), + menuHelp: t('desktopUi.menu.help'), + menuNewMessage: t('email_composer.new_message'), + menuNewWindow: t('desktopUi.menu.new_window'), + menuPrint: t('desktopUi.menu.print'), + menuSavePdf: t('desktopUi.menu.save_pdf'), + menuSwitchMode: t('desktopUi.menu.switch_connection'), + menuClose: t('desktopUi.menu.close'), + menuQuit: t('desktopUi.menu.quit'), + menuUndo: t('desktopUi.menu.undo'), + menuRedo: t('desktopUi.menu.redo'), + menuCut: t('desktopUi.menu.cut'), + menuCopy: t('desktopUi.menu.copy'), + menuPaste: t('desktopUi.menu.paste'), + menuSelectAll: t('desktopUi.menu.select_all'), + menuSearch: t('desktopUi.menu.search'), + menuRefresh: t('desktopUi.menu.refresh'), + menuReadingPane: t('desktopUi.menu.reading_pane'), + menuPaneRight: t('desktopUi.menu.pane_right'), + menuPaneBelow: t('desktopUi.menu.pane_below'), + menuPaneOff: t('desktopUi.menu.pane_off'), + menuZoomIn: t('desktopUi.menu.zoom_in'), + menuZoomOut: t('desktopUi.menu.zoom_out'), + menuZoomReset: t('desktopUi.menu.zoom_reset'), + menuFullScreen: t('desktopUi.menu.full_screen'), + menuReply: t('context_menu.reply'), + menuReplyAll: t('context_menu.reply_all'), + menuForward: t('context_menu.forward'), + menuMarkRead: t('context_menu.mark_read'), + menuMarkUnread: t('context_menu.mark_unread'), + menuStar: t('context_menu.star'), + menuMove: t('context_menu.move_to_dialog'), + menuArchive: t('context_menu.archive'), + menuSpam: t('context_menu.mark_as_spam'), + menuDelete: t('context_menu.delete'), + menuOpenInWindow: t('desktopUi.menu.open_in_window'), + menuGoInbox: t('sidebar.mailboxes.inbox'), + menuGoSent: t('sidebar.mailboxes.sent'), + menuGoDrafts: t('sidebar.mailboxes.drafts'), + menuGoNext: t('desktopUi.menu.next_message'), + menuGoPrevious: t('desktopUi.menu.previous_message'), + menuGoNextUnread: t('desktopUi.menu.next_unread'), + menuGoMail: t('desktopUi.menu.mail'), + menuGoCalendar: t('sidebar.calendar'), + menuGoContacts: t('sidebar.contacts'), + menuGoFiles: t('desktopUi.menu.files'), + menuGoBack: t('desktopUi.menu.back'), + menuGoForward: t('desktopUi.menu.forward'), + menuMinimize: t('desktopUi.menu.minimize'), + menuCycle: t('desktopUi.menu.next_window'), + menuShortcuts: t('desktopUi.menu.shortcuts'), + menuDocs: t('desktopUi.menu.docs'), + menuSettings: t('desktopUi.menu.settings'), + menuAbout: t('desktopUi.menu.about'), + contextCut: t('desktopUi.menu.cut'), + contextCopy: t('desktopUi.menu.copy'), + contextPaste: t('desktopUi.menu.paste'), + contextSelectAll: t('desktopUi.menu.select_all'), + contextAddToDictionary: t('desktopUi.context.add_to_dictionary'), + contextNoSuggestions: t('desktopUi.context.no_suggestions'), + contextOpenLink: t('desktopUi.context.open_link'), + contextCopyLink: t('desktopUi.context.copy_link'), + contextCopyAddress: t('desktopUi.context.copy_address'), + contextSaveImage: t('desktopUi.context.save_image'), + contextCopyImage: t('desktopUi.context.copy_image'), + unsavedTitle: t('desktopUi.closing.unsaved_title'), + unsavedDetail: t('desktopUi.closing.unsaved_detail'), + closeAnyway: t('desktopUi.closing.close_anyway'), + unsentTitle: t('desktopUi.closing.unsent_title'), + unsentOne: t('desktopUi.closing.unsent_one'), + unsentMany: t('desktopUi.closing.unsent_many'), + closeNow: t('desktopUi.closing.quit'), + leaveTitle: t('desktopUi.closing.leave_title'), + leaveDetail: t('desktopUi.closing.leave_detail'), + leave: t('desktopUi.closing.leave'), + stay: t('desktopUi.closing.stay'), + }; +} + +/** Test helper. */ +export function resetDesktopLanguages(): void { + ui = ''; + labels = undefined; + composers.clear(); +} diff --git a/lib/desktop/mail-links.ts b/lib/desktop/mail-links.ts new file mode 100644 index 000000000..12416ef30 --- /dev/null +++ b/lib/desktop/mail-links.ts @@ -0,0 +1,44 @@ +/** + * Opening a message or folder from outside the mail page: a tray item, a toast, a jump + * list entry. The mail page applies a link the way it applies a permalink. If it isn't + * on screen, the link waits and the app goes there. + */ + +import type { MailDeepLink } from '@/lib/deep-links'; + +export interface MailLinkOptions { + replyText?: string; +} + +export type MailLinkOpener = (link: MailDeepLink, options?: MailLinkOptions) => void; + +let opener: MailLinkOpener | null = null; +let waiting: { link: MailDeepLink; options?: MailLinkOptions } | null = null; + +/** The mail page, while it's mounted. Takes over a link that was waiting for it. */ +export function setMailLinkOpener(next: MailLinkOpener): () => void { + opener = next; + if (waiting) { + const { link, options } = waiting; + waiting = null; + next(link, options); + } + return () => { + if (opener === next) opener = null; + }; +} + +export function openMailLink(link: MailDeepLink, options: MailLinkOptions | undefined, leaveFor: (path: '/') => void | Promise<void>): void { + if (opener) { + opener(link, options); + return; + } + waiting = { link, options }; + void leaveFor('/'); +} + +/** For tests. */ +export function resetMailLinks(): void { + opener = null; + waiting = null; +} diff --git a/lib/desktop/mail-notifications.ts b/lib/desktop/mail-notifications.ts new file mode 100644 index 000000000..12cd12e5d --- /dev/null +++ b/lib/desktop/mail-notifications.ts @@ -0,0 +1,180 @@ +/** + * New mail as native notifications, with the same rules as the app's other ways of + * saying so. Mail notifications off or the app's Do not disturb: nothing. Mail that + * arrives together is told about once. Sender and subject stay off the notification + * when the app is locked, or when the organisation says so for that login + * (pushWithoutContent, the rule the push preview route follows). + * + * Main decides what the OS allows: pause, quiet hours, Do Not Disturb. It answers + * whether the page should play the sound the user picked, because this is the one + * place that sound is played from in the desktop app. + */ + +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import type { DesktopOsNotification } from '@/lib/desktop/types'; +import { isAppLocked } from '@/lib/desktop/app-lock-state'; +import { startNewMailWatch, type NewMail, type NewMailWatch } from '@/lib/desktop/new-mail'; +import { setStoreCreatedListener } from '@/lib/desktop/system-events'; +import { devicesForAccount } from '@/lib/device-policy'; +import { playNotificationSound } from '@/lib/notification-sound'; +import { isPopoutWindow } from '@/lib/popout/window-role'; +import { loginFingerprint } from '@/lib/pwa-notify/login-fingerprint'; +import { useAccountStore } from '@/stores/account-store'; +import { useAuthStore } from '@/stores/auth-store'; +import { usePolicyStore } from '@/stores/policy-store'; +import { useSettingsStore } from '@/stores/settings-store'; +import type { IJMAPClient } from '@/lib/jmap/client-interface'; + +export const MAIL_BATCH_MS = 3000; + +export interface MailNotificationLabels { + newMail: string; + newMailCount: (count: number) => string; + noSubject: string; + archive: string | null; + markRead: string; + delete: string; + reply: string; + replyPlaceholder: string; +} + +/** What a toast's button hands back, possibly after the app restarted. */ +export interface MailNotificationContext { + emailId?: string; + threadId?: string; + accountId?: string; + slot?: number; + login?: string; +} + +/** True where this module plays the new-mail sound, so useNewMailAlerts doesn't as well. */ +export function desktopPlaysMailSound(): boolean { + return !!getDesktopBridge()?.os && !isPopoutWindow(); +} + +interface Sender { + entryId: string | null; + slot?: number; + login?: string; + label: string | null; +} + +async function senderInfo(client: IJMAPClient): Promise<Sender> { + const auth = useAuthStore.getState(); + const accounts = useAccountStore.getState().accounts; + const entry = accounts.find((account) => auth.getClientForAccount(account.id) === client) + ?? (auth.client === client ? accounts.find((account) => account.id === auth.activeAccountId) : undefined); + if (!entry) return { entryId: null, label: null }; + return { + entryId: entry.id, + slot: entry.cookieSlot, + login: await loginFingerprint(entry.serverUrl, entry.username), + label: accounts.length > 1 ? (entry.label || entry.email || entry.username || null) : null, + }; +} + +/** Sender and subject stay off everything outside the app. Not knowing yet counts as yes. */ +export function contentHiddenFor(accountEntryId: string | null | undefined): boolean { + if (isAppLocked()) return true; + // Unknown counts as on, as on the server's route. + if (!accountEntryId || !usePolicyStore.getState().loaded) return true; + try { + return devicesForAccount(accountEntryId).pushWithoutContent; + } catch { + return true; + } +} + +function withoutContent(sender: Sender): boolean { + return contentHiddenFor(sender.entryId); +} + +function senderName(mail: NewMail): string { + const first = mail.email.from?.[0]; + return first?.name || first?.email || ''; +} + +export async function buildMailNotification(batch: readonly NewMail[], labels: MailNotificationLabels): Promise<DesktopOsNotification> { + const newest = batch.reduce((a, b) => (new Date(b.email.receivedAt ?? 0).getTime() > new Date(a.email.receivedAt ?? 0).getTime() ? b : a)); + const sender = await senderInfo(newest.client); + const hidden = withoutContent(sender); + const context: MailNotificationContext = { accountId: newest.accountId, slot: sender.slot, login: sender.login }; + const base = { + id: `mail:${newest.accountId}/${newest.email.id}`, + group: `mail:${newest.accountId}`, + sound: true, + attention: true, + }; + const suffix = sender.label && !hidden ? ` (${sender.label})` : ''; + if (batch.length > 1) { + return { + ...base, + title: `${labels.newMailCount(batch.length)}${suffix}`, + body: hidden ? '' : `${senderName(newest)}: ${newest.email.subject || labels.noSubject}`, + // Nothing for one message to act on: a click opens the Inbox. + context: JSON.stringify(context), + }; + } + const full: MailNotificationContext = { ...context, emailId: newest.email.id, threadId: newest.email.threadId }; + if (hidden) { + return { ...base, title: labels.newMail, body: '', context: JSON.stringify(full) }; + } + return { + ...base, + title: `${senderName(newest) || labels.newMail}${suffix}`, + body: newest.email.subject || newest.email.preview || labels.noSubject, + context: JSON.stringify(full), + actions: [ + ...(labels.archive ? [{ id: 'archive', label: labels.archive }] : []), + { id: 'mark-read', label: labels.markRead }, + { id: 'delete', label: labels.delete }, + ], + reply: { label: labels.reply, placeholder: labels.replyPlaceholder }, + }; +} + +export interface MailNotifications extends NewMailWatch { + setLabels(labels: MailNotificationLabels): void; +} + +export function startMailNotifications(initial: MailNotificationLabels): MailNotifications { + let labels = initial; + let batch: NewMail[] = []; + let timer: ReturnType<typeof setTimeout> | null = null; + + const flush = () => { + timer = null; + const current = batch; + batch = []; + if (current.length === 0) return; + const settings = useSettingsStore.getState(); + if (!settings.emailNotificationsEnabled || settings.doNotDisturb) return; + void (async () => { + const notification = await buildMailNotification(current, labels); + const result = await getDesktopBridge()?.os?.notify({ ...notification, sound: settings.emailNotificationSound }); + if (result?.playSound) playNotificationSound(settings.notificationSoundChoice); + })().catch((error) => { + console.error('Failed to show a notification:', error); + }); + }; + + const watch = startNewMailWatch((mail) => { + batch.push(...mail); + timer ??= setTimeout(flush, MAIL_BATCH_MS); + }); + + const handle: MailNotifications = { + ...watch, + setLabels(next) { + labels = next; + }, + stop() { + watch.stop(); + if (timer) clearTimeout(timer); + timer = null; + setStoreCreatedListener(null); + }, + }; + setStoreCreatedListener((client, accountId, ids) => watch.noteCreated(client, accountId, ids)); + return handle; +} diff --git a/lib/desktop/native-menu.ts b/lib/desktop/native-menu.ts new file mode 100644 index 000000000..5fac69c9e --- /dev/null +++ b/lib/desktop/native-menu.ts @@ -0,0 +1,188 @@ +/** + * Turns an HTML menu into a native one. The ContextMenu component renders as it does + * in a browser, hidden, with its submenus open. This reads the result and shows that + * natively. A pick clicks the row the HTML menu has for it, so a menu has one list of + * entries with one set of handlers and the two can't drift. + * + * A menu with something a native one can't show (a colour picker, a row with no text) + * stays HTML. So does anything marked data-native-menu="html". A plugin's frame in the + * menu doesn't: the rest shows natively, with one line that opens the HTML menu. + */ + +import { getDesktopBridge } from './bridge'; +import type { DesktopNativeMenuItem } from './types'; + +export function nativeMenusAvailable(): boolean { + return !!getDesktopBridge()?.menu?.popup; +} + +export interface ReadMenu { + items: DesktopNativeMenuItem[]; + /** The HTML row behind each native item's id. */ + elements: Map<string, HTMLElement>; + /** There's something here a native menu can't show. */ + unsupported: boolean; + /** A plugin drew something of its own in the menu. */ + hasFrames: boolean; +} + +const ROW = '[role="menuitem"], [role="menuitemcheckbox"], [role="menuitemradio"], button, a[href]'; + +/** The native line that opens the HTML menu instead. */ +export const HTML_MENU_ITEM = "html-menu"; + +function isDisabled(el: HTMLElement): boolean { + return (el as HTMLButtonElement).disabled === true || el.getAttribute('aria-disabled') === 'true'; +} + +function labelOf(el: HTMLElement): string { + const named = el.getAttribute('aria-label') ?? el.querySelector<HTMLElement>('[data-menu-label]')?.textContent ?? el.textContent ?? ''; + return named.replace(/\s+/g, ' ').trim(); +} + +function isHidden(el: Element): boolean { + return typeof window.getComputedStyle === 'function' && window.getComputedStyle(el).display === 'none'; +} + +export function readMenu(root: HTMLElement): ReadMenu { + const elements = new Map<string, HTMLElement>(); + let unsupported = root.querySelector('[data-native-menu="html"], select, textarea, input[type="color"]') !== null; + let hasFrames = false; + let next = 1; + + const walk = (container: Element, into: DesktopNativeMenuItem[]): void => { + for (const child of Array.from(container.children)) { + if (!(child instanceof HTMLElement) || isHidden(child)) continue; + if (child.getAttribute('role') === 'separator') { + into.push({ type: 'separator' }); + continue; + } + if (child.tagName === 'IFRAME') { + // Only a plugin's own slot has this coming. Anything else stays HTML whole. + if (child.closest('[data-plugin-slot]')) hasFrames = true; + else unsupported = true; + continue; + } + if (child.dataset.submenuPanel !== undefined) continue; + if (child.dataset.contextMenuHeader !== undefined) { + const label = labelOf(child); + if (label) into.push({ id: `h${next++}`, label, enabled: false }); + continue; + } + if (child.dataset.submenuTrigger !== undefined) { + const label = labelOf(child); + if (isDisabled(child)) { + into.push({ id: `s${next++}`, label, enabled: false }); + continue; + } + const panel = child.parentElement?.querySelector<HTMLElement>(':scope > [data-submenu-panel]'); + if (!panel) { + unsupported = true; + continue; + } + const submenu: DesktopNativeMenuItem[] = []; + walk(panel, submenu); + into.push({ label, submenu }); + continue; + } + if (child.matches(ROW)) { + // A row that opens its own popup: there's nothing to click through to. + if (child.hasAttribute('aria-haspopup')) { + unsupported = true; + continue; + } + const label = labelOf(child); + if (!label) { + // A swatch or an icon says nothing in a native menu. + unsupported = true; + continue; + } + const id = `i${next++}`; + elements.set(id, child); + const role = child.getAttribute('role'); + into.push({ + id, + label, + enabled: !isDisabled(child), + ...(role === 'menuitemcheckbox' || role === 'menuitemradio' + ? { type: role === 'menuitemcheckbox' ? 'checkbox' as const : 'radio' as const, checked: child.getAttribute('aria-checked') === 'true' } + : {}), + }); + continue; + } + // A search field over a list is no use where you can't type. + if (child instanceof HTMLInputElement) continue; + walk(child, into); + } + }; + + const items: DesktopNativeMenuItem[] = []; + walk(root, items); + return { items, elements, unsupported, hasFrames }; +} + +const SETTLE_MS = 30; +const SETTLE_LIMIT_MS = 400; + +/** + * The menu once it stopped changing. Entries can render a moment after the menu + * (the mail menu waits for its data), and a native menu can't grow once it's up. + */ +export async function readSettledMenu(root: HTMLElement, cancelled: () => boolean): Promise<ReadMenu> { + const started = Date.now(); + let previous = readMenu(root); + while (!cancelled() && Date.now() - started < SETTLE_LIMIT_MS) { + await new Promise((resolve) => setTimeout(resolve, SETTLE_MS)); + const current = readMenu(root); + if (current.items.length > 0 && JSON.stringify(current.items) === JSON.stringify(previous.items)) return current; + previous = current; + } + return previous; +} + +function labelOfId(items: DesktopNativeMenuItem[], id: string): string | undefined { + for (const item of items) { + if (item.id === id) return item.label; + const below = item.submenu && labelOfId(item.submenu, id); + if (below) return below; + } + return undefined; +} + +export type NativeMenuOutcome = 'done' | 'html' | 'gone'; + +/** + * Shows it and clicks the row picked. Says when the pick found nothing: the page can + * re-render under a menu that stays up (the list refreshing), and a row that's gone + * would otherwise do nothing with no word about it. If the same line is back at the + * same place, that's the one. + */ +export async function showNativeMenu(read: ReadMenu, root: HTMLElement, at?: { x: number; y: number }, fromPlugins?: string): Promise<NativeMenuOutcome> { + const popup = getDesktopBridge()?.menu?.popup; + if (!popup) return 'done'; + const items = read.hasFrames && fromPlugins + ? [...read.items, { type: 'separator' as const }, { id: HTML_MENU_ITEM, label: fromPlugins }] + : read.items; + document.documentElement.dataset.nativeMenuOpen = ''; + let picked: string | null; + try { + picked = await popup(items, at); + } finally { + delete document.documentElement.dataset.nativeMenuOpen; + } + if (!picked) return 'done'; + if (picked === HTML_MENU_ITEM) return 'html'; + let row = read.elements.get(picked); + if (!row?.isConnected) { + const again = root.isConnected ? readMenu(root) : null; + row = again && labelOfId(again.items, picked) === labelOfId(read.items, picked) ? again.elements.get(picked) : undefined; + } + if (!row?.isConnected) return 'gone'; + row.click(); + return 'done'; +} + +/** A native menu is up: the window's blur or a stray event says nothing about it. */ +export function nativeMenuIsOpen(): boolean { + return typeof document !== 'undefined' && document.documentElement.dataset.nativeMenuOpen !== undefined; +} diff --git a/lib/desktop/new-mail.ts b/lib/desktop/new-mail.ts new file mode 100644 index 000000000..efe23173d --- /dev/null +++ b/lib/desktop/new-mail.ts @@ -0,0 +1,151 @@ +/** + * Which messages count as new mail for the desktop app's notifications, for every + * connected login, whichever page or folder is open. + * + * With the local store the source is its `created` event (noteCreatedEmails): the + * engine has already worked out the delta. Without one, each login's push change is + * resolved here with Email/changes on a baseline of its own, the way + * reportNewInboxMail does for plugins. Both can see the same message; it's only told + * once. + */ + +import type { IJMAPClient } from '@/lib/jmap/client-interface'; +import type { Email, Mailbox } from '@/lib/jmap/types'; +import { isMailboxMuted } from '@/lib/notification-mutes'; +import { subscribePushStateChanges } from '@/lib/push-events'; +import { useSettingsStore } from '@/stores/settings-store'; + +export interface NewMail { + client: IJMAPClient; + /** The JMAP account the message is in. */ + accountId: string; + email: Email; +} + +const MAX_PAGES = 5; +const MAX_CHANGES = 200; +const SEEN_LIMIT = 500; +/** An import or a restore creates old mail: nobody is waiting to hear about that. */ +const NEWEST_AGE_MS = 24 * 60 * 60 * 1000; +/** Folders mail lands in by itself, when not only the Inbox notifies. */ +const NOT_ARRIVALS = new Set(['junk', 'trash', 'sent', 'drafts', 'archive']); + +function mailboxIdsOf(email: Email): string[] { + return Object.keys(email.mailboxIds ?? {}).filter((id) => email.mailboxIds[id]); +} + +/** The folder a new message counts for, or null if it stays silent. */ +export function notifyingMailbox(email: Email, accountId: string, ownAccountId: string, mailboxes: readonly Mailbox[], now = Date.now()): Mailbox | null { + if (email.keywords?.$seen || email.keywords?.$draft) return null; + const received = email.receivedAt ? new Date(email.receivedAt).getTime() : now; + if (now - received > NEWEST_AGE_MS) return null; + const { notificationMutes, pushNotifyInboxOnly } = useSettingsStore.getState(); + const here = new Set(mailboxIdsOf(email)); + const mine = mailboxes.filter((mailbox) => (mailbox.accountId ?? ownAccountId) === accountId && here.has(mailbox.originalId || mailbox.id)); + const counts = mine.filter((mailbox) => (pushNotifyInboxOnly ? mailbox.role === 'inbox' : !NOT_ARRIVALS.has(mailbox.role ?? ''))); + // Mail filed in a muted folder and an unmuted one still notifies. + return counts.find((mailbox) => !isMailboxMuted(notificationMutes, accountId, mailbox.originalId || mailbox.id)) ?? null; +} + +export interface NewMailWatch { + /** The local store's `created` event for this login's account. */ + noteCreated(client: IJMAPClient, accountId: string, ids: readonly string[]): void; + /** Takes a state to work from, so the first push after the start can tell what's new. */ + seed(client: IJMAPClient): void; + stop(): void; +} + +export function startNewMailWatch(onMail: (mail: NewMail[]) => void): NewMailWatch { + const baselines = new WeakMap<IJMAPClient, Map<string, string>>(); + const seen: string[] = []; + let queue: Promise<void> = Promise.resolve(); + let stopped = false; + + const baselinesOf = (client: IJMAPClient) => { + let map = baselines.get(client); + if (!map) { + map = new Map(); + baselines.set(client, map); + } + return map; + }; + + const enqueue = (run: () => Promise<void>) => { + const next = queue.then(run, run).catch((error) => { + console.error('Failed to check for new mail:', error); + }); + queue = next; + return next; + }; + + const report = async (client: IJMAPClient, accountId: string, ids: readonly string[]) => { + const fresh = ids.filter((id) => !seen.includes(`${accountId}/${id}`)); + if (fresh.length === 0 || stopped) return; + const [emails, mailboxes] = await Promise.all([client.getSomeEmails(fresh, accountId), client.getAllMailboxes()]); + // Only what came back counts as told. With the store on, a push can overtake it: the + // device doesn't have the message yet, and its created event has to be able to tell it. + for (const email of emails) seen.push(`${accountId}/${email.id}`); + seen.splice(0, Math.max(0, seen.length - SEEN_LIMIT)); + const own = client.getAccountId(); + const mail = emails + .filter((email) => notifyingMailbox(email, accountId, own, mailboxes)) + .map((email) => ({ client, accountId, email })); + if (mail.length > 0 && !stopped) onMail(mail); + }; + + const check = async (client: IJMAPClient, accountId: string, pushed: string) => { + const map = baselinesOf(client); + const since = map.get(accountId); + if (!since || !client.getEmailChanges) { + map.set(accountId, pushed); + return; + } + if (since === pushed) return; + const created: string[] = []; + let state = since; + for (let page = 0; page < MAX_PAGES; page += 1) { + const delta = await client.getEmailChanges(state, accountId, MAX_CHANGES); + if (!delta) { + // Too old for the server: start again from here. + map.set(accountId, pushed); + return; + } + created.push(...delta.created); + state = delta.newState; + if (!delta.hasMoreChanges) break; + } + map.set(accountId, state); + await report(client, accountId, created); + }; + + const stopPush = subscribePushStateChanges((change, client) => { + for (const [accountId, types] of Object.entries(change.changed ?? {})) { + const pushed = types?.Email; + if (pushed) void enqueue(() => check(client, accountId, pushed)); + } + }); + + return { + noteCreated(client, accountId, ids) { + void enqueue(() => report(client, accountId, ids)); + }, + seed(client) { + void enqueue(async () => { + const map = baselinesOf(client); + const own = client.getAccountId(); + const mailboxes = await client.getAllMailboxes(); + const inboxes = mailboxes.filter((mailbox) => mailbox.role === 'inbox'); + await Promise.all(inboxes.map(async (inbox) => { + const accountId = inbox.accountId ?? own; + if (map.has(accountId)) return; + const { state } = await client.getEmails(inbox.originalId || inbox.id, accountId, 1); + if (state && !map.has(accountId)) map.set(accountId, state); + })); + }); + }, + stop() { + stopped = true; + stopPush(); + }, + }; +} diff --git a/lib/desktop/open-link.ts b/lib/desktop/open-link.ts new file mode 100644 index 000000000..96c9c8f6f --- /dev/null +++ b/lib/desktop/open-link.ts @@ -0,0 +1,22 @@ +/** + * "Open Link" in the desktop app's native menu. It has to go where a click on the + * link goes: a mail address to the app's composer, anything else past + * resolveExternalLink, where a plugin can stop it or send it elsewhere. + */ + +import { isOpenableLinkHref } from '@/lib/email-sanitization'; +import { resolveExternalLink } from '@/lib/plugin-hook-result'; +import { requestInternalMailto } from '@/lib/protocol-handlers/mailto'; +import { getDesktopBridge } from './bridge'; + +export async function openLinkFromNativeMenu(href: string, text: string, emailId?: string): Promise<void> { + const shell = getDesktopBridge()?.shell; + if (!shell) return; + if (/^mailto:/i.test(href)) { + if (!requestInternalMailto(href)) shell.openExternal(href); + return; + } + if (!isOpenableLinkHref(href)) return; + const target = await resolveExternalLink({ href, target: '_blank', emailId, text }); + if (target) shell.openExternal(target); +} diff --git a/lib/desktop/os-commands.ts b/lib/desktop/os-commands.ts new file mode 100644 index 000000000..ede5e140b --- /dev/null +++ b/lib/desktop/os-commands.ts @@ -0,0 +1,192 @@ +/** + * What the OS asks of the app, carried out with what the app already has: the launch + * handoff for files and new messages, the protocol handlers for mailto: and webcal:, + * the notification actions for a toast's buttons. A bridge command comes from the + * user's own OS, so it skips the question a web share gets (decision 17). + */ + +import { isAppLocked } from '@/lib/desktop/app-lock-state'; +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import type { DesktopOsCommand } from '@/lib/desktop/types'; +import { openMailLink } from '@/lib/desktop/mail-links'; +import { handleReminderCommand } from '@/lib/desktop/reminder-notifications'; +import type { MailNotificationContext } from '@/lib/desktop/mail-notifications'; +import { handOffDraft, handOffFiles, handOffNewMessage, kindForFile } from '@/lib/launch-handoff'; +import { parseMailto } from '@/lib/protocol-handlers/mailto'; +import { notifyPendingMailto, notifyPendingWebcal, savePendingMailto, savePendingWebcal } from '@/lib/protocol-handlers/session'; +import { parseWebcal } from '@/lib/protocol-handlers/webcal'; +import { loginFingerprint } from '@/lib/pwa-notify/login-fingerprint'; +import { runNotificationAction, type NotificationActionRequest, type NotificationActionStatus } from '@/lib/pwa-notify/page-actions'; +import { useAccountStore } from '@/stores/account-store'; +import { useAuthStore } from '@/stores/auth-store'; + +export interface OsCommandEnv { + /** Goes to a page, saving an open composer first. */ + leaveFor: (path: '/' | '/calendar' | '/contacts') => void | Promise<void>; + /** A route change that isn't leaving anything behind. */ + push: (path: string) => void; + /** Says something couldn't be opened. */ + notifyFailed: (names: readonly string[]) => void; + /** A typed reply that has nowhere to go: its message's login is gone from here. */ + notifyReplyLost: () => void; +} + +/** How long a toast's button waits for a cold start to sign in. */ +const SIGN_IN_WAIT_MS = 30_000; + +function parseContext(raw: string | undefined): MailNotificationContext { + if (!raw) return {}; + try { + const parsed: unknown = JSON.parse(raw); + return parsed && typeof parsed === 'object' ? parsed as MailNotificationContext : {}; + } catch { + return {}; + } +} + +function whenSignedIn(): Promise<boolean> { + return new Promise((resolve) => { + if (useAuthStore.getState().isAuthenticated) { + resolve(true); + return; + } + const finish = (value: boolean) => { + clearTimeout(timer); + stop(); + resolve(value); + }; + const timer = setTimeout(() => finish(false), SIGN_IN_WAIT_MS); + const stop = useAuthStore.subscribe((state) => { + if (state.isAuthenticated) finish(true); + }); + }); +} + +/** A slot goes to whoever signs in next: a day-old toast has to still mean this login. */ +async function stillThatLogin(context: MailNotificationContext): Promise<boolean> { + if (context.slot === undefined || !context.login) return false; + const entry = useAccountStore.getState().accounts.find((account) => account.cookieSlot === context.slot); + return !!entry && (await loginFingerprint(entry.serverUrl, entry.username)) === context.login; +} + +function showWindow(): void { + getDesktopBridge()?.windows?.focus?.(); +} + +async function openFromNotification(context: MailNotificationContext, env: OsCommandEnv, reply?: { text: string }): Promise<void> { + showWindow(); + await whenSignedIn(); + const known = await stillThatLogin(context); + if (known && context.emailId) { + openMailLink({ kind: 'message', id: context.emailId, slot: context.slot, ownerAccountId: context.accountId, ...(reply ? { reply: true } : {}) }, reply ? { replyText: reply.text } : undefined, env.leaveFor); + return; + } + if (reply?.text) env.notifyReplyLost(); + openMailLink({ kind: 'folder', ref: 'inbox', ...(known ? { slot: context.slot } : {}) }, undefined, env.leaveFor); +} + +function runAction(request: NotificationActionRequest): Promise<NotificationActionStatus> { + return new Promise((resolve) => { + void runNotificationAction(request, (status) => { + if (status !== 'accepted') resolve(status); + }); + }); +} + +async function handleNotification(action: string, rawContext: string, reply: string | undefined, env: OsCommandEnv): Promise<void> { + // An old toast's Delete doesn't act behind the lock, and its message doesn't open over it. + if (isAppLocked()) { + showWindow(); + return; + } + if (await handleReminderCommand(action, rawContext, env)) return; + const context = parseContext(rawContext); + if (action === 'reply') { + await openFromNotification(context, env, { text: reply ?? '' }); + return; + } + if ((action === 'archive' || action === 'mark-read' || action === 'delete') && context.emailId && context.accountId) { + if (await whenSignedIn()) { + const status = await runAction({ + action, + emailId: context.emailId, + accountId: context.accountId, + threadId: context.threadId, + slot: context.slot, + login: context.login, + at: Date.now(), + }); + if (status === 'done') return; + } + } + // Clicked, or the button couldn't be carried out here: the message opens. + await openFromNotification(context, env); +} + +function handleFiles(command: Extract<DesktopOsCommand, { type: 'files' }>, env: OsCommandEnv): void { + const made = command.files.map(({ name, data }) => new File([new Uint8Array(data)], name)); + const failed = [...command.failed]; + if (command.reason === 'attach') { + if (made.length > 0) handOffDraft({ files: made }); + } else { + for (const file of made) { + const kind = kindForFile(file); + if (kind) handOffFiles([file], kind); + else failed.push(file.name); + } + } + if (failed.length > 0) env.notifyFailed(failed); +} + +export function handleOsCommand(command: DesktopOsCommand, env: OsCommandEnv): void | Promise<void> { + switch (command.type) { + case 'new-message': + handOffNewMessage(); + return; + case 'navigate': + if (command.target === 'inbox') openMailLink({ kind: 'folder', ref: 'inbox' }, undefined, env.leaveFor); + else void env.leaveFor(`/${command.target}`); + return; + case 'open-message': { + const context = parseContext(command.context); + if (context.slot !== undefined) return openFromNotification({ ...context, emailId: command.emailId }, env); + openMailLink({ kind: 'message', id: command.emailId, ownerAccountId: command.accountId }, undefined, env.leaveFor); + return; + } + case 'open-mailbox': + openMailLink({ kind: 'folder', ref: command.mailboxId }, undefined, env.leaveFor); + return; + case 'mailto': { + const parsed = parseMailto(command.url); + if (!parsed) return; + savePendingMailto(parsed); + notifyPendingMailto(); + env.push('/'); + return; + } + case 'webcal': { + const parsed = parseWebcal(command.url); + if (!parsed) return; + savePendingWebcal(parsed); + notifyPendingWebcal(); + env.push('/calendar'); + return; + } + case 'files': + handleFiles(command, env); + return; + case 'notification': + return handleNotification(command.action, command.context, command.reply, env); + } +} + +/** Listens for as long as the page lives. Commands wait in main until this runs. */ +export function startOsCommands(env: OsCommandEnv): () => void { + const os = getDesktopBridge()?.os; + if (!os) return () => {}; + return os.onCommand((command) => { + void Promise.resolve(handleOsCommand(command, env)).catch((error) => { + console.error('An OS command failed:', error); + }); + }); +} diff --git a/lib/desktop/os-summary.ts b/lib/desktop/os-summary.ts new file mode 100644 index 000000000..599dd942a --- /dev/null +++ b/lib/desktop/os-summary.ts @@ -0,0 +1,138 @@ +/** + * What the tray and the jump list show: recent unread mail, the newest conversations, + * the next calendar event. Read with the same client calls as the rest of the app, so + * the local store answers when it has them. No content while locked or where the + * organisation keeps it off notifications. + */ + +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { contentHiddenFor } from '@/lib/desktop/mail-notifications'; +import type { DesktopOsSummary, DesktopOsTrayMessage } from '@/lib/desktop/types'; +import type { CalendarEvent, Email } from '@/lib/jmap/types'; +import type { IJMAPClient } from '@/lib/jmap/client-interface'; +import { loginFingerprint } from '@/lib/pwa-notify/login-fingerprint'; +import { useAccountStore } from '@/stores/account-store'; +import { useAuthStore } from '@/stores/auth-store'; +import { useCalendarStore } from '@/stores/calendar-store'; +import { useEmailStore } from '@/stores/email-store'; +import { usePolicyStore } from '@/stores/policy-store'; + +const ROWS = 5; +const REFRESH_DELAY_MS = 2000; +const REFRESH_EVERY_MS = 5 * 60 * 1000; +const EVENT_WINDOW_MS = 24 * 60 * 60 * 1000; + +export const EMPTY_SUMMARY: DesktopOsSummary = { unread: [], recent: [], nextEvent: null }; + +export function eventStart(event: CalendarEvent): number { + return new Date(event.utcStart ?? event.start).getTime(); +} + +/** The soonest event still ahead, leaving out cancelled ones. */ +export function nextEventOf(events: readonly CalendarEvent[], now: number): CalendarEvent | null { + const ahead = events + .filter((event) => event.status !== 'cancelled' && !event.showWithoutTime && eventStart(event) >= now) + .sort((a, b) => eventStart(a) - eventStart(b)); + return ahead[0] ?? null; +} + +export function formatEventTime(start: number, now: number, locale: string | undefined): string { + const date = new Date(start); + const sameDay = date.toDateString() === new Date(now).toDateString(); + const options: Intl.DateTimeFormatOptions = sameDay + ? { hour: 'numeric', minute: '2-digit' } + : { weekday: 'short', hour: 'numeric', minute: '2-digit' }; + return new Intl.DateTimeFormat(locale, options).format(date); +} + +export async function readSummary(locale: string | undefined, now = Date.now()): Promise<DesktopOsSummary> { + const auth = useAuthStore.getState(); + const client: IJMAPClient | null = auth.client; + const entry = useAccountStore.getState().accounts.find((account) => account.id === auth.activeAccountId); + if (!auth.isAuthenticated || !client || !entry || contentHiddenFor(entry.id)) return EMPTY_SUMMARY; + + const inbox = useEmailStore.getState().mailboxes.find((mailbox) => mailbox.role === 'inbox' && !mailbox.isShared); + let unread: DesktopOsTrayMessage[] = []; + let recent: DesktopOsTrayMessage[] = []; + if (inbox) { + const accountId = client.getAccountId(); + const login = await loginFingerprint(entry.serverUrl, entry.username); + const row = (email: Email): DesktopOsTrayMessage => ({ + emailId: email.id, + accountId, + sender: email.from?.[0]?.name || email.from?.[0]?.email || '', + subject: email.subject ?? '', + context: JSON.stringify({ emailId: email.id, threadId: email.threadId, accountId, slot: entry.cookieSlot, login }), + }); + const [unreadList, recentList] = await Promise.all([ + client.getEmails(inbox.originalId || inbox.id, undefined, ROWS, 0, undefined, false, { notKeyword: '$seen' }), + client.getEmails(inbox.originalId || inbox.id, undefined, ROWS), + ]); + unread = unreadList.emails.map(row); + recent = recentList.emails.map(row); + } + + let nextEvent: DesktopOsSummary['nextEvent'] = null; + if (useCalendarStore.getState().supportsCalendar) { + const events = await client.queryCalendarEvents({ + after: new Date(now).toISOString(), + before: new Date(now + EVENT_WINDOW_MS).toISOString(), + }).catch(() => [] as CalendarEvent[]); + const next = nextEventOf(events, now); + if (next) nextEvent = { title: next.title ?? '', when: formatEventTime(eventStart(next), now, locale) }; + } + return { unread, recent, nextEvent }; +} + +/** Keeps main's copy current: when the unread count moves, and now and then for the next event. */ +export function startOsSummary(locale: () => string | undefined): { refresh: () => void; stop: () => void } { + const os = getDesktopBridge()?.os; + if (!os) return { refresh: () => {}, stop: () => {} }; + let timer: ReturnType<typeof setTimeout> | null = null; + /** A read under way when the account changed answers for the old one, and is dropped. */ + let generation = 0; + + const run = () => { + timer = null; + const mine = ++generation; + void readSummary(locale()).then((summary) => { + if (mine === generation) os.setSummary(summary); + }, (error) => { + console.warn('Could not read the tray summary:', error); + }); + }; + const refresh = () => { + timer ??= setTimeout(run, REFRESH_DELAY_MS); + }; + const inboxUnread = () => useEmailStore.getState().mailboxes.find((mailbox) => mailbox.role === 'inbox' && !mailbox.isShared)?.unreadEmails ?? -1; + let lastUnread = inboxUnread(); + const stopEmail = useEmailStore.subscribe(() => { + const current = inboxUnread(); + if (current === lastUnread) return; + lastUnread = current; + refresh(); + }); + const stopAuth = useAuthStore.subscribe((state, previous) => { + if (state.activeAccountId === previous.activeAccountId && state.isAuthenticated === previous.isAuthenticated) return; + generation += 1; + if (!state.isAuthenticated) os.setSummary(EMPTY_SUMMARY); + refresh(); + }); + // An organisation turning sender and subject off goes for what's already showing, too. + const stopPolicy = usePolicyStore.subscribe((state, previous) => { + if (state.loaded !== previous.loaded || state.policy !== previous.policy) refresh(); + }); + const interval = setInterval(refresh, REFRESH_EVERY_MS); + refresh(); + return { + refresh, + stop() { + generation += 1; + stopEmail(); + stopAuth(); + stopPolicy(); + clearInterval(interval); + if (timer) clearTimeout(timer); + }, + }; +} diff --git a/lib/desktop/policy-schema.ts b/lib/desktop/policy-schema.ts index 3f45d884b..4a7391957 100644 --- a/lib/desktop/policy-schema.ts +++ b/lib/desktop/policy-schema.ts @@ -823,11 +823,11 @@ export const POLICY_CONSUMERS: Record<PolicyKey, PolicyConsumer> = { UpdateChannel: { pendingConsumer: 'feat/packaging: src/main/features/updater.ts' }, AppLockRequired: { pendingConsumer: 'step 7, app lock' }, AppLockTimeoutMinutes: { pendingConsumer: 'step 7, app lock' }, - TelemetryAllowed: { pendingConsumer: 'step 7, telemetry consent' }, - CrashReportsAllowed: { pendingConsumer: 'step 7, telemetry consent' }, + TelemetryAllowed: { repo: 'shell', file: 'src/main/features/privacy.ts' }, + CrashReportsAllowed: { repo: 'shell', file: 'src/main/features/privacy.ts' }, QuickComposeShortcut: { pendingConsumer: 'step 7, quick compose' }, AutoSelectCertificateForUrls: { pendingConsumer: 'step 7, client certificates' }, - KeystoreAllowedOrigins: { pendingConsumer: 'feat/native-helper: setKeystoreAllowedOrigins in src/main/features/keystore.ts' }, + KeystoreAllowedOrigins: { repo: 'shell', file: 'src/main/features/policies.ts' }, }; /** The part the embedded server enforces. Sent to it by message. */ diff --git a/lib/desktop/power.ts b/lib/desktop/power.ts new file mode 100644 index 000000000..1e36e52ae --- /dev/null +++ b/lib/desktop/power.ts @@ -0,0 +1,58 @@ +/** + * Waking up without stale state. After sleep, an unlock or a network change, the app + * does what it does when a tab comes back into view: the JMAP client checks for state + * changes and replaces a dead stream, the identities and policy refresh. Those are the + * handlers already listening, so this only gives them the word. The hidden main window + * of the desktop app never goes out of view, so without this they wouldn't hear it. + * The local store hangs on the same two: `online` is setOnline(true) and a flush, + * `visibilitychange` is a sync per account. It takes itself offline for a sleep through + * addSleepHandler, in lib/desktop/system-events.ts. + */ + +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { runSleepHandlers, runWakeHandlers } from '@/lib/desktop/system-events'; +import { usePolicyStore } from '@/stores/policy-store'; + +/** A resume, an unlock and a network change come together, and each would mean a round of requests. */ +const WAKE_REPEAT_MS = 30_000; + +function wake(): void { + document.dispatchEvent(new Event('visibilitychange')); + // Woken up with no network: the browser's own event comes when there is one. + if (navigator.onLine !== false) window.dispatchEvent(new Event('online')); + const policy = usePolicyStore.getState(); + if (policy.loaded && !policy.fetching) void policy.fetchPolicy(); + runWakeHandlers(); +} + +export function startPowerWatch(): () => void { + const bridge = getDesktopBridge()?.os; + if (!bridge) return () => {}; + let lastWake = 0; + const wakeOnce = () => { + const now = Date.now(); + if (now - lastWake < WAKE_REPEAT_MS) return; + lastWake = now; + wake(); + }; + const stopPower = bridge.onPower((event) => { + if (event === 'resume' || event === 'unlock-screen') wakeOnce(); + else if (event === 'suspend') runSleepHandlers(); + }); + // Wi-Fi to cable is a new network with no offline moment in between. This event also fires + // for every shift in its speed estimate, which isn't news. Where Chromium doesn't report the + // type, that leaves the stream's own ping check and the online event. + const connection = (navigator as unknown as { connection?: EventTarget & { type?: string } }).connection; + let lastType = connection?.type; + const onConnection = () => { + const type = connection?.type; + if (!type || type === lastType) return; + lastType = type; + wakeOnce(); + }; + connection?.addEventListener?.('change', onConnection); + return () => { + stopPower(); + connection?.removeEventListener?.('change', onConnection); + }; +} diff --git a/lib/desktop/preferences.ts b/lib/desktop/preferences.ts new file mode 100644 index 000000000..7cd499858 --- /dev/null +++ b/lib/desktop/preferences.ts @@ -0,0 +1,74 @@ +/** + * What the desktop app's windows do. These belong to this computer, not the account + * (one user can have a laptop and a desktop that differ), so they stay out of the + * synced settings. The shell gets its copy of "restore" from the host. + */ + +import { useSyncExternalStore } from 'react'; + +const STORAGE_KEY = 'bulwark-desktop-window-prefs'; + +export interface DesktopWindowPrefs { + /** Double-clicking a message opens it in its own window. */ + openOnDoubleClick: boolean; + /** The windows open at quit come back at the next start. */ + restoreWindows: boolean; + /** Spellcheck dictionaries from Google, for a language the OS has no checker for. Asked once. */ + dictionaryDownload: 'ask' | 'yes' | 'no'; +} + +const DEFAULTS: DesktopWindowPrefs = { openOnDoubleClick: true, restoreWindows: true, dictionaryDownload: 'ask' }; + +let cached: DesktopWindowPrefs | null = null; +const listeners = new Set<() => void>(); + +export function readDesktopPrefs(): DesktopWindowPrefs { + if (cached) return cached; + let stored: Partial<DesktopWindowPrefs> = {}; + try { + const raw = typeof localStorage === 'undefined' ? null : localStorage.getItem(STORAGE_KEY); + if (raw) stored = JSON.parse(raw) as Partial<DesktopWindowPrefs>; + } catch { + // Damaged: the defaults. + } + cached = { + openOnDoubleClick: typeof stored.openOnDoubleClick === 'boolean' ? stored.openOnDoubleClick : DEFAULTS.openOnDoubleClick, + restoreWindows: typeof stored.restoreWindows === 'boolean' ? stored.restoreWindows : DEFAULTS.restoreWindows, + dictionaryDownload: stored.dictionaryDownload === 'yes' || stored.dictionaryDownload === 'no' ? stored.dictionaryDownload : DEFAULTS.dictionaryDownload, + }; + return cached; +} + +export function setDesktopPref<K extends keyof DesktopWindowPrefs>(key: K, value: DesktopWindowPrefs[K]): void { + cached = { ...readDesktopPrefs(), [key]: value }; + try { + localStorage.setItem(STORAGE_KEY, JSON.stringify(cached)); + } catch { + // Full or unavailable: it holds until the window closes. + } + for (const listener of [...listeners]) listener(); +} + +function subscribe(listener: () => void): () => void { + listeners.add(listener); + // Another window changed it. + const onStorage = (event: StorageEvent) => { + if (event.key !== STORAGE_KEY) return; + cached = null; + listener(); + }; + window.addEventListener('storage', onStorage); + return () => { + listeners.delete(listener); + window.removeEventListener('storage', onStorage); + }; +} + +export function useDesktopPrefs(): DesktopWindowPrefs { + return useSyncExternalStore(subscribe, readDesktopPrefs, () => DEFAULTS); +} + +/** Test helper. */ +export function resetDesktopPrefsCache(): void { + cached = null; +} diff --git a/lib/desktop/reminder-notifications.ts b/lib/desktop/reminder-notifications.ts new file mode 100644 index 000000000..f2840e58f --- /dev/null +++ b/lib/desktop/reminder-notifications.ts @@ -0,0 +1,243 @@ +/** + * Calendar reminders as native notifications, and what their buttons do. + * + * A toast may be clicked a day later and after a restart, so what it hands back says + * which login and which reminder and no more: the rest comes from the store. Main keeps + * pause, quiet hours and the OS's Do Not Disturb. Nothing about the event goes to main at + * all while the app is locked, or when the organisation says so for that login + * (pushWithoutContent, the rule new mail follows). + */ + +import { announceAcknowledged } from '@/lib/calendar-reminders/channel'; +import { pokeReminders, useMissedReminders } from '@/lib/calendar-reminders/state'; +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { isAppLocked } from '@/lib/desktop/app-lock-state'; +import type { DesktopOsNotification, DesktopOsNotifyResult } from '@/lib/desktop/types'; +import { contentHiddenFor } from '@/lib/desktop/mail-notifications'; +import { joinLinkFrom } from '@/lib/event-links'; +import { openExternalLink, resolveExternalLink } from '@/lib/plugin-hook-result'; +import { loginFingerprint } from '@/lib/pwa-notify/login-fingerprint'; +import { getStore } from '@/lib/store/client/api'; +import type { MissedBatch, ReminderAlert } from '@/lib/store/reminders/ledger'; +import { useAccountStore } from '@/stores/account-store'; +import { useAuthStore } from '@/stores/auth-store'; + +export const SNOOZE_MINUTES = [5, 10, 15] as const; +const SNOOZE_PREFIX = 'snooze-'; +const JOIN = 'join'; +const OPEN = 'open'; +/** How many titles a summary names. */ +const SUMMARY_TITLES = 3; + +export interface ReminderLabels { + /** Says nothing about the event. */ + generic: string; + /** "In 10 min · Personal". */ + when: (alert: ReminderAlert) => string; + untitled: string; + snooze: (minutes: number) => string; + /** Five buttons in a row on a Windows toast: three "Snooze..." would all cut off. */ + snoozeShort: (minutes: number) => string; + open: string; + join: string; + /** Join a link to no service this app knows: says where it goes. */ + joinHost: (host: string) => string; + missedTitle: (count: number) => string; + missedMore: (count: number) => string; +} + +export interface ReminderToastContext { + /** The reminder. */ + r?: string; + /** The summary. */ + rb?: number; + /** No store to ask: the click only goes to the calendar. */ + cal?: boolean; + slot?: number; + login?: string; +} + +async function loginOf(account: string): Promise<Pick<ReminderToastContext, 'slot' | 'login'>> { + const entry = useAccountStore.getState().accounts.find((candidate) => candidate.id === account); + if (!entry) return {}; + return { slot: entry.cookieSlot, login: await loginFingerprint(entry.serverUrl, entry.username) }; +} + +export function joinLabel(alert: Pick<ReminderAlert, 'joinHost'>, labels: Pick<ReminderLabels, 'join' | 'joinHost'>): string { + return alert.joinHost ? labels.joinHost(alert.joinHost) : labels.join; +} + +function reminderId(alert: ReminderAlert): string { + // Main drops an id it saw in the last few minutes, and a snooze can be shorter. + return `reminder:${alert.key}${alert.snoozedUntil ? `:${alert.snoozedUntil}` : ''}`; +} + +export async function buildReminderNotification(account: string, alert: ReminderAlert, labels: ReminderLabels, sound: boolean): Promise<DesktopOsNotification> { + const base = { group: 'reminders', kind: 'reminder' as const, sound }; + // Not even the uid. Two at the same moment are one "you have a reminder". + if (isAppLocked()) return { ...base, id: `reminder-locked:${alert.fireTimeMs}`, title: labels.generic, body: '', context: '' }; + const context: ReminderToastContext = { r: alert.key, ...(await loginOf(account)) }; + const short = getDesktopBridge()?.platform === 'win32'; + const actions = [ + ...(alert.joinUrl ? [{ id: JOIN, label: joinLabel(alert, labels) }] : []), + { id: OPEN, label: labels.open }, + ...SNOOZE_MINUTES.map((minutes) => ({ id: `${SNOOZE_PREFIX}${minutes}`, label: short ? labels.snoozeShort(minutes) : labels.snooze(minutes) })), + ]; + const hidden = contentHiddenFor(account); + return { + ...base, + id: reminderId(alert), + title: hidden ? labels.generic : alert.title || labels.untitled, + body: hidden ? '' : labels.when(alert), + context: JSON.stringify(context), + actions, + }; +} + +/** The first few titles of a summary, for a place too small for all of them. */ +export function missedBody(alerts: readonly ReminderAlert[], labels: Pick<ReminderLabels, 'untitled' | 'missedMore'>): string { + const named = alerts.slice(0, SUMMARY_TITLES).map((alert) => alert.title || labels.untitled).join(', '); + const more = alerts.length - SUMMARY_TITLES; + return more > 0 ? `${named}, ${labels.missedMore(more)}` : named; +} + +export async function buildMissedNotification(account: string, batch: MissedBatch, labels: ReminderLabels): Promise<DesktopOsNotification> { + const context: ReminderToastContext = { rb: batch.batch, ...(await loginOf(account)) }; + return { + id: `reminder-missed:${batch.batch}`, + group: 'reminders', + kind: 'reminder', + title: labels.missedTitle(batch.alerts.length), + body: contentHiddenFor(account) ? '' : missedBody(batch.alerts, labels), + context: JSON.stringify(context), + }; +} + +export interface PlainReminder { + key: string; + fireTimeMs: number; + title: string; + body: string; + sound: boolean; +} + +/** + * Without a store: says so, with nothing to snooze. A click goes to the calendar. + * Resolves to main's answer, which also says whether a sound is in order. + */ +export function notifyWithoutStore(reminder: PlainReminder, labels: { generic: string }, account: string | null): Promise<DesktopOsNotifyResult | undefined> { + const hidden = contentHiddenFor(account); + const request = getDesktopBridge()?.os?.notify({ + // The key holds the event's id, and nothing about the event should get out now. + id: hidden ? `reminder-hidden:${reminder.fireTimeMs}` : `reminder:${reminder.key}`, + group: 'reminders', + kind: 'reminder', + title: hidden ? labels.generic : reminder.title, + body: hidden ? '' : reminder.body, + context: JSON.stringify({ cal: true } satisfies ReminderToastContext), + sound: reminder.sound, + }); + return (request ?? Promise.resolve(undefined)).catch(() => undefined); +} + +async function accountOf(context: ReminderToastContext): Promise<string | null> { + if (context.slot === undefined || !context.login) return null; + const entry = useAccountStore.getState().accounts.find((account) => account.cookieSlot === context.slot); + if (!entry || (await loginFingerprint(entry.serverUrl, entry.username)) !== context.login) return null; + return entry.id; +} + +/** Goes to the event when it's in the account on screen, otherwise to the calendar. */ +export function calendarPathFor(account: string, alert: ReminderAlert | null): string | null { + if (!alert || alert.kind !== 'event' || useAuthStore.getState().activeAccountId !== account) return null; + const query = alert.calendarId ? `?calendar=${encodeURIComponent(alert.calendarId)}` : ''; + return `/calendar/event/${encodeURIComponent(alert.baseEventId)}${query}`; +} + +/** + * Opens a meeting the way every link in the app opens, past any link check a plugin has. + * Resolves true when it opened. Only web links get this far, whatever the store holds. + */ +export async function joinMeeting(url: string): Promise<boolean> { + const link = joinLinkFrom(url); + if (!link) return false; + const shell = getDesktopBridge()?.shell; + if (!shell) return openExternalLink({ href: link.url }); + const target = await resolveExternalLink({ href: link.url }); + if (!target || !joinLinkFrom(target)) return false; + shell.openExternal(target); + return true; +} + +export function dismissReminders(account: string, keys: string[]): void { + announceAcknowledged(keys); + void getStore().area(account, 'reminders.dismiss', { keys }).catch(() => {}); +} + +export async function snoozeReminder(account: string, key: string, minutes: number): Promise<void> { + announceAcknowledged([key]); + await getStore().area<boolean>(account, 'reminders.snooze', { key, minutes }); + pokeReminders(); +} + +export interface ReminderCommandEnv { + leaveFor: (path: '/calendar') => void | Promise<void>; + push: (path: string) => void; +} + +function parse(raw: string): ReminderToastContext | null { + if (!raw) return null; + try { + const parsed = JSON.parse(raw) as ReminderToastContext; + return parsed && typeof parsed === 'object' && (parsed.r !== undefined || parsed.rb !== undefined || parsed.cal) ? parsed : null; + } catch { + return null; + } +} + +function snoozeMinutes(action: string): number | null { + if (!action.startsWith(SNOOZE_PREFIX)) return null; + const minutes = Number(action.slice(SNOOZE_PREFIX.length)); + return (SNOOZE_MINUTES as readonly number[]).includes(minutes) ? minutes : null; +} + +/** Whether this click was a reminder's. Buttons that only do something don't bring the window up. */ +export async function handleReminderCommand(action: string, rawContext: string, env: ReminderCommandEnv): Promise<boolean> { + const context = parse(rawContext); + if (!context) return false; + const account = await accountOf(context); + const show = () => getDesktopBridge()?.windows?.focus?.(); + + if (context.rb !== undefined) { + show(); + const alerts = account ? await getStore().area<ReminderAlert[]>(account, 'reminders.batch', { batch: context.rb }).catch(() => []) : []; + if (account && alerts.length > 0) useMissedReminders.getState().show(account, alerts); + else await env.leaveFor('/calendar'); + return true; + } + + const key = context.r; + const minutes = snoozeMinutes(action); + if (minutes !== null && account && key) { + await snoozeReminder(account, key, minutes); + return true; + } + + const alert = account && key ? await getStore().area<ReminderAlert | null>(account, 'reminders.get', { key }).catch(() => null) : null; + if (action === JOIN && alert?.joinUrl) { + if (await joinMeeting(alert.joinUrl)) { + dismissReminders(account!, [alert.key]); + } else { + show(); + } + return true; + } + + // Open, a click on the toast, or a button that can't be carried out any more. + show(); + await env.leaveFor('/calendar'); + const path = account ? calendarPathFor(account, alert) : null; + if (path) env.push(path); + if (account && alert) dismissReminders(account, [alert.key]); + return true; +} diff --git a/lib/desktop/server-links.ts b/lib/desktop/server-links.ts new file mode 100644 index 000000000..25257222b --- /dev/null +++ b/lib/desktop/server-links.ts @@ -0,0 +1,33 @@ +/** + * The two things main hands the embedded server while it runs. The server's host + * (src/server/host.ts in the desktop repo) has no way into Next's bundles but globalThis, + * so it calls what this leaves there. instrumentation.node.ts installs them, only in the + * desktop build. + */ + +import { captureDesktopMainError, type DesktopMainErrorInput } from '@/lib/error-reporting/server'; +import { reschedule } from '@/lib/telemetry/sender'; + +const PRIVACY_CHANGED = Symbol.for('bulwark.desktop.privacyChanged'); +const MAIN_ERRORS = Symbol.for('bulwark.desktop.mainErrors'); +const MAIN_ERRORS_READY = Symbol.for('bulwark.desktop.mainErrorsReady'); + +type Holder = Record<symbol, unknown>; + +function drainMainErrors(holder: Holder): void { + const queue = holder[MAIN_ERRORS]; + if (!Array.isArray(queue)) return; + for (const error of queue.splice(0)) void captureDesktopMainError(error as DesktopMainErrorInput); +} + +export function installDesktopServerLinks(): void { + const holder = globalThis as unknown as Holder; + // Turning telemetry on starts the heartbeat now, without a restart. Off needs no + // more than the value: sendOnce reads it before every send. + holder[PRIVACY_CHANGED] = () => { + void reschedule(); + }; + // Errors from before this ran are waiting in the queue. + holder[MAIN_ERRORS_READY] = () => drainMainErrors(holder); + drainMainErrors(holder); +} diff --git a/lib/desktop/server-privacy.ts b/lib/desktop/server-privacy.ts new file mode 100644 index 000000000..df79316bb --- /dev/null +++ b/lib/desktop/server-privacy.ts @@ -0,0 +1,19 @@ +/** + * The desktop user's telemetry and crash report consent, as the embedded server sees it. + * + * The Electron main process sends this at start and on every change (src/server/host.ts + * in the desktop repo sets it on globalThis, which all of Next's bundles share, like the + * list of trusted servers). Nothing in the renderer or the environment can write it. + * + * Only the desktop build reads it. No value means nobody has said yes: everything off. + */ + +import { IS_DESKTOP_BUILD } from './flag'; +import type { DesktopServerPrivacy } from './desktop-telemetry'; + +const PRIVACY_KEY = Symbol.for('bulwark.desktop.privacy'); + +export function desktopServerPrivacy(): DesktopServerPrivacy | null { + if (!IS_DESKTOP_BUILD) return null; + return (globalThis as unknown as Record<symbol, DesktopServerPrivacy | undefined>)[PRIVACY_KEY] ?? null; +} diff --git a/lib/desktop/system-accent.ts b/lib/desktop/system-accent.ts new file mode 100644 index 000000000..49f575429 --- /dev/null +++ b/lib/desktop/system-accent.ts @@ -0,0 +1,69 @@ +/** + * The OS accent colour, when the user's theme is "system". Buttons and selection take + * it the way native controls do. Not under a theme the user chose, and not when the + * colour would be hard to see: the app's own stays then. + */ + +import { getDesktopBridge } from './bridge'; + +const VARIABLES = ['--color-primary', '--color-ring', '--color-primary-foreground'] as const; + +function channels(hex: string): [number, number, number] | null { + const match = /^#([0-9a-f]{2})([0-9a-f]{2})([0-9a-f]{2})$/i.exec(hex); + if (!match) return null; + return [parseInt(match[1], 16), parseInt(match[2], 16), parseInt(match[3], 16)]; +} + +function luminance([r, g, b]: [number, number, number]): number { + const [lr, lg, lb] = [r, g, b].map((value) => { + const c = value / 255; + return c <= 0.03928 ? c / 12.92 : ((c + 0.055) / 1.055) ** 2.4; + }); + return 0.2126 * lr + 0.7152 * lg + 0.0722 * lb; +} + +function contrast(a: number, b: number): number { + return (Math.max(a, b) + 0.05) / (Math.min(a, b) + 0.05); +} + +/** Non-text contrast, WCAG 1.4.11. */ +const MIN_AGAINST_BACKGROUND = 3; +const MIN_TEXT = 4.5; + +/** + * The colours to use, or null for the app's own: the accent has to stand out from the + * page, and text on it has to be readable in either black or white. + */ +export function accentColours(accent: string, dark: boolean): { primary: string; foreground: string } | null { + const rgb = channels(accent); + if (!rgb) return null; + const own = luminance(rgb); + // The standard theme's page backgrounds. + const page = dark ? 0.0091 : 1; + if (contrast(own, page) < MIN_AGAINST_BACKGROUND) return null; + const onWhite = contrast(own, 1); + const onBlack = contrast(own, 0); + if (Math.max(onWhite, onBlack) < MIN_TEXT) return null; + return { primary: accent, foreground: onWhite >= MIN_TEXT ? '#ffffff' : '#000000' }; +} + +export interface AccentInput { + accent?: string; + /** Whether the page is dark now. */ + dark: boolean; + /** The user's theme setting is "system" and no installed theme is active. */ + followsSystem: boolean; + /** A contrast theme has its own colours and they win. */ + highContrast?: boolean; +} + +export function applySystemAccent({ accent, dark, followsSystem, highContrast }: AccentInput, root: HTMLElement = document.documentElement): void { + const colours = accent && followsSystem && !highContrast && getDesktopBridge() ? accentColours(accent, dark) : null; + if (!colours) { + for (const name of VARIABLES) root.style.removeProperty(name); + return; + } + root.style.setProperty('--color-primary', colours.primary); + root.style.setProperty('--color-ring', colours.primary); + root.style.setProperty('--color-primary-foreground', colours.foreground); +} diff --git a/lib/desktop/system-events.ts b/lib/desktop/system-events.ts new file mode 100644 index 000000000..f1b258077 --- /dev/null +++ b/lib/desktop/system-events.ts @@ -0,0 +1,56 @@ +/** + * What the local store and the OS integration say to each other, with nothing imported + * either way: lib/offline runs in every browser, and the notification code pulls in half + * the app's stores. + */ + +import type { IJMAPClient } from '@/lib/jmap/client-interface'; + +type Handler = () => void; +type CreatedListener = (client: IJMAPClient, accountId: string, ids: readonly string[]) => void; + +const wakeHandlers = new Set<Handler>(); +const sleepHandlers = new Set<Handler>(); +let createdListener: CreatedListener | null = null; + +export function addWakeHandler(handler: Handler): () => void { + wakeHandlers.add(handler); + return () => { + wakeHandlers.delete(handler); + }; +} + +export function addSleepHandler(handler: Handler): () => void { + sleepHandlers.add(handler); + return () => { + sleepHandlers.delete(handler); + }; +} + +function runAll(handlers: Set<Handler>): void { + for (const handler of [...handlers]) { + try { + handler(); + } catch (error) { + console.error('A wake or sleep handler failed:', error); + } + } +} + +export function runWakeHandlers(): void { + runAll(wakeHandlers); +} + +export function runSleepHandlers(): void { + runAll(sleepHandlers); +} + +/** The notification path, while it runs. */ +export function setStoreCreatedListener(listener: CreatedListener | null): void { + createdListener = listener; +} + +/** The store's `created` event for mail. Does nothing in a browser or a pop-out. */ +export function reportStoreCreatedMail(client: IJMAPClient, accountId: string, ids: readonly string[]): void { + createdListener?.(client, accountId, ids); +} diff --git a/lib/desktop/taskbar-progress.ts b/lib/desktop/taskbar-progress.ts new file mode 100644 index 000000000..69098f37b --- /dev/null +++ b/lib/desktop/taskbar-progress.ts @@ -0,0 +1,13 @@ +import { getDesktopBridge } from './bridge'; + +type ProgressMode = 'normal' | 'indeterminate' | 'paused' | 'error'; + +/** + * The taskbar's progress bar: 0 to 1, or null to take it away. Does nothing in a + * browser, or in a shell with no `os.setProgress`, which arrives with + * feat/os-integration. When that merges, its setTaskbarProgress can replace this. + */ +export function showTaskbarProgress(progress: number | null, mode?: ProgressMode): void { + const bridge = getDesktopBridge() as { os?: { setProgress?: (progress: number | null, mode?: ProgressMode) => void } } | null; + bridge?.os?.setProgress?.(progress, mode); +} diff --git a/lib/desktop/types.ts b/lib/desktop/types.ts index 8a48dcb80..888a1a454 100644 --- a/lib/desktop/types.ts +++ b/lib/desktop/types.ts @@ -18,6 +18,8 @@ export interface DesktopWindowInfo { type: DesktopWindowType; title: string; focused: boolean; + /** False for a main window hidden while pop-outs are open. */ + visible?: boolean; } export interface DesktopWindowsBridge { @@ -36,13 +38,72 @@ export interface DesktopWindowsBridge { list?: () => Promise<DesktopWindowInfo[]>; /** Fires when a window opens, closes, retitles or takes the focus. Returns the unsubscribe. */ onChanged?: (listener: (windows: DesktopWindowInfo[]) => void) => () => void; + /** + * This page has saved or discarded and closes its window. Goes through the shell + * so bounds get stored and no second save runs. Works however the window opened. + */ + closeSelf?: () => void; + /** What this window's open drafts come back as at the next start: pop-out composer addresses. */ + setRestore?: (urls: string[]) => void; + setRestoreEnabled?: (enabled: boolean) => void; + /** Signed in, with a session to lend: windows from last time can open. */ + sessionReady?: () => void; + /** The warm spare's page, see components/popout/popout-spare-app.tsx. */ + spare?: { + ready: () => void; + taken: () => void; + onActivate: (listener: (url: string) => void) => () => void; + }; } export interface DesktopThemeBridge { /** The page's colours, for title bar buttons and the first frame of new windows. */ set: (theme: { dark: boolean; background: string; foreground?: string }) => void; - /** Fires when the OS switches between light and dark. Returns the unsubscribe. */ - onSystemChange?: (listener: (system: { dark: boolean; highContrast: boolean }) => void) => () => void; + /** Fires when the OS switches between light and dark, contrast or accent. Returns the unsubscribe. */ + onSystemChange?: (listener: (system: DesktopSystemTheme) => void) => () => void; + /** How the OS looks now. */ + system?: () => Promise<DesktopSystemTheme>; +} + +export interface DesktopSystemTheme { + dark: boolean; + highContrast: boolean; + /** The OS accent colour as #rrggbb, where the OS has one and tells. */ + accent?: string; +} + +export type DesktopMenuState = Record<string, boolean | { enabled?: boolean; checked?: boolean }>; + +/** A native menu built from an HTML one (lib/desktop/native-menu.ts). */ +export interface DesktopNativeMenuItem { + /** Handed back when this item is chosen. Left out of separators and submenus. */ + id?: string; + label?: string; + type?: 'normal' | 'separator' | 'checkbox' | 'radio'; + enabled?: boolean; + checked?: boolean; + submenu?: DesktopNativeMenuItem[]; +} + +export interface DesktopMenuBarEntry { + id: string; + label: string; + /** The letter that opens it with Alt, lower case. */ + mnemonic?: string; +} + +export interface DesktopMenuBarEvent { + visible: boolean; + /** Open this menu right away: Alt plus its letter. */ + open?: string; +} + +/** What a page answers when asked to save before a window goes. */ +export interface DesktopFlushAnswer { + failed?: number; + timedOut?: boolean; + /** Mail waiting to be sent. */ + unsent?: number; } export interface DesktopMenuBridge { @@ -50,12 +111,51 @@ export interface DesktopMenuBridge { * What the app menu shows as enabled or checked, by command id. The shell * keeps the last state per window and applies it when that window has focus. */ - setState: (state: Record<string, boolean | { enabled?: boolean; checked?: boolean }>) => void; + setState: (state: DesktopMenuState) => void; + /** A menu command to run. Returns the unsubscribe. */ + onCommand?: (listener: (id: string) => void) => () => void; + /** Shows a native menu. At the pointer when `at` is left out. Answers with the id picked, or null. */ + popup?: (items: DesktopNativeMenuItem[], at?: { x: number; y: number }) => Promise<string | null>; + /** The strip that stands in for a menu bar in a window with no native bar. */ + bar?: { + entries: () => Promise<DesktopMenuBarEntry[]>; + /** Opens that menu natively, at page coordinates. */ + open: (id: string, at: { x: number; y: number }) => void; + onEvent: (listener: (event: DesktopMenuBarEvent) => void) => () => void; + }; } export interface DesktopShellBridge { /** http, https and mailto only. */ openExternal: (url: string) => void; + /** The shell's menus follow `ui`, in `labels` (lib/desktop/languages.ts). Spellcheck follows `ui` and `composer`. */ + setLanguages?: (languages: { ui: string; composer?: string[]; labels?: Record<string, string> }) => void; +} + +export interface DesktopSpellcheckBridge { + /** Languages with neither an OS checker nor a dictionary here. */ + missing: () => Promise<string[]>; + onMissing: (listener: (language: string) => void) => () => void; + /** The user said yes: dictionaries may come from Google. Never with no-third-party mode on. */ + allowDownload: () => void; +} + +export interface DesktopDialogsBridge { + /** A native question. Answers with the index of the button chosen. The last button is the safe one. */ + confirm: (options: { + message: string; + detail?: string; + buttons: string[]; + defaultId?: number; + type?: 'none' | 'info' | 'warning' | 'question'; + }) => Promise<number>; +} + +export interface DesktopClipboardBridge { + /** Puts a file on the clipboard, for pasting into a folder. False when that didn't work. */ + copyFile: (name: string, data: ArrayBuffer) => Promise<boolean>; + /** Signed out: nothing copied from that account stays on disk. */ + clearFiles?: () => void; } export type DesktopServerPrepareResult = @@ -85,7 +185,7 @@ export interface DesktopLifecycleBridge { * Before a window closes or the app quits, the shell asks the page to save what * it has and waits a few seconds. A window with no handler closes at once. */ - onFlushRequest: (handler: () => Promise<unknown>) => () => void; + onFlushRequest: (handler: () => Promise<DesktopFlushAnswer | unknown>) => () => void; } export type DesktopBrowserSignInResult = @@ -271,6 +371,166 @@ export interface DesktopLocalImportBridge { releaseAll: () => Promise<void>; } +export interface DesktopOsSettings { + /** Closing the main window leaves the app running in the tray. */ + closeToTray: boolean; + startAtLogin: boolean; + /** At login: no window, only the tray. */ + startMinimized: boolean; + /** Taskbar flash or dock bounce on new mail. */ + attentionOnNewMail: boolean; + quietHoursEnabled: boolean; + /** HH:MM, local time. */ + quietHoursStart: string; + quietHoursEnd: string; + /** "Show Bulwark", an Electron accelerator. Null: off. */ + showShortcut: string | null; +} + +export interface DesktopOsStatus { + settings: DesktopOsSettings; + pausedUntil: number | null; + /** The shortcut in settings is really held. Another app can have it. */ + shortcutActive: boolean; +} + +export interface DesktopOsFile { + name: string; + data: Uint8Array; +} + +/** What the OS asks the app to do: a tray item, a jump list entry, a toast, a double-clicked file. */ +export type DesktopOsCommand = + | { type: 'new-message' } + | { type: 'navigate'; target: 'inbox' | 'calendar' | 'contacts' } + | { type: 'open-message'; emailId: string; accountId?: string; context?: string } + | { type: 'open-mailbox'; mailboxId: string } + | { type: 'mailto'; url: string } + | { type: 'webcal'; url: string } + | { type: 'files'; reason: 'open' | 'attach'; files: DesktopOsFile[]; failed: string[] } + | { type: 'notification'; action: string; context: string; reply?: string }; + +export interface DesktopOsNotification { + /** Tag of the toast. Showing an id again within a few minutes does nothing. */ + id: string; + group?: string; + title: string; + body: string; + /** Handed back with the action. Keep it short: Windows keeps it in the toast. */ + context: string; + actions?: { id: string; label: string }[]; + reply?: { label: string; placeholder: string }; + /** The user wants a sound with this. */ + sound?: boolean; + /** New mail: flash the taskbar or bounce the dock if that's on. */ + attention?: boolean; + /** What a locked app says instead: new mail unless this says otherwise. */ + kind?: 'mail' | 'reminder'; +} + +export interface DesktopOsNotifyResult { + shown: boolean; + reason?: 'duplicate' | 'paused' | 'quiet-hours' | 'focused' | 'unsupported' | 'invalid' | 'failed'; + /** The page should play the sound the user picked. */ + playSound: boolean; +} + +export interface DesktopOsTrayMessage { + emailId: string; + accountId: string; + sender: string; + subject: string; + context?: string; +} + +export interface DesktopOsSummary { + unread: DesktopOsTrayMessage[]; + /** Newest conversations, whether read or not, for the jump list. */ + recent: DesktopOsTrayMessage[]; + nextEvent: { title: string; when: string } | null; +} + +export type DesktopOsPowerEvent = 'suspend' | 'resume' | 'lock-screen' | 'unlock-screen'; + +export interface DesktopOsDefaultAppStatus { + /** Offered to the OS as a mail app. */ + registered: boolean; + mailto: boolean; + webcal: boolean; +} + +export interface DesktopOsBridge { + /** + * What the OS asks for. Main holds these until the main window's page subscribes, + * so a cold start loses nothing. + */ + onCommand: (listener: (command: DesktopOsCommand) => void) => () => void; + getStatus: () => Promise<DesktopOsStatus>; + setSettings: (patch: Partial<DesktopOsSettings>) => Promise<DesktopOsStatus>; + /** Pause notifications until this time, or null to end the pause. */ + setPaused: (until: number | null) => void; + onStatusChange: (listener: (status: DesktopOsStatus) => void) => () => void; + /** The unread count: overlay on Windows, setBadgeCount on macOS and Linux, the tray's dot. */ + setBadge: (count: number) => void; + /** What the tray and the jump list show. */ + setSummary: (summary: DesktopOsSummary) => void; + /** The taskbar's progress bar: lib/desktop/file-drag.ts setTaskbarProgress. */ + setProgress: (progress: number | null, mode?: 'normal' | 'indeterminate' | 'paused' | 'error') => void; + /** + * App lock's state. Main counts as locked until the main window's page says otherwise, + * and clears the tray, jump list and toasts and strips what comes through. + */ + setLocked: (locked: boolean) => void; + /** Sign-out or a wipe: delivered toasts, badge, tray and jump list go, and temporary files. */ + clearSurfaces: () => void; + notify: (notification: DesktopOsNotification) => Promise<DesktopOsNotifyResult>; + onPower: (listener: (event: DesktopOsPowerEvent) => void) => () => void; + /** Writes the files to a private folder and starts a drag. Only with the mouse held. */ + startDrag: (files: DesktopOsFile[]) => Promise<boolean>; + /** The same, onto the clipboard as files. */ + copyFiles: (files: DesktopOsFile[]) => Promise<boolean>; + defaultAppStatus: () => Promise<DesktopOsDefaultAppStatus>; + /** Offers the app to the OS and opens where the user chooses. */ + openDefaultAppSettings: () => Promise<DesktopOsDefaultAppStatus>; +} + +export interface DesktopPrivacyState { + /** `forcedOff`: a policy says no, so `on` is false and the user can't change it. */ + telemetry: { on: boolean; forcedOff: boolean }; + /** `uploadUrl` is where "Send crash report" goes. Empty: nowhere, and the action says so. */ + crashReports: { on: boolean; forcedOff: boolean; uploadUrl: string }; +} + +export interface DesktopCrashFile { + /** Opaque: the only values `sendCrash` accepts. */ + id: string; + /** Milliseconds since 1970. */ + createdAt: number; + bytes: number; +} + +export type DesktopCrashSendResult = + | { ok: true } + | { ok: false; reason: 'no-consent' | 'no-url' | 'not-found' | 'cancelled' | 'failed' }; + +/** + * Telemetry and crash reports, each with its own consent, both off until the user says + * yes. A same-origin plugin can reach this, so saying yes and sending a crash file both + * ask in a native dialog that names where it goes. + */ +export interface DesktopPrivacyBridge { + get: () => Promise<DesktopPrivacyState>; + setTelemetry: (on: boolean) => Promise<DesktopPrivacyState>; + setCrashReports: (on: boolean) => Promise<DesktopPrivacyState>; + /** https, or http on this computer. Empty clears it. */ + setCrashUploadUrl: (url: string) => Promise<{ ok: boolean; state: DesktopPrivacyState }>; + listCrashes: () => Promise<DesktopCrashFile[]>; + sendCrash: (id: string) => Promise<DesktopCrashSendResult>; + deleteCrashes: () => Promise<void>; + /** Also fires when a policy changes. Returns the unsubscribe. */ + onChange: (listener: (state: DesktopPrivacyState) => void) => () => void; +} + export interface BulwarkDesktopBridge { version: number; platform: 'win32' | 'darwin' | 'linux'; @@ -279,13 +539,18 @@ export interface BulwarkDesktopBridge { theme?: DesktopThemeBridge; menu?: DesktopMenuBridge; shell?: DesktopShellBridge; + dialogs?: DesktopDialogsBridge; + spellcheck?: DesktopSpellcheckBridge; + clipboard?: DesktopClipboardBridge; lifecycle?: DesktopLifecycleBridge; + os?: DesktopOsBridge; policy?: DesktopPolicyBridge; servers?: DesktopServersBridge; auth?: DesktopAuthBridge; plugins?: DesktopPluginsBridge; keystore?: DesktopKeystoreBridge; localImport?: DesktopLocalImportBridge; + privacy?: DesktopPrivacyBridge; } declare global { diff --git a/lib/desktop/window-files.ts b/lib/desktop/window-files.ts new file mode 100644 index 000000000..63a67630b --- /dev/null +++ b/lib/desktop/window-files.ts @@ -0,0 +1,95 @@ +/** + * Files dropped on a window or pasted from the clipboard. Whatever already handles a + * drop keeps doing so, which it shows by preventDefault: the composer, the file page, + * calendar import. The rest becomes an attachment on a new draft, or on the composer + * that's open. + */ + +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { handOffDraft } from '@/lib/launch-handoff'; + +interface ComposerTarget { + take: (files: File[]) => unknown; + /** The Pro shell keeps composers mounted on tabs out of sight. */ + visible: () => boolean; +} + +const composerTargets: ComposerTarget[] = []; +/** Our own native drag passing over our own window isn't a new file. */ +let ownDrag = false; + +/** A composer on screen takes files itself. No effect outside the desktop app: only this file reads it. */ +export function setComposerFileTarget(take: ComposerTarget['take'], visible: ComposerTarget['visible']): () => void { + const target = { take, visible }; + composerTargets.push(target); + return () => { + const at = composerTargets.indexOf(target); + if (at !== -1) composerTargets.splice(at, 1); + }; +} + +function visibleComposer(): ComposerTarget | undefined { + return [...composerTargets].reverse().find((target) => target.visible()); +} + +export function setOwnDragActive(active: boolean): void { + ownDrag = active; +} + +function take(files: File[]): void { + const composer = visibleComposer(); + if (composer) composer.take(files); + else handOffDraft({ files }); +} + +function isEditable(target: EventTarget | null): boolean { + const element = target as Partial<HTMLElement> & { closest?: (selector: string) => Element | null } | null; + return !!element?.closest?.('input, textarea, select, [contenteditable=""], [contenteditable="true"]'); +} + +/** + * Pasting a file is only meant where text isn't. A spreadsheet's cells also come as a + * picture of them, and a field that takes text wants the text. The one editable place a + * bare file belongs in is the composer it's being pasted into. + */ +function pasteIsForUs(event: ClipboardEvent): boolean { + const types = [...(event.clipboardData?.types ?? [])]; + if (types.includes('text/plain') || types.includes('text/html')) return false; + if (!isEditable(event.target)) return true; + const inComposer = !!(event.target as Partial<Element> | null)?.closest?.('[data-testid="email-composer"]'); + return inComposer && !!visibleComposer(); +} + +function hasFiles(event: DragEvent): boolean { + return !!event.dataTransfer && [...event.dataTransfer.types].includes('Files'); +} + +export function startWindowFiles(): () => void { + if (!getDesktopBridge()?.os) return () => {}; + const onDragOver = (event: DragEvent) => { + if (event.defaultPrevented || ownDrag || !hasFiles(event)) return; + event.preventDefault(); + if (event.dataTransfer) event.dataTransfer.dropEffect = 'copy'; + }; + const onDrop = (event: DragEvent) => { + if (event.defaultPrevented || ownDrag || !hasFiles(event)) return; + event.preventDefault(); + const files = Array.from(event.dataTransfer?.files ?? []); + if (files.length > 0) take(files); + }; + const onPaste = (event: ClipboardEvent) => { + if (event.defaultPrevented) return; + const files = Array.from(event.clipboardData?.files ?? []); + if (files.length === 0 || !pasteIsForUs(event)) return; + event.preventDefault(); + take(files); + }; + window.addEventListener('dragover', onDragOver); + window.addEventListener('drop', onDrop); + window.addEventListener('paste', onPaste); + return () => { + window.removeEventListener('dragover', onDragOver); + window.removeEventListener('drop', onDrop); + window.removeEventListener('paste', onPaste); + }; +} diff --git a/lib/desktop/window-restore.ts b/lib/desktop/window-restore.ts new file mode 100644 index 000000000..d09ed7038 --- /dev/null +++ b/lib/desktop/window-restore.ts @@ -0,0 +1,40 @@ +/** + * What a composer comes back as when the app starts again: a pop-out on its draft. + * Each open composer says which draft it holds, as soon as it has one. The shell + * keeps the list per window. Closing a window drops its list, so a draft the user + * put away stays in Drafts and doesn't come back on screen. Quitting keeps it. + */ + +import { appPath } from '@/lib/deep-links'; +import { getDesktopBridge } from './bridge'; + +export interface OpenDraft { + draftId: string; + /** The login it was saved through. */ + localAccountId?: string | null; + /** The JMAP account holding it, when not that login's own. */ + ownerAccountId?: string | null; +} + +const open = new Map<string, OpenDraft>(); + +export function restoreUrlFor(draft: OpenDraft): string { + const search = new URLSearchParams({ draft: draft.draftId }); + if (draft.localAccountId) search.set('account', draft.localAccountId); + if (draft.ownerAccountId) search.set('owner', draft.ownerAccountId); + return `${appPath('/popout/compose')}?${search.toString()}`; +} + +/** With null, this composer holds no draft any more: sent, discarded or closed. */ +export function noteOpenDraft(key: string, draft: OpenDraft | null): void { + const windows = getDesktopBridge()?.windows; + if (!windows?.setRestore) return; + if (draft) open.set(key, draft); + else if (!open.delete(key)) return; + windows.setRestore([...open.values()].map(restoreUrlFor)); +} + +/** Test helper. */ +export function resetOpenDrafts(): void { + open.clear(); +} diff --git a/lib/devices/__tests__/client.test.ts b/lib/devices/__tests__/client.test.ts new file mode 100644 index 000000000..0ee6777c1 --- /dev/null +++ b/lib/devices/__tests__/client.test.ts @@ -0,0 +1,139 @@ +import { afterEach, describe, expect, it, vi } from 'vitest'; +import { checkInWithInstance, describePlatform, registerWithInstance, reportWipeToInstance } from '../client'; + +const record = { id: `${'a'.repeat(64)}/${'b'.repeat(32)}`, secret: 'c'.repeat(64) }; + +function answer(status: number, body: string, type = 'application/json'): void { + vi.stubGlobal('fetch', vi.fn(async () => new Response(body, { status, headers: { 'Content-Type': type } }))); +} + +afterEach(() => { + vi.unstubAllGlobals(); + delete (window as { bulwarkDesktop?: unknown }).bulwarkDesktop; +}); + +describe('a check-in', () => { + it('hears a wipe only from a clear yes', async () => { + answer(200, JSON.stringify({ wipe: { requestedAt: '2026-11-03T00:00:00Z' } })); + expect(await checkInWithInstance(record)).toBe('wipe'); + }); + + it('reads no wipe as clear', async () => { + answer(200, JSON.stringify({ wipe: null })); + expect(await checkInWithInstance(record)).toBe('clear'); + }); + + it('reads the route\'s own 404 as a forgotten row', async () => { + answer(404, JSON.stringify({ error: 'unknown_device' })); + expect(await checkInWithInstance(record)).toBe('forgotten'); + }); + + it.each([ + ['an older instance\'s 404', 404, '<html>Not found</html>', 'text/html'], + ['a 500', 500, JSON.stringify({ error: 'Internal server error' }), 'application/json'], + ['a 503', 503, '<html>Bad gateway</html>', 'text/html'], + ['a 200 from something else', 200, '<html>Login</html>', 'text/html'], + ['a 200 with other JSON', 200, JSON.stringify({ ok: true }), 'application/json'], + ['a 401', 401, JSON.stringify({ wipe: { requestedAt: 'x' } }), 'application/json'], + ])('reads %s as nothing', async (_name, status, body, type) => { + answer(status, body, type); + expect(await checkInWithInstance(record)).toBe('unavailable'); + }); + + it('hears that its row was wiped', async () => { + answer(200, JSON.stringify({ wipe: null, wiped: true })); + expect(await checkInWithInstance({ id: 'r', secret: 's' })).toBe('wiped'); + }); + + it('reads a 429 as nothing', async () => { + answer(429, JSON.stringify({ error: 'rate limited' })); + expect(await checkInWithInstance({ id: 'r', secret: 's' })).toBe('unavailable'); + }); + + it('reads no network as nothing', async () => { + vi.stubGlobal('fetch', vi.fn(async () => { throw new TypeError('Failed to fetch'); })); + expect(await checkInWithInstance(record)).toBe('unavailable'); + }); +}); + +describe('registering', () => { + it('names the account\'s cookie slot', async () => { + const row = { ...record, user: 'a@b.c', server: 'https://b.c' }; + const fetchMock = vi.fn(async () => new Response(JSON.stringify(row), { status: 200 })); + vi.stubGlobal('fetch', fetchMock); + expect(await registerWithInstance(3)).toEqual(row); + const init = (fetchMock.mock.calls as unknown as [string, RequestInit][])[0][1]; + expect((init.headers as Record<string, string>)['X-JMAP-Cookie-Slot']).toBe('3'); + }); + + it('hands back the owner the instance gave', async () => { + answer(200, JSON.stringify({ id: 'r', secret: 's', user: 'a@b.c', server: 'https://b.c' })); + expect(await registerWithInstance(0)).toEqual({ id: 'r', secret: 's', user: 'a@b.c', server: 'https://b.c' }); + }); + + it('won\'t take a row with no owner', async () => { + answer(200, JSON.stringify({ id: 'r', secret: 's' })); + expect(await registerWithInstance(0)).toBeNull(); + }); + + it('gives null when it can\'t', async () => { + answer(401, '{}'); + expect(await registerWithInstance(0)).toBeNull(); + }); +}); + +describe('reporting a wipe', () => { + const entry = { ...record, reason: 'admin' as const, unsent: 1 }; + + it('is done on a yes, and when the row is gone', async () => { + answer(200, JSON.stringify({ ok: true })); + expect(await reportWipeToInstance(entry)).toBe(true); + answer(404, JSON.stringify({ error: 'unknown_device' })); + expect(await reportWipeToInstance(entry)).toBe(true); + }); + + it('tries again after anything else', async () => { + answer(500, '{}'); + expect(await reportWipeToInstance(entry)).toBe(false); + answer(404, '<html>'); + expect(await reportWipeToInstance(entry)).toBe(false); + vi.stubGlobal('fetch', vi.fn(async () => { throw new TypeError('Failed to fetch'); })); + expect(await reportWipeToInstance(entry)).toBe(false); + }); +}); + +describe('a confirmation the instance turned down', () => { + it('is done when no wipe was asked: sending it again can\'t change that', async () => { + answer(409, JSON.stringify({ error: 'no_wipe_asked' })); + expect(await reportWipeToInstance({ id: 'r', secret: 's', reason: 'admin', unsent: 0 })).toBe(true); + }); + + it('tries again after a 429', async () => { + answer(429, JSON.stringify({ error: 'rate limited' })); + expect(await reportWipeToInstance({ id: 'r', secret: 's', reason: 'admin', unsent: 0 })).toBe(false); + }); + + it('sends the row, the reason and the count, and no account name', async () => { + answer(200, JSON.stringify({ ok: true })); + await reportWipeToInstance({ id: 'r', secret: 's', reason: 'admin', unsent: null, account: 'alice@example.org' }); + expect(JSON.parse(String(vi.mocked(fetch).mock.calls[0][1]?.body))).toEqual({ id: 'r', secret: 's', reason: 'admin', unsent: null }); + }); + + it('a row dropped at sign-out says so', async () => { + answer(200, JSON.stringify({ ok: true })); + await reportWipeToInstance({ id: 'r', secret: 's', reason: 'user', unsent: 0, drop: true }); + expect(JSON.parse(String(vi.mocked(fetch).mock.calls[0][1]?.body))).toEqual({ id: 'r', secret: 's', drop: true }); + }); +}); + +describe('what a row calls the device', () => { + it('names the desktop app', () => { + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', mode: 'instance' }; + expect(describePlatform()).toBe('Desktop app, Windows'); + }); + + it('names a browser', () => { + vi.spyOn(navigator, 'userAgent', 'get').mockReturnValue('Mozilla/5.0 (Windows NT 10.0) AppleWebKit/537.36 Chrome/120.0 Safari/537.36'); + expect(describePlatform()).toBe('Chrome, Windows'); + }); +}); diff --git a/lib/devices/__tests__/registry.test.ts b/lib/devices/__tests__/registry.test.ts new file mode 100644 index 000000000..f99b41d27 --- /dev/null +++ b/lib/devices/__tests__/registry.test.ts @@ -0,0 +1,249 @@ +import { mkdtempSync, readdirSync, readFileSync, rmSync } from 'node:fs'; +import { tmpdir } from 'node:os'; +import path from 'node:path'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { fakeSharedStore } from '@/lib/shared-store/__tests__/fake-shared'; +import { setStoreForTests } from '@/lib/shared-store'; + +type Registry = typeof import('../registry'); + +vi.setConfig({ testTimeout: 60_000 }); + +let dir: string; +const info = { platform: 'Chrome, Windows', appVersion: '1.2.3' }; + +/** A second server process: its own copy of every module, the one store in common. */ +async function instance(shared: ReturnType<typeof fakeSharedStore>): Promise<Registry> { + vi.resetModules(); + const store = await import('@/lib/shared-store'); + store.setStoreForTests(shared); + return import('../registry'); +} + +beforeEach(() => { + dir = mkdtempSync(path.join(tmpdir(), 'bw-devices-')); + vi.stubEnv('ADMIN_STATE_DIR', dir); +}); + +afterEach(() => { + setStoreForTests(null); + vi.unstubAllEnvs(); + rmSync(dir, { recursive: true, force: true }); +}); + +describe('two server instances sharing the store', () => { + it('see one registry: a wipe asked on one reaches the device through the other, and the confirmation comes back', async () => { + const shared = fakeSharedStore(); + const one = await instance(shared); + const two = await instance(shared); + expect(two).not.toBe(one); + + const { id, secret } = await one.registerDevice('alice@example.org', 'https://mail.example.org', info); + const listed = await two.listDevices(); + expect(listed.total).toBe(1); + expect(listed.devices[0]).toMatchObject({ id, user: 'alice@example.org', platform: 'Chrome, Windows', appVersion: '1.2.3', wipe: null }); + + expect((await one.checkInDevice(id, secret, info))?.wipe).toBeNull(); + await two.requestDeviceWipe(id, 'admin'); + expect((await one.checkInDevice(id, secret, info))?.wipe).toMatchObject({ by: 'admin' }); + + await one.confirmDeviceWipe(id, secret, 'admin'); + const after = (await two.listDevices()).devices[0]; + expect(after.wipe).toBeNull(); + expect(after.wipedAt).not.toBeNull(); + expect(after.wipeReason).toBe('admin'); + }); + + it('keeps writes from both when they answer at once', async () => { + const shared = fakeSharedStore(); + const one = await instance(shared); + const two = await instance(shared); + const { id, secret } = await one.registerDevice('alice@example.org', 'https://mail.example.org', info); + await Promise.all([ + two.requestDeviceWipe(id, 'admin'), + one.checkInDevice(id, secret, { ...info, appVersion: '1.2.4' }), + ]); + const device = await two.getDevice(id); + expect(device?.wipe).toMatchObject({ by: 'admin' }); + expect(device?.appVersion).toBe('1.2.4'); + }); +}); + +describe('a local store', () => { + it('keeps a pending wipe through a restart, in the state dir, with no expiry', async () => { + const registry: Registry = await import('../registry'); + const { id, secret } = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + await registry.requestDeviceWipe(id, 'admin'); + expect(registry.DEVICES_COLLECTION.ttlMs).toBeUndefined(); + + // A new process reads the file. + vi.resetModules(); + const restarted: Registry = await import('../registry'); + expect((await restarted.checkInDevice(id, secret, info))?.wipe).toMatchObject({ by: 'admin' }); + expect(readdirSync(path.join(dir, 'devices'), { recursive: true }).length).toBeGreaterThan(0); + }); + + it('stores only a hash of the secret, and never shows that either', async () => { + const registry: Registry = await import('../registry'); + const { id, secret } = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + const file = readFileSync(path.join(dir, 'devices', `${id}.json`), 'utf8'); + expect(file).not.toContain(secret); + expect(JSON.stringify(await registry.listDevices())).not.toContain('secretHash'); + }); +}); + +describe('the rules', () => { + it('a wrong secret reads as no such device and changes nothing', async () => { + const registry: Registry = await import('../registry'); + const { id } = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + await registry.requestDeviceWipe(id, 'admin'); + expect(await registry.checkInDevice(id, 'f'.repeat(64), info)).toBeNull(); + expect(await registry.confirmDeviceWipe(id, 'f'.repeat(64), 'admin')).toBeNull(); + expect((await registry.getDevice(id))?.wipe).not.toBeNull(); + }); + + it('a device that never answers keeps its pending wipe, also past the age where others go', async () => { + const registry: Registry = await import('../registry'); + const waiting = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + const idle = await registry.registerDevice('bob@example.org', 'https://mail.example.org', info); + await registry.requestDeviceWipe(waiting.id, 'admin'); + + const later = Date.now() + registry.DEVICE_PRUNE_MS + 1000; + const { devices } = await registry.listDevices({ now: later }); + expect(devices.map((device) => device.id)).toEqual([waiting.id]); + expect(await registry.getDevice(idle.id)).toBeNull(); + expect((await registry.getDevice(waiting.id))?.wipe).not.toBeNull(); + }); + + it('one user\'s wipe reaches all of that user\'s devices and no one else\'s', async () => { + const registry: Registry = await import('../registry'); + const first = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + const second = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + const other = await registry.registerDevice('bob@example.org', 'https://mail.example.org', info); + + const asked = await registry.requestUserWipe(first.id.split('/')[0], 'admin'); + expect(asked.map((device) => device.id).sort()).toEqual([first.id, second.id].sort()); + expect((await registry.getDevice(other.id))?.wipe).toBeNull(); + }); + + it('asks only once, and not of a device that already confirmed', async () => { + const registry: Registry = await import('../registry'); + const { id, secret } = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + expect(await registry.requestDeviceWipe(id, 'admin')).not.toBeNull(); + expect(await registry.requestDeviceWipe(id, 'admin')).toBeNull(); + await registry.confirmDeviceWipe(id, secret, 'admin'); + expect(await registry.requestDeviceWipe(id, 'admin')).toBeNull(); + }); + + it('a wipe taken back no longer reaches the device', async () => { + const registry: Registry = await import('../registry'); + const { id, secret } = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + await registry.requestDeviceWipe(id, 'admin'); + await registry.cancelDeviceWipe(id); + expect((await registry.checkInDevice(id, secret, info))?.wipe).toBeNull(); + }); + + it('a check-in soon after the last one doesn\'t write again, a later one does', async () => { + const registry: Registry = await import('../registry'); + const { id, secret } = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + const first = (await registry.getDevice(id))!.lastSeen; + const soon = await registry.checkInDevice(id, secret, info, Date.parse(first) + 1000); + expect(soon?.lastSeen).toBe(first); + const later = await registry.checkInDevice(id, secret, info, Date.parse(first) + 60 * 60 * 1000); + expect(later?.lastSeen).not.toBe(first); + }); + + it('caps a user\'s rows by dropping the oldest without a wipe waiting', async () => { + const registry: Registry = await import('../registry'); + const oldest = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + await registry.requestDeviceWipe(oldest.id, 'admin'); + const next = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + for (let i = 2; i < registry.MAX_DEVICES_PER_USER; i += 1) { + await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + } + await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + const ids = (await registry.listDevices({ limit: 200 })).devices.map((device) => device.id); + expect(ids).toHaveLength(registry.MAX_DEVICES_PER_USER); + expect(ids).toContain(oldest.id); + expect(ids).not.toContain(next.id); + }); + + it('tells a confirmation that changed the row from one that didn\'t', async () => { + const registry = await import('../registry'); + const { id, secret } = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + await registry.requestDeviceWipe(id, 'admin'); + const first = await registry.confirmDeviceWipe(id, secret, 'admin'); + expect(first).toMatchObject({ changed: true }); + const again = await registry.confirmDeviceWipe(id, secret, 'admin'); + expect(again).toMatchObject({ changed: false }); + }); + + it('won\'t take a confirmation from the admin without a request', async () => { + const registry = await import('../registry'); + const { id, secret } = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + expect(await registry.confirmDeviceWipe(id, secret, 'admin')).toBe('no_wipe_asked'); + expect((await registry.getDevice(id))?.wipedAt).toBeNull(); + }); + + it('prunes a user\'s abandoned rows when a new one registers, not ones with a wipe waiting', async () => { + const registry = await import('../registry'); + const start = Date.now() + 365 * 24 * 60 * 60 * 1000; + vi.useFakeTimers({ now: start, toFake: ['Date'] }); + const old = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + const waiting = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + await registry.requestDeviceWipe(waiting.id, 'admin'); + vi.setSystemTime(start + registry.DEVICE_PRUNE_MS + 60_000); + await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + vi.useRealTimers(); + expect(await registry.getDevice(old.id)).toBeNull(); + expect(await registry.getDevice(waiting.id)).not.toBeNull(); + }); + + it('prunes the user\'s own rows also in the hour after the registry-wide look', async () => { + const registry = await import('../registry'); + const start = Date.now() + 2 * 365 * 24 * 60 * 60 * 1000; + vi.useFakeTimers({ now: start, toFake: ['Date'] }); + const old = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + // Someone else's registration has the look just before the row goes stale. + vi.setSystemTime(start + registry.DEVICE_PRUNE_MS - 30 * 60 * 1000); + await registry.registerDevice('bob@example.org', 'https://mail.example.org', info); + vi.setSystemTime(start + registry.DEVICE_PRUNE_MS + 60_000); + await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + vi.useRealTimers(); + expect(await registry.getDevice(old.id)).toBeNull(); + }); + + it('abandoned rows expire with no admin looking, others\' too, through any registration', async () => { + const registry = await import('../registry'); + const start = Date.now() + 4 * 365 * 24 * 60 * 60 * 1000; + vi.useFakeTimers({ now: start, toFake: ['Date'] }); + const abandoned = await registry.registerDevice('bob@example.org', 'https://mail.example.org', info); + const waiting = await registry.registerDevice('bob@example.org', 'https://mail.example.org', info); + await registry.requestDeviceWipe(waiting.id, 'admin'); + vi.setSystemTime(start + registry.DEVICE_PRUNE_MS + 2 * 60 * 60 * 1000); + await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + vi.useRealTimers(); + expect(await registry.getDevice(abandoned.id)).toBeNull(); + expect(await registry.getDevice(waiting.id)).not.toBeNull(); + }); + + it('keeps the cap with every row waiting for a wipe: a new row is refused, the wipes stay', async () => { + const registry = await import('../registry'); + const first = await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + const userKey = first.id.split('/')[0]; + for (let i = 1; i < registry.MAX_DEVICES_PER_USER; i += 1) await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + expect(await registry.requestUserWipe(userKey, 'admin')).toHaveLength(registry.MAX_DEVICES_PER_USER); + await expect(registry.registerDevice('alice@example.org', 'https://mail.example.org', info)).rejects.toThrow(registry.TooManyDevicesError); + expect((await registry.listDevices({ limit: 200 })).total).toBe(registry.MAX_DEVICES_PER_USER); + expect((await registry.getDevice(first.id))?.wipe).not.toBeNull(); + }); + + it('finds a user by part of the address', async () => { + const registry: Registry = await import('../registry'); + await registry.registerDevice('alice@example.org', 'https://mail.example.org', info); + await registry.registerDevice('bob@example.org', 'https://mail.example.org', info); + const { devices, total } = await registry.listDevices({ query: 'ALICE' }); + expect(total).toBe(1); + expect(devices[0].user).toBe('alice@example.org'); + }); +}); diff --git a/lib/devices/client.ts b/lib/devices/client.ts new file mode 100644 index 000000000..2161b3724 --- /dev/null +++ b/lib/devices/client.ts @@ -0,0 +1,102 @@ +/** + * This device's calls to the instance's registry. Only a clear answer counts: + * a wipe needs a 200 with a `wipe` in it, and "forgotten" needs the route's own + * word. An older instance without the routes, a proxy's error page or no + * network at all reads as `unavailable`, and nothing happens. + */ + +import { apiFetch } from '@/lib/browser-navigation'; +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import type { DeviceRecord } from '@/lib/store/client/keys'; +import type { WipeConfirmation } from './wipe-state'; + +export type CheckInAnswer = 'wipe' | 'wiped' | 'clear' | 'forgotten' | 'unavailable'; + +/** A new row and who the instance gave it to: the device checks that's the account it asked for. */ +export interface RegisteredRow { + id: string; + secret: string; + user: string; + server: string; +} + +/** Short enough for one row in a list. Nothing identifying beyond what a browser sends anyway. */ +export function describePlatform(): string { + const bridge = getDesktopBridge(); + if (bridge) return `Desktop app, ${({ win32: 'Windows', darwin: 'macOS', linux: 'Linux' } as const)[bridge.platform] ?? bridge.platform}`; + if (typeof navigator === 'undefined') return ''; + const ua = navigator.userAgent; + const os = /Android/.test(ua) ? 'Android' + : /iPhone|iPad/.test(ua) ? 'iOS' + : /Windows/.test(ua) ? 'Windows' + : /Mac OS X/.test(ua) ? 'macOS' + : /Linux/.test(ua) ? 'Linux' + : 'Unknown system'; + const browser = /Edg\//.test(ua) ? 'Edge' + : /Firefox\//.test(ua) ? 'Firefox' + : /Chrome\//.test(ua) ? 'Chrome' + : /Safari\//.test(ua) ? 'Safari' + : 'Browser'; + return `${browser}, ${os}`; +} + +function deviceInfo() { + return { platform: describePlatform(), appVersion: process.env.NEXT_PUBLIC_APP_VERSION ?? '' }; +} + +async function readJson(response: Response): Promise<Record<string, unknown> | null> { + try { + const body = await response.clone().json() as unknown; + return body && typeof body === 'object' ? body as Record<string, unknown> : null; + } catch { + return null; + } +} + +function post(path: string, body: unknown, signal?: AbortSignal, headers: Record<string, string> = {}): Promise<Response> { + return apiFetch(path, { + method: 'POST', + headers: { 'Content-Type': 'application/json', ...headers }, + body: JSON.stringify(body), + signal, + }); +} + +/** A new row, for the account signed in on this cookie slot. Null if that can't be done now. */ +export async function registerWithInstance(slot: number, signal?: AbortSignal): Promise<RegisteredRow | null> { + try { + const response = await post('/api/devices', deviceInfo(), signal, { 'X-JMAP-Cookie-Slot': String(slot) }); + if (!response.ok) return null; + const body = await readJson(response); + if (typeof body?.id !== 'string' || typeof body.secret !== 'string' || typeof body.user !== 'string' || typeof body.server !== 'string') return null; + return { id: body.id, secret: body.secret, user: body.user, server: body.server }; + } catch { + return null; + } +} + +export async function checkInWithInstance(record: Pick<DeviceRecord, 'id' | 'secret'>, signal?: AbortSignal): Promise<CheckInAnswer> { + try { + const response = await post('/api/devices', { id: record.id, secret: record.secret, ...deviceInfo() }, signal); + const body = await readJson(response); + if (response.status === 404) return body?.error === 'unknown_device' ? 'forgotten' : 'unavailable'; + if (!response.ok || !body || !('wipe' in body)) return 'unavailable'; + if (body.wipe && typeof body.wipe === 'object') return 'wipe'; + return body.wiped === true ? 'wiped' : 'clear'; + } catch { + return 'unavailable'; + } +} + +/** True when there's nothing more to say: it was taken, or the row no longer exists. */ +export async function reportWipeToInstance(entry: WipeConfirmation, signal?: AbortSignal): Promise<boolean> { + try { + const { id, secret, reason, unsent, drop } = entry; + const response = await post('/api/devices/wiped', drop ? { id, secret, drop: true } : { id, secret, reason, unsent }, signal); + if (response.ok) return true; + const error = (await readJson(response))?.error; + return (response.status === 404 && error === 'unknown_device') || (response.status === 409 && error === 'no_wipe_asked'); + } catch { + return false; + } +} diff --git a/lib/devices/registry.ts b/lib/devices/registry.ts new file mode 100644 index 000000000..a826ddd23 --- /dev/null +++ b/lib/devices/registry.ts @@ -0,0 +1,291 @@ +/** + * The devices that keep mail for this instance: browsers with offline mode on + * and desktop apps. One durable document per device and account, so every + * replica sees the same list and a pending wipe outlives a restart. + * + * No `ttlMs`: a machine that stays off for a year still has its wipe waiting. + * Rows nobody has seen for half a year and with no wipe waiting go when a new + * row registers (at most hourly for the whole registry) or an admin lists them. + * + * A check-in proves itself with the device's secret, not with a session, and + * nothing here asks the mail server. A device whose password was revoked has + * to be able to learn about its wipe. The secret only lets a device read and + * answer for its own row. + */ + +import { createHash, randomBytes, timingSafeEqual } from 'node:crypto'; +import { getStatePath } from '@/lib/admin/paths'; +import { settingsId } from '@/lib/settings-sync'; +import { getStore, type CollectionOptions } from '@/lib/shared-store'; +import type { DeviceView, WipeReason } from './types'; + +/** + * A new row is written to the state dir and stays half a year, for anyone with a + * session. Enough for an office turning this on in one morning: a device turned + * away tries again in a quarter of an hour. + */ +export const REGISTER_PER_HOUR = 60; +export const DEVICE_ID_RE = /^[0-9a-f]{64}\/[0-9a-f]{32}$/; +export const DEVICE_SECRET_RE = /^[0-9a-f]{64}$/; +const USER_KEY_RE = /^[0-9a-f]{64}$/; +const DEVICE_FILE_RE = /^[0-9a-f]{64}\/[0-9a-f]{32}\.json$/; + +/** A user with more rows than this loses the oldest one that has no wipe waiting. */ +export const MAX_DEVICES_PER_USER = 100; +/** Not seen for this long and no wipe waiting: abandoned, and forgotten. */ +export const DEVICE_PRUNE_MS = 180 * 24 * 60 * 60 * 1000; +/** A check-in within this time of the last write doesn't write again. */ +const LAST_SEEN_WRITE_MS = 5 * 60 * 1000; +const READ_CONCURRENCY = 50; +const PRUNE_EVERY_MS = 60 * 60 * 1000; + +export const DEVICES_COLLECTION: CollectionOptions = { + local: { + dir: () => getStatePath('devices'), + file: (id) => `${id}.json`, + idOf: (relative) => (DEVICE_FILE_RE.test(relative) ? relative.slice(0, -'.json'.length) : null), + mode: 0o600, + }, +}; + +interface StoredDevice extends Omit<DeviceView, 'id' | 'userKey'> { + secretHash: string; +} + +function collection() { + return getStore().collection('devices', DEVICES_COLLECTION); +} + +function hashSecret(secret: string): string { + return createHash('sha256').update(secret).digest('hex'); +} + +function secretMatches(device: StoredDevice, secret: string): boolean { + const given = Buffer.from(hashSecret(secret)); + const stored = Buffer.from(device.secretHash); + return given.length === stored.length && timingSafeEqual(given, stored); +} + +function parse(data: Buffer | null | undefined): StoredDevice | null { + if (!data) return null; + try { + return JSON.parse(data.toString('utf8')) as StoredDevice; + } catch { + return null; + } +} + +function toView(id: string, device: StoredDevice): DeviceView { + const { secretHash: _secretHash, ...rest } = device; + return { id, userKey: id.split('/')[0], ...rest }; +} + +async function readDevice(id: string): Promise<StoredDevice | null> { + return parse((await collection().get(id))?.data); +} + +async function readMany(ids: string[]): Promise<Array<[string, StoredDevice]>> { + const found: Array<[string, StoredDevice]> = []; + for (let start = 0; start < ids.length; start += READ_CONCURRENCY) { + const batch = ids.slice(start, start + READ_CONCURRENCY); + const devices = await Promise.all(batch.map((id) => readDevice(id))); + devices.forEach((device, index) => { + if (device) found.push([batch[index], device]); + }); + } + return found; +} + +/** Every row of this user has a wipe waiting, which can't be dropped, and the cap is reached. */ +export class TooManyDevicesError extends Error { + constructor() { + super('Too many devices'); + this.name = 'TooManyDevicesError'; + } +} + +async function makeRoomFor(userKey: string, now: number): Promise<void> { + const rows = await pruned(await readMany(await collection().list(`${userKey}/`)), now); + const over = rows.length - MAX_DEVICES_PER_USER + 1; + if (over <= 0) return; + const removable = rows + .filter(([, device]) => !device.wipe) + .sort(([, a], [, b]) => a.lastSeen.localeCompare(b.lastSeen)); + if (removable.length < over) throw new TooManyDevicesError(); + for (const [id] of removable.slice(0, over)) await collection().delete(id); +} + +/** Abandoned rows of everyone, however long no admin has looked. One replica, once an hour. */ +async function pruneAbandoned(now: number): Promise<void> { + const { ok } = await getStore().counters.reserve([{ key: 'device-prune', max: 1, windowMs: PRUNE_EVERY_MS }]); + if (ok) await pruned(await readMany(await collection().list('')), now); +} + +export interface DeviceInfo { + platform: string; + appVersion: string; +} + +/** A new row for this browser profile and account. The secret goes back to the device once and is kept only as a hash. */ +export async function registerDevice(user: string, server: string, info: DeviceInfo): Promise<{ id: string; secret: string; user: string; server: string }> { + const userKey = settingsId(user, server); + await makeRoomFor(userKey, Date.now()); + await pruneAbandoned(Date.now()).catch(() => {}); + const id = `${userKey}/${randomBytes(16).toString('hex')}`; + const secret = randomBytes(32).toString('hex'); + const now = new Date().toISOString(); + const device: StoredDevice = { + user, + server, + platform: info.platform, + appVersion: info.appVersion, + firstSeen: now, + lastSeen: now, + wipe: null, + wipedAt: null, + wipeReason: null, + secretHash: hashSecret(secret), + }; + await collection().put(id, JSON.stringify(device), { ifVersion: null }); + return { id, secret, user, server }; +} + +/** Null when the row is gone or the secret doesn't fit. Both read the same to the caller. */ +export async function checkInDevice(id: string, secret: string, info: DeviceInfo, now = Date.now()): Promise<DeviceView | null> { + const current = await readDevice(id); + if (!current || !secretMatches(current, secret)) return null; + const stale = now - Date.parse(current.lastSeen) >= LAST_SEEN_WRITE_MS; + if (!stale && current.platform === info.platform && current.appVersion === info.appVersion) return toView(id, current); + const { data } = await collection().update(id, (raw) => { + const device = parse(raw); + if (!device) return undefined; + return JSON.stringify({ ...device, ...info, lastSeen: new Date(now).toISOString() }); + }); + const device = parse(data); + return device ? toView(id, device) : toView(id, current); +} + +export type WipeConfirmation = { device: DeviceView; changed: boolean } | 'no_wipe_asked'; + +/** + * The device says it wiped. Null when the row is gone or the secret doesn't fit. + * Only a change is news: a device sends this again until it gets through, and + * anyone with a row could send it for ever. `admin` needs a request the row + * still has. Anyone can say they wiped themselves, but not that an admin told them. + */ +export async function confirmDeviceWipe(id: string, secret: string, reason: WipeReason, now = Date.now()): Promise<WipeConfirmation | null> { + const current = await readDevice(id); + if (!current || !secretMatches(current, secret)) return null; + const at = new Date(now).toISOString(); + let refused = false; + const { data } = await collection().update(id, (raw) => { + refused = false; + const device = parse(raw); + if (!device) return undefined; + if (device.wipedAt && !device.wipe) return undefined; + if (reason === 'admin' && !device.wipe) { + refused = true; + return undefined; + } + return JSON.stringify({ ...device, wipe: null, wipedAt: at, wipeReason: reason, lastSeen: at }); + }); + if (refused) return 'no_wipe_asked'; + const device = parse(data); + if (device) return { device: toView(id, device), changed: true }; + const after = await readDevice(id); + return after ? { device: toView(id, after), changed: false } : null; +} + +/** + * The account signed out here and took its data with it: the row has nothing + * left to look after. A wipe still waiting is answered by that, and stays on the + * record the way any confirmed wipe does. Null when the secret doesn't fit. + */ +export async function dropDevice(id: string, secret: string, now = Date.now()): Promise<{ confirmed: DeviceView | null } | null> { + const current = await readDevice(id); + if (!current) return { confirmed: null }; + if (!secretMatches(current, secret)) return null; + if (current.wipe) { + const answer = await confirmDeviceWipe(id, secret, 'user', now); + return { confirmed: answer && answer !== 'no_wipe_asked' && answer.changed ? answer.device : null }; + } + await collection().delete(id); + return { confirmed: null }; +} + +/** Null when nothing changed: no such row, a wipe already waiting, or a row that confirmed and has nothing left. */ +export async function requestDeviceWipe(id: string, by: string, now = Date.now()): Promise<DeviceView | null> { + const requestedAt = new Date(now).toISOString(); + const { data } = await collection().update(id, (raw) => { + const device = parse(raw); + if (!device || device.wipedAt || device.wipe) return undefined; + return JSON.stringify({ ...device, wipe: { requestedAt, by } }); + }); + const device = parse(data); + return device ? toView(id, device) : null; +} + +/** Every device of a user that hasn't wiped already, one request each. */ +export async function requestUserWipe(userKey: string, by: string, now = Date.now()): Promise<DeviceView[]> { + // No more than a user can have: nothing a stray write left behind makes this unbounded. + const ids = (await collection().list(`${userKey}/`)).slice(0, MAX_DEVICES_PER_USER); + const results = await Promise.all(ids.map((id) => requestDeviceWipe(id, by, now))); + return results.filter((device): device is DeviceView => device !== null); +} + +export async function cancelDeviceWipe(id: string): Promise<DeviceView | null> { + const { data } = await collection().update(id, (raw) => { + const device = parse(raw); + if (!device?.wipe) return undefined; + return JSON.stringify({ ...device, wipe: null }); + }); + const device = parse(data); + return device ? toView(id, device) : null; +} + +export async function forgetDevice(id: string): Promise<boolean> { + return collection().delete(id); +} + +export async function getDevice(id: string): Promise<DeviceView | null> { + const device = await readDevice(id); + return device ? toView(id, device) : null; +} + +export function isUserKey(value: unknown): value is string { + return typeof value === 'string' && USER_KEY_RE.test(value); +} + +export interface DevicePage { + devices: DeviceView[]; + total: number; +} + +/** One page, by user then device. `query` looks through every row, so it reads them all. */ +export async function listDevices(options: { offset?: number; limit?: number; query?: string; now?: number } = {}): Promise<DevicePage> { + const { offset = 0, limit = 100, query, now = Date.now() } = options; + const ids = await collection().list(''); + const needle = query?.trim().toLowerCase(); + if (!needle) { + const page = await readMany(ids.slice(offset, offset + limit)); + const kept = await pruned(page, now); + return { devices: kept.map(([id, device]) => toView(id, device)), total: ids.length }; + } + const everything = await pruned(await readMany(ids), now); + const matching = everything.filter(([, device]) => device.user.toLowerCase().includes(needle)); + return { + devices: matching.slice(offset, offset + limit).map(([id, device]) => toView(id, device)), + total: matching.length, + }; +} + +/** What the admin is about to see: old rows go, a row with a wipe waiting never does. */ +async function pruned(rows: Array<[string, StoredDevice]>, now: number): Promise<Array<[string, StoredDevice]>> { + const kept: Array<[string, StoredDevice]> = []; + for (const row of rows) { + const [id, device] = row; + if (!device.wipe && now - Date.parse(device.lastSeen) > DEVICE_PRUNE_MS) await collection().delete(id); + else kept.push(row); + } + return kept; +} diff --git a/lib/devices/types.ts b/lib/devices/types.ts new file mode 100644 index 000000000..f4e5facf7 --- /dev/null +++ b/lib/devices/types.ts @@ -0,0 +1,34 @@ +/** + * The device registry as both sides see it: what the instance lists for its + * admin and what a device says about its own wipe. No secrets, no store. + */ + +/** + * Who asked for a wipe. `rejected`: the server refused the stored login, and + * `session`: the idle or session limit ran out, both where the organisation asks + * for deletion at once. + */ +export const WIPE_REASONS = ['admin', 'user', 'rejected', 'session'] as const; +export type WipeReason = (typeof WIPE_REASONS)[number]; + +export interface DeviceView { + /** `<settingsId(user, server)>/<deviceId>`. */ + id: string; + /** The first part of `id`: every device of this user on this server. */ + userKey: string; + user: string; + server: string; + platform: string; + appVersion: string; + firstSeen: string; + lastSeen: string; + /** Asked for and not confirmed yet. Stays until the device answers or the admin takes it back. */ + wipe: { requestedAt: string; by: string } | null; + wipedAt: string | null; + wipeReason: WipeReason | null; +} + +export const AUDIT_DEVICE_WIPE_REQUEST = 'device.wipe.request'; +export const AUDIT_DEVICE_WIPE_CANCEL = 'device.wipe.cancel'; +export const AUDIT_DEVICE_WIPE_CONFIRM = 'device.wipe.confirm'; +export const AUDIT_DEVICE_FORGET = 'device.forget'; diff --git a/lib/devices/wipe-state.ts b/lib/devices/wipe-state.ts new file mode 100644 index 000000000..5e4e97f82 --- /dev/null +++ b/lib/devices/wipe-state.ts @@ -0,0 +1,256 @@ +/** + * What a wipe has to remember in localStorage, in a store-free module the auth + * store can import. Nothing here names a subject, and what stays after a wipe + * is a count, a row id and the secret for that one row. + */ + +import type { ForcedSignOutKind } from '@/lib/offline/credentials-rejected'; +import { EVICTED_KEEP_MS, readEvicted } from '@/lib/offline/state'; +import type { WipeReason } from './types'; + +const PENDING_KEY = 'bulwark-wipe-pending'; +const CONFIRM_KEY = 'bulwark-wipe-confirm'; +const NOTE_KEY = 'bulwark-wipe-note'; +const REFUSED_KEY = 'bulwark-credentials-refused'; +const DATABASES_KEY = 'bulwark-wipe-databases'; + +/** The pending entry for a wipe of everything on this device. */ +export const WHOLE_DEVICE = '*'; + +/** + * A 401 after re-auth has to last this long before the login counts as refused. + * Two answers a moment apart can be one bad moment on the server. + */ +export const CREDENTIALS_REFUSED_CONFIRM_MS = 60_000; + +function readJson<T>(key: string, fallback: T): T { + try { + const raw = localStorage.getItem(key); + return raw ? (JSON.parse(raw) as T) : fallback; + } catch { + return fallback; + } +} + +function writeJson(key: string, value: unknown, empty: boolean): void { + try { + if (empty) localStorage.removeItem(key); + else localStorage.setItem(key, JSON.stringify(value)); + } catch { + /* storage unavailable */ + } +} + +// ---- A wipe under way: finished at the next page load if this one dies ---- + +export function readPendingWipes(): Record<string, WipeReason> { + return readJson<Record<string, WipeReason>>(PENDING_KEY, {}); +} + +export function markWipePending(account: string, reason: WipeReason): void { + writeJson(PENDING_KEY, { ...readPendingWipes(), [account]: reason }, false); +} + +export function clearWipePending(account: string): void { + const pending = readPendingWipes(); + delete pending[account]; + writeJson(PENDING_KEY, pending, Object.keys(pending).length === 0); +} + +// ---- Telling the instance: sent until it gets through ---- + +export interface WipeConfirmation { + id: string; + secret: string; + reason: WipeReason; + /** Null: it couldn't be counted. Not the same as none. */ + unsent: number | null; + /** Whose wipe this says is done: not sent until it is. Stays on this device. */ + account?: string; + /** Not a wipe but a sign-out, whose row goes too. */ + drop?: boolean; +} + +export function readWipeConfirmations(): WipeConfirmation[] { + const list = readJson<WipeConfirmation[]>(CONFIRM_KEY, []); + return Array.isArray(list) ? list : []; +} + +export function queueWipeConfirmation(entry: WipeConfirmation): void { + writeJson(CONFIRM_KEY, [...readWipeConfirmations().filter((other) => other.id !== entry.id), entry], false); +} + +export function dropWipeConfirmation(id: string): void { + const rest = readWipeConfirmations().filter((entry) => entry.id !== id); + writeJson(CONFIRM_KEY, rest, rest.length === 0); +} + +// ---- The note at the next sign-in: a count, never subjects ---- + +export interface WipeNote { + unsent: number; + /** Some of it couldn't be counted, so there may have been more than `unsent`. */ + unknown?: true; +} + +export function addWipeNote(unsent: number | null): void { + const before = readJson<WipeNote | null>(NOTE_KEY, null); + const note: WipeNote = { unsent: (before?.unsent ?? 0) + (unsent ?? 0) }; + if (before?.unknown || unsent === null) note.unknown = true; + writeJson(NOTE_KEY, note, false); +} + +/** Once: whoever shows it takes it. Null when no wipe left a word. */ +export function consumeWipeNote(): WipeNote | null { + const note = readJson<WipeNote | null>(NOTE_KEY, null); + writeJson(NOTE_KEY, null, true); + if (!note || typeof note.unsent !== 'number') return null; + return note.unknown ? { unsent: note.unsent, unknown: true } : { unsent: note.unsent }; +} + +// ---- A login ended with nobody asking: what waits for the next sign-in. A count, never subjects ---- + +export interface RefusedLogin { + at: number; + /** Unsent messages waiting. Null: not counted yet, or the store couldn't say. */ + unsent: number | null; + /** Not one bad answer at a start: what a deletion the organisation asked for needs. */ + certain: boolean; + /** Absent: `refused`. */ + kind?: ForcedSignOutKind; + /** The count has been asked for, whatever came back. */ + counted?: boolean; + /** Accounts signed in beside it at the time: they may see its name, and nobody else does. */ + seenBy?: string[]; + label?: string; + username?: string; + toasted?: boolean; +} + +export interface RefusedLoginMark { + certain?: boolean; + kind?: ForcedSignOutKind; + seenBy?: string[]; + label?: string; + username?: string; +} + +export function readRefusedLogins(): Record<string, RefusedLogin> { + return readJson<Record<string, RefusedLogin>>(REFUSED_KEY, {}); +} + +const refusedListeners = new Set<() => void>(); + +/** For the sign-in page: the count comes after the page does. */ +export function onRefusedLoginsChanged(listener: () => void): () => void { + refusedListeners.add(listener); + return () => refusedListeners.delete(listener); +} + +function writeRefused(refused: Record<string, RefusedLogin>): void { + writeJson(REFUSED_KEY, refused, Object.keys(refused).length === 0); + for (const listener of [...refusedListeners]) listener(); +} + +export function markLoginRefused(account: string, mark: RefusedLoginMark = {}, now = Date.now()): void { + const before = readRefusedLogins(); + const { certain = true, kind = 'refused', seenBy, label, username } = mark; + writeRefused({ + ...before, + [account]: { + at: before[account]?.at ?? now, + unsent: null, + certain: certain || before[account]?.certain === true, + kind, + ...(seenBy?.length ? { seenBy, label, username } : {}), + }, + }); +} + +export function setRefusedCount(account: string, unsent: number | null): void { + const before = readRefusedLogins(); + if (before[account]) writeRefused({ ...before, [account]: { ...before[account], unsent, counted: true } }); +} + +export function dropRefusedLogin(account: string): void { + const refused = readRefusedLogins(); + if (!(account in refused)) return; + delete refused[account]; + writeRefused(refused); +} + +export interface RefusedWait { + unsent: number | null; + /** When the data goes if nobody signs in. */ + until: number; + kind: ForcedSignOutKind; +} + +/** What the sign-in page says. Numbers only: whoever reads it may not be the person it's about. */ +export function refusedWaits(): RefusedWait[] { + const evicted = readEvicted(); + return Object.entries(readRefusedLogins()) + .filter(([account, wait]) => account in evicted && wait.unsent !== 0) + .map(([account, wait]) => ({ unsent: wait.unsent, until: evicted[account] + EVICTED_KEEP_MS, kind: wait.kind ?? 'refused' })); +} + +export interface SiblingWait extends RefusedWait { + account: string; + label: string; + username: string; +} + +function asSiblingWait(account: string, wait: RefusedLogin, evictedAt: number): SiblingWait { + return { + account, + label: wait.label ?? account, + username: wait.username ?? '', + unsent: wait.unsent, + until: evictedAt + EVICTED_KEEP_MS, + kind: wait.kind ?? 'refused', + }; +} + +/** For the account switcher: accounts that left while `active` was signed in beside them. Nobody else sees their names. */ +export function siblingWaits(active: string | null | undefined): SiblingWait[] { + if (!active) return []; + const evicted = readEvicted(); + return Object.entries(readRefusedLogins()) + .filter(([account, wait]) => account in evicted && wait.seenBy?.includes(active)) + .map(([account, wait]) => asSiblingWait(account, wait, evicted[account])); +} + +/** Once each: what the toast says when such an account leaves. Waits for the count, so it can say it. */ +export function takeSiblingToasts(active: string | null | undefined): SiblingWait[] { + if (!active) return []; + const evicted = readEvicted(); + const refused = readRefusedLogins(); + const due = Object.entries(refused) + .filter(([account, wait]) => account in evicted && wait.seenBy?.includes(active) && wait.counted && !wait.toasted); + if (due.length === 0) return []; + writeRefused({ ...refused, ...Object.fromEntries(due.map(([account, wait]) => [account, { ...wait, toasted: true }])) }); + return due.map(([account, wait]) => asSiblingWait(account, wait, evicted[account])); +} + +/** A date for these notes, in the page's language. */ +export function waitDate(until: number): string { + const language = typeof document === 'undefined' ? undefined : document.documentElement.lang || undefined; + return new Date(until).toLocaleDateString(language, { dateStyle: 'medium' }); +} + +// ---- Plugin databases a running frame kept open: tried again at the next load ---- + +export function readBlockedDatabases(): Record<string, number> { + return readJson<Record<string, number>>(DATABASES_KEY, {}); +} + +export function writeBlockedDatabases(blocked: Record<string, number>): void { + writeJson(DATABASES_KEY, blocked, Object.keys(blocked).length === 0); +} + +/** Whether anything is left over from an earlier wipe, so a start must look. */ +export function wipeWorkWaiting(): boolean { + return Object.keys(readPendingWipes()).length > 0 + || readWipeConfirmations().length > 0 + || Object.keys(readBlockedDatabases()).length > 0; +} diff --git a/lib/draft-composer-data.ts b/lib/draft-composer-data.ts new file mode 100644 index 000000000..8459d2e8d --- /dev/null +++ b/lib/draft-composer-data.ts @@ -0,0 +1,75 @@ +import type { ComposerDraftData } from '@/components/email/email-composer'; +import { findDraftIdentityIdForLogin, type DraftSource } from '@/lib/draft-source'; +import { getDraftComposerBody } from '@/lib/email-body-selection'; +import type { Email, Identity, Mailbox } from '@/lib/jmap/types'; +import { messagePriorityFromHeaders } from '@/lib/message-priority'; +import { reopenedLabelChoice } from '@/lib/outgoing/classification'; + +/** + * Whether a message may reopen as a draft from an id kept since last time. Sending + * keeps the id, and a composer on it would replace, resend or delete the message. A + * draft has `$draft` or sits in Drafts (a send undone comes back without the keyword); + * and in Sent or Trash it's nothing to edit, whatever its keywords say. + */ +export function isRestorableDraft( + draft: Pick<Email, 'keywords' | 'mailboxIds'>, + mailboxes: Pick<Mailbox, 'id' | 'originalId' | 'role'>[], +): boolean { + const roles = Object.keys(draft.mailboxIds ?? {}).map((id) => mailboxes.find((m) => m.id === id || m.originalId === id)?.role); + if (roles.includes('sent') || roles.includes('trash')) return false; + return !!draft.keywords?.$draft || roles.includes('drafts'); +} + +/** + * What a composer starts from when a saved draft is opened: from the list, or from + * last time the desktop app was running. `draft` has its full body. + */ +export function composerDataFromDraft( + draft: Email, + { accountId, localAccountId, identities, noSubject }: DraftSource & { identities: Identity[]; noSubject: string }, +): ComposerDraftData { + const { body, plainTextMode } = getDraftComposerBody(draft); + return { + to: draft.to?.map((a) => a.email).filter(Boolean).join(', ') || '', + cc: draft.cc?.map((a) => a.email).filter(Boolean).join(', ') || '', + bcc: draft.bcc?.map((a) => a.email).filter(Boolean).join(', ') || '', + // Drafts saved before #1189 stored an empty subject as the composer's + // "(No Subject)" placeholder; reopen those with an empty field. + subject: draft.subject && draft.subject !== noSubject ? draft.subject : '', + body, + // Re-open in the format the draft was written in (#1022). + plainTextMode, + showCc: (draft.cc?.length || 0) > 0, + showBcc: (draft.bcc?.length || 0) > 0, + // Restore the identity the draft was composed with: the saved From (name and + // address) against the list the composer renders, so a draft from a non-active + // account, or one of two identities sharing an address, isn't reset to the default. + selectedIdentityId: findDraftIdentityIdForLogin(identities, draft.from?.[0], localAccountId), + subAddressTag: '', + mode: 'compose', + draftId: draft.id, + draftAccountId: accountId, + draftLocalAccountId: localAccountId, + // A reply draft re-opens in compose mode; its threading headers must + // come along or the reply leaves its thread. + inReplyTo: draft.inReplyTo ?? undefined, + references: draft.references ?? undefined, + priority: messagePriorityFromHeaders(draft.headers), + // A sent message brought back (Undo, Cancel and edit) has no draft + // marker: its SIO-Label says which label it went out with. + classification: reopenedLabelChoice(draft.headers, localAccountId), + // Existing server-side attachments must ride along, or the composer + // starts empty and the next save/send silently rebuilds the draft + // without them (#849). + attachments: (draft.attachments ?? []) + .filter((a) => !!a.blobId) + .map((a) => ({ + blobId: a.blobId, + name: a.name, + type: a.type, + size: a.size, + cid: a.cid, + disposition: a.disposition, + })), + }; +} diff --git a/lib/error-reporting/__tests__/desktop-main-errors.test.ts b/lib/error-reporting/__tests__/desktop-main-errors.test.ts new file mode 100644 index 000000000..af36d0763 --- /dev/null +++ b/lib/error-reporting/__tests__/desktop-main-errors.test.ts @@ -0,0 +1,86 @@ +// @vitest-environment node +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; + +// Main's errors on their way through the embedded server: handleServerReport counts them +// them. The webmail scrubs them, so a message off the disk or +// out of a mail can't get through. + +const flag = vi.hoisted(() => ({ IS_DESKTOP_BUILD: true, dsn: '' })); +vi.mock('@/lib/desktop/flag', () => ({ + get IS_DESKTOP_BUILD() { + return flag.IS_DESKTOP_BUILD; + }, +})); +vi.mock('@/lib/admin/config-manager', () => ({ + configManager: { + ensureLoaded: async () => {}, + get: (key: string, fallback: unknown) => (key === 'errorReportingDsn' ? flag.dsn : fallback), + }, +})); +vi.mock('@/lib/metrics', () => ({ metricsEnabled: () => false })); +const consent = vi.hoisted(() => ({ value: 'instant' as 'instant' | 'off' })); +vi.mock('@/lib/telemetry/state', () => ({ + effectiveErrorsConsent: async () => ({ consent: consent.value, source: 'env' }), + telemetryDocs: () => ({ update: async () => {}, get: async () => null }), +})); + +import { readErrors, resetAggregateForTests, utcDay } from '../aggregate'; +import { captureDesktopMainError } from '../server'; + +const MAIN = { + name: 'TypeError', + message: "ENOENT: open 'C:\\Users\\linus\\AppData\\Roaming\\Bulwark\\inbox.json' for ceo.private@acme-corp.example", + stack: 'TypeError: secret\n at sendPing (/desktop/main.mjs:120:7)\n at file:///C:/Users/linus/elsewhere/other.js:1:1', + mechanism: 'uncaughtexception', +}; + +let fetchSpy: ReturnType<typeof vi.fn>; + +beforeEach(() => { + resetAggregateForTests(); + // The server's limiter sends one per fingerprint per hour. + delete (globalThis as unknown as Record<symbol, unknown>)[Symbol.for('bulwark.error-reporting.server')]; + consent.value = 'instant'; + flag.IS_DESKTOP_BUILD = true; + // The frames' rule is compiled into this build only. + vi.stubEnv('NEXT_PUBLIC_BULWARK_DESKTOP', '1'); + flag.dsn = ''; + fetchSpy = vi.fn().mockResolvedValue(new Response(null, { status: 200 })); + vi.stubGlobal('fetch', fetchSpy); +}); + +afterEach(() => { + vi.unstubAllGlobals(); + vi.unstubAllEnvs(); +}); + +async function counted() { + const day = (await readErrors())[utcDay()] ?? {}; + return Object.values(day); +} + +describe('an error from the main process', () => { + it('is counted with its frames kept and the disk gone', async () => { + await captureDesktopMainError(MAIN); + const [entry] = await counted(); + expect(entry.name).toBe('TypeError'); + expect(entry.frames[0]).toMatchObject({ path: '/desktop/main.mjs', line: 120, fn: 'sendPing' }); + expect(entry.frames[1].path).toBe('[other]'); + expect(JSON.stringify(entry)).not.toContain('linus'); + expect(JSON.stringify(entry)).not.toContain('acme-corp'); + }); + + it('goes nowhere without consent', async () => { + consent.value = 'off'; + flag.dsn = 'https://6f0b9c79ed3a4315b76595bc2536ac40@bugsink.example.org/3'; + await captureDesktopMainError(MAIN); + expect(await counted()).toEqual([]); + expect(fetchSpy).not.toHaveBeenCalled(); + }); + + it('never throws, whatever it is given', async () => { + await expect(captureDesktopMainError({ name: 5, message: {}, stack: 7 })).resolves.toBeUndefined(); + const [entry] = await counted(); + expect(entry.name).toBe('Error'); + }); +}); diff --git a/lib/error-reporting/__tests__/desktop-reports.test.ts b/lib/error-reporting/__tests__/desktop-reports.test.ts new file mode 100644 index 000000000..fe46d68f9 --- /dev/null +++ b/lib/error-reporting/__tests__/desktop-reports.test.ts @@ -0,0 +1,235 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { + captureException, configureErrorReporting, reportFromError, resetErrorReportingForTests, +} from '../client'; +import { appVersion } from '../envelope'; +import { scrubFramePath, scrubText } from '../scrub'; +import { parseStack, sanitizeFrames } from '../stack'; + +// The desktop app's errors. Main's frames are the shell's own files as /desktop/...: they +// have to survive the check that drops reports with no frame of ours, and nothing about the +// user's disk may get through with them. + +const DSN = 'https://6f0b9c79ed3a4315b76595bc2536ac40@bugsink.example.org/3'; +const SETTINGS = { dsn: DSN, sampleRate: 1, environment: 'production', collect: false }; + +const MAIN_STACK = [ + "TypeError: Cannot read properties of undefined (reading 'x')", + ' at sendPing (/desktop/main.mjs:120:7)', + ' at async /desktop/main.mjs:90:3', + ' at processTicksAndRejections (node:internal/process/task_queues:105:5)', +].join('\n'); + +const EXTENSION_STACK = 'TypeError: nope\n at x (chrome-extension://abc/content.js:1:2)\n at y (moz-extension://def/inject.js:3:4)'; + +function withStack(stack: string): Error { + const error = new TypeError('nope'); + error.stack = stack; + return error; +} + +function setBridge(bridge: unknown): void { + (window as unknown as { bulwarkDesktop?: unknown }).bulwarkDesktop = bridge; +} + +const forcedOff = { value: false, locked: true, source: 'machine' }; + +describe('main-process frames', () => { + beforeEach(() => { + // The rule is compiled into the desktop build only. + vi.stubEnv('NEXT_PUBLIC_BULWARK_DESKTOP', '1'); + }); + afterEach(() => { + vi.unstubAllEnvs(); + }); + + it('keeps a report whose frames are the shell\'s', () => { + const report = reportFromError(withStack(MAIN_STACK), 'desktop-main', false); + expect(report).not.toBeNull(); + expect(report!.frames[0]).toMatchObject({ path: '/desktop/main.mjs', line: 120, column: 7, fn: 'sendPing' }); + expect(report!.frames[1].path).toBe('/desktop/main.mjs'); + expect(report!.frames[2].path).toBe('node:internal/process/task_queues'); + }); + + it('keeps one where every frame is the shell\'s', () => { + const only = 'TypeError: nope\n at a (/desktop/main.mjs:1:2)\n at b (/desktop/main.mjs:3:4)'; + expect(reportFromError(withStack(only), 'desktop-main', false)?.frames).toHaveLength(2); + }); + + it('still drops a report from a browser extension', () => { + expect(reportFromError(withStack(EXTENSION_STACK), 'onerror', false)).toBeNull(); + }); + + it('survives being posted and scrubbed again', () => { + const frames = parseStack(MAIN_STACK); + expect(sanitizeFrames(frames).map((frame) => frame.path)).toEqual(frames.map((frame) => frame.path)); + }); + + it.each([ + 'C:\\Users\\linus\\AppData\\Local\\Programs\\Bulwark\\resources\\app.asar\\dist\\main.mjs', + 'file:///C:/Users/linus/AppData/Local/Programs/Bulwark/resources/app.asar/dist/main.mjs', + '/home/linus/.local/bin/bulwark/resources/app.asar/dist/main.mjs', + '/desktop/../../Users/linus/secret.js', + '/desktop/C:\\Users\\linus\\x.js', + '/desktop/linus smith/x.js', + 'https://evil.example/desktop/x.js', + ])('gives nothing away for %s', (input) => { + expect(scrubFramePath(input)).toBe('[other]'); + }); +}); + +describe('a server install', () => { + it('sees no difference: a /desktop/ path is just another path', () => { + expect(scrubFramePath('/desktop/main.mjs')).toBe('[other]'); + expect(parseStack('TypeError: x\n at async /desktop/main.mjs:90:3')[0].path).toBe('[other]'); + expect(reportFromError(withStack('TypeError: x\n at a (/desktop/main.mjs:1:2)'), 'onerror', false)).toBeNull(); + }); + + it('keeps reading an anonymous async frame as it did', () => { + // scrubFunctionName and the marker search see the same text as before this existed. + const [frame] = parseStack('TypeError: x\n at async https://mail.example.org/_next/static/chunks/1.js:2:30'); + expect(frame.path).toBe('/_next/static/chunks/1.js'); + expect(parseStack('TypeError: x\n at async node:internal/x:1:2')[0].path).toBe('[other]'); + }); +}); + +describe('what a report says', () => { + it.each([ + ["ENOENT: no such file or directory, open 'C:\\Users\\linus\\AppData\\Roaming\\Bulwark\\crash.dmp'", ['linus', 'AppData', 'crash']], + ['EPERM: operation not permitted, mkdir C:\\Users\\linus\\mail', ['linus']], + ['failed to read /home/linus/.config/Bulwark/state', ['linus', '.config']], + ['Subject Merger plans for Acme failed from ceo.private@acme-corp.example', ['Merger', 'Acme', 'ceo.private', 'acme-corp']], + ['request failed Bearer eyJhbGciOiJIUzI1NiJ9.eyJzdWIiOiIxMjM0In0.abcdef sealed', ['eyJ', 'abcdef']], + ['token 0123456789abcdef0123456789abcdef0123 refused', ['0123456789']], + ])('%s', (input, gone) => { + const out = scrubText(input); + for (const word of gone) expect(out).not.toContain(word); + }); +}); + +describe('tagged as the desktop app', () => { + let fetchSpy: ReturnType<typeof vi.fn>; + + const eventOf = (init: RequestInit) => JSON.parse(String(init.body).trim().split('\n')[2]) as { tags: Record<string, string> }; + + beforeEach(() => { + resetErrorReportingForTests(); + sessionStorage.clear(); + fetchSpy = vi.fn().mockResolvedValue(new Response(null, { status: 200 })); + vi.stubGlobal('fetch', fetchSpy); + }); + + afterEach(() => { + vi.unstubAllGlobals(); + vi.unstubAllEnvs(); + setBridge(undefined); + }); + + const bundleError = () => withStack('TypeError: nope\n at a (https://mail.example.org/_next/static/chunks/1.js:2:30)'); + + it('in the app, on the event that goes to a DSN', () => { + setBridge({ version: 1, platform: 'win32' }); + configureErrorReporting(SETTINGS); + captureException(bundleError()); + expect(eventOf(fetchSpy.mock.calls[0][1]).tags).toMatchObject({ runtime: 'browser', platform: 'desktop' }); + }); + + it('not in a browser', () => { + configureErrorReporting(SETTINGS); + captureException(bundleError()); + expect(eventOf(fetchSpy.mock.calls[0][1]).tags.platform).toBeUndefined(); + }); + + it('a page in the app sends nothing with crash reports forced off, even to an instance that asks', () => { + setBridge({ version: 1, platform: 'win32', policy: { get: () => ({ CrashReportsAllowed: forcedOff }), onChange: () => () => {} } }); + configureErrorReporting({ ...SETTINGS, collect: true }); + captureException(bundleError()); + expect(fetchSpy).not.toHaveBeenCalled(); + }); + + it('a policy that only recommends leaves the instance\'s own settings in charge', () => { + setBridge({ version: 1, platform: 'win32', policy: { get: () => ({ CrashReportsAllowed: { value: false, locked: false, source: 'recommended' } }), onChange: () => () => {} } }); + configureErrorReporting(SETTINGS); + captureException(bundleError()); + expect(fetchSpy).toHaveBeenCalledTimes(1); + }); + + describe('consent taken back with a page open', () => { + function privacyBridge(on: boolean) { + let listener: ((state: unknown) => void) | undefined; + const say = (next: boolean, forcedOff = false) => listener?.({ telemetry: { on: false, forcedOff: false }, crashReports: { on: next, forcedOff, uploadUrl: '' } }); + setBridge({ + version: 1, + platform: 'win32', + mode: 'instance', + privacy: { + get: async () => ({ telemetry: { on: false, forcedOff: false }, crashReports: { on, forcedOff: false, uploadUrl: '' } }), + onChange: (next: (state: unknown) => void) => { + listener = next; + return () => {}; + }, + }, + }); + return say; + } + const settle = () => new Promise((resolve) => setTimeout(resolve, 0)); + + it('stops an open page sending to a DSN', async () => { + const say = privacyBridge(true); + configureErrorReporting(SETTINGS); + await settle(); + captureException(bundleError()); + expect(fetchSpy).toHaveBeenCalledTimes(1); + say(false); + captureException(withStack('TypeError: other\n at b (https://mail.example.org/_next/static/chunks/2.js:2:30)')); + expect(fetchSpy).toHaveBeenCalledTimes(1); + }); + + it('and a config arriving afterwards doesn\'t bring it back', async () => { + const say = privacyBridge(true); + configureErrorReporting(SETTINGS); + await settle(); + say(false); + configureErrorReporting(SETTINGS); + captureException(bundleError()); + expect(fetchSpy).not.toHaveBeenCalled(); + }); + + it('a change to something else, with crash reports never on, leaves an instance\'s own settings alone', async () => { + const say = privacyBridge(false); + configureErrorReporting(SETTINGS); + await settle(); + say(false); + captureException(bundleError()); + expect(fetchSpy).toHaveBeenCalledTimes(1); + }); + + it('a policy forcing it off stops it, however it stood', async () => { + const say = privacyBridge(false); + configureErrorReporting(SETTINGS); + await settle(); + say(false, true); + captureException(bundleError()); + expect(fetchSpy).not.toHaveBeenCalled(); + }); + + it('saying yes again lifts it', async () => { + const say = privacyBridge(true); + configureErrorReporting(SETTINGS); + await settle(); + say(false); + say(true); + configureErrorReporting(SETTINGS); + captureException(bundleError()); + expect(fetchSpy).toHaveBeenCalledTimes(1); + }); + }); + + it('in the version, in the desktop build only: the collector has no room for a tag', () => { + vi.stubEnv('NEXT_PUBLIC_APP_VERSION', '1.20.0'); + expect(appVersion()).toBe('1.20.0'); + vi.stubEnv('NEXT_PUBLIC_BULWARK_DESKTOP', '1'); + expect(appVersion()).toBe('1.20.0+desktop'); + expect(appVersion()).toMatch(/^\d+\.\d+\.\d+(?:[-+][\w.-]{1,40})?$/); + }); +}); diff --git a/lib/error-reporting/client.ts b/lib/error-reporting/client.ts index 2c842fae3..a11237a08 100644 --- a/lib/error-reporting/client.ts +++ b/lib/error-reporting/client.ts @@ -1,4 +1,5 @@ import { apiFetch, getPathPrefix } from '@/lib/browser-navigation'; +import { getDesktopBridge } from '@/lib/desktop/bridge'; import { scrubRoutePath } from '@/lib/route-groups'; import { debugIdsByPath } from './debug-ids'; import { @@ -41,6 +42,10 @@ interface ClientState { breadcrumbs: Breadcrumb[]; limiter: ReportLimiter | null; installed: boolean; + /** In the desktop app: the shell's privacy changes are being listened to. */ + watchingConsent: boolean; + /** The user took crash reports back, or a policy did. A later config doesn't undo that. */ + withdrawn: boolean; } // On globalThis: the error boundary, the JMAP client and the root component @@ -48,7 +53,7 @@ interface ClientState { const KEY = Symbol.for('bulwark.error-reporting.client'); function state(): ClientState { const g = globalThis as typeof globalThis & { [KEY]?: ClientState }; - return (g[KEY] ??= { settings: undefined, pending: [], breadcrumbs: [], limiter: null, installed: false }); + return (g[KEY] ??= { settings: undefined, pending: [], breadcrumbs: [], limiter: null, installed: false, watchingConsent: false, withdrawn: false }); } function sessionStore(): Storage | null { @@ -73,10 +78,36 @@ function currentRoute(): string | undefined { return scrubRoutePath(location.pathname, basePath()); } +/** + * Consent taken back while a page is open, in the desktop app. A change to anything else + * with crash reports never on leaves an instance's own settings alone: its admin chose + * those, and the settings page says so. + */ +function watchDesktopConsent(): void { + const s = state(); + const bridge = getDesktopBridge(); + if (s.watchingConsent || !bridge?.privacy?.onChange) return; + s.watchingConsent = true; + let on: boolean | null = null; + void Promise.resolve(bridge.privacy.get?.()).then((current) => { + on ??= current?.crashReports.on ?? null; + }).catch(() => {}); + bridge.privacy.onChange((next) => { + const tookBack = on === true && !next.crashReports.on; + on = next.crashReports.on; + if (on) s.withdrawn = false; + if (tookBack || next.crashReports.forcedOff) { + s.withdrawn = true; + configureErrorReporting(null); + } + }); +} + /** Apply the settings from /api/config (or Lite's policy.json); null switches reporting off. */ export function configureErrorReporting(settings: ClientSettings | null): void { const s = state(); - const on = settings && (parseDsn(settings.dsn) || settings.collect) ? settings : null; + watchDesktopConsent(); + const on = !s.withdrawn && settings && (parseDsn(settings.dsn) || settings.collect) ? settings : null; s.settings = on; const queued = s.pending; s.pending = []; @@ -176,10 +207,19 @@ export function captureReport(report: ErrorReport): void { deliver(withCrumbs); } +/** + * `CrashReportsAllowed` forced off, on any page of the desktop app. An instance's own + * settings decide the rest there: its admin chose what its pages report to it. + */ +function forbiddenByDevicePolicy(): boolean { + const entry = getDesktopBridge()?.policy?.get?.().CrashReportsAllowed; + return !!entry && entry.locked && entry.value === false; +} + function deliver(report: ErrorReport): void { const s = state(); const settings = s.settings; - if (!settings) return; + if (!settings || forbiddenByDevicePolicy()) return; const version = appVersion(); const print = fingerprint(report.name, report.frames, version, report.code); if (!limiter().allow(print)) return; @@ -194,7 +234,12 @@ function deliver(report: ErrorReport): void { platform: 'javascript', fingerprint: print, debugIds: debugIdsByPath(), - tags: { runtime: 'browser', ...(process.env.NEXT_PUBLIC_BULWARK_LITE === '1' ? { lite: 'yes' } : {}) }, + tags: { + runtime: 'browser', + ...(process.env.NEXT_PUBLIC_BULWARK_LITE === '1' ? { lite: 'yes' } : {}), + // An instance's build knows nothing of the app it's in, so the bridge says. + ...(getDesktopBridge() ? { platform: 'desktop' } : {}), + }, }); send(envelopeUrl(dsn), buildEnvelope(event), { // text/plain keeps it a simple request: no preflight, no custom header. diff --git a/lib/error-reporting/envelope.ts b/lib/error-reporting/envelope.ts index aaad77e1b..8cf11db17 100644 --- a/lib/error-reporting/envelope.ts +++ b/lib/error-reporting/envelope.ts @@ -1,3 +1,4 @@ +import { DESKTOP_VERSION_SUFFIX } from '@/lib/desktop/desktop-telemetry'; import type { Frame } from './stack'; /** @@ -144,6 +145,11 @@ export function releaseName(): string { return commit && commit !== 'unknown' ? `${version}+${commit}` : version; } +/** + * In the desktop build with a suffix, which also reaches the collector: its error batches + * have no room for a tag, and its version field allows this. + */ export function appVersion(): string { - return process.env.NEXT_PUBLIC_APP_VERSION || '0.0.0'; + const version = process.env.NEXT_PUBLIC_APP_VERSION || '0.0.0'; + return process.env.NEXT_PUBLIC_BULWARK_DESKTOP === '1' ? `${version}${DESKTOP_VERSION_SUFFIX}` : version; } diff --git a/lib/error-reporting/scrub.ts b/lib/error-reporting/scrub.ts index 9c24601e4..2fecb9627 100644 --- a/lib/error-reporting/scrub.ts +++ b/lib/error-reporting/scrub.ts @@ -14,6 +14,8 @@ * Documented at https://bulwarkmail.org/docs/deployment/monitoring#what-is-removed */ +import { DESKTOP_FRAME_PREFIX } from '@/lib/desktop/desktop-telemetry'; + export const MAX_MESSAGE_LENGTH = 200; const REDACTED = '…'; @@ -130,12 +132,18 @@ export function scrubFunctionName(input: unknown): string | undefined { * The path of a stack frame's file, without origin, base path, query or * fragment: `/_next/static/chunks/x.js` for the browser bundle, * `/.next/server/...` for the server's, `node:...` for Node's own modules, - * `node_modules/...` for dependencies; `[other]` for anything else + * `node_modules/...` for dependencies, in the desktop build `/desktop/...` for its main + * process, which the shell rewrites its own files to, so a path on disk never gets + * here; `[other]` for anything else * (extensions, plugin code, evaluated code). */ export function scrubFramePath(input: unknown): string { if (typeof input !== 'string' || input === '') return '[other]'; const path = input.split(/[?#]/, 1)[0].replace(/\\/g, '/'); + // Spelled out, so a server build compiles this away and reads paths as it always did. + if (process.env.NEXT_PUBLIC_BULWARK_DESKTOP === '1' && path.startsWith(DESKTOP_FRAME_PREFIX)) { + return /^[\w./@+~-]+$/.test(path) && !path.includes('..') ? path : '[other]'; + } for (const marker of ['/_next/static/', '/.next/server/', '/.next/static/']) { const at = path.indexOf(marker); if (at >= 0) { diff --git a/lib/error-reporting/server.ts b/lib/error-reporting/server.ts index d94e728c3..4af8a3a11 100644 --- a/lib/error-reporting/server.ts +++ b/lib/error-reporting/server.ts @@ -95,6 +95,31 @@ export function captureRequestError(error: unknown, routePattern?: string): Prom } } +export interface DesktopMainErrorInput { + name?: unknown; + message?: unknown; + stack?: unknown; + mechanism?: unknown; +} + +/** + * An error in the desktop app's main process, handed over by the shell. Its frames are + * the shell's own files as `/desktop/...`. All of it is scrubbed here again. + */ +export function captureDesktopMainError(error: DesktopMainErrorInput): Promise<void> { + try { + return handleServerReport({ + name: scrubName(error.name), + message: scrubText(error.message), + frames: parseStack(error.stack), + handled: false, + mechanism: error.mechanism === 'unhandledrejection' ? 'desktop-main-rejection' : 'desktop-main', + }); + } catch { + return Promise.resolve(); + } +} + /** * logger.error: a route that caught an error and logged it. The frames are * the logging call's, minus the logger's own `skip` frames. diff --git a/lib/error-reporting/settings.ts b/lib/error-reporting/settings.ts index 0e4097e32..a39196bb9 100644 --- a/lib/error-reporting/settings.ts +++ b/lib/error-reporting/settings.ts @@ -2,6 +2,7 @@ import { configManager } from '@/lib/admin/config-manager'; import { parseDsn } from './envelope'; import { metricsEnabled } from '@/lib/metrics'; import { effectiveErrorsConsent } from '@/lib/telemetry/state'; +import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; import type { ClientSettings } from './client'; /** @@ -32,7 +33,8 @@ export function parseEnvironment(value: unknown): string { export function errorReportingSettings(): ErrorReportingSettings { const raw = configManager.get<string>('errorReportingDsn', ''); return { - dsn: parseDsn(raw) ? raw.trim() : '', + // A desktop user has no admin, so a config file can't name somewhere to send errors. + dsn: !IS_DESKTOP_BUILD && parseDsn(raw) ? raw.trim() : '', sampleRate: parseSampleRate(configManager.get<string>('errorReportingSampleRate', '1')), environment: parseEnvironment(configManager.get<string>('errorReportingEnvironment', 'production')), }; @@ -45,6 +47,8 @@ export function errorReportingSettings(): ErrorReportingSettings { */ export async function shouldCollectErrors(): Promise<boolean> { await configManager.ensureLoaded(); + // The desktop user's own yes, and nothing else. + if (IS_DESKTOP_BUILD) return (await effectiveErrorsConsent()).consent !== 'off'; if (errorReportingSettings().dsn || metricsEnabled()) return true; return (await effectiveErrorsConsent()).consent !== 'off'; } diff --git a/lib/error-reporting/stack.ts b/lib/error-reporting/stack.ts index 6a6b83f00..60765fc2b 100644 --- a/lib/error-reporting/stack.ts +++ b/lib/error-reporting/stack.ts @@ -33,7 +33,10 @@ export function parseStack(stack: unknown): Frame[] { for (const line of stack.split('\n')) { const match = V8.exec(line) ?? GECKO.exec(line); if (!match) continue; - const [, fn, file, lineNo, column] = match; + const [, fn, rawFile, lineNo, column] = match; + // "at async file:1:2": an anonymous async frame, as main's stacks have them. Spelled + // out, so a server build compiles this away. + const file = process.env.NEXT_PUBLIC_BULWARK_DESKTOP === '1' ? rawFile.replace(/^async /, '') : rawFile; // "at fn (native)" and eval chains carry no file worth keeping. frames.push({ path: scrubFramePath(file), diff --git a/lib/event-links.ts b/lib/event-links.ts index 8c350c37d..9c4c1f867 100644 --- a/lib/event-links.ts +++ b/lib/event-links.ts @@ -115,6 +115,34 @@ export function findMeetingLink(event: EventPlaces): MeetingLink | null { return null; } +export interface JoinLink { + url: string; + /** Set for a link to no service this app knows: say where it goes before anyone clicks. */ + host: string | null; +} + +/** + * The address to offer as Join: web links only, with no user name in them, since what + * comes before an @ only looks like the host. An app scheme can start anything on the + * machine (ms-msdt:, search-ms:, smb:), and this comes from whoever sent the invitation. + */ +export function joinLinkFrom(uri: string): JoinLink | null { + let parsed: URL; + try { + parsed = new URL(uri.trim()); + } catch { + return null; + } + if ((parsed.protocol !== 'https:' && parsed.protocol !== 'http:') || parsed.username || parsed.password || !parsed.hostname) return null; + return { url: parsed.href, host: meetingProviderOf(parsed.href) ? null : parsed.hostname }; +} + +/** The event's Join, when it has one that's safe to offer. */ +export function findJoinLink(event: EventPlaces): JoinLink | null { + const link = findMeetingLink(event); + return link ? joinLinkFrom(link.uri) : null; +} + /** The first location's display name, if any. */ export function primaryLocationName(event: Pick<EventPlaces, 'locations'>): string | undefined { const name = Object.values(event.locations ?? {})[0]?.name?.trim(); diff --git a/lib/jmap/__tests__/credentials-refused.test.ts b/lib/jmap/__tests__/credentials-refused.test.ts new file mode 100644 index 000000000..928915ed7 --- /dev/null +++ b/lib/jmap/__tests__/credentials-refused.test.ts @@ -0,0 +1,167 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; +import { JMAPClient } from '../client'; + +// A 401 after a fresh try at signing in is the one signal a password login has +// that its credentials are over. So what else looks like one must not count. + +const SERVER = 'https://mail.example.test'; +const problem = () => new Response(JSON.stringify({ type: 'about:blank', status: 401, title: 'Unauthorized', detail: 'You have to authenticate first.' }), { status: 401, headers: { 'Content-Type': 'application/problem+json' } }); +const html401 = () => new Response('<html>Sign in to the proxy</html>', { status: 401, headers: { 'Content-Type': 'text/html' } }); +const session = () => new Response(JSON.stringify({ + apiUrl: `${SERVER}/jmap`, downloadUrl: `${SERVER}/d`, uploadUrl: `${SERVER}/u`, eventSourceUrl: '', username: 'alice', + capabilities: { 'urn:ietf:params:jmap:core': {} }, accounts: { a: { name: 'alice', isPersonal: true, accountCapabilities: {} } }, primaryAccounts: { 'urn:ietf:params:jmap:mail': 'a' }, +}), { status: 200, headers: { 'Content-Type': 'application/json' } }); +const echo = () => new Response(JSON.stringify({ methodResponses: [['Core/echo', { ping: 'pong' }, '0']], sessionState: 's' }), { status: 200, headers: { 'Content-Type': 'application/json' } }); + +let answers: { api: () => Response; session: () => Response }; + +function stubServer(): void { + vi.stubGlobal('fetch', vi.fn(async (input: unknown) => (String(input).includes('/.well-known/jmap') ? answers.session() : answers.api()))); +} + +async function connectedBasic(): Promise<{ client: JMAPClient; refused: number[] }> { + answers = { session, api: echo }; + const client = new JMAPClient(SERVER, 'alice', 'secret'); + await client.connect(); + const refused: number[] = []; + client.onCredentialsRefused((ms) => refused.push(ms)); + return { client, refused }; +} + +beforeEach(() => { + vi.useRealTimers(); + stubServer(); + vi.spyOn(console, 'error').mockImplementation(() => {}); +}); + +afterEach(() => { + vi.unstubAllGlobals(); + vi.restoreAllMocks(); +}); + +describe('a password login', () => { + it('counts when the session URL refuses too', async () => { + const { client, refused } = await connectedBasic(); + answers = { api: problem, session: problem }; + await client.ping().catch(() => {}); + expect(refused).toHaveLength(1); + client.disconnect(); + }); + + it('counts when the session answers and the retry is refused', async () => { + const { client, refused } = await connectedBasic(); + answers = { api: problem, session }; + await client.ping().catch(() => {}); + expect(refused).toHaveLength(1); + client.disconnect(); + }); + + it('doesn\'t count when the session URL gives a 500: that says nothing about the password', async () => { + const { client, refused } = await connectedBasic(); + answers = { api: problem, session: () => new Response('oops', { status: 500 }) }; + await client.ping().catch(() => {}); + expect(refused).toEqual([]); + client.disconnect(); + }); + + it('doesn\'t count when the network breaks on the way', async () => { + const { client, refused } = await connectedBasic(); + vi.stubGlobal('fetch', vi.fn(async (input: unknown) => { + if (String(input).includes('/.well-known/jmap')) throw new TypeError('Failed to fetch'); + return problem(); + })); + await client.ping().catch(() => {}); + expect(refused).toEqual([]); + client.disconnect(); + }); + + it('doesn\'t count a proxy\'s page', async () => { + const { client, refused } = await connectedBasic(); + answers = { api: html401, session: html401 }; + await client.ping().catch(() => {}); + expect(refused).toEqual([]); + client.disconnect(); + }); + + it('doesn\'t count a plain 500, or a 403', async () => { + const { client, refused } = await connectedBasic(); + answers = { api: () => new Response('nope', { status: 500 }), session }; + await client.ping().catch(() => {}); + answers = { api: () => new Response(JSON.stringify({ status: 403 }), { status: 403 }), session }; + await client.ping().catch(() => {}); + expect(refused).toEqual([]); + client.disconnect(); + }); + + it('counts at connect, so a restore can tell', async () => { + answers = { api: echo, session: problem }; + const client = new JMAPClient(SERVER, 'alice', 'secret'); + const refused: number[] = []; + client.onCredentialsRefused((ms) => refused.push(ms)); + await expect(client.connect()).rejects.toThrow('Invalid username or password'); + expect(refused).toHaveLength(1); + }); + + it('never counts with a one-time code: those go stale by themselves', async () => { + const { client, refused } = await connectedBasic(); + client.enableTotpReauth('secret', async () => null); + answers = { api: problem, session: problem }; + await client.ping().catch(() => {}); + expect(refused).toEqual([]); + client.disconnect(); + }); + + it('measures from the first refusal, and a good answer starts it over', async () => { + const { client, refused } = await connectedBasic(); + const now = vi.spyOn(Date, 'now'); + now.mockReturnValue(1_000_000); + answers = { api: problem, session: problem }; + await client.ping().catch(() => {}); + now.mockReturnValue(1_090_000); + await client.ping().catch(() => {}); + expect(refused).toEqual([0, 90_000]); + + answers = { api: echo, session }; + now.mockReturnValue(1_100_000); + await client.ping(); + answers = { api: problem, session: problem }; + now.mockReturnValue(1_200_000); + await client.ping().catch(() => {}); + expect(refused).toEqual([0, 90_000, 0]); + client.disconnect(); + }); +}); + +describe('a token login', () => { + function bearer(renewed: string | null): { client: JMAPClient; refused: number[]; renew: ReturnType<typeof vi.fn> } { + const renew = vi.fn(async () => renewed); + const client = JMAPClient.withBearer(SERVER, 'old', 'alice', renew); + const refused: number[] = []; + client.onCredentialsRefused((ms) => refused.push(ms)); + return { client, refused, renew }; + } + + it('counts when a token issued just now is refused', async () => { + answers = { api: problem, session: problem }; + const { client, refused, renew } = bearer('new'); + await expect(client.connect()).rejects.toThrow(); + expect(renew).toHaveBeenCalled(); + expect(refused).toHaveLength(1); + }); + + it('doesn\'t count when no new token came: the renewal has its own rules', async () => { + answers = { api: problem, session: problem }; + const { client, refused } = bearer(null); + await expect(client.connect()).rejects.toThrow(); + expect(refused).toEqual([]); + }); + + it('counts for a pasted token, which nothing can renew', async () => { + answers = { api: problem, session: problem }; + const client = JMAPClient.withBearer(SERVER, 'pasted', 'alice'); + const refused: number[] = []; + client.onCredentialsRefused((ms) => refused.push(ms)); + await expect(client.connect()).rejects.toThrow(); + expect(refused).toHaveLength(1); + }); +}); diff --git a/lib/jmap/client-interface.ts b/lib/jmap/client-interface.ts index 487b060e7..766631e37 100644 --- a/lib/jmap/client-interface.ts +++ b/lib/jmap/client-interface.ts @@ -171,6 +171,12 @@ export interface IJMAPClient { hasSSEStream(): boolean; onConnectionChange(callback: (connected: boolean) => void): void; onRateLimit(callback: (rateLimited: boolean, retryAfterMs: number) => void): void; + /** + * The mail server itself answered 401 after a fresh try at signing in, with + * `refusedForMs` since it first did with no good answer in between. Not called + * for an outage, a proxy's page or a token renewal that failed. + */ + onCredentialsRefused?(callback: (refusedForMs: number) => void): void; isRateLimited(): boolean; getRateLimitRemainingMs(): number; onStateChange(callback: (change: StateChange) => void): void; diff --git a/lib/jmap/client.ts b/lib/jmap/client.ts index a372a4aae..77bd2eaec 100644 --- a/lib/jmap/client.ts +++ b/lib/jmap/client.ts @@ -1621,6 +1621,9 @@ export class JMAPClient implements IJMAPClient { private lastStates: AccountStates = {}; private reconnecting = false; private connectionChangeCallback: ((connected: boolean) => void) | null = null; + private credentialsRefusedCallback: ((refusedForMs: number) => void) | null = null; + /** When the server first refused us with no good answer since; 0 when it hasn't. */ + private refusedSince = 0; private rateLimitedUntil: number = 0; private rateLimitCallback: ((rateLimited: boolean, retryAfterMs: number) => void) | null = null; private rateLimitTimeout: NodeJS.Timeout | null = null; @@ -1908,6 +1911,7 @@ export class JMAPClient implements IJMAPClient { throw new RateLimitError(retryAfterMs); } + let reauthRefused = false; if (response.status === 401) { if (this.authMode === 'bearer' && this.onTokenRefresh) { const newToken = await this.onTokenRefresh(); @@ -1915,7 +1919,13 @@ export class JMAPClient implements IJMAPClient { this.updateAccessToken(newToken); const retryHeaders = { ...init?.headers as Record<string, string>, 'Authorization': this.authHeader }; response = await this.timedFetch(url, init, retryHeaders, timeoutMs); + // A token issued just now was refused. No new token says nothing: + // the renewal has its own rules for that. + reauthRefused = true; } + } else if (this.authMode === 'bearer') { + // A pasted token: there's nothing to renew it with. + reauthRefused = true; } else if (this.authMode === 'basic' && !this.reconnecting && url !== this.discoveryUrl()) { // JMAP session may have expired - re-establish and retry once this.reconnecting = true; @@ -1924,7 +1934,11 @@ export class JMAPClient implements IJMAPClient { this.connectionChangeCallback?.(true); const retryHeaders = { ...init?.headers as Record<string, string>, 'Authorization': this.authHeader }; response = await this.timedFetch(url, init, retryHeaders, timeoutMs); - } catch { + reauthRefused = true; + } catch (refreshError) { + // A 500 or a broken connection on the way says nothing against the + // password. Only the session URL's own 401 does. + reauthRefused = refreshError instanceof Error && refreshError.message === 'Session refresh failed: 401'; // Session refresh failed - if TOTP was used, try re-auth with fresh TOTP if (this.onTotpRequired && this.basePassword) { try { @@ -1946,10 +1960,34 @@ export class JMAPClient implements IJMAPClient { } } - if (response.status !== 401) this.authAcceptedAt = Date.now(); + if (response.status !== 401) { + this.authAcceptedAt = Date.now(); + this.refusedSince = 0; + } else if (reauthRefused && !response.redirected) { + await this.noteCredentialsRefused(response); + } return response; } + onCredentialsRefused(callback: (refusedForMs: number) => void): void { + this.credentialsRefusedCallback = callback; + } + + /** + * Only the mail server's own refusal counts: JMAP errors are problem documents + * (RFC 8620 section 3.6.1). A proxy or a login page in front of the server + * answers with something else, and says nothing about these credentials. + * A password with a one-time code goes stale by itself, so it never counts. + */ + private async noteCredentialsRefused(response: Response): Promise<void> { + if (this.onTotpRequired || this.basePassword) return; + const body = await response.clone().json().catch(() => null) as { status?: unknown } | null; + if (body?.status !== 401) return; + const now = Date.now(); + if (!this.refusedSince) this.refusedSince = now; + this.credentialsRefusedCallback?.(now - this.refusedSince); + } + /** * Fetch the JMAP session, transparently handling servers that redirect * /.well-known/jmap to a canonical session URL (e.g. Stalwart → /jmap/session). @@ -2016,6 +2054,8 @@ export class JMAPClient implements IJMAPClient { if (!sessionResponse.ok) { if (sessionResponse.status === 401) { + // A token's refusal was counted on the way here, if it counts at all. + if (this.authMode === 'basic' && !sessionResponse.redirected) await this.noteCredentialsRefused(sessionResponse); throw new Error(this.authMode === 'bearer' ? 'Authentication failed - token may be expired' : 'Invalid username or password'); diff --git a/lib/mail-export/__tests__/local-store-export.test.ts b/lib/mail-export/__tests__/local-store-export.test.ts new file mode 100644 index 000000000..23c55dc4c --- /dev/null +++ b/lib/mail-export/__tests__/local-store-export.test.ts @@ -0,0 +1,331 @@ +// @vitest-environment node +/** + * An export from the local store, on real SQLite: the store keeps raw messages as it + * does in a browser, and what comes out is read back from the file. + */ +import { describe, expect, it, vi } from 'vitest'; +import { runExport, type ExportFormat, type ExportProgress } from '../engine'; +import { localExportClient } from '../local-store-client'; +import { memorySink, type ExportSink } from '../sinks'; +import { MboxSplitter } from '@/lib/mail-import/mbox'; +import { withoutStateHeaders } from '@/lib/mail-import/mbox-status'; +import { listZipEntries, readZipEntry } from '@/lib/mail-import/zip-reader'; +import { DEFAULT_SCOPE, type StoreScope } from '@/lib/store/area'; +import { AccountEngine } from '@/lib/store/engine/account-engine'; +import { TransportError, type MethodCall } from '@/lib/store/engine/transport'; +import { mailArea } from '@/lib/store/mail'; +import { outboxArea } from '@/lib/store/outbox'; +import { FakeJmapDrafts } from '@/lib/store/__tests__/helpers/fake-drafts'; +import { FAKE_SESSION, JMAP_ACCOUNT } from '@/lib/store/__tests__/helpers/fake-jmap'; +import { openMemoryStore } from '@/lib/store/__tests__/helpers/node-adapter'; + +const SCOPE: StoreScope = { ...DEFAULT_SCOPE, days: null }; +const enc = new TextEncoder(); + +/** Bytes a rebuilt or re-encoded message wouldn't have: bare LF, CRLF, Latin-1, trailing space, an mbox trap. */ +function rawMessage(n: number): Uint8Array { + const head = enc.encode(`From: a${n}@example.org\r\nSubject: Secret subject ${n} \r\nDKIM-Signature: v=1; b=abc${n}\r\n\r\n`); + const body = enc.encode(`From the start of a line\n>From quoted once\r\nlast line ${n}\r\n`); + const out = new Uint8Array(head.length + 2 + body.length); + out.set(head); + out.set([0xe4, 0x0a], head.length); + out.set(body, head.length + 2); + return out; +} + +class Server extends FakeJmapDrafts { + readonly files = new Map<string, Uint8Array>(); + readonly fetched: string[] = []; + gone = new Set<string>(); + + private read(blobId: string): Uint8Array { + this.fetched.push(blobId); + if (this.gone.has(blobId)) throw new TransportError('http', 'Gone', 404); + return this.files.get(blobId) ?? new Uint8Array(); + } + + override async download(_jmap?: string, blobId?: string): Promise<Uint8Array> { + return this.read(String(blobId)); + } + + async downloadStream(_jmap: string, blobId: string, _type: string, _name: string, sink: (part: Uint8Array) => void): Promise<void> { + sink(this.read(blobId)); + } +} + +function serverWith(ids: Record<string, string>): Server { + const server = new Server({ mailboxes: [{ id: 'inbox', name: 'Inbox', role: 'inbox' }, { id: 'archive', name: 'Archive' }] }); + let n = 0; + for (const [id, box] of Object.entries(ids)) { + n += 1; + const data = rawMessage(n); + server.files.set(`raw-${id}`, data); + server.addEmail({ id, blobId: `raw-${id}`, size: data.length, subject: `Secret subject ${n}`, mailboxIds: { [box]: true }, receivedAt: new Date(Date.UTC(2026, 9, n)).toISOString() }); + } + return server; +} + +async function storeOf(server: Server, scope: StoreScope = SCOPE, areas = [mailArea]) { + const db = openMemoryStore(); + const engine = new AccountEngine({ + account: 'acc', + db, + session: FAKE_SESSION, + transport: server, + areas, + scope, + now: () => Date.UTC(2026, 10, 3), + sleep: async () => {}, + }); + await engine.requestSync(); + return { + engine, + db, + store: { + answer: (_account: string, calls: MethodCall[]) => engine.answer(calls), + area: <T>(_account: string, name: string, params?: unknown) => engine.areaCall(name, params) as Promise<T>, + }, + }; +} + +function collecting(): { sink: ExportSink; bytes: () => Uint8Array } { + const inner = memorySink('x', 'application/octet-stream'); + const parts: Uint8Array[] = []; + return { + sink: { ...inner, write: async (chunk) => { parts.push(chunk.slice()); } }, + bytes: () => new Uint8Array(Buffer.concat(parts)), + }; +} + +type Store = Awaited<ReturnType<typeof storeOf>>['store']; +type Online = Parameters<typeof localExportClient>[0]['online']; + +async function run(store: Store, format: ExportFormat, mailboxes: string[], online: Online = () => null): Promise<{ result: ExportProgress; bytes: Uint8Array }> { + const { sink, bytes } = collecting(); + const result = await runExport({ + client: localExportClient({ account: 'acc', jmap: JMAP_ACCOUNT, store, online }), + accountId: JMAP_ACCOUNT, + folders: mailboxes.map((mailboxId) => ({ mailboxId, path: [mailboxId] })), + format, + sink, + signal: new AbortController().signal, + requestsPerMinute: Infinity, + sleep: async () => {}, + onProgress: () => {}, + }); + return { result, bytes: bytes() }; +} + +async function zipEntries(bytes: Uint8Array): Promise<Map<string, Uint8Array>> { + const file = new Blob([bytes as BlobPart]); + const out = new Map<string, Uint8Array>(); + for (const entry of await listZipEntries(file)) out.set(entry.name, await readZipEntry(file, entry)); + return out; +} + +/** The messages of an mbox file with the quoting and state undone, the way the import reads it. */ +function mboxMessages(bytes: Uint8Array): Uint8Array[] { + const splitter = new MboxSplitter(); + const out = [...splitter.push(bytes), ...splitter.end()]; + return out.map((message) => new Uint8Array(Buffer.concat(withoutStateHeaders(message.parts)))); +} + +describe('an export from the local store', () => { + it('writes a folder offline as a ZIP of .eml files with the exact bytes the server has', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox', other: 'archive' }); + const { store } = await storeOf(server); + const before = server.fetched.length; + const { result, bytes } = await run(store, 'eml', ['inbox']); + expect(result.phase).toBe('done'); + expect(result.exported).toBe(2); + expect(result.failed).toBe(0); + const entries = await zipEntries(bytes); + expect([...entries.keys()]).toEqual(['inbox/00001 Secret subject 1.eml', 'inbox/00002 Secret subject 2.eml']); + expect([...entries.values()][0]).toEqual(server.files.get('raw-a')); + expect([...entries.values()][1]).toEqual(server.files.get('raw-b')); + // Offline in truth: nothing was asked of the server. + expect(server.fetched.length).toBe(before); + }); + + it('writes a folder offline as an mbox whose messages read back as the exact bytes', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox', other: 'archive' }); + const { store } = await storeOf(server); + const { result, bytes } = await run(store, 'mbox', ['inbox']); + expect(result.phase).toBe('done'); + const messages = mboxMessages(bytes); + expect(messages).toHaveLength(2); + expect(messages[0]).toEqual(server.files.get('raw-a')); + expect(messages[1]).toEqual(server.files.get('raw-b')); + }); + + it('keeps the exact bytes in an .eml, and in an mbox puts the store\'s state in place of the state headers it had', async () => { + const headers = 'Status: O\r\nX-Status: F\r\nX-Keywords: oldword\r\nX-Mozilla-Status: 0009\r\nX-Mozilla-Status2: 00800000\r\nX-Mozilla-Keys: oldkey\r\n'; + const rest = 'From: a@example.org\r\nSubject: Stateful\r\n\r\nStatus: in the body stays\r\n'; + const data = enc.encode(`${headers}${rest}`); + const server = new Server({ mailboxes: [{ id: 'inbox', name: 'Inbox', role: 'inbox' }] }); + server.files.set('raw-s', data); + server.addEmail({ id: 's', blobId: 'raw-s', size: data.length, subject: 'Stateful', keywords: { $seen: true }, mailboxIds: { inbox: true } }); + const { store } = await storeOf(server); + const eml = await run(store, 'eml', ['inbox']); + expect([...(await zipEntries(eml.bytes)).values()]).toEqual([data]); + const mbox = await run(store, 'mbox', ['inbox']); + const text = Buffer.from(mbox.bytes).toString('latin1'); + expect(text).toContain('Status: RO\r\n'); + for (const gone of ['X-Status: F', 'oldword', 'oldkey', 'X-Mozilla-Status']) expect(text).not.toContain(gone); + expect(text).toContain('Status: in the body stays'); + expect(Buffer.from(mboxMessages(mbox.bytes)[0]).toString('latin1')).toBe(rest); + }); + + it('writes what\'s kept while a full listing runs, when an empty folder refuses to answer', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox' }); + const { store, db } = await storeOf(server); + // As during a first sync or after a lost state: the store can\'t tell empty from not listed yet. + db.run("UPDATE sync_state SET state = NULL WHERE type = 'Email'"); + expect(await store.answer('acc', [['Email/query', { accountId: JMAP_ACCOUNT, filter: { inMailbox: 'archive' } }, '0']])).toBeNull(); + const { result, bytes } = await run(store, 'eml', ['inbox', 'archive']); + expect(result.phase).toBe('done'); + expect(result.exported).toBe(2); + expect([...(await zipEntries(bytes)).keys()].filter((name) => name.endsWith('.eml'))).toHaveLength(2); + }); + + it('stops, rather than pass off a refusal as an empty folder, when the store says the folder has mail', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox' }); + const { store } = await storeOf(server); + const refusing = { ...store, answer: async () => null }; + const { sink } = collecting(); + const result = await runExport({ + client: localExportClient({ account: 'acc', jmap: JMAP_ACCOUNT, store: refusing, online: () => null }), + accountId: JMAP_ACCOUNT, + folders: [{ mailboxId: 'inbox', path: ['inbox'] }], + format: 'mbox', + sink, + signal: new AbortController().signal, + requestsPerMinute: Infinity, + sleep: async () => {}, + onProgress: () => {}, + }); + expect(result.phase).toBe('failed'); + expect(result.file).toBeUndefined(); + }); + + it('says how large an export is and how much of it is here', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox', c: 'archive' }); + server.gone.add('raw-b'); + const { store } = await storeOf(server); + const size = (id: string) => server.files.get(id)!.length; + expect(await store.area('acc', 'mail.rawSize', { jmap: JMAP_ACCOUNT, mailboxId: 'inbox' })).toEqual({ bytes: size('raw-a') + size('raw-b'), keptBytes: size('raw-a') }); + expect(await store.area('acc', 'mail.rawSize', { jmap: JMAP_ACCOUNT, mailboxId: 'archive' })).toEqual({ bytes: size('raw-c'), keptBytes: size('raw-c') }); + }); + + it('says nothing is here with attachments off', async () => { + const server = serverWith({ a: 'inbox' }); + const { store } = await storeOf(server, { ...SCOPE, attachments: false }); + expect(await store.area('acc', 'mail.rawSize', { jmap: JMAP_ACCOUNT, mailboxId: 'inbox' })).toEqual({ bytes: server.files.get('raw-a')!.length, keptBytes: 0 }); + }); + + it('counts what it has no original for by reason, and still writes the rest', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox', c: 'inbox' }); + server.gone.add('raw-b'); + server.gone.add('raw-c'); + const { store } = await storeOf(server); + expect(await store.area('acc', 'mail.rawStatus', { jmap: JMAP_ACCOUNT, mailboxId: 'inbox' })).toEqual({ total: 3, kept: 1 }); + const { result, bytes } = await run(store, 'eml', ['inbox']); + expect(result.phase).toBe('done'); + expect(result.exported).toBe(1); + expect(result.failed).toBe(2); + expect(result.notKept).toEqual({ not_kept: 2 }); + // Counted, not a list of 2 errors the dialog would print one by one. + expect(result.failures).toEqual([]); + expect([...(await zipEntries(bytes)).values()]).toEqual([server.files.get('raw-a')]); + }); + + it('says it is because attachments are off when they are, and makes no empty file of nothing', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox' }); + const { store } = await storeOf(server, { ...SCOPE, attachments: false }); + const { result, bytes } = await run(store, 'eml', ['inbox']); + expect(result.phase).toBe('done'); + expect(result.notKept).toEqual({ attachments_off: 2 }); + expect(result.exported).toBe(0); + expect(result.file).toBeUndefined(); + expect(bytes.length).toBe(0); + }); + + it('fetches what isn\'t kept when online, one at a time or in a batch, and reads the rest from the store', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox', c: 'inbox' }); + server.gone.add('raw-b'); + server.gone.add('raw-c'); + const { store } = await storeOf(server); + const fetchBlobForTransfer = vi.fn(async (blobId: string) => server.files.get(blobId)!); + const getBlobsAsBase64 = vi.fn(async (blobIds: string[]) => ({ + data: new Map([[blobIds[0], Buffer.from(server.files.get(blobIds[0])!).toString('base64')]]), + failed: [], + })); + const { result, bytes } = await run(store, 'eml', ['inbox'], () => ({ fetchBlobForTransfer, getBlobsAsBase64, getMaxConcurrentRequests: () => 4 })); + expect(result.exported).toBe(3); + expect(result.notKept).toBeUndefined(); + // The kept one isn't asked for, once it isn't missing from the batch. + expect(getBlobsAsBase64.mock.calls[0][0]).toEqual(['raw-b', 'raw-c']); + expect(fetchBlobForTransfer.mock.calls.map((call) => call[0])).toEqual(['raw-c']); + expect([...(await zipEntries(bytes)).values()]).toEqual([server.files.get('raw-a'), server.files.get('raw-b'), server.files.get('raw-c')]); + }); + + it('counts the rest as not kept when the connection goes during the run, instead of waiting on each', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox', c: 'inbox' }); + for (const id of ['raw-a', 'raw-b', 'raw-c']) server.gone.add(id); + const { store } = await storeOf(server); + const fetchBlobForTransfer = vi.fn(async () => { throw new TypeError('Load failed'); }); + const { result } = await run(store, 'mbox', ['inbox'], () => ({ fetchBlobForTransfer })); + expect(result.phase).toBe('done'); + expect(result.notKept).toEqual({ not_kept: 3 }); + // Three tries in all, not three per message. + expect(fetchBlobForTransfer).toHaveBeenCalledTimes(3); + }); + + it('reports a server\'s refusal of one message as that message\'s failure', async () => { + const server = serverWith({ a: 'inbox' }); + server.gone.add('raw-a'); + const { store } = await storeOf(server); + const { result } = await run(store, 'mbox', ['inbox'], () => ({ + fetchBlobForTransfer: async () => { throw new Error('Failed to fetch blob: 403'); }, + })); + expect(result.notKept).toBeUndefined(); + expect(result.failures).toEqual([{ label: 'Secret subject 1', reason: 'Failed to fetch blob: 403' }]); + }); + + it('counts a draft written on this device, which has no original yet, and never asks the server for it', async () => { + const server = new Server({ mailboxes: [{ id: 'drafts', name: 'Drafts', role: 'drafts' }] }); + const { engine, store } = await storeOf(server, SCOPE, [mailArea, outboxArea]); + await engine.answer([['Email/set', { create: { c: { subject: 'Draft', keywords: { $draft: true }, mailboxIds: { drafts: true }, receivedAt: new Date().toISOString(), bodyValues: { 1: { value: 'x' } }, textBody: [{ partId: '1' }] } } }, 's']]); + const fetchBlobForTransfer = vi.fn(async () => new Uint8Array()); + const { result } = await run(store, 'mbox', ['drafts'], () => ({ fetchBlobForTransfer })); + expect(result.total).toBe(1); + expect(result.notKept).toEqual({ not_kept: 1 }); + expect(fetchBlobForTransfer).not.toHaveBeenCalled(); + }); + + it('reads the folder list and every message past one page', async () => { + const ids: Record<string, string> = {}; + for (let i = 0; i < 503; i += 1) ids[`m${i}`] = 'inbox'; + const server = serverWith(ids); + for (let i = 0; i < 503; i += 1) server.gone.add(`raw-m${i}`); + const { store } = await storeOf(server, { ...SCOPE, attachments: false }); + const client = localExportClient({ account: 'acc', jmap: JMAP_ACCOUNT, store, online: () => null }); + expect((await client.getMailboxes()).map((box) => box.id).sort()).toEqual(['archive', 'inbox']); + const list = await client.queryEmailFields({ inMailbox: 'inbox' }, ['blobId', 'subject'], JMAP_ACCOUNT, Number.MAX_SAFE_INTEGER); + expect(list).toHaveLength(503); + expect(new Set(list.map((email) => email.id)).size).toBe(503); + }); + + it('keeps to the server\'s pace only for what goes to the network', async () => { + const server = serverWith({ a: 'inbox', b: 'inbox' }); + server.gone.add('raw-b'); + const { store } = await storeOf(server); + const take = vi.fn(async () => {}); + const fetchBlobForTransfer = vi.fn(async (blobId: string) => server.files.get(blobId)!); + const client = localExportClient({ account: 'acc', jmap: JMAP_ACCOUNT, store, online: () => ({ fetchBlobForTransfer }), gate: { take } }); + await client.fetchBlobForTransfer!('raw-a', JMAP_ACCOUNT); + expect(take).not.toHaveBeenCalled(); + await client.fetchBlobForTransfer!('raw-b', JMAP_ACCOUNT); + expect(take).toHaveBeenCalledTimes(1); + }); +}); diff --git a/lib/mail-export/__tests__/sinks.test.ts b/lib/mail-export/__tests__/sinks.test.ts index 915cb4932..b882b5033 100644 --- a/lib/mail-export/__tests__/sinks.test.ts +++ b/lib/mail-export/__tests__/sinks.test.ts @@ -1,15 +1,20 @@ +// @vitest-environment node import { describe, it, expect, vi, afterEach } from 'vitest'; -import { canWritePrivateFile, downloadGraceMs, privateFileSink, sweepPrivateExports } from '@/lib/mail-export/sinks'; +import { blobHeldInMemory, canWritePrivateFile, downloadGraceMs, dropExportFiles, guardedSink, memorySink, openExportSink, pickSaveFile, privateFileSink, spoolLimit, sweepPrivateExports, ExportForbiddenError, ExportTooLargeError, SPOOL_MEMORY_LIMIT, type ExportFile, type ExportSink } from '@/lib/mail-export/sinks'; +import { ZipWriter } from '@/lib/mail-export/zip-writer'; +import { useMailTransferStore } from '@/stores/mail-transfer-store'; /** A tiny origin private file system: one directory of files. */ function fakeOpfs() { const files = new Map<string, Uint8Array[]>(); + /** Everything ever written to this file system, deleted or not. */ + const written: Uint8Array[] = []; const dir = { getFileHandle: async (name: string) => { if (!files.has(name)) files.set(name, []); return { createWritable: async () => ({ - write: async (data: Uint8Array) => { files.get(name)!.push(data); }, + write: async (data: Uint8Array) => { files.get(name)!.push(data); written.push(data); }, close: async () => {}, abort: async () => {}, }), @@ -29,7 +34,7 @@ function fakeOpfs() { removeEntry: vi.fn(async () => { files.clear(); }), }; let created = false; - return { files, root }; + return { files, written, root }; } /** Web Locks where `held` names belong to another tab. */ @@ -66,30 +71,332 @@ describe('sweepPrivateExports', () => { }); describe('privateFileSink', () => { - it('keeps the file while its download may still read it, and deletes it after', async () => { - vi.useFakeTimers(); + const MAIL = new TextEncoder().encode('Subject: Very secret mail\r\n\r\nThe plain body\r\n'); + + /** A sink on a fake file system; `handed` is what would be downloaded. */ + function setUp() { const opfs = fakeOpfs(); + const handed: Blob[] = []; + const revoke = vi.fn(); vi.stubGlobal('navigator', { storage: { getDirectory: async () => opfs.root }, locks: fakeLocks(new Set()) }); - vi.stubGlobal('URL', Object.assign(URL, { createObjectURL: () => 'blob:x', revokeObjectURL: vi.fn() })); + vi.stubGlobal('URL', Object.assign(URL, { createObjectURL: (blob: Blob) => { handed.push(blob); return 'blob:x'; }, revokeObjectURL: revoke })); + return { opfs, handed, revoke }; + } + + const asText = (parts: Uint8Array[]) => Buffer.concat(parts).toString('latin1'); + + it('never writes readable mail to the private files, and hands out the exact bytes', async () => { + const { opfs, handed } = setUp(); const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; - await sink.write(new Uint8Array(10)); + // More than one piece, so the pieces have to come back in order. + const big = new Uint8Array(1024 * 1024 + 7).map((_, i) => i % 251); + await sink.write(MAIL); + await sink.write(big); + await sink.write(big); const file = await sink.close(); - const gone = file.discard(); - await vi.advanceTimersByTimeAsync(30_000); + expect(opfs.written.length).toBeGreaterThanOrEqual(2); + expect(asText(opfs.written)).not.toContain('secret'); + expect(asText(opfs.written)).not.toContain('plain body'); + expect(handed).toHaveLength(1); + expect(handed[0].type).toBe('application/mbox'); + // Not toEqual: it walks 2 MB element by element. + expect(Buffer.from(await handed[0].arrayBuffer()).equals(Buffer.concat([MAIL, big, big]))).toBe(true); + expect(file.size).toBe(MAIL.length + 2 * big.length); + }); + + it('seals the same mail differently each time', async () => { + const { opfs } = setUp(); + for (let i = 0; i < 2; i += 1) { + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + await sink.write(MAIL); + await sink.close(); + } + expect(opfs.written).toHaveLength(2); + expect(asText([opfs.written[0]])).not.toBe(asText([opfs.written[1]])); + }); + + it('deletes the spool the moment the export is done, before any download is over', async () => { + const { opfs } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + await sink.write(MAIL); expect(opfs.files.size).toBe(1); - await vi.advanceTimersByTimeAsync(downloadGraceMs(10)); - await gone; + await sink.close(); expect(opfs.files.size).toBe(0); }); - it('deletes at once on sign-out', async () => { + it('deletes the spool when the export is cancelled', async () => { + const { opfs } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + await sink.write(MAIL); + await sink.abort(); + expect(opfs.files.size).toBe(0); + }); + + it('keeps the Blob while its download may still read it, and frees it after', async () => { + const { revoke } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + await sink.write(MAIL); + const file: ExportFile = await sink.close(); + vi.useFakeTimers(); + const gone = file.discard(); + await vi.advanceTimersByTimeAsync(30_000); + expect(revoke).not.toHaveBeenCalled(); + await vi.advanceTimersByTimeAsync(downloadGraceMs(MAIL.length)); + await gone; + expect(revoke).toHaveBeenCalledWith('blob:x'); + }); + + it('frees the Blob at once on sign-out', async () => { + const { revoke } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + await sink.write(MAIL); + await (await sink.close()).discard(true); + expect(revoke).toHaveBeenCalledWith('blob:x'); + }); + + it('leaves nothing behind when the Blob can\'t be made', async () => { + const { opfs, handed } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + await sink.write(MAIL); + vi.stubGlobal('Response', class { blob() { return Promise.reject(new Error('out of memory')); } }); + await expect(sink.close()).rejects.toThrow('out of memory'); + await sink.abort(); + expect(handed).toEqual([]); + expect(opfs.files.size).toBe(0); + }); + + it('never lets a ZIP through readable either, where a search for the text would find nothing', async () => { + const { opfs, handed } = setUp(); + const sink = (await privateFileSink('a.zip', 'application/zip'))!; + const zip = new ZipWriter((chunk) => sink.write(chunk)); + await zip.addFile('Inbox/1.eml', MAIL, new Date()); + await zip.finish(); + await sink.close(); + const asZip = (await import('@/lib/mail-import/zip-reader')).listZipEntries; + expect(asText(opfs.written)).not.toContain('PK\x03\x04'); + expect(asText(opfs.written)).not.toContain('Inbox/1.eml'); + await expect(asZip(new Blob(opfs.written as BlobPart[]))).rejects.toThrow(); + expect((await asZip(handed[0])).map((entry) => entry.name)).toEqual(['Inbox/1.eml']); + }); + + it('downloads nothing when stopped while the spool is being opened, and leaves no Blob', async () => { + const { opfs, handed } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + // Three pieces: a large spool must stop where it is, not be opened to the end first. + for (let i = 0; i < 3; i += 1) await sink.write(new Uint8Array(1 << 20)); + expect(opfs.written.length).toBe(3); + const controller = new AbortController(); + const decrypt = crypto.subtle.decrypt.bind(crypto.subtle); + const spy = vi.spyOn(crypto.subtle, 'decrypt').mockImplementation(async (...args) => { + controller.abort(); + return decrypt(...args); + }); + await expect(sink.close(controller.signal)).rejects.toMatchObject({ name: 'AbortError' }); + // A stream reads one piece ahead at most before it hears the abort. + expect(spy.mock.calls.length).toBeLessThan(3); + spy.mockRestore(); + expect(handed).toEqual([]); + await sink.abort(); + expect(opfs.files.size).toBe(0); + }); + + it('downloads nothing when stopped just as the Blob is ready', async () => { + const { handed } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + await sink.write(MAIL); + const controller = new AbortController(); + vi.stubGlobal('Response', class { blob() { controller.abort(); return Promise.resolve(new Blob(['x'])); } }); + await expect(sink.close(controller.signal)).rejects.toMatchObject({ name: 'AbortError' }); + expect(handed).toEqual([]); + }); + + it('stops at its limit while writing, and the spool goes', async () => { + const { opfs } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox', 10))!; + await sink.write(new Uint8Array(10)); + await expect(sink.write(new Uint8Array(1))).rejects.toBeInstanceOf(ExportTooLargeError); + await sink.abort(); + expect(opfs.files.size).toBe(0); + }); + + it('a crash leaves only sealed bytes, which the sweep at the next start deletes', async () => { + const { opfs } = setUp(); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + await sink.write(MAIL.slice()); + // 1 MB forces a piece out; a crash here never reaches close or abort. + await sink.write(new Uint8Array(1 << 20)); + expect(asText(opfs.written)).not.toContain('secret'); + expect(opfs.files.size).toBe(1); + // The tab that held the file is gone: its lock is free again. + await sweepPrivateExports(); + expect(opfs.files.size).toBe(0); + }); +}); + +describe('where the final Blob sits in memory', () => { + const AGENTS: [string, string, boolean][] = [ + ['Safari', 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/26.0 Safari/605.1.15', true], + ['Chrome on iOS, which is WebKit', 'Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) CriOS/130.0 Mobile/15E148 Safari/604.1', true], + ['Firefox on iOS, which is WebKit', 'Mozilla/5.0 (iPhone; CPU iPhone OS 18_0 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) FxiOS/130.0 Mobile/15E148 Safari/605.1.15', true], + ['Chrome', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36', false], + ['Edge', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Safari/537.36 Edg/147.0', false], + ['Firefox', 'Mozilla/5.0 (Windows NT 10.0; rv:148.0) Gecko/20100101 Firefox/148.0', false], + ['the desktop app', 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/147.0.0.0 Electron/40.0.0 Safari/537.36', false], + ]; + + it.each(AGENTS)('%s', (_name, userAgent, inMemory) => { + vi.stubGlobal('navigator', { userAgent }); + expect(blobHeldInMemory()).toBe(inMemory); + expect(spoolLimit()).toBe(inMemory ? SPOOL_MEMORY_LIMIT : Infinity); + }); + + it('a spool on such an engine takes the cap by default', async () => { + const opfs = fakeOpfs(); + vi.stubGlobal('navigator', { userAgent: AGENTS[0][1], storage: { getDirectory: async () => opfs.root }, locks: fakeLocks(new Set()) }); + const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; + // Nothing this size is allocated: the check is on the length it is told. + const huge = { length: SPOOL_MEMORY_LIMIT + 1 } as Uint8Array; + await expect(sink.write(huge)).rejects.toMatchObject({ name: 'ExportTooLargeError', limit: SPOOL_MEMORY_LIMIT }); + }); +}); + +describe('a finished export held for its download', () => { + function stubUrls() { + // What earlier tests left held. + dropExportFiles('all'); + const revoke = vi.fn(); + let n = 0; + vi.stubGlobal('URL', Object.assign(URL, { createObjectURL: () => `blob:${++n}`, revokeObjectURL: revoke })); + return revoke; + } + + async function finished(scope: string) { + useMailTransferStore.setState({ job: { kind: 'export', scope, controller: new AbortController(), progress: { phase: 'running', exported: 0, failed: 0, failures: [], total: 0, fraction: 0 } } }); + const sink = memorySink('a.mbox', 'application/mbox'); + await sink.write(new Uint8Array(3)); + const file = await sink.close(); + useMailTransferStore.setState({ job: null }); + return file; + } + + it('goes at a sign-out of its account while it waits out the grace period, with the dialog closed', async () => { + const revoke = stubUrls(); + vi.useFakeTimers(); + const file = await finished('acc'); + void file.discard(); + expect(revoke).not.toHaveBeenCalled(); + dropExportFiles('someone-else'); + expect(revoke).not.toHaveBeenCalled(); + dropExportFiles('acc'); + expect(revoke).toHaveBeenCalledTimes(1); + // Nothing to do when the wait ends. + await vi.advanceTimersByTimeAsync(downloadGraceMs(3)); + expect(revoke).toHaveBeenCalledTimes(1); + }); + + it('goes when everything goes', async () => { + const revoke = stubUrls(); + await finished('acc'); + const opfs = fakeOpfs(); + vi.stubGlobal('navigator', { storage: { getDirectory: async () => opfs.root } }); + await sweepPrivateExports({ force: true }); + expect(revoke).toHaveBeenCalledTimes(1); + }); + + it('can\'t be downloaded once it has gone', async () => { + stubUrls(); + const anchors: string[] = []; + vi.stubGlobal('document', { createElement: () => ({ click() { anchors.push('clicked'); }, remove() {} }), body: { appendChild() {} } }); + const file = await finished('acc'); + expect(anchors).toEqual(['clicked']); + dropExportFiles('acc'); + file.download?.(); + expect(anchors).toEqual(['clicked']); + }); +}); + +describe('the file the user picked', () => { + function picked(handle: Record<string, unknown>) { + const writable = { write: vi.fn(async () => {}), close: vi.fn(async () => {}), abort: vi.fn(async () => {}) }; + vi.stubGlobal('window', { showSaveFilePicker: async () => ({ createWritable: async () => writable, ...handle }) }); + return writable; + } + + it('is removed on an abort where the browser can', async () => { + const remove = vi.fn(async () => {}); + const writable = picked({ remove }); + const sink = await pickSaveFile('a.mbox', 'application/mbox', '.mbox'); + expect(await sink.abort()).toEqual({}); + expect(writable.abort).toHaveBeenCalled(); + expect(remove).toHaveBeenCalled(); + }); + + it('says so where it can\'t be removed', async () => { + picked({}); + expect(await (await pickSaveFile('a.mbox', 'application/mbox', '.mbox')).abort()).toEqual({ leftover: 'a.mbox' }); + picked({ remove: async () => { throw new Error('no'); } }); + expect(await (await pickSaveFile('a.mbox', 'application/mbox', '.mbox')).abort()).toEqual({ leftover: 'a.mbox' }); + }); + + it('names the file as the person named it', async () => { + picked({ name: 'my backup.mbox' }); + expect(await (await pickSaveFile('a.mbox', 'application/mbox', '.mbox')).abort()).toEqual({ leftover: 'my backup.mbox' }); + }); + + it('isn\'t finished when stopped first', async () => { + const writable = picked({}); + const sink = await pickSaveFile('a.mbox', 'application/mbox', '.mbox'); + const controller = new AbortController(); + controller.abort(); + await expect(sink.close(controller.signal)).rejects.toMatchObject({ name: 'AbortError' }); + expect(writable.close).not.toHaveBeenCalled(); + }); +}); + +describe('guardedSink', () => { + function fakeSink(): ExportSink & { write: ReturnType<typeof vi.fn>; close: ReturnType<typeof vi.fn> } { + return { + kind: 'picker', + write: vi.fn(async () => {}), + close: vi.fn(async () => ({ name: 'x', size: 0, discard: async () => {} })), + abort: vi.fn(async () => {}), + }; + } + + it('passes writes through while allowed', async () => { + const inner = fakeSink(); + const sink = guardedSink(inner, () => true); + await sink.write(new Uint8Array(1)); + await sink.close(); + expect(inner.write).toHaveBeenCalledTimes(1); + expect(inner.close).toHaveBeenCalledTimes(1); + }); + + it('stops a write and a close the moment the policy says no', async () => { + const inner = fakeSink(); + const sink = guardedSink(inner, () => false); + await expect(sink.write(new Uint8Array(1))).rejects.toBeInstanceOf(ExportForbiddenError); + await expect(sink.close()).rejects.toBeInstanceOf(ExportForbiddenError); + expect(inner.write).not.toHaveBeenCalled(); + expect(inner.close).not.toHaveBeenCalled(); + }); +}); + +describe('openExportSink', () => { + it('uses the picker where there is one, and nothing else when the user closes it', async () => { const opfs = fakeOpfs(); vi.stubGlobal('navigator', { storage: { getDirectory: async () => opfs.root }, locks: fakeLocks(new Set()) }); - vi.stubGlobal('URL', Object.assign(URL, { createObjectURL: () => 'blob:x', revokeObjectURL: vi.fn() })); - const sink = (await privateFileSink('a.mbox', 'application/mbox'))!; - await sink.write(new Uint8Array(10)); - await (await sink.close()).discard(true); + vi.stubGlobal('window', { showSaveFilePicker: async () => { throw new DOMException('closed', 'AbortError'); } }); + expect(await openExportSink('a.mbox', 'application/mbox', '.mbox')).toBeNull(); expect(opfs.files.size).toBe(0); + vi.stubGlobal('window', { showSaveFilePicker: async () => ({ createWritable: async () => ({ write: async () => {}, close: async () => {}, abort: async () => {} }) }) }); + expect((await openExportSink('a.mbox', 'application/mbox', '.mbox'))?.kind).toBe('picker'); + }); + + it('goes to the spool where there is no picker', async () => { + const opfs = fakeOpfs(); + vi.stubGlobal('navigator', { storage: { getDirectory: async () => opfs.root }, locks: fakeLocks(new Set()) }); + expect((await openExportSink('a.mbox', 'application/mbox', '.mbox'))?.kind).toBe('private'); }); }); diff --git a/lib/mail-export/engine.ts b/lib/mail-export/engine.ts index a49f5a724..c70386353 100644 --- a/lib/mail-export/engine.ts +++ b/lib/mail-export/engine.ts @@ -30,20 +30,44 @@ export interface ExportFolder { path: string[]; } +export type NotKeptReason = "attachments_off" | "not_kept"; + +/** + * A local-store export has no original of this message and can't reach the + * server. Counted by reason in `notKept`, not listed one by one. + */ +export class MessageNotKeptError extends Error { + constructor(readonly reason: NotKeptReason) { + super("The original of this message is not on this device"); + this.name = "MessageNotKeptError"; + } +} + export interface ExportProgress { phase: ExportPhase; exported: number; failed: number; failures: { label: string; reason: string }[]; + /** The part of `failed` a local-store export had no original for, by reason. */ + notKept?: Partial<Record<NotKeptReason, number>>; total: number; fraction: number; pausedUntil?: number; file?: ExportFile; error?: string; + /** What stopped it, as the error's name: a dialog says this in the user's language. */ + errorCode?: string; + /** The limit an ExportTooLargeError ran into, in bytes. */ + errorLimit?: number; + /** A file in the place the user picked that couldn't be removed after a run that wrote nothing whole. */ + leftover?: string; } +/** What an export reads through: the real client, or lib/mail-export/local-store-client.ts. */ +export type ExportClient = Pick<IJMAPClient, "queryEmailFields" | "getBlobsAsBase64" | "fetchBlobForTransfer" | "fetchBlob" | "getMaxConcurrentRequests">; + export interface ExportOptions { - client: IJMAPClient; + client: ExportClient; accountId: string; folders: ExportFolder[]; format: ExportFormat; @@ -53,7 +77,12 @@ export interface ExportOptions { now?: () => number; sleep?: (ms: number, signal: AbortSignal) => Promise<void>; reportEveryMs?: number; - /** Requests per minute the export allows itself (the server's limit is 1000 for everything). */ + /** No file when nothing was written, also when nothing failed: the person chose mail, not an empty file. */ + noEmptyFile?: boolean; + /** + * Requests per minute the export allows itself (the server's limit is 1000 for + * everything). Infinity for a client that keeps to the limit itself. + */ requestsPerMinute?: number; } @@ -74,6 +103,10 @@ const BATCH_COUNT = 100; const MAX_FAILURES_LISTED = 20; const RETRY_DELAYS_MS = [500, 2000, 5000]; +function leftoverOf(aborted: { leftover?: string } | void | undefined): string | undefined { + return aborted ? aborted.leftover : undefined; +} + function isAbort(error: unknown): boolean { return (error as { name?: string } | null)?.name === "AbortError"; } @@ -141,10 +174,11 @@ export function folderTree(mailboxes: Mailbox[]): ExportFolder[] { } /** Keeps the export under a number of requests per minute. */ -class RateGate { +export class RateGate { private times: number[] = []; constructor(private readonly perMinute: number, private readonly now: () => number, private readonly sleep: (ms: number) => Promise<void>) {} async take(): Promise<void> { + if (this.perMinute === Infinity) return; for (;;) { const t = this.now(); this.times = this.times.filter((x) => t - x < 60_000); @@ -167,7 +201,7 @@ export async function runExport(options: ExportOptions): Promise<ExportProgress> if (!force && t - lastReport < (options.reportEveryMs ?? 150)) return; lastReport = t; progress.fraction = progress.total > 0 ? Math.min(1, (progress.exported + progress.failed) / progress.total) : 0; - options.onProgress({ ...progress, failures: [...progress.failures] }); + options.onProgress({ ...progress, failures: [...progress.failures], ...(progress.notKept ? { notKept: { ...progress.notKept } } : {}) }); }; const fail = (label: string, reason: string) => { progress.failed++; @@ -319,7 +353,14 @@ export async function runExport(options: ExportOptions): Promise<ExportProgress> const raw = results[i]; seq++; if (raw instanceof Error) { - fail(ref.subject, raw.message); + if (raw.name === "MessageNotKeptError") { + const { reason } = raw as MessageNotKeptError; + progress.failed++; + progress.notKept = { ...progress.notKept, [reason]: (progress.notKept?.[reason] ?? 0) + 1 }; + } else { + fail(ref.subject, raw.message); + } + report(); continue; } if (options.format === "mbox") { @@ -335,18 +376,33 @@ export async function runExport(options: ExportOptions): Promise<ExportProgress> } if (stream) await stream.close(); } - if (zip) await zip.finish(); - progress.file = await sink.close(); + // A cancel with nothing left to fetch must not close and hand out the file. + if (signal.aborted) throw cancelled(); + if (progress.exported === 0 && (progress.failed > 0 || options.noEmptyFile)) { + // Every message failed: an empty file would only look like a backup. + progress.leftover = leftoverOf(await sink.abort()); + } else { + if (zip) await zip.finish(); + const file = await sink.close(signal); + // Stopped while the file was being finished: it goes, and nobody gets to download it. + if (signal.aborted) { + await file.discard(true).catch(() => {}); + throw cancelled(); + } + progress.file = file; + } progress.phase = "done"; progress.fraction = 1; } catch (error) { - await sink.abort().catch(() => {}); + progress.leftover = leftoverOf(await sink.abort().catch(() => undefined)); progress.pausedUntil = undefined; if (isAbort(error) || signal.aborted) { progress.phase = "cancelled"; } else { progress.phase = "failed"; progress.error = error instanceof Error ? error.message : String(error); + progress.errorCode = (error as { name?: string } | null)?.name; + progress.errorLimit = (error as { limit?: number } | null)?.limit; } } report(true); diff --git a/lib/mail-export/local-store-client.ts b/lib/mail-export/local-store-client.ts new file mode 100644 index 000000000..edd4943c6 --- /dev/null +++ b/lib/mail-export/local-store-client.ts @@ -0,0 +1,149 @@ +/** + * What an export reads from when it runs from the local store: the methods + * lib/mail-export/engine.ts uses, answered from the store. A message comes as the + * raw original the store kept, never rebuilt, since a rebuilt one loses signatures + * and exact bytes. For one that isn't kept, the real client fetches it as usual + * when the server can be reached. Otherwise it's a MessageNotKeptError, which the + * engine counts. + * + * Store reads have no rate limit, so the engine runs with no gate of its own and + * this keeps to the server's limit for what goes to the network. + */ + +import type { IJMAPClient } from '@/lib/jmap/client-interface'; +import { isStandInId, newStandInId } from '@/lib/jmap/stand-in-ids'; +import type { Mailbox } from '@/lib/jmap/types'; +import type { StoreBackend } from '@/lib/store/client/api'; +import type { MethodCall } from '@/lib/store/engine/transport'; +import { MessageNotKeptError, RateGate, type ExportClient, type NotKeptReason } from './engine'; + +const PAGE = 500; +const REQUESTS_PER_MINUTE = 600; +/** Failed downloads in a row before the rest of the run stops trying the network. */ +const NETWORK_TRIES = 3; + +type RawAnswer = { ok: true; blob: Blob } | { ok: false; reason: NotKeptReason }; + +export interface LocalExportClientOptions { + account: string; + /** The JMAP account in the store (not the local account id). */ + jmap: string; + store: Pick<StoreBackend, 'answer' | 'area'>; + /** The real client if the server may be reached right now, else null. Asked for each message. */ + online: () => Partial<Pick<IJMAPClient, 'fetchBlobForTransfer' | 'getBlobsAsBase64' | 'getMaxConcurrentRequests'>> | null; + /** Keeps what goes to the network to the server's pace. A test can pass its own. */ + gate?: Pick<RateGate, 'take'>; +} + +export type LocalExportClient = ExportClient & { getMailboxes(): Promise<Mailbox[]> }; + +function isAbort(error: unknown): boolean { + return (error as { name?: string } | null)?.name === 'AbortError'; +} + +/** A fetch that never got an answer: TypeError in every browser, whatever it says, or the client's own time-out. */ +function isNetworkFailure(error: unknown): boolean { + if (isAbort(error)) return false; + const { name, message } = (error ?? {}) as { name?: string; message?: string }; + return name === 'TypeError' || /network|timed out/i.test(message ?? ''); +} + +function networkGate(): RateGate { + return new RateGate(REQUESTS_PER_MINUTE, Date.now, (ms) => new Promise((resolve) => setTimeout(resolve, ms))); +} + +export function localExportClient({ account, jmap, store, online, gate = networkGate() }: LocalExportClientOptions): LocalExportClient { + let networkMisses = 0; + const reachable = () => (networkMisses >= NETWORK_TRIES ? null : online()); + + const call = async <T>(name: string, args: Record<string, unknown>): Promise<T> => { + const calls: MethodCall[] = [[name, { accountId: jmap, ...args }, '0']]; + const answer = await store.answer(account, calls); + const [method, result] = answer?.methodResponses?.[0] ?? []; + if (!answer || method === 'error') { + const refusal = result as { description?: string; type?: string } | undefined; + // A request whose only call is refused comes back as no answer at all. + throw Object.assign(new Error(String(refusal?.description ?? refusal?.type ?? `${name} got no answer`)), { refusal: refusal?.type ?? 'serverUnavailable' }); + } + return result as T; + }; + + /** + * A folder with nothing in it refuses while a full listing runs: the store can't + * tell empty from not listed yet. To an export that's an empty folder, so what's + * kept in the other folders still goes out. Only when the store's own count says + * it holds nothing: any other refusal must not pass for an empty folder, or the + * person gets a file that's missing mail and no word about it. + */ + const queryIds = async (args: Record<string, unknown>): Promise<string[]> => { + try { + return (await call<{ ids: string[] }>('Email/query', args)).ids; + } catch (error) { + if ((error as { refusal?: string }).refusal !== 'serverUnavailable') throw error; + const mailboxId = (args.filter as { inMailbox?: string } | undefined)?.inMailbox; + const { total } = await store.area<{ total: number }>(account, 'mail.rawStatus', { jmap, mailboxId }); + if (total === 0) return []; + throw error; + } + }; + + const fetchBlobForTransfer = async (blobId: string, _accountId: string | undefined, signal?: AbortSignal): Promise<Uint8Array> => { + // A draft written on this device: the server has never heard of it, and it has no original yet. + if (isStandInId(blobId)) throw new MessageNotKeptError('not_kept'); + const kept = await store.area<RawAnswer>(account, 'mail.rawBlob', { jmap, blobId }); + if (kept.ok) return new Uint8Array(await kept.blob.arrayBuffer()); + const real = reachable(); + if (!real?.fetchBlobForTransfer) throw new MessageNotKeptError(kept.reason); + await gate.take(); + try { + const bytes = await real.fetchBlobForTransfer(blobId, jmap, signal); + networkMisses = 0; + return bytes; + } catch (error) { + if (!isNetworkFailure(error)) throw error; + networkMisses += 1; + // The engine tries this again; by the last try this message counts as not kept. + throw new Error('network failure'); + } + }; + + return { + getMailboxes: async () => (await call<{ list: Mailbox[] }>('Mailbox/get', { ids: null })).list, + + queryEmailFields: async (filter, properties, _accountId, limit = Number.MAX_SAFE_INTEGER) => { + const emails: Record<string, unknown>[] = []; + for (let position = 0; emails.length < limit;) { + const ids = await queryIds({ + filter, + sort: [{ property: 'receivedAt', isAscending: false }], + position, + limit: Math.min(PAGE, limit - emails.length), + }); + if (ids.length === 0) break; + const { list } = await call<{ list: Record<string, unknown>[] }>('Email/get', { ids, properties }); + // A message with no blobId still counts: the engine leaves such a row out silently. + emails.push(...list.map((email) => (typeof email.blobId === 'string' ? email : { ...email, blobId: newStandInId() }))); + position += ids.length; + if (ids.length < PAGE) break; + } + return emails as never; + }, + + getBlobsAsBase64: async (blobIds) => { + const real = reachable(); + const wanted = blobIds.filter((blobId) => !isStandInId(blobId)); + if (!real?.getBlobsAsBase64 || wanted.length === 0) return null; + const kept = new Set(await store.area<string[]>(account, 'mail.rawKept', { jmap, blobIds: wanted })); + const missing = wanted.filter((blobId) => !kept.has(blobId)); + if (missing.length === 0) return null; + await gate.take(); + return real.getBlobsAsBase64(missing, jmap, { sized: true }); + }, + + fetchBlobForTransfer, + + fetchBlob: async (blobId) => new Blob([await fetchBlobForTransfer(blobId, jmap) as BlobPart]), + + getMaxConcurrentRequests: () => online()?.getMaxConcurrentRequests?.() ?? 4, + }; +} diff --git a/lib/mail-export/sinks.ts b/lib/mail-export/sinks.ts index 30908697d..ec0c82446 100644 --- a/lib/mail-export/sinks.ts +++ b/lib/mail-export/sinks.ts @@ -7,12 +7,19 @@ import { useMailTransferStore } from "@/stores/mail-transfer-store"; * * 1. File System Access (Chrome, Edge): the user picks the file first and the * export writes straight into it. - * 2. The origin private file system (Firefox, Safari): written to a private - * file on disk, then downloaded. The file is deleted a while after the - * dialog closes (so the download can finish), at once on sign-out, and by - * a sweep when the app starts, someone signs in or the next export starts. - * Each file is held under a Web Lock while its tab uses it, so the sweep - * of another tab leaves it alone. + * 2. The origin private file system (Firefox, Safari): an encrypted spool, so + * no readable mail is ever in those files. Each 1 MB piece is sealed with + * AES-GCM under a key made for this export, which can't be exported and is + * only ever in this tab's memory: a crash leaves bytes nobody can read. + * When the export is done the pieces are opened into a Blob the browser + * holds (Firefox and Chromium keep a large one in their own temporary + * storage; WebKit holds it in memory, so there the export has a cap), the + * spool is deleted at once, and the Blob is downloaded. The + * Blob goes a while after the dialog closes, so the download can finish, or + * at once on sign-out or a wipe. A sweep deletes what a crash left when the + * app starts, someone signs in or the next export starts. Each spool is + * held under a Web Lock while its tab uses it, so the sweep of another tab + * leaves it alone. * 3. Memory, for small exports only, where neither exists. * * Writes are gathered into 1 MB pieces: a message arrives in many small parts. @@ -30,8 +37,10 @@ export interface ExportFile { export interface ExportSink { kind: "picker" | "private" | "memory"; write(chunk: Uint8Array): Promise<void>; - close(): Promise<ExportFile>; - abort(): Promise<void>; + /** Finishes the file. If `signal` fires, nothing is handed out and it rejects. */ + close(signal?: AbortSignal): Promise<ExportFile>; + /** Throws away what was written. `leftover`: a file it couldn't remove from where the user put it. */ + abort(): Promise<{ leftover?: string } | void>; } export class ExportTooLargeError extends Error { @@ -41,11 +50,21 @@ export class ExportTooLargeError extends Error { } } +/** The device policy "No export" came on while the export ran. */ +export class ExportForbiddenError extends Error { + constructor() { + super("The organisation doesn't allow exporting mail on this device"); + this.name = "ExportForbiddenError"; + } +} + /** The most a memory-only export may hold. */ export const MEMORY_EXPORT_LIMIT = 200 * 1024 * 1024; +/** The most a spool may hold where its final Blob sits in memory: see spoolLimit. */ +export const SPOOL_MEMORY_LIMIT = 1024 * 1024 * 1024; const PRIVATE_DIR = "bulwark-exports"; const LOCK_PREFIX = "bulwark-export-file:"; -/** How long a closed export's private file stays for its download: a minute, plus a second per 50 MB. */ +/** How long a closed export's Blob stays for its download: a minute, plus a second per 50 MB. */ export function downloadGraceMs(size: number): number { return 60_000 + Math.ceil(size / 50_000_000) * 1000; } @@ -95,7 +114,79 @@ function triggerDownload(url: string, name: string): void { saveBlobAs(url, name, { kind: "export", subject: scope && scope !== "default" ? scope : null }); } -type SavePicker = (options: { suggestedName?: string; types?: { description?: string; accept: Record<string, string[]> }[] }) => Promise<{ createWritable(): Promise<WritableLike> }>; +type SavePicker = (options: { suggestedName?: string; types?: { description?: string; accept: Record<string, string[]> }[] }) => Promise<{ name?: string; createWritable(): Promise<WritableLike>; remove?(): Promise<void> }>; + +function stopped(): DOMException { + return new DOMException("Export cancelled", "AbortError"); +} + +/** + * An engine that keeps a large Blob in memory: every browser on iOS, and Safari. + * Firefox and Chromium move a large one to their own temporary storage. + */ +export function blobHeldInMemory(): boolean { + const agent = typeof navigator === "undefined" ? "" : navigator.userAgent ?? ""; + return /AppleWebKit/.test(agent) && !/Chrome\/|Chromium\/|Edg\//.test(agent); +} + +/** + * How much a spool may hold before it stops. On an engine holding the Blob in memory + * it fails early: a tab killed with no message after hours is what this is for. + */ +export function spoolLimit(): number { + return blobHeldInMemory() ? SPOOL_MEMORY_LIMIT : Infinity; +} + +/** What holds a finished export in this browser, until it's released. */ +interface LiveFile { + url: string; + scope: string | null; +} + +const liveFiles = new Set<LiveFile>(); + +/** The object URL is what keeps the Blob alive: once it's revoked nothing else here refers to it. */ +function holdFile(blob: Blob): LiveFile { + const scope = useMailTransferStore.getState().job?.scope; + const file: LiveFile = { url: URL.createObjectURL(blob), scope: scope && scope !== "default" ? scope : null }; + liveFiles.add(file); + return file; +} + +function releaseFile(file: LiveFile): void { + if (!liveFiles.delete(file)) return; + URL.revokeObjectURL(file.url); +} + +/** + * Drops finished exports still held for their download, also after the dialog closed: + * a sign-out or a wipe doesn't wait out the grace period. `all`: whoever's they are. + */ +export function dropExportFiles(account: string): void { + for (const file of [...liveFiles]) { + if (account === "all" || file.scope === null || file.scope === account) releaseFile(file); + } +} + +/** A file downloaded when done, for as long as the Blob is held. */ +function downloadableFile(name: string, blob: Blob): ExportFile { + const size = blob.size; + const held = holdFile(blob); + const download = () => { + if (liveFiles.has(held)) triggerDownload(held.url, name); + }; + download(); + return { + name, + size, + download, + discard: async (now = false) => { + // Taking the Blob away from a download that is still reading it would break the download. + if (!now) await new Promise((resolve) => setTimeout(resolve, downloadGraceMs(size))); + releaseFile(held); + }, + }; +} /** Whether this browser can write a private file from the page (Safari before 26 can't). */ export function canWritePrivateFile(): boolean { @@ -121,12 +212,25 @@ export async function pickSaveFile(name: string, mime: string, extension: string return { kind: "picker", write: (chunk) => buf.write(chunk), - close: async () => { + close: async (signal) => { await buf.flush(); + if (signal?.aborted) throw stopped(); await writable.close(); return { name, size: buf.total, discard: async () => {} }; }, - abort: async () => { await writable.abort().catch(() => {}); }, + abort: async () => { + await writable.abort().catch(() => {}); + // The picker made or emptied the file the moment it answered. Not every browser can remove it. + // What the person called it in the picker, which needn't be what was suggested. + const leftover = { leftover: handle.name ?? name }; + if (typeof handle.remove !== "function") return leftover; + try { + await handle.remove(); + return {}; + } catch { + return leftover; + } + }, }; } @@ -139,10 +243,38 @@ async function privateDir(): Promise<FileSystemDirectoryHandle | null> { } } -/** A private file on disk, downloaded when done; null where the browser can't write one from the page. */ -export async function privateFileSink(name: string, mime: string): Promise<ExportSink | null> { +/** The IV of a piece: its number. A key seals one spool, so a number never repeats under it. */ +function pieceIv(piece: number): Uint8Array<ArrayBuffer> { + const iv = new Uint8Array(12); + new DataView(iv.buffer).setUint32(8, piece); + return iv; +} + +/** Reads the pieces back in order, one at a time, opened. A piece that was changed fails the read. */ +function openedPieces(file: Blob, sizes: readonly number[], key: CryptoKey, signal?: AbortSignal): ReadableStream<Uint8Array> { + let piece = 0; + let at = 0; + return new ReadableStream<Uint8Array>({ + async pull(controller) { + if (signal?.aborted) throw stopped(); + if (piece === sizes.length) { + controller.close(); + return; + } + const size = sizes[piece]; + const sealed = await file.slice(at, at + size).arrayBuffer(); + controller.enqueue(new Uint8Array(await crypto.subtle.decrypt({ name: "AES-GCM", iv: pieceIv(piece) }, key, sealed))); + piece += 1; + at += size; + }, + }); +} + +/** An encrypted spool on disk, downloaded when done; null where the browser can't write one from the page. */ +export async function privateFileSink(name: string, mime: string, limit = spoolLimit()): Promise<ExportSink | null> { const dir = await privateDir(); - if (!dir) return null; + if (!dir || !globalThis.crypto?.subtle) return null; + const key = await crypto.subtle.generateKey({ name: "AES-GCM", length: 256 }, false, ["encrypt", "decrypt"]); const entry = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`; // Held until the file is gone, so no other tab's sweep deletes it meanwhile. const release = (await holdLock(`${LOCK_PREFIX}${entry}`)) ?? (() => {}); @@ -162,36 +294,53 @@ export async function privateFileSink(name: string, mime: string): Promise<Expor release(); return null; } - const buf = buffered((chunk) => writable.write(chunk as BufferSource)); + const sizes: number[] = []; + const buf = buffered(async (chunk) => { + const sealed = new Uint8Array(await crypto.subtle.encrypt({ name: "AES-GCM", iv: pieceIv(sizes.length) }, key, chunk as BufferSource)); + await writable.write(sealed); + sizes.push(sealed.length); + }); const remove = async () => { await dir.removeEntry(entry).catch(() => {}); release(); }; return { kind: "private", - write: (chunk) => buf.write(chunk), - close: async () => { + write: async (chunk) => { + if (buf.total + chunk.length > limit) throw new ExportTooLargeError(limit); + await buf.write(chunk); + }, + close: async (signal) => { await buf.flush(); await writable.close(); - const file = await handle.getFile(); - const url = URL.createObjectURL(new Blob([file], { type: mime })); - triggerDownload(url, name); - return { - name, - size: file.size, - download: () => triggerDownload(url, name), - discard: async (now = false) => { - // Deleting the file under a download that is still reading it would break the download. - if (!now) await new Promise((resolve) => setTimeout(resolve, downloadGraceMs(file.size))); - URL.revokeObjectURL(url); - await remove(); - }, - }; + // Through a Response so the browser may spill a large Blob to its own storage. + const opened = await new Response(openedPieces(await handle.getFile(), sizes, key, signal)).blob(); + // A cancel, sign-out or wipe during that: the Blob is dropped here and nothing downloads. + if (signal?.aborted) throw stopped(); + await remove(); + return downloadableFile(name, new Blob([opened], { type: mime })); }, abort: async () => { await writable.abort().catch(() => {}); await remove(); }, }; } +/** + * The sink for an export: the file the user picks where the browser can ask (in + * the desktop app that's the OS's Save dialog), else the encrypted spool, else + * memory. Null when the user closed the picker. Call it straight from the click. + */ +export async function openExportSink(name: string, mime: string, extension: string): Promise<ExportSink | null> { + if (canPickSaveFile()) { + try { + return await pickSaveFile(name, mime, extension); + } catch (error) { + if ((error as { name?: string } | null)?.name === "AbortError") return null; + } + } + await sweepPrivateExports(); + return (await privateFileSink(name, mime)) ?? memorySink(name, mime); +} + /** Everything in memory, then downloaded: only for small exports. */ export function memorySink(name: string, mime: string, limit = MEMORY_EXPORT_LIMIT): ExportSink { let parts: Uint8Array[] = []; @@ -203,32 +352,49 @@ export function memorySink(name: string, mime: string, limit = MEMORY_EXPORT_LIM if (size > limit) throw new ExportTooLargeError(limit); parts.push(chunk.slice()); }, - close: async () => { + close: async (signal) => { + if (signal?.aborted) { + parts = []; + throw stopped(); + } const blob = new Blob(parts as BlobPart[], { type: mime }); parts = []; - const url = URL.createObjectURL(blob); - triggerDownload(url, name); - return { - name, - size: blob.size, - download: () => triggerDownload(url, name), - discard: async (now = false) => { - if (!now) await new Promise((resolve) => setTimeout(resolve, downloadGraceMs(blob.size))); - URL.revokeObjectURL(url); - }, - }; + return downloadableFile(name, blob); }, abort: async () => { parts = []; }, }; } /** - * Deletes private export files no tab uses any more (a closed tab, a crash), - * so no copy of the mail stays in the browser profile. A file another tab - * holds is left alone; `force` deletes everything (everyone signed out). + * Stops an export the moment `allowed` says no, whichever sink it writes to: the + * save picker writes straight to the user's file, past the guard in saveBlobAs. + */ +export function guardedSink(sink: ExportSink, allowed: () => boolean): ExportSink { + const check = () => { + if (!allowed()) throw new ExportForbiddenError(); + }; + return { + kind: sink.kind, + write: async (chunk) => { + check(); + await sink.write(chunk); + }, + close: async (signal) => { + check(); + return sink.close(signal); + }, + abort: () => sink.abort(), + }; +} + +/** + * Deletes private export files no tab uses any more (a closed tab, a crash). + * They're encrypted under a key that died with the tab, but one from an older + * version is plain, and they take up room. A file another tab holds is left alone; `force` deletes everything (everyone signed out). * Without Web Locks only `force` sweeps, since another tab can't be asked. */ export async function sweepPrivateExports({ force = false }: { force?: boolean } = {}): Promise<void> { + if (force) dropExportFiles("all"); if (!force && !hasWebLocks()) return; try { const root = await navigator.storage?.getDirectory?.(); diff --git a/lib/offline/__tests__/device-wipe.test.ts b/lib/offline/__tests__/device-wipe.test.ts new file mode 100644 index 000000000..96a0369b2 --- /dev/null +++ b/lib/offline/__tests__/device-wipe.test.ts @@ -0,0 +1,1273 @@ +import 'fake-indexeddb/auto'; +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; + +// What a wipe removes and what makes one happen. Real auth store, real offline +// mode, the store's real engine, real IndexedDB (fake-indexeddb): only the +// network is a stub, and the OPFS pool, which jsdom doesn't have. + +vi.mock('@/lib/compose-flush-registry', () => ({ flushComposers: vi.fn(async () => ({ total: 0, settled: 0, failed: 0, timedOut: false })) })); +const purge = vi.hoisted(() => ({ files: 0, fail: false, during: null as null | (() => void) })); +vi.mock('@/lib/store/client/purge', async () => { + const keys = await vi.importActual<typeof import('@/lib/store/client/keys')>('@/lib/store/client/keys'); + return { + purgeStoreFiles: async () => { + purge.during?.(); + if (purge.fail) throw new Error('The files are held'); + purge.files += 1; + keys.deleteKeyDatabase(); + }, + deleteStorePool: async () => {}, + }; +}); + +// A store and a full sign-out in each test: slow on a machine doing other work. +vi.setConfig({ testTimeout: 60_000 }); + +const ALICE = 'alice@mail.example.test'; +const BOB = 'bob@mail.example.test'; +const ROW = `${'a'.repeat(64)}/${'b'.repeat(32)}`; +const SECRET = 'c'.repeat(64); +const BOB_ROW = `${'d'.repeat(64)}/${'e'.repeat(32)}`; + +let wipe: typeof import('../device-wipe'); +let useAuthStore: typeof import('@/stores/auth-store').useAuthStore; +let useAccountStore: typeof import('@/stores/account-store').useAccountStore; +let state: typeof import('../state'); +let keys: typeof import('@/lib/store/client/keys'); +let wipeState: typeof import('@/lib/devices/wipe-state'); +let rejected: typeof import('../credentials-rejected'); +let registry: typeof import('../wipe-registry'); +let queue: typeof import('../queue'); +let store: import('@/lib/store/__tests__/helpers/in-process-store').InProcessStore; + +type Respond = (url: string, init?: RequestInit) => Response | Promise<Response>; +let respond: Respond; +let sent: Array<{ url: string; body: Record<string, unknown>; headers: Record<string, string> }>; + +const json = (status: number, body: unknown) => new Response(JSON.stringify(body), { status, headers: { 'Content-Type': 'application/json' } }); +const noWipe = () => json(200, { wipe: null }); +/** What the route gives a new row. */ +const newRow = (id = ROW) => json(200, { id, secret: SECRET, user: 'alice', server: 'https://mail.example.test' }); +const wipeNow = () => json(200, { wipe: { requestedAt: '2026-11-03T00:00:00.000Z' } }); + +function entry(id: string, cookieSlot: number) { + return { + id, label: id, serverUrl: 'https://mail.example.test', username: id.split('@mail')[0], authMode: 'basic', rememberMe: true, + displayName: id, email: id, lastLoginAt: 1, isConnected: true, hasError: false, isDefault: cookieSlot === 0, cookieSlot, avatarColor: '#000', + }; +} + +function openDb(name: string): Promise<void> { + return new Promise((resolve, reject) => { + const request = indexedDB.open(name, 1); + request.onupgradeneeded = () => { request.result.createObjectStore('s'); }; + request.onsuccess = () => { request.result.close(); resolve(); }; + request.onerror = () => reject(request.error); + }); +} + +async function databases(): Promise<string[]> { + return (await indexedDB.databases()).map((database) => database.name ?? '').sort(); +} + +async function freshIndexedDb(): Promise<void> { + for (const { name } of await indexedDB.databases()) { + if (name) await new Promise((resolve) => { const request = indexedDB.deleteDatabase(name); request.onsuccess = request.onerror = () => resolve(null); }); + } +} + +beforeEach(async () => { + vi.resetModules(); + purge.files = 0; + purge.fail = false; + purge.during = null; + localStorage.clear(); + sessionStorage.clear(); + await freshIndexedDb(); + sent = []; + respond = () => noWipe(); + vi.stubGlobal('fetch', vi.fn(async (input: unknown, init?: RequestInit) => { + const url = String(input); + if (url.includes('/api/devices')) sent.push({ url, body: init?.body ? JSON.parse(String(init.body)) : {}, headers: (init?.headers ?? {}) as Record<string, string> }); + return respond(url, init); + })); + delete (window as { bulwarkDesktop?: unknown }).bulwarkDesktop; + + ({ useAuthStore } = await import('@/stores/auth-store')); + ({ useAccountStore } = await import('@/stores/account-store')); + state = await import('../state'); + keys = await import('@/lib/store/client/keys'); + wipeState = await import('@/lib/devices/wipe-state'); + rejected = await import('../credentials-rejected'); + registry = await import('../wipe-registry'); + queue = await import('../queue'); + wipe = await import('../device-wipe'); + const browserNavigation = await import('@/lib/browser-navigation'); + vi.spyOn(browserNavigation, 'replaceWindowLocation').mockImplementation(() => {}); + const { InProcessStore } = await import('@/lib/store/__tests__/helpers/in-process-store'); + const { setStoreBackend } = await import('@/lib/store/client/api'); + store = new InProcessStore(); + setStoreBackend(store); + + useAccountStore.setState({ accounts: [entry(ALICE, 0)], activeAccountId: ALICE, defaultAccountId: ALICE } as never); + useAuthStore.setState({ isAuthenticated: true, activeAccountId: ALICE, authMode: 'basic', serverUrl: 'https://mail.example.test', username: 'alice' }); + state.writeEnabled([ALICE]); + await keys.openAccountKey(ALICE); + await keys.putDeviceRecord({ account: ALICE, id: ROW, secret: SECRET, createdAt: 1 }); +}, 60_000); + +/** The wipe goes on behind the start's budget, and takes its time under load. */ +async function waitForNoAccounts(): Promise<void> { + await vi.waitFor(() => expect(useAccountStore.getState().accounts).toEqual([]), { timeout: 20_000 }); +} + +function expectUntouched(): void { + expect(purge.files).toBe(0); + expect(store.removed).toEqual([]); + expect(state.useOfflineStore.getState().enabled).toEqual([ALICE]); + expect(useAccountStore.getState().accounts.map((account) => account.id)).toEqual([ALICE]); + expect(wipeState.readPendingWipes()).toEqual({}); +} + +describe('wipe on the next connect', () => { + beforeEach(() => { + respond = (url) => (url.endsWith('/api/devices/wiped') ? json(200, { ok: true }) : wipeNow()); + }); + + it('removes the store and every key, signs out, and tells the instance', async () => { + await queue.queueSend(ALICE, { subject: 'Secret plans', to: [] }, { kind: 'email', args: [] }); + await wipe.runDeviceGate(); + await waitForNoAccounts(); + + expect(purge.files).toBeGreaterThan(0); + expect(state.useOfflineStore.getState().enabled).toEqual([]); + expect(await databases()).not.toContain('bulwark-store'); + expect(useAuthStore.getState().isAuthenticated).toBe(false); + + const report = sent.find((call) => call.url.endsWith('/api/devices/wiped')); + expect(report?.body).toMatchObject({ id: ROW, secret: SECRET, reason: 'admin', unsent: 1 }); + expect(wipeState.readWipeConfirmations()).toEqual([]); + expect(wipeState.readPendingWipes()).toEqual({}); + }); + + it('notes the count for the next sign-in, and no subject anywhere', async () => { + await queue.queueSend(ALICE, { subject: 'Secret plans', to: [] }, { kind: 'email', args: [] }); + await wipe.runDeviceGate(); + await waitForNoAccounts(); + expect(JSON.stringify({ ...localStorage })).not.toContain('Secret plans'); + expect(JSON.stringify({ ...sessionStorage })).not.toContain('Secret plans'); + expect(wipeState.consumeWipeNote()).toEqual({ unsent: 1 }); + expect(wipeState.consumeWipeNote()).toBeNull(); + }); + + it('leaves a note with no count when nothing was waiting', async () => { + await wipe.runDeviceGate(); + await waitForNoAccounts(); + expect(wipeState.consumeWipeNote()).toEqual({ unsent: 0 }); + }); + + it('deletes S/MIME and OpenPGP keys by name, plugin data and handoffs, keeping the plugins themselves', async () => { + for (const name of ['smime-plugin-store', 'bulwark-openpgp', 'made-by-some-plugin']) await openDb(name); + const { fileStorage } = await import('@/lib/plugin-storage'); + const clearFiles = vi.spyOn(fileStorage, 'clearFiles').mockResolvedValue(); + const { pluginStoragePrefix } = await import('@/lib/plugin-sandbox/storage-scope'); + localStorage.setItem(`${pluginStoragePrefix('notes', ALICE)}note`, 'mine'); + localStorage.setItem('notification-center', '[{"title":"From Eve"}]'); + const { usePluginStore } = await import('@/stores/plugin-store'); + usePluginStore.setState({ plugins: [{ id: 'managed', managed: true, settings: { apiKey: 'k' } }] as never }); + const handoffs = await import('@/lib/launch-handoff'); + const clearHandoffs = vi.spyOn(handoffs, 'clearHandoffs'); + + await wipe.runDeviceGate(); + await waitForNoAccounts(); + + const left = await databases(); + for (const name of ['smime-plugin-store', 'bulwark-openpgp', 'made-by-some-plugin']) expect(left).not.toContain(name); + expect(localStorage.getItem(`${pluginStoragePrefix('notes', ALICE)}note`)).toBeNull(); + expect(localStorage.getItem('notification-center') ?? '[]').toBe('[]'); + expect(usePluginStore.getState().plugins[0].settings).toEqual({}); + expect(clearFiles).toHaveBeenCalled(); + expect(clearHandoffs).toHaveBeenCalled(); + }); + + it('runs what features registered, edit-in-place\'s files for one, with the account', async () => { + const cleaned: Array<string | null> = []; + registry.onDeviceWipe(async (account) => { cleaned.push(account); }); + await wipe.runDeviceGate(); + await waitForNoAccounts(); + expect(cleaned).toEqual([ALICE]); + }); + + it('a feature that fails or hangs doesn\'t stop the wipe', async () => { + registry.onDeviceWipe(() => { throw new Error('no'); }); + await wipe.runDeviceGate(); + await waitForNoAccounts(); + expect(purge.files).toBeGreaterThan(0); + }); + + it('only takes the account it was told, and keeps the other\'s store and row', async () => { + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + state.writeEnabled([ALICE, BOB]); + await keys.openAccountKey(BOB); + await keys.putDeviceRecord({ account: BOB, id: BOB_ROW, secret: SECRET, createdAt: 1 }); + respond = (url, init) => { + if (url.endsWith('/api/devices/wiped')) return json(200, { ok: true }); + return JSON.parse(String(init?.body)).id === ROW ? wipeNow() : noWipe(); + }; + + await wipe.runDeviceGate(); + await vi.waitFor(() => expect(useAccountStore.getState().accounts.map((account) => account.id)).toEqual([BOB])); + + expect(state.useOfflineStore.getState().enabled).toEqual([BOB]); + expect(store.removed).toContain(ALICE); + expect(store.removed).not.toContain(BOB); + expect(await keys.getDeviceRecord(ALICE)).toBeNull(); + expect((await keys.getDeviceRecord(BOB))?.id).toBe(BOB_ROW); + }); + + it('after the last of several accounts goes, the rest keep their row', async () => { + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + // Bob keeps nothing here but has a row: the desktop app, say. + await keys.putDeviceRecord({ account: BOB, id: BOB_ROW, secret: SECRET, createdAt: 1 }); + respond = (url, init) => { + if (url.endsWith('/api/devices/wiped')) return json(200, { ok: true }); + return JSON.parse(String(init?.body)).id === ROW ? wipeNow() : noWipe(); + }; + await wipe.runDeviceGate(); + await vi.waitFor(() => expect(useAccountStore.getState().accounts.map((account) => account.id)).toEqual([BOB])); + expect((await keys.getDeviceRecord(BOB))?.id).toBe(BOB_ROW); + }); + + it('reaches an account dropped earlier, whose data waits and which has no cookies', async () => { + useAccountStore.setState({ accounts: [] } as never); + useAuthStore.setState({ isAuthenticated: false, activeAccountId: null }); + state.markEvicted(ALICE); + await wipe.runDeviceGate(); + await vi.waitFor(() => expect(state.useOfflineStore.getState().enabled).toEqual([])); + expect(purge.files).toBeGreaterThan(0); + expect(state.isEvicted(ALICE)).toBe(false); + }); +}); + +describe('the report', () => { + it('goes out again at the next contact when it failed, with no account and no cookies', async () => { + let reportWorks = false; + respond = (url) => { + if (url.endsWith('/api/devices/wiped')) return reportWorks ? json(200, { ok: true }) : json(503, {}); + return wipeNow(); + }; + await wipe.runDeviceGate(); + await waitForNoAccounts(); + expect(wipeState.readWipeConfirmations().map((entry) => entry.id)).toEqual([ROW]); + + // A new page load, the sign-in page: everything else about the account is gone. + reportWorks = true; + await wipe.checkInDue(true); + await vi.waitFor(() => expect(wipeState.readWipeConfirmations()).toEqual([])); + const reports = sent.filter((call) => call.url.endsWith('/api/devices/wiped')); + expect(reports.length).toBeGreaterThanOrEqual(2); + expect(reports.at(-1)?.body).toMatchObject({ id: ROW, secret: SECRET }); + }); +}); + +describe('what never wipes', () => { + it.each([ + ['a 500', () => json(500, { error: 'Internal server error' })], + ['a 503 page', () => new Response('<html>Bad gateway</html>', { status: 503 })], + ['an older instance with no such route', () => new Response('<html>Not found</html>', { status: 404 })], + ['a 401', () => json(401, { error: 'Not authenticated' })], + ['a 200 that says nothing', () => json(200, {})], + ])('%s', async (_name, answer) => { + respond = answer; + await wipe.runDeviceGate(); + await new Promise((resolve) => setTimeout(resolve, 20)); + expectUntouched(); + }); + + it('no network, and the row keeps waiting at the instance: nothing was reported', async () => { + respond = () => { throw new TypeError('Failed to fetch'); }; + await wipe.runDeviceGate(); + await new Promise((resolve) => setTimeout(resolve, 20)); + expectUntouched(); + expect(sent.filter((call) => call.url.endsWith('/api/devices/wiped'))).toEqual([]); + }); + + it('a browser that says it\'s offline doesn\'t even ask', async () => { + vi.spyOn(navigator, 'onLine', 'get').mockReturnValue(false); + await wipe.runDeviceGate(); + vi.restoreAllMocks(); + expect(sent).toEqual([]); + expectUntouched(); + }); + + it('a forgotten row: this device registers anew and keeps its data', async () => { + respond = (_url, init) => { + const { id } = JSON.parse(String(init?.body)) as { id?: string }; + return id ? json(404, { error: 'unknown_device' }) : newRow(BOB_ROW); + }; + await wipe.runDeviceGate(); + expectUntouched(); + expect(await keys.getDeviceRecord(ALICE)).toBeNull(); + await wipe.checkInDue(true); + await vi.waitFor(async () => expect((await keys.getDeviceRecord(ALICE))?.id).toBe(BOB_ROW)); + }); +}); + +describe('a start', () => { + it('waits for the answer, at most for its budget, and a late yes still wipes', async () => { + let release: (response: Response) => void = () => {}; + respond = (url) => { + if (url.endsWith('/api/devices/wiped')) return json(200, { ok: true }); + return new Promise<Response>((resolve) => { release = resolve; }); + }; + const started = Date.now(); + await wipe.runDeviceGate(); + const waited = Date.now() - started; + expect(waited).toBeGreaterThanOrEqual(wipe.BOOT_CHECK_IN_BUDGET_MS - 50); + expect(waited).toBeLessThan(wipe.BOOT_CHECK_IN_BUDGET_MS + 1500); + expectUntouched(); + + release(wipeNow()); + await waitForNoAccounts(); + expect(purge.files).toBeGreaterThan(0); + }); + + it('finishes a wipe a closed window cut short, with no network and before anything else', async () => { + wipeState.markWipePending(ALICE, 'admin'); + respond = () => { throw new TypeError('Failed to fetch'); }; + await wipe.runDeviceGate(); + expect(purge.files).toBeGreaterThan(0); + expect(useAccountStore.getState().accounts).toEqual([]); + expect(wipeState.readPendingWipes()).toEqual({}); + }); +}); + +describe('registering', () => { + beforeEach(async () => { + await keys.deleteDeviceRecord(ALICE); + }); + + it('a browser with offline on registers, once, naming its cookie slot', async () => { + respond = () => newRow(); + await Promise.all([wipe.checkInDue(true), wipe.checkInDue(true)]); + expect(sent).toHaveLength(1); + expect(sent[0].headers['X-JMAP-Cookie-Slot']).toBe('0'); + expect(await keys.getDeviceRecord(ALICE)).toMatchObject({ id: ROW, secret: SECRET }); + }); + + it('a browser with offline off doesn\'t', async () => { + state.writeEnabled([]); + await wipe.checkInDue(true); + expect(sent).toEqual([]); + expect(await databases()).toContain('bulwark-store'); // From this test's own setup. + }); + + it('a desktop app on an instance does, with offline off too', async () => { + state.writeEnabled([]); + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', mode: 'instance' }; + respond = () => newRow(); + await wipe.checkInDue(true); + expect(sent).toHaveLength(1); + }); + + it('the desktop app on its own has no instance to ask', async () => { + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', mode: 'standalone' }; + await wipe.checkInDue(true); + expect(sent).toEqual([]); + }); + + it('a cleared key database means a new row', async () => { + respond = () => newRow(); + await wipe.checkInDue(true); + keys.deleteKeyDatabase(); + respond = () => newRow(BOB_ROW); + await wipe.checkInDue(true); + expect((await keys.getDeviceRecord(ALICE))?.id).toBe(BOB_ROW); + }); + + it('a device id doesn\'t survive a wipe: the next sign-in is a new row', async () => { + await keys.putDeviceRecord({ account: ALICE, id: ROW, secret: SECRET, createdAt: 1 }); + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : wipeNow()); + await wipe.runDeviceGate(); + await waitForNoAccounts(); + expect(await keys.listDeviceRecords()).toEqual([]); + }); + + it.each([ + ['someone else\'s row', { user: 'mallory', server: 'https://mail.example.test' }], + ['another server\'s row', { user: 'alice', server: 'https://other.example.test' }], + ])('drops %s: no record here, and the row goes back', async (_name, owner) => { + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : json(200, { id: BOB_ROW, secret: SECRET, ...owner })); + await wipe.checkInDue(true); + expect(await keys.getDeviceRecord(ALICE)).toBeNull(); + await vi.waitFor(() => expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toMatchObject({ id: BOB_ROW, secret: SECRET, drop: true })); + }); + + it.each([ + ['the same name in other case', { user: 'ALICE', server: 'https://mail.example.test/' }], + ['the whole address for a bare name', { user: 'alice@mail.example.test', server: 'https://mail.example.test' }], + ])('takes %s as the same owner', async (_name, owner) => { + respond = () => json(200, { id: ROW, secret: SECRET, ...owner }); + await wipe.checkInDue(true); + expect((await keys.getDeviceRecord(ALICE))?.id).toBe(ROW); + }); + + it('a row that was wiped already: the record goes, nothing else does, and it registers anew', async () => { + await keys.putDeviceRecord({ account: ALICE, id: ROW, secret: SECRET, createdAt: 1 }); + respond = (_url, init) => (JSON.parse(String(init?.body)).id ? json(200, { wipe: null, wiped: true }) : newRow(BOB_ROW)); + await wipe.checkInDue(true); + expect(await keys.getDeviceRecord(ALICE)).toBeNull(); + expectUntouched(); + await wipe.checkInDue(true); + expect((await keys.getDeviceRecord(ALICE))?.id).toBe(BOB_ROW); + expect(wipeState.consumeWipeNote()).toBeNull(); + }); + + it('isn\'t tried again every minute when it can\'t', async () => { + respond = () => json(401, {}); + const now = Date.now(); + await wipe.checkInDue(false, now); + await wipe.checkInDue(false, now + 60_000); + expect(sent).toHaveLength(1); + await wipe.checkInDue(false, now + 16 * 60_000); + expect(sent).toHaveLength(2); + }); +}); + +describe('check-ins while running', () => { + it('come at most once an hour for a row', async () => { + const now = Date.now(); + await wipe.checkInDue(false, now); + await wipe.checkInDue(false, now + 60_000); + expect(sent).toHaveLength(1); + await wipe.checkInDue(false, now + 61 * 60_000); + expect(sent).toHaveLength(2); + }); +}); + +/** What the auth store does around the hook. */ +function refuse(account = ALICE, certain = true): void { + wipeState.markLoginRefused(account, { certain }); + rejected.noteCredentialsRejected(account, certain); + useAccountStore.getState().removeAccount(account, 'evicted'); +} + +async function policyAsksForDeletion(): Promise<void> { + const { usePolicyStore } = await import('@/stores/policy-store'); + const policy = { organisation: { devices: { wipeOnForcedSignOut: true } } }; + usePolicyStore.setState({ policy, rawPolicy: policy, subject: null, loaded: true, source: 'server', partial: false, resolveFor: () => policy } as never); +} + +const DAY = 24 * 60 * 60 * 1000; + +describe('a refused login (lib/offline/credentials-rejected.ts)', () => { + it('hides the data and deletes nothing: everyone\'s keys, plugin settings and the store stay', async () => { + await openDb('smime-plugin-store'); + await openDb('bulwark-openpgp'); + const { usePluginStore } = await import('@/stores/plugin-store'); + usePluginStore.setState({ plugins: [{ id: 'managed', settings: { apiKey: 'k' } }] as never }); + wipe.registerDeviceWipe(); + refuse(); + await vi.waitFor(() => expect(wipeState.readRefusedLogins()[ALICE]?.unsent).toBe(0)); + + expect(state.isEvicted(ALICE)).toBe(true); + expect(state.visibleAccounts()).toEqual([]); + expect(purge.files).toBe(0); + expect(store.removed).toEqual([]); + expect(await databases()).toEqual(expect.arrayContaining(['smime-plugin-store', 'bulwark-openpgp'])); + expect(usePluginStore.getState().plugins[0].settings).toEqual({ apiKey: 'k' }); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toEqual([]); + expect(wipeState.readPendingWipes()).toEqual({}); + }); + + it('two weeks later a sign-in with the new password finds everything, unsent mail included', async () => { + await queue.queueSend(ALICE, { subject: 'Unsent', to: [] }, { kind: 'email', args: [] }); + wipe.registerDeviceWipe(); + const at = Date.now(); + refuse(); + await vi.waitFor(() => expect(wipeState.readRefusedLogins()[ALICE]?.unsent).toBe(1)); + + const offline = await import('../offline-mode'); + const later = at + 14 * DAY; + await offline.sweepAccountsGone(later); + await wipe.sweepRefusedLogins(); + expect(purge.files).toBe(0); + expect(store.removed).toEqual([]); + + // What the sign-in page says, in numbers only. + const [wait] = wipeState.refusedWaits(); + expect(wait).toEqual({ unsent: 1, until: expect.any(Number), kind: 'refused' }); + expect(wait.until).toBeGreaterThanOrEqual(at + state.EVICTED_KEEP_MS); + expect(wait.until).toBeLessThanOrEqual(at + state.EVICTED_KEEP_MS + 60_000); + expect(JSON.stringify({ ...localStorage })).not.toContain('"Unsent"'); + + useAccountStore.getState().addAccount(entry(ALICE, 0) as never); + expect(state.isEvicted(ALICE)).toBe(false); + expect(state.visibleAccounts()).toEqual([ALICE]); + expect((await queue.readQueue(ALICE)).outbox.map((row) => row.summary.subject)).toEqual(['Unsent']); + // Signed in: the page says nothing from here on, even before the next look. + expect(wipeState.refusedWaits()).toEqual([]); + + await wipe.sweepRefusedLogins(); + expect(wipeState.readRefusedLogins()).toEqual({}); + expect(wipeState.refusedWaits()).toEqual([]); + }); + + it('with no sign-in for 30 days it goes, and names nothing to whoever is here', async () => { + await queue.queueSend(ALICE, { subject: 'Unsent', to: [] }, { kind: 'email', args: [] }); + wipe.registerDeviceWipe(); + const at = Date.now(); + refuse(); + await vi.waitFor(() => expect(wipeState.readRefusedLogins()[ALICE]?.unsent).toBe(1)); + const offline = await import('../offline-mode'); + await offline.sweepAccountsGone(at + 29 * DAY); + expect(purge.files).toBe(0); + await offline.sweepAccountsGone(at + 31 * DAY); + expect(purge.files).toBeGreaterThan(0); + await wipe.sweepRefusedLogins(); + expect(wipeState.refusedWaits()).toEqual([]); + const lost = await import('../lost'); + expect(lost.consumeLost()).toEqual([]); + }); + + it('a count it can\'t get is unknown, not none, and is tried again at the next look', async () => { + await queue.queueSend(ALICE, { subject: 'Unsent', to: [] }, { kind: 'email', args: [] }); + store.failArea = () => true; + wipe.registerDeviceWipe(); + refuse(); + await new Promise((resolve) => setTimeout(resolve, 50)); + expect(wipeState.refusedWaits()[0].unsent).toBeNull(); + store.failArea = null; + await wipe.sweepRefusedLogins(); + expect(wipeState.refusedWaits()[0].unsent).toBe(1); + }); + + it('keeps no wait for an account with nothing kept here', async () => { + state.writeEnabled([]); + wipe.registerDeviceWipe(); + useAccountStore.getState().removeAccount(ALICE, 'evicted'); + rejected.noteCredentialsRejected(ALICE, true); + await new Promise((resolve) => setTimeout(resolve, 30)); + expect(wipeState.refusedWaits()).toEqual([]); + expect(purge.files).toBe(0); + }); + + describe('with the organisation asking for deletion at once', () => { + beforeEach(async () => { + await policyAsksForDeletion(); + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : noWipe()); + }); + + it('takes that account\'s data and nothing shared, and tells the instance why', async () => { + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + state.writeEnabled([ALICE, BOB]); + await keys.openAccountKey(BOB); + await keys.putDeviceRecord({ account: BOB, id: BOB_ROW, secret: SECRET, createdAt: 1 }); + await openDb('smime-plugin-store'); + await openDb('bulwark-openpgp'); + const { fileStorage } = await import('@/lib/plugin-storage'); + const clearFiles = vi.spyOn(fileStorage, 'clearFiles').mockResolvedValue(); + const handoffs = await import('@/lib/launch-handoff'); + const clearHandoffs = vi.spyOn(handoffs, 'clearHandoffs'); + const { pluginStoragePrefix } = await import('@/lib/plugin-sandbox/storage-scope'); + localStorage.setItem(`${pluginStoragePrefix('notes', ALICE)}note`, 'hers'); + localStorage.setItem(`${pluginStoragePrefix('notes', BOB)}note`, 'his'); + localStorage.setItem('notification-center', '[{"title":"From Eve"}]'); + localStorage.setItem('template-storage', '{"templates":[]}'); + const { usePluginStore } = await import('@/stores/plugin-store'); + usePluginStore.setState({ plugins: [{ id: 'managed', settings: { apiKey: 'k' } }] as never }); + + wipe.registerDeviceWipe(); + refuse(); + await vi.waitFor(() => expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toMatchObject({ reason: 'rejected', id: ROW })); + await vi.waitFor(() => expect(wipeState.readPendingWipes()).toEqual({})); + + expect(store.removed).toEqual([ALICE]); + expect(await databases()).toEqual(expect.arrayContaining(['smime-plugin-store', 'bulwark-openpgp'])); + expect(usePluginStore.getState().plugins[0].settings).toEqual({ apiKey: 'k' }); + expect(localStorage.getItem(`${pluginStoragePrefix('notes', ALICE)}note`)).toBeNull(); + expect(localStorage.getItem(`${pluginStoragePrefix('notes', BOB)}note`)).toBe('his'); + expect(localStorage.getItem('notification-center')).not.toBeNull(); + expect(localStorage.getItem('template-storage')).not.toBeNull(); + expect(clearFiles).not.toHaveBeenCalled(); + expect(clearHandoffs).not.toHaveBeenCalled(); + expect((await keys.getDeviceRecord(BOB))?.id).toBe(BOB_ROW); + expect(state.useOfflineStore.getState().enabled).toEqual([BOB]); + }); + + it('with offline off touches nothing but what\'s the account\'s own', async () => { + state.writeEnabled([]); + await openDb('smime-plugin-store'); + const handoffs = await import('@/lib/launch-handoff'); + const clearHandoffs = vi.spyOn(handoffs, 'clearHandoffs'); + const { pluginStoragePrefix } = await import('@/lib/plugin-sandbox/storage-scope'); + localStorage.setItem(`${pluginStoragePrefix('notes', ALICE)}note`, 'hers'); + localStorage.setItem('notification-center', '[{"title":"From Eve"}]'); + wipe.registerDeviceWipe(); + rejected.noteCredentialsRejected(ALICE, true); + await vi.waitFor(() => expect(localStorage.getItem(`${pluginStoragePrefix('notes', ALICE)}note`)).toBeNull()); + await vi.waitFor(() => expect(wipeState.readPendingWipes()).toEqual({})); + expect(purge.files).toBe(0); + expect(store.removed).toEqual([]); + expect(await databases()).toContain('smime-plugin-store'); + expect(localStorage.getItem('notification-center')).not.toBeNull(); + expect(clearHandoffs).not.toHaveBeenCalled(); + }); + + it('records a real count for the audit, however it\'s named here', async () => { + await queue.queueSend(ALICE, { subject: 'Unsent', to: [] }, { kind: 'email', args: [] }); + wipe.registerDeviceWipe(); + refuse(); + await vi.waitFor(() => expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toMatchObject({ reason: 'rejected', unsent: 1 })); + }); + + it('doesn\'t delete on a refusal that hasn\'t lasted: one bad answer at a start only hides', async () => { + wipe.registerDeviceWipe(); + refuse(ALICE, false); + await vi.waitFor(() => expect(wipeState.readRefusedLogins()[ALICE]?.unsent).toBe(0)); + expect(purge.files).toBe(0); + expect(store.removed).toEqual([]); + }); + + it('reaches a refusal from before the policy said so', async () => { + const { usePolicyStore } = await import('@/stores/policy-store'); + const none = { organisation: { devices: {} } }; + usePolicyStore.setState({ policy: none, rawPolicy: none, resolveFor: () => none } as never); + const stop = wipe.startDeviceWipe(); + refuse(); + await vi.waitFor(() => expect(wipeState.readRefusedLogins()[ALICE]?.unsent).toBe(0)); + expect(purge.files).toBe(0); + await policyAsksForDeletion(); + await vi.waitFor(() => expect(purge.files).toBeGreaterThan(0)); + stop(); + }); + }); + + describe('from a running renewal', () => { + let heard: string[]; + + beforeEach(() => { + heard = []; + rejected.onCredentialsRejected((account) => heard.push(account)); + useAccountStore.setState({ accounts: [{ ...entry(ALICE, 0), authMode: 'oauth' }] } as never); + useAuthStore.setState({ authMode: 'oauth' }); + }); + + const token = (next: () => Response) => { respond = (url) => (url.includes('/api/auth/token') ? next() : noWipe()); }; + + it.each([ + ['a 500', () => json(500, { error: 'Internal server error' })], + ['a 503', () => json(503, { error: 'unavailable' })], + // What the route answers for a 400 invalid_client from the server. + ['a refusal other than invalid_grant', () => json(401, { error: 'Refresh failed' })], + ])('%s leaves the hook alone', async (_name, answer) => { + wipe.registerDeviceWipe(); + token(answer); + await useAuthStore.getState().refreshAccessToken({ accountId: ALICE }); + await new Promise((resolve) => setTimeout(resolve, 20)); + expect(heard).toEqual([]); + expect(purge.files).toBe(0); + expect(wipeState.readPendingWipes()).toEqual({}); + }); + + it('invalid_grant fires it, signs out and hides: nothing is deleted', async () => { + wipe.registerDeviceWipe(); + token(() => json(401, { error: 'invalid_grant' })); + await useAuthStore.getState().refreshAccessToken({ accountId: ALICE }); + expect(heard).toEqual([ALICE]); + await vi.waitFor(() => expect(useAccountStore.getState().getAccountById(ALICE)).toBeUndefined()); + expect(state.isEvicted(ALICE)).toBe(true); + expect(purge.files).toBe(0); + expect(store.removed).toEqual([]); + expect(state.useOfflineStore.getState().enabled).toEqual([ALICE]); + }); + + it('the session limit hides too, as what it is, not as a refusal', async () => { + wipe.registerDeviceWipe(); + token(() => json(401, { error: 'session_expired', maxHours: 8 })); + await useAuthStore.getState().refreshAccessToken({ accountId: ALICE }); + expect(heard).toEqual([ALICE]); + await vi.waitFor(() => expect(state.isEvicted(ALICE)).toBe(true)); + await vi.waitFor(() => expect(useAccountStore.getState().getAccountById(ALICE)).toBeUndefined()); + expect(purge.files).toBe(0); + expect(store.removed).toEqual([]); + expect(wipeState.readRefusedLogins()[ALICE]).toMatchObject({ kind: 'session' }); + }); + }); +}); + +describe('other windows', () => { + it('a window showing the wiped account reloads at the end, and only then', async () => { + const reload = vi.fn(); + vi.stubGlobal('location', { ...window.location, reload }); + const stop = wipe.startDeviceWipe(); + const other = new BroadcastChannel('bulwark-device-wipe'); + + other.postMessage({ account: ALICE, phase: 'start' }); + await new Promise((resolve) => setTimeout(resolve, 30)); + expect(reload).not.toHaveBeenCalled(); + other.postMessage({ account: ALICE, phase: 'end' }); + await vi.waitFor(() => expect(reload).toHaveBeenCalledTimes(1)); + + other.close(); + stop(); + vi.unstubAllGlobals(); + vi.stubGlobal('fetch', vi.fn(async () => noWipe())); + }); + + it.each(['start', 'end'])('a window showing another account lets go of the wiped one at the %s, in place', async (phase) => { + const reload = vi.fn(); + vi.stubGlobal('location', { ...window.location, reload }); + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + state.writeEnabled([ALICE, BOB]); + await keys.putDeviceRecord({ account: BOB, id: BOB_ROW, secret: SECRET, createdAt: 1 }); + const stop = wipe.startDeviceWipe(); + const other = new BroadcastChannel('bulwark-device-wipe'); + await vi.waitFor(() => expect(sent.length).toBeGreaterThan(0)); + sent.length = 0; + + other.postMessage({ account: BOB, phase }); + await vi.waitFor(() => expect(useAccountStore.getState().getAccountById(BOB)).toBeUndefined()); + + // Its own registry won't write it back, and the wiping window's work isn't done over here. + expect(reload).not.toHaveBeenCalled(); + expect(state.useOfflineStore.getState().enabled).toEqual([ALICE]); + expect(state.isEvicted(BOB)).toBe(false); + expect(store.removed).toEqual([]); + expect(purge.files).toBe(0); + await new Promise((resolve) => setTimeout(resolve, 30)); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toEqual([]); + expect((await keys.getDeviceRecord(BOB))?.id).toBe(BOB_ROW); + expect(JSON.parse(localStorage.getItem('account-registry') ?? '{"state":{"accounts":[]}}').state.accounts.map((a: { id: string }) => a.id)).not.toContain(BOB); + + other.close(); + stop(); + vi.unstubAllGlobals(); + vi.stubGlobal('fetch', vi.fn(async () => noWipe())); + }); + + it('a wipe tells the others when it starts and when it ends', async () => { + const heard: unknown[] = []; + const other = new BroadcastChannel('bulwark-device-wipe'); + other.onmessage = (event) => heard.push(event.data); + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : noWipe()); + purge.during = () => { heard.push('deleting'); }; + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + await vi.waitFor(() => expect(heard.at(-1)).toEqual({ account: ALICE, phase: 'end' })); + await new Promise((resolve) => setTimeout(resolve, 30)); + expect(heard).toContainEqual({ account: ALICE, phase: 'start' }); + other.close(); + }); + + it('the window that wipes doesn\'t hear its own message', async () => { + const reload = vi.fn(); + vi.stubGlobal('location', { ...window.location, reload }); + const stop = wipe.startDeviceWipe(); + respond = () => json(200, { ok: true }); + await wipe.wipeWholeDevice('user'); + await new Promise((resolve) => setTimeout(resolve, 30)); + expect(reload).not.toHaveBeenCalled(); + stop(); + vi.unstubAllGlobals(); + vi.stubGlobal('fetch', vi.fn(async () => noWipe())); + }); +}); + +describe('what the desktop app keeps outside the page', () => { + const shell = { clearSurfaces: vi.fn(), clearClipboardFiles: vi.fn(async () => {}) }; + + beforeEach(() => { + shell.clearSurfaces.mockClear(); + shell.clearClipboardFiles.mockClear(); + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { + version: 1, + platform: 'win32', + mode: 'instance', + os: { clearSurfaces: shell.clearSurfaces }, + clipboard: { clearFiles: shell.clearClipboardFiles }, + }; + }); + + it('goes with a remote wipe', async () => { + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : wipeNow()); + await wipe.runDeviceGate(); + await waitForNoAccounts(); + expect(shell.clearSurfaces).toHaveBeenCalled(); + expect(shell.clearClipboardFiles).toHaveBeenCalled(); + }); + + it('goes with a wipe from settings', async () => { + respond = () => json(200, { ok: true }); + await wipe.wipeWholeDevice('user'); + expect(shell.clearSurfaces).toHaveBeenCalled(); + expect(shell.clearClipboardFiles).toHaveBeenCalled(); + }); + + it('a shell without those calls wipes all the same', async () => { + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', mode: 'instance' }; + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : wipeNow()); + await wipe.runDeviceGate(); + await waitForNoAccounts(); + expect(purge.files).toBeGreaterThan(0); + }); + + it('a call that fails leaves the wipe going', async () => { + shell.clearClipboardFiles.mockRejectedValueOnce(new Error('held by a program')); + respond = () => json(200, { ok: true }); + await wipe.wipeWholeDevice('user'); + expect(purge.files).toBeGreaterThan(0); + }); +}); + +describe('the wipe from settings', () => { + it('takes everything, reports to the instance, and leaves no note: the user was there', async () => { + respond = () => json(200, { ok: true }); + await wipe.wipeWholeDevice('user'); + expect(purge.files).toBeGreaterThan(0); + expect(useAccountStore.getState().accounts).toEqual([]); + expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toMatchObject({ reason: 'user', id: ROW }); + expect(wipeState.consumeWipeNote()).toBeNull(); + }); + + it('marks that the user signed out, so a provider session doesn\'t sign them straight back in', async () => { + respond = () => json(200, { ok: true }); + await wipe.wipeWholeDevice('user'); + expect(sessionStorage.getItem('signed_out')).toBe('true'); + }); +}); + +describe('the report and the deletion', () => { + beforeEach(() => { + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : wipeNow()); + }); + + it('is queued before anything is deleted, and not sent until it\'s done', async () => { + let queuedWhenDeleting: string[] = []; + let sentWhenDeleting = -1; + purge.during = () => { + // The first time is the wipe's. The sign-out purges too, when all is done. + if (sentWhenDeleting >= 0) return; + queuedWhenDeleting = wipeState.readWipeConfirmations().map((entry) => entry.id); + sentWhenDeleting = sent.filter((call) => call.url.endsWith('/wiped')).length; + }; + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + expect(queuedWhenDeleting).toEqual([ROW]); + expect(sentWhenDeleting).toBe(0); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toHaveLength(1); + expect(wipeState.readWipeConfirmations()).toEqual([]); + }); + + it('another contact during the wipe doesn\'t send it early', async () => { + let early = -1; + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : noWipe()); + registry.onDeviceWipe(async () => { + await wipe.checkInDue(true); + early = sent.filter((call) => call.url.endsWith('/wiped')).length; + }); + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + expect(early).toBe(0); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toHaveLength(1); + }); + + it('a deletion that fails isn\'t reported as done: it stays pending and is finished at the next start', async () => { + purge.fail = true; + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toEqual([]); + expect(wipeState.readPendingWipes()).toEqual({ [ALICE]: 'admin' }); + expect(wipeState.readWipeConfirmations().map((entry) => entry.id)).toEqual([ROW]); + // Signed out all the same: nothing more is shown. + expect(useAccountStore.getState().accounts).toEqual([]); + + purge.fail = false; + await wipe.finishInterruptedWipes(); + expect(purge.files).toBeGreaterThan(0); + expect(wipeState.readPendingWipes()).toEqual({}); + expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toMatchObject({ id: ROW, reason: 'admin' }); + }); + + it('a plugin database a frame holds open isn\'t reported as wiped until it\'s gone', async () => { + const held = await new Promise<IDBDatabase>((resolve, reject) => { + const request = indexedDB.open('smime-plugin-store', 1); + request.onupgradeneeded = () => { request.result.createObjectStore('s'); }; + request.onsuccess = () => resolve(request.result); + request.onerror = () => reject(request.error); + }); + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + expect(Object.keys(wipeState.readBlockedDatabases())).toEqual(['smime-plugin-store']); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toEqual([]); + expect(wipeState.readWipeConfirmations().map((entry) => entry.id)).toEqual([ROW]); + + held.close(); + await wipe.finishInterruptedWipes(); + await wipe.checkInDue(true); + await vi.waitFor(() => expect(sent.filter((call) => call.url.endsWith('/wiped'))).toHaveLength(1)); + expect(wipeState.readBlockedDatabases()).toEqual({}); + expect(await databases()).not.toContain('smime-plugin-store'); + }); +}); + +describe('two wipes at once', () => { + beforeEach(async () => { + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + state.writeEnabled([ALICE, BOB]); + await keys.openAccountKey(BOB); + await keys.putDeviceRecord({ account: BOB, id: BOB_ROW, secret: SECRET, createdAt: 1 }); + respond = () => json(200, { ok: true }); + }); + + it('neither puts back the row the other just removed', async () => { + await Promise.all([wipe.wipeAccountFromDevice(ALICE, 'admin'), wipe.wipeAccountFromDevice(BOB, 'admin')]); + expect(await keys.listDeviceRecords()).toEqual([]); + expect(useAccountStore.getState().accounts).toEqual([]); + expect(wipeState.readPendingWipes()).toEqual({}); + expect(sent.filter((call) => call.url.endsWith('/wiped')).map((call) => call.body.id).sort()).toEqual([ROW, BOB_ROW].sort()); + }); + + it('one runs after the other: they don\'t overlap', async () => { + const running: string[] = []; + let overlapped = false; + registry.onDeviceWipe(async (account) => { + if (running.length > 0) overlapped = true; + running.push(String(account)); + await new Promise((resolve) => setTimeout(resolve, 20)); + running.pop(); + }); + await Promise.all([wipe.wipeAccountFromDevice(ALICE, 'admin'), wipe.wipeAccountFromDevice(BOB, 'admin')]); + expect(overlapped).toBe(false); + }); + + it('a wipe heard twice is done once: the second finds the row gone', async () => { + let cleaned = 0; + registry.onDeviceWipe(() => { cleaned += 1; }); + await wipe.wipeAccountFromDevice(ALICE, 'admin', { ifRow: ROW }); + expect(cleaned).toBe(1); + const reports = sent.filter((call) => call.url.endsWith('/wiped')).length; + expect(wipeState.consumeWipeNote()).toEqual({ unsent: 0 }); + await wipe.wipeAccountFromDevice(ALICE, 'admin', { ifRow: ROW }); + expect(cleaned).toBe(1); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toHaveLength(reports); + expect(wipeState.consumeWipeNote()).toBeNull(); + expect(wipeState.readPendingWipes()).toEqual({}); + }); + + it('takes the Web Lock where the browser has one', async () => { + const names: string[] = []; + vi.stubGlobal('navigator', Object.assign(Object.create(navigator), { + locks: { request: async (name: string, work: () => Promise<unknown>) => { names.push(name); return work(); } }, + })); + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + vi.stubGlobal('navigator', Object.getPrototypeOf(navigator)); + expect(names).toContain('bulwark-device-wipe'); + }); +}); + +describe('a sign-out', () => { + beforeEach(() => { + respond = () => json(200, { ok: true }); + }); + + it('drops the row with its secret', async () => { + wipe.registerDeviceWipe(); + await useAuthStore.getState().logout({ endProviderSession: false }); + await vi.waitFor(() => expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toEqual({ id: ROW, secret: SECRET, drop: true })); + expect(wipeState.readWipeConfirmations()).toEqual([]); + }); + + it('has its row on the way before the key database goes with the rest', async () => { + respond = () => json(503, {}); + let queuedAtPurge: string[] | null = null; + purge.during = () => { queuedAtPurge ??= wipeState.readWipeConfirmations().map((entry) => entry.id); }; + wipe.registerDeviceWipe(); + await useAuthStore.getState().logout({ endProviderSession: false }); + await vi.waitFor(() => expect(purge.files).toBeGreaterThan(0)); + expect(queuedAtPurge).toEqual([ROW]); + }); + + it('removing another account drops its row too, and keeps this one\'s', async () => { + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + await keys.putDeviceRecord({ account: BOB, id: BOB_ROW, secret: SECRET, createdAt: 1 }); + wipe.registerDeviceWipe(); + useAuthStore.getState().removeAccount(BOB); + await vi.waitFor(() => expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toEqual({ id: BOB_ROW, secret: SECRET, drop: true })); + expect(await keys.getDeviceRecord(BOB)).toBeNull(); + expect((await keys.getDeviceRecord(ALICE))?.id).toBe(ROW); + }); + + it('a sign-out that keeps the data keeps the row: an admin can still reach it', async () => { + wipe.registerDeviceWipe(); + await useAuthStore.getState().logout({ endProviderSession: false, keepLocalData: true }); + await new Promise((resolve) => setTimeout(resolve, 30)); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toEqual([]); + expect((await keys.getDeviceRecord(ALICE))?.id).toBe(ROW); + }); + + it('gets through at the next contact when the instance was out of reach', async () => { + respond = () => json(503, {}); + wipe.registerDeviceWipe(); + await useAuthStore.getState().logout({ endProviderSession: false }); + await vi.waitFor(() => expect(wipeState.readWipeConfirmations().map((entry) => entry.id)).toEqual([ROW])); + respond = () => json(200, { ok: true }); + await wipe.checkInDue(true); + await vi.waitFor(() => expect(wipeState.readWipeConfirmations()).toEqual([])); + }); +}); + +describe('counting what a wipe loses', () => { + const offline = () => import('../offline-mode'); + + it('per account: each row reports its own, not the device\'s total', async () => { + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + state.writeEnabled([ALICE, BOB]); + await keys.openAccountKey(BOB); + await keys.putDeviceRecord({ account: BOB, id: BOB_ROW, secret: SECRET, createdAt: 1 }); + await queue.queueSend(ALICE, { subject: 'One', to: [] }, { kind: 'email', args: [] }); + await queue.queueSend(ALICE, { subject: 'Two', to: [] }, { kind: 'email', args: [] }); + respond = () => json(200, { ok: true }); + await wipe.wipeWholeDevice('user'); + const reports = sent.filter((call) => call.url.endsWith('/wiped')).map((call) => call.body); + expect(reports.find((body) => body.id === ROW)).toMatchObject({ unsent: 2 }); + expect(reports.find((body) => body.id === BOB_ROW)).toMatchObject({ unsent: 0 }); + }); + + it('a store that can\'t answer gives unknown, not nought', async () => { + store.failArea = () => true; + expect(await (await offline()).unsentForWipe(ALICE)).toBeNull(); + }); + + it('a store that doesn\'t answer in time gives unknown, not nought', async () => { + const api = await import('@/lib/store/client/api'); + vi.spyOn(api.getStore(), 'area').mockImplementation(() => new Promise(() => {})); + expect(await (await offline()).unsentForWipe(ALICE, 20)).toBeNull(); + vi.restoreAllMocks(); + }); + + it('waits longer for it than a sign-out does', async () => { + expect((await offline()).UNSENT_FOR_WIPE_MS).toBeGreaterThanOrEqual(10_000); + }); + + it('reports an unknown count as such, and says so at the next sign-in', async () => { + store.failArea = () => true; + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : noWipe()); + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toMatchObject({ unsent: null }); + expect(wipeState.consumeWipeNote()).toEqual({ unsent: 0, unknown: true }); + }); + + it('counts an account nobody can see too: it goes with the device', async () => { + await queue.queueSend(ALICE, { subject: 'Hidden', to: [] }, { kind: 'email', args: [] }); + state.markEvicted(ALICE); + expect(await (await offline()).unsentForWipe('all')).toBe(1); + }); +}); + +describe('what else goes with a wipe', () => { + const ACCOUNT_KEYS = [ + 'pro-tabs', 'search-history-storage', 'files-favorites', 'files-recent-files', 'files-last-parent-id', 'files-path-stack', + 'bulwark-delegate-names', 'calendar-notification-storage', 'identity-storage', 'contact-storage', 'calendar-storage', + 'webdav-favorites', 'webdav-recent-files', 'webdav-last-path', 'template-storage', + ]; + let closed: string[]; + let unsubscribed: number; + let deletedCaches: string[]; + + function plant(): void { + for (const key of ACCOUNT_KEYS) localStorage.setItem(key, 'x'); + localStorage.setItem('settings-storage', 'device preference'); + localStorage.setItem('theme-storage', 'device preference'); + localStorage.setItem('email-snapshot', JSON.stringify({ account: ALICE, emails: [{ subject: 'From Eve' }] })); + sessionStorage.setItem('bulwark-rescued-drafts', JSON.stringify([{ subject: 'Half written', body: 'text' }])); + } + + beforeEach(() => { + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : noWipe()); + closed = []; + unsubscribed = 0; + deletedCaches = []; + plant(); + const registration = { + getNotifications: async () => [{ title: 'From Eve', close() { closed.push(this.title); } }], + pushManager: { getSubscription: async () => ({ unsubscribe: async () => { unsubscribed += 1; return true; } }) }, + }; + Object.defineProperty(navigator, 'serviceWorker', { configurable: true, value: { getRegistration: async () => registration, controller: null } }); + vi.stubGlobal('caches', { + keys: async () => ['bulwark-push-state-v1', 'unrelated'], + delete: async (name: string) => { deletedCaches.push(name); return true; }, + open: async () => ({ put: async () => {} }), + }); + }); + + afterEach(() => { + delete (navigator as { serviceWorker?: unknown }).serviceWorker; + vi.unstubAllGlobals(); + }); + + it('an admin wipe takes them, closes what\'s on screen, and the last account ends Web Push', async () => { + const { saveForwardApprovals, forwardApprovals } = await import('@/lib/plugin-sandbox/forward-approvals'); + saveForwardApprovals('forwarder', ALICE, ['eve@example.org']); + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + for (const key of ACCOUNT_KEYS) expect([key, localStorage.getItem(key)]).toEqual([key, null]); + expect(localStorage.getItem('email-snapshot')).toBeNull(); + expect(sessionStorage.getItem('bulwark-rescued-drafts')).toBeNull(); + expect(forwardApprovals('forwarder', ALICE)).toEqual([]); + expect(closed).toEqual(['From Eve']); + expect(deletedCaches).toContain('bulwark-push-state-v1'); + expect(unsubscribed).toBe(1); + expect(localStorage.getItem('settings-storage')).toBe('device preference'); + expect(localStorage.getItem('theme-storage')).toBe('device preference'); + }); + + it('with another account left, Web Push stays: it\'s shared', async () => { + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + await wipe.wipeAccountFromDevice(ALICE, 'admin'); + expect(closed).toEqual(['From Eve']); + expect(unsubscribed).toBe(0); + // No full sign-out comes along to clean up behind it. A store may write itself back, empty. + for (const key of ['pro-tabs', 'search-history-storage', 'files-favorites', 'files-recent-files', 'files-last-parent-id', 'files-path-stack', + 'bulwark-delegate-names', 'calendar-notification-storage', 'webdav-favorites', 'webdav-recent-files', 'webdav-last-path', 'template-storage']) { + expect([key, localStorage.getItem(key)]).not.toEqual([key, 'x']); + } + expect(deletedCaches).toContain('bulwark-push-state-v1'); + }); + + it('a wipe from settings takes them too', async () => { + await wipe.wipeWholeDevice('user'); + for (const key of ACCOUNT_KEYS) expect([key, localStorage.getItem(key)]).toEqual([key, null]); + expect(unsubscribed).toBe(1); + }); + + it('a deletion after a refused login leaves all of it: only the account\'s own snapshot goes', async () => { + await policyAsksForDeletion(); + wipe.registerDeviceWipe(); + refuse(); + await vi.waitFor(() => expect(store.removed.length + purge.files).toBeGreaterThan(0)); + await vi.waitFor(() => expect(wipeState.readPendingWipes()).toEqual({})); + expect(localStorage.getItem('email-snapshot')).toBeNull(); + for (const key of ACCOUNT_KEYS) expect([key, localStorage.getItem(key)]).toEqual([key, 'x']); + expect(closed).toEqual([]); + expect(unsubscribed).toBe(0); + }); +}); + +describe('the session timers', () => { + const timerSignOut = () => useAuthStore.getState().logoutAll({ endProviderSession: false, keepLocalData: true, sessionLimit: true }); + + it('leave the outbox whole, and a sign-in brings it back', async () => { + await queue.queueSend(ALICE, { subject: 'Unsent', to: [] }, { kind: 'email', args: [] }); + wipe.registerDeviceWipe(); + const lost = await import('../lost'); + const at = Date.now(); + await timerSignOut(); + + expect(useAccountStore.getState().accounts).toEqual([]); + expect(useAuthStore.getState().isAuthenticated).toBe(false); + expect(state.isEvicted(ALICE)).toBe(true); + expect(state.visibleAccounts()).toEqual([]); + expect(purge.files).toBe(0); + expect(store.removed).toEqual([]); + expect(state.useOfflineStore.getState().enabled).toEqual([ALICE]); + expect(lost.consumeLost()).toEqual([]); + await vi.waitFor(() => expect(wipeState.refusedWaits()).toEqual([{ unsent: 1, until: expect.any(Number), kind: 'session' }])); + + const offline = await import('../offline-mode'); + await offline.sweepAccountsGone(at + 14 * DAY); + expect(purge.files).toBe(0); + + useAccountStore.getState().addAccount(entry(ALICE, 0) as never); + expect(state.visibleAccounts()).toEqual([ALICE]); + expect((await queue.readQueue(ALICE)).outbox.map((row) => row.summary.subject)).toEqual(['Unsent']); + expect(wipeState.refusedWaits()).toEqual([]); + await wipe.sweepRefusedLogins(); + expect(wipeState.readRefusedLogins()).toEqual({}); + }); + + it('with no sign-in for 30 days it goes', async () => { + await queue.queueSend(ALICE, { subject: 'Unsent', to: [] }, { kind: 'email', args: [] }); + wipe.registerDeviceWipe(); + const at = Date.now(); + await timerSignOut(); + const offline = await import('../offline-mode'); + await offline.sweepAccountsGone(at + 31 * DAY); + expect(purge.files).toBeGreaterThan(0); + }); + + it('keep S/MIME and OpenPGP keys and the row: an admin can still reach the device', async () => { + await openDb('smime-plugin-store'); + wipe.registerDeviceWipe(); + await timerSignOut(); + expect(await databases()).toContain('smime-plugin-store'); + expect((await keys.getDeviceRecord(ALICE))?.id).toBe(ROW); + expect(sent.filter((call) => call.url.endsWith('/wiped'))).toEqual([]); + }); + + it('with the organisation asking for deletion, it goes at once, only that account\'s, named as the session limit', async () => { + await policyAsksForDeletion(); + respond = (url) => (url.endsWith('/wiped') ? json(200, { ok: true }) : noWipe()); + await openDb('smime-plugin-store'); + wipe.registerDeviceWipe(); + await timerSignOut(); + await vi.waitFor(() => expect(sent.find((call) => call.url.endsWith('/wiped'))?.body).toMatchObject({ reason: 'session', id: ROW })); + await vi.waitFor(() => expect(wipeState.readPendingWipes()).toEqual({})); + expect(state.useOfflineStore.getState().enabled).toEqual([]); + expect(await databases()).toContain('smime-plugin-store'); + }); + + it('a sign-out the user asks for still deletes', async () => { + await queue.queueSend(ALICE, { subject: 'Unsent', to: [] }, { kind: 'email', args: [] }); + await useAuthStore.getState().logoutAll({ endProviderSession: false }); + expect(state.isEvicted(ALICE)).toBe(false); + await vi.waitFor(() => expect(purge.files).toBeGreaterThan(0)); + expect(wipeState.readRefusedLogins()).toEqual({}); + }); +}); + +describe('a refused account with another still signed in', () => { + beforeEach(async () => { + useAccountStore.setState({ accounts: [entry(ALICE, 0), entry(BOB, 1)] } as never); + state.writeEnabled([ALICE, BOB]); + await keys.openAccountKey(BOB); + await queue.queueSend(BOB, { subject: 'Unsent', to: [] }, { kind: 'email', args: [] }); + }); + + /** What the auth store writes down, with who was there to read it. */ + function refuseBob(): void { + wipeState.markLoginRefused(BOB, { certain: true, seenBy: [ALICE], label: BOB, username: 'bob' }); + rejected.noteCredentialsRejected(BOB, true); + useAccountStore.getState().removeAccount(BOB, 'evicted'); + } + + it('is there for the one who was signed in beside it, with its count and date', async () => { + wipe.registerDeviceWipe(); + const at = Date.now(); + refuseBob(); + await vi.waitFor(() => expect(wipeState.siblingWaits(ALICE)[0]?.unsent).toBe(1)); + const [wait] = wipeState.siblingWaits(ALICE); + expect(wait).toMatchObject({ label: BOB, username: 'bob', kind: 'refused' }); + expect(wait.until).toBeGreaterThanOrEqual(at + state.EVICTED_KEEP_MS); + }); + + it('isn\'t for anyone who signs in here later, and goes when the account is back', async () => { + wipe.registerDeviceWipe(); + refuseBob(); + await vi.waitFor(() => expect(wipeState.siblingWaits(ALICE)).toHaveLength(1)); + expect(wipeState.siblingWaits('someone-else')).toEqual([]); + useAccountStore.getState().addAccount(entry(BOB, 1) as never); + expect(wipeState.siblingWaits(ALICE)).toEqual([]); + }); + + it('says so once, when the count is known', async () => { + wipe.registerDeviceWipe(); + expect(wipeState.takeSiblingToasts(ALICE)).toEqual([]); + refuseBob(); + expect(wipeState.takeSiblingToasts(ALICE)).toEqual([]); + await vi.waitFor(() => expect(wipeState.siblingWaits(ALICE)[0]?.unsent).toBe(1)); + expect(wipeState.takeSiblingToasts(ALICE)).toEqual([expect.objectContaining({ label: BOB, unsent: 1 })]); + expect(wipeState.takeSiblingToasts(ALICE)).toEqual([]); + }); + + it('says so with no number when the store can\'t give one', async () => { + store.failArea = () => true; + wipe.registerDeviceWipe(); + refuseBob(); + await vi.waitFor(() => expect(wipeState.takeSiblingToasts(ALICE)).toEqual([expect.objectContaining({ unsent: null })])); + }); +}); diff --git a/lib/offline/__tests__/evicted-secrets.test.ts b/lib/offline/__tests__/evicted-secrets.test.ts new file mode 100644 index 000000000..8bfbbd8c2 --- /dev/null +++ b/lib/offline/__tests__/evicted-secrets.test.ts @@ -0,0 +1,81 @@ +import { afterEach, beforeEach, describe, expect, it, vi } from 'vitest'; + +// A dropped account's plugin secrets, on the desktop app's own server. It has no +// cookie left, so what the account store wrote down at the time is all there is. + +const ALICE = 'alice@mail.example.test'; +const entry = { + id: ALICE, label: ALICE, serverUrl: 'https://mail.example.test', username: 'alice', authMode: 'basic', rememberMe: true, + displayName: ALICE, email: ALICE, lastLoginAt: 1, isConnected: true, hasError: false, isDefault: true, cookieSlot: 0, avatarColor: '#000', +}; + +async function load(desktop: boolean) { + vi.resetModules(); + vi.stubEnv('NEXT_PUBLIC_BULWARK_DESKTOP', desktop ? '1' : ''); + const { useAccountStore } = await import('@/stores/account-store'); + const state = await import('../state'); + const { forgetEvictedSecrets } = await import('../evicted-secrets'); + useAccountStore.setState({ accounts: [entry], activeAccountId: ALICE, defaultAccountId: ALICE } as never); + state.writeEnabled([ALICE]); + return { useAccountStore, state, forgetEvictedSecrets }; +} + +let calls: Array<{ url: string; method?: string }>; +let answer: () => Response; + +beforeEach(() => { + localStorage.clear(); + calls = []; + answer = () => new Response('{"ok":true}', { status: 200 }); + vi.stubGlobal('fetch', vi.fn(async (input: unknown, init?: RequestInit) => { + calls.push({ url: String(input), method: init?.method }); + return answer(); + })); +}); + +afterEach(() => { + vi.unstubAllGlobals(); + vi.unstubAllEnvs(); +}); + +describe('a dropped account\'s plugin secrets', () => { + it('in the desktop app go by who it was, with no cookie', async () => { + const { useAccountStore, state, forgetEvictedSecrets } = await load(true); + useAccountStore.getState().removeAccount(ALICE, 'evicted'); + expect(state.readEvictedOwners()[ALICE]).toEqual({ username: 'alice', serverUrl: 'https://mail.example.test' }); + expect(JSON.stringify(state.readEvictedOwners())).not.toContain('password'); + + await forgetEvictedSecrets(ALICE); + expect(calls).toHaveLength(1); + const url = new URL(calls[0].url, 'https://desktop.local'); + expect(calls[0].method).toBe('DELETE'); + expect(url.pathname).toBe('/api/plugin-secrets'); + expect(Object.fromEntries(url.searchParams)).toEqual({ all: 'true', username: 'alice', server: 'https://mail.example.test' }); + expect(state.readEvictedOwners()).toEqual({}); + }); + + it('are asked for again when the server couldn\'t', async () => { + const { useAccountStore, state, forgetEvictedSecrets } = await load(true); + useAccountStore.getState().removeAccount(ALICE, 'evicted'); + answer = () => new Response('{}', { status: 503 }); + await forgetEvictedSecrets(ALICE); + expect(Object.keys(state.readEvictedOwners())).toEqual([ALICE]); + }); + + it('stay when the account signs in again, and nobody remembers it was dropped', async () => { + const { useAccountStore, state, forgetEvictedSecrets } = await load(true); + useAccountStore.getState().removeAccount(ALICE, 'evicted'); + useAccountStore.getState().addAccount(entry as never); + expect(state.readEvictedOwners()).toEqual({}); + await forgetEvictedSecrets(null); + expect(calls).toEqual([]); + }); + + it('on an instance aren\'t this device\'s: nothing is written down or asked', async () => { + const { useAccountStore, state, forgetEvictedSecrets } = await load(false); + useAccountStore.getState().removeAccount(ALICE, 'evicted'); + expect(state.readEvictedOwners()).toEqual({}); + await forgetEvictedSecrets(null); + expect(calls).toEqual([]); + }); +}); diff --git a/lib/offline/credentials-rejected.ts b/lib/offline/credentials-rejected.ts index a42282998..4fb1388f4 100644 --- a/lib/offline/credentials-rejected.ts +++ b/lib/offline/credentials-rejected.ts @@ -1,12 +1,17 @@ /** - * The server really refused this login (`invalid_grant`), which the auth store - * follows with a sign-out that wipes the account's local data. An outage or any - * other refusal doesn't come here, and keeps the data. HOOK: lib/store/wipe - * registers here for what else a permanent rejection should do. Free of the - * stores, so the auth store can call it. + * A login ended with nobody asking. `refused`: the server refused it, by + * `invalid_grant` or a lasting 401 after a fresh try (both `certain`), or a 401 at a + * connect that then failed (not, it's one answer). `session`: the organisation's + * idle or session limit. The auth store follows with a sign-out that hides the + * account's data, which waits for the next sign-in. An outage or any other refusal + * doesn't come here. lib/offline/device-wipe.ts listens, to keep the count for the + * sign-in page and to delete at once where the organisation asks for that. Free of + * the stores, so the auth store can call it. */ -type Listener = (accountId: string) => void; +export type ForcedSignOutKind = 'refused' | 'session'; + +type Listener = (accountId: string, certain: boolean, kind: ForcedSignOutKind) => void; const listeners = new Set<Listener>(); @@ -15,10 +20,10 @@ export function onCredentialsRejected(listener: Listener): () => void { return () => listeners.delete(listener); } -export function noteCredentialsRejected(accountId: string): void { +export function noteCredentialsRejected(accountId: string, certain = true, kind: ForcedSignOutKind = 'refused'): void { for (const listener of [...listeners]) { try { - listener(accountId); + listener(accountId, certain, kind); } catch { // A sign-out must go on whatever a listener does. } diff --git a/lib/offline/device-wipe.ts b/lib/offline/device-wipe.ts new file mode 100644 index 000000000..c63c13cc6 --- /dev/null +++ b/lib/offline/device-wipe.ts @@ -0,0 +1,729 @@ +/** + * Everything that takes an account's data off this device, and how a device + * hears that it should: + * + * - the instance's registry (lib/devices): a wipe an admin asked for, heard at + * check-in. At a start the check-in runs before the local copy is shown. + * - the user, from settings. + * - the organisation, when it asks for deletion at once after a refused login or + * an idle or session limit (`organisation.devices.wipeOnForcedSignOut`). + * + * A refused login or an idle or session limit on its own deletes nothing. The + * account signs out and its data hides until the next sign-in, or for 30 days + * (EVICTED_KEEP_MS). What this file keeps for it is a number, for the sign-in page. + * The usual cause is a password changed on another device, and deleting there + * would lose unsent mail for very little protection against a thief. A deletion + * the organisation asked for takes the account's own data and nothing shared. + * + * Only a clear word wipes. An outage, a 500, an unknown answer: nothing happens. + * + * The desktop app's `WipeOfflineData` policy isn't here: its main process clears + * every partition itself (repos/desktop, src/main/features/local-wipe.ts), with no + * page taking part, so nothing a page runs could say it was done without doing it. + * + * Why a device id doesn't survive a wipe: the row keeps the history at the + * instance, and after a sign-in this is a device starting over, which the admin + * can wipe again. Keeping the id here would leave something of the account on a + * device that was told to remove it. What stays until the instance has heard is + * the row's id and secret, in lib/devices/wipe-state.ts. + * + * Accounts without cookies: a session cookie goes with the browser and the + * sealed one lasts 30 days, but a check-in only needs the secret, so a device + * still hears its wipe. One that lost its key database has nothing left to wipe + * and can't be told. Its row keeps saying the wipe is waiting. + * + * Wipes run one at a time across every window of this browser, under a Web Lock: + * the last account's wipe deletes the key database with every row in it, so a + * second wipe going on at that moment would put back a row just removed. + */ + +import { clearAllCheckpoints } from '@/lib/mail-import/checkpoints'; +import { sweepPrivateExports } from '@/lib/mail-export/sinks'; +import { clearAllPluginStorage, clearPluginStorageForAccount } from '@/lib/plugin-sandbox/storage-scope'; +import { fileStorage } from '@/lib/plugin-storage'; +import { clearHandoffs } from '@/lib/launch-handoff'; +import { apiFetch } from '@/lib/browser-navigation'; +import { SW_SCOPE } from '@/lib/app-update'; +import { devicesForAccount, devicesForNoOne } from '@/lib/device-policy'; +import { getDesktopBridge } from '@/lib/desktop/bridge'; +import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; +import { clearRescuedDrafts } from '@/lib/popout/rescued-drafts'; +import { isPopoutWindow } from '@/lib/popout/window-role'; +import { PUSH_STATE_CACHE } from '@/lib/push-preferences'; +import { ACCOUNT_STORAGE_KEYS, onBeforeSignOut } from '@/lib/sign-out-cleanup'; +import { + checkInWithInstance, + registerWithInstance, + reportWipeToInstance, + type RegisteredRow, +} from '@/lib/devices/client'; +import type { WipeReason } from '@/lib/devices/types'; +import { + addWipeNote, + clearWipePending, + dropRefusedLogin, + dropWipeConfirmation, + markWipePending, + queueWipeConfirmation, + readBlockedDatabases, + readPendingWipes, + readRefusedLogins, + readWipeConfirmations, + setRefusedCount, + WHOLE_DEVICE, + writeBlockedDatabases, +} from '@/lib/devices/wipe-state'; +import { + deleteDeviceRecord, + getDeviceRecord, + listDeviceRecords, + putDeviceRecord, + type DeviceRecord, +} from '@/lib/store/client/keys'; +import { onAccountRemoved, useAccountStore, type AccountEntry } from '@/stores/account-store'; +import { useAuthStore } from '@/stores/auth-store'; +import { usePolicyStore } from '@/stores/policy-store'; +import { onCredentialsRejected, type ForcedSignOutKind } from './credentials-rejected'; +import { forgetEvictedSecrets } from './evicted-secrets'; +import { confirmLoss, registerOfflineHooks, unsentForWipe, wipeAccount, wipeEverything } from './offline-mode'; +import { clearEvicted, forgetMailSnapshot, isEvicted, readEvicted, serverKey, useOfflineStore } from './state'; +import { runWipeCleaners } from './wipe-registry'; + +/** How long a start holds the local copy back for the instance's answer. Offline, it doesn't wait at all. */ +export const BOOT_CHECK_IN_BUDGET_MS = 1_000; +/** A check-in of each device row, at most this often. */ +export const CHECK_IN_EVERY_MS = 60 * 60 * 1000; +/** How often a running page looks whether something is due. */ +const TICK_MS = 60 * 1000; +/** How long a wipe waits to tell the instance before it goes on: it tries again at the next contact. */ +const REPORT_BUDGET_MS = 3_000; +/** How long a wipe waits for one database a running plugin frame holds open. */ +const DATABASE_BUDGET_MS = 2_000; + +const WIPE_CHANNEL = 'bulwark-device-wipe'; +const WIPE_LOCK = 'bulwark-device-wipe'; + +/** The webmail's own databases. Any other on this origin was made by a privileged plugin. */ +const APP_DATABASES = new Set([ + 'bulwark-store', + 'bulwark-plugins', + 'bulwark-company-calendars', + 'bulwark-mail-import', + 'bulwark-offline', +]); +/** Deleted by name too, for browsers without `indexedDB.databases()`. */ +const KNOWN_PLUGIN_DATABASES = ['smime-plugin-store', 'bulwark-openpgp', 'smime-capability-probe', 'openpgp-capability-probe']; + +/** + * What every account shared and can't be told apart by account, on top of what a + * full sign-out removes. `template-storage` is here though a sign-out keeps it: + * with settings sync off it's the user's own work and only here, which is why a + * sign-out leaves it, but a template can hold anything, and a device told to remove + * everything keeps no text. The question before a wipe from settings names it. + */ +const SHARED_LOCAL_KEYS = [ + ...ACCOUNT_STORAGE_KEYS, + 'notification-center', + 'plugin-oauth-states', + 'webmail_usernames', + 'global-search', + 'favicon-refresh', + 'template-storage', +]; +/** The WebDAV area's favourites, recent files and last folder. */ +const SHARED_LOCAL_PREFIXES = ['webdav-']; + +const running = new Map<string, Promise<void>>(); + +let lockQueue: Promise<unknown> = Promise.resolve(); + +/** One wipe at a time. Without Web Locks: at least in this window. */ +function underWipeLock(work: () => Promise<void>): Promise<void> { + if (typeof navigator !== 'undefined' && navigator.locks) return navigator.locks.request(WIPE_LOCK, work); + const turn = lockQueue.then(work, work); + lockQueue = turn.catch(() => {}); + return turn; +} + +// ---- Removing it ---- + +function deleteDatabase(name: string): Promise<boolean> { + return new Promise((resolve) => { + let request: IDBOpenDBRequest; + const timer = setTimeout(() => resolve(false), DATABASE_BUDGET_MS); + const finish = (done: boolean) => { + clearTimeout(timer); + resolve(done); + }; + try { + request = indexedDB.deleteDatabase(name); + } catch { + finish(true); + return; + } + request.onsuccess = () => finish(true); + request.onerror = () => finish(false); + }); +} + +/** + * Plugin-owned databases. S/MIME and OpenPGP keys aren't kept per account, so a + * wipe of one account takes everyone's: keeping them would leave a wiped user's + * private key behind. They're encrypted and come back from the user's own backup. + * One a running frame holds open stays on the list, and the wipe isn't reported + * as done until it's gone. + */ +async function deletePluginDatabases(): Promise<void> { + if (typeof indexedDB === 'undefined') return; + const tries = readBlockedDatabases(); + const names = new Set([...KNOWN_PLUGIN_DATABASES, ...Object.keys(tries)]); + try { + for (const { name } of await indexedDB.databases()) { + if (name && !APP_DATABASES.has(name)) names.add(name); + } + } catch { + // No list in this browser: the names above. + } + const blocked: Record<string, number> = {}; + await Promise.all([...names].map(async (name) => { + if (!(await deleteDatabase(name))) blocked[name] = (tries[name] ?? 0) + 1; + })); + writeBlockedDatabases(blocked); +} + +/** + * What the desktop app keeps outside this page's storage: attachment copies, files + * on the clipboard, toasts, tray and jump list. Each is feature detected, since an + * older shell has none of them and a browser no bridge. + */ +async function clearShellFiles(): Promise<void> { + const bridge = getDesktopBridge() as unknown as { + os?: { clearSurfaces?: () => void }; + clipboard?: { clearFiles?: () => void | Promise<void> }; + } | null; + bridge?.os?.clearSurfaces?.(); + await bridge?.clipboard?.clearFiles?.(); +} + +/** A running frame is gone at the next load. Before any plugin starts again. */ +async function retryBlockedDatabases(): Promise<void> { + if (Object.keys(readBlockedDatabases()).length > 0) await deletePluginDatabases(); +} + +/** The accounts' connected plugin accounts, which only sit on this device in the desktop app's own server. */ +async function forgetPluginAccounts(account: string | null): Promise<void> { + if (!IS_DESKTOP_BUILD) return; + const accounts = useAccountStore.getState().accounts; + const slots = (account === null ? accounts : accounts.filter((entry) => entry.id === account)).map((entry) => entry.cookieSlot ?? 0); + await Promise.all(slots.map((slot) => apiFetch('/api/plugin-secrets?all=true', { + method: 'DELETE', + headers: { 'X-JMAP-Cookie-Slot': String(slot) }, + signal: AbortSignal.timeout(REPORT_BUDGET_MS), + }).catch(() => {}))); + // An account dropped earlier has no cookie left to ask with. + await forgetEvictedSecrets(account); +} + +async function forgetPluginSettings(): Promise<void> { + const { usePluginStore } = await import('@/stores/plugin-store'); + usePluginStore.setState((state) => ({ plugins: state.plugins.map((plugin) => ({ ...plugin, settings: {} })) })); +} + +function removeLocalKeys(keys: string[], prefixes: string[]): void { + try { + const doomed = [...keys]; + for (let index = 0; index < localStorage.length; index += 1) { + const key = localStorage.key(index); + if (key && prefixes.some((prefix) => key.startsWith(prefix))) doomed.push(key); + } + for (const key of doomed) localStorage.removeItem(key); + } catch { + /* storage unavailable */ + } +} + +async function pushRegistration(): Promise<ServiceWorkerRegistration | null> { + if (typeof navigator === 'undefined' || !('serviceWorker' in navigator)) return null; + return (await navigator.serviceWorker.getRegistration(SW_SCOPE).catch(() => null)) ?? null; +} + +/** A sender and a subject can sit on screen long after the mail is gone. */ +async function closeShownNotifications(): Promise<void> { + const registration = await pushRegistration(); + for (const notification of await registration?.getNotifications?.() ?? []) notification.close(); +} + +/** The subscription is the browser's, shared by every account on this origin. */ +async function endWebPushIfNobodyLeft(): Promise<void> { + if (useAccountStore.getState().accounts.length > 0) return; + const registration = await pushRegistration(); + const subscription = await registration?.pushManager?.getSubscription(); + await subscription?.unsubscribe(); +} + +/** What's the account's own: a deletion after a refused login goes no further than this. */ +async function scrubAccount(account: string): Promise<void> { + await runWipeCleaners(account); + await forgetPluginAccounts(account).catch(() => {}); + clearPluginStorageForAccount(account); + forgetMailSnapshot(account); +} + +/** Everything accounts share, or that can't be told apart by account. */ +async function scrubShared(): Promise<void> { + await clearShellFiles().catch(() => {}); + await deletePluginDatabases(); + await forgetPluginSettings().catch(() => {}); + await fileStorage.clearFiles().catch(() => {}); + await clearAllCheckpoints().catch(() => {}); + await sweepPrivateExports({ force: true }).catch(() => {}); + try { + indexedDB.deleteDatabase('bulwark-company-calendars'); + } catch { + /* storage unavailable */ + } + clearHandoffs(); + clearRescuedDrafts(); + const { useNotificationCenterStore } = await import('@/stores/notification-center-store'); + useNotificationCenterStore.getState().clear(); + await closeShownNotifications().catch(() => {}); + if (typeof caches !== 'undefined') await caches.delete(PUSH_STATE_CACHE).catch(() => {}); + removeLocalKeys(SHARED_LOCAL_KEYS, SHARED_LOCAL_PREFIXES); +} + +/** + * Sends what's ready to go. A wipe's confirmation is queued before anything is + * deleted, so that a crash can't lose it, and isn't sent until the deletion is + * done: `finished` is the wipe that just got there. What's still pending, or a + * plugin database that's still there, isn't a wipe that can be reported. + */ +async function flushConfirmations(finished?: string): Promise<void> { + const pending = readPendingWipes(); + const blocked = Object.keys(readBlockedDatabases()).length > 0; + const deviceOpen = WHOLE_DEVICE in pending && finished !== WHOLE_DEVICE; + const ready = readWipeConfirmations().filter((entry) => { + if (entry.drop) return true; + if (deviceOpen || (blocked && entry.reason !== 'rejected')) return false; + return !entry.account || !(entry.account in pending) || entry.account === finished; + }); + await Promise.all(ready.map(async (entry) => { + if (await reportWipeToInstance(entry, AbortSignal.timeout(REPORT_BUDGET_MS))) dropWipeConfirmation(entry.id); + })); +} + +function signalSignedOut(): void { + // The login page would otherwise sign straight back in through a provider session. + try { + sessionStorage.setItem('signed_out', 'true'); + } catch { + /* noop */ + } +} + +/** One object for sending and hearing: a channel doesn't hear itself, so this window doesn't reload. */ +let wipeChannel: BroadcastChannel | null = null; + +function otherWindows(): BroadcastChannel | null { + try { + wipeChannel ??= new BroadcastChannel(WIPE_CHANNEL); + return wipeChannel; + } catch { + return null; + } +} + +type WipePhase = 'start' | 'end'; + +function tellOtherWindows(account: string | null, phase: WipePhase): void { + otherWindows()?.postMessage({ account, phase }); +} + +async function signOutAccount(account: string): Promise<void> { + const auth = useAuthStore.getState(); + signalSignedOut(); + if (auth.activeAccountId === account) await auth.logout({ endProviderSession: false }); + else auth.removeAccount(account, 'explicit'); +} + +/** The key database goes with the last account's store, and the other accounts' rows with it. */ +async function putRowsBack(rows: DeviceRecord[], wiped: string): Promise<void> { + const still = await listDeviceRecords().catch(() => [] as DeviceRecord[]); + for (const row of rows) { + if (row.account !== wiped && !still.some((entry) => entry.account === row.account)) await putDeviceRecord(row).catch(() => {}); + } +} + +export interface WipeAccountOptions { + /** Heard for this row: another window that got there first has removed it, and there's nothing to do. */ + ifRow?: string; +} + +/** + * Takes one account off this device. A refused login's sign-out is the auth + * store's own, and what it deletes is only the account's: no shared key database, + * no plugin settings, and with nothing kept here nothing of offline mode either. + */ +export function wipeAccountFromDevice(account: string, reason: WipeReason, options: WipeAccountOptions = {}): Promise<void> { + const under = running.get(account); + if (under) return under; + // Now, not when the lock comes: a window closed while it waits still finishes this. + markWipePending(account, reason); + const work = underWipeLock(() => eraseAccount(account, reason, options)).finally(() => running.delete(account)); + running.set(account, work); + return work; +} + +async function eraseAccount(account: string, reason: WipeReason, options: WipeAccountOptions): Promise<void> { + // Another window finished it while this one waited for the lock. + if (!(account in readPendingWipes())) return; + const records = await listDeviceRecords().catch(() => [] as DeviceRecord[]); + const record = records.find((entry) => entry.account === account); + if (options.ifRow && record?.id !== options.ifRow) { + clearWipePending(account); + return; + } + tellOtherWindows(account, 'start'); + registerOfflineHooks(); + + const ownOnly = reason === 'rejected' || reason === 'session'; + const unsent = await unsentForWipe(account); + if (record && !readWipeConfirmations().some((entry) => entry.id === record.id)) { + queueWipeConfirmation({ account, id: record.id, secret: record.secret, reason, unsent }); + if (reason === 'admin') addWipeNote(unsent); + } + + const shown = useOfflineStore.getState(); + const keepsMail = shown.enabled.includes(account) || shown.outbox.some((row) => row.account === account) || shown.localDrafts.some((row) => row.account === account); + if (!ownOnly) confirmLoss(account); + let deleted = true; + if (!ownOnly || keepsMail) { + // Tried again at the next start: the row keeps waiting until then. + await wipeAccount(account).catch(() => { deleted = false; }); + } + clearEvicted(account); + dropRefusedLogin(account); + await scrubAccount(account).catch(() => {}); + if (!ownOnly) await scrubShared().catch(() => {}); + + await deleteDeviceRecord(account).catch(() => {}); + await putRowsBack(records, account); + + await flushConfirmations(deleted ? account : undefined); + if (!ownOnly) { + await signOutAccount(account); + await endWebPushIfNobodyLeft().catch(() => {}); + } + if (deleted) clearWipePending(account); + tellOtherWindows(account, 'end'); +} + +/** Everything on this device, for everyone. The app's device preferences stay: they hold no mail. */ +export function wipeWholeDevice(reason: WipeReason): Promise<void> { + const under = running.get(WHOLE_DEVICE); + if (under) return under; + markWipePending(WHOLE_DEVICE, reason); + const work = underWipeLock(() => eraseDevice(reason)).finally(() => running.delete(WHOLE_DEVICE)); + running.set(WHOLE_DEVICE, work); + return work; +} + +async function eraseDevice(reason: WipeReason): Promise<void> { + if (!(WHOLE_DEVICE in readPendingWipes())) return; + tellOtherWindows(null, 'start'); + registerOfflineHooks(); + const records = await listDeviceRecords().catch(() => [] as DeviceRecord[]); + const accounts = [...new Set([...useOfflineStore.getState().enabled, ...records.map((record) => record.account)])]; + const counts = new Map(await Promise.all(accounts.map(async (account) => [account, await unsentForWipe(account)] as const))); + const queued = readWipeConfirmations(); + for (const record of records) { + if (queued.some((entry) => entry.id === record.id)) continue; + queueWipeConfirmation({ account: record.account, id: record.id, secret: record.secret, reason, unsent: counts.get(record.account) ?? 0 }); + } + if (reason === 'admin') { + const each = [...counts.values()]; + addWipeNote(each.includes(null) ? null : (each as number[]).reduce((sum, count) => sum + count, 0)); + } + + confirmLoss('all'); + await runWipeCleaners(null); + await forgetPluginAccounts(null).catch(() => {}); + clearAllPluginStorage(); + await scrubShared().catch(() => {}); + let deleted = true; + await wipeEverything().catch(() => { deleted = false; }); + for (const account of Object.keys(readEvicted())) clearEvicted(account); + for (const account of Object.keys(readRefusedLogins())) dropRefusedLogin(account); + await flushConfirmations(deleted ? WHOLE_DEVICE : undefined); + signalSignedOut(); + await useAuthStore.getState().logoutAll({ endProviderSession: false }); + await endWebPushIfNobodyLeft().catch(() => {}); + if (deleted) clearWipePending(WHOLE_DEVICE); + tellOtherWindows(null, 'end'); +} + +// ---- A sign-out: the row has nothing left to look after ---- + +function queueDrop(row: Pick<DeviceRecord, 'id' | 'secret'>): void { + queueWipeConfirmation({ id: row.id, secret: row.secret, reason: 'user', unsent: 0, drop: true }); +} + +async function dropRows(scope: string): Promise<void> { + const records = await listDeviceRecords().catch(() => [] as DeviceRecord[]); + const rows = scope === 'all' ? records : records.filter((record) => record.account === scope); + if (rows.length === 0) return; + for (const row of rows) { + queueDrop(row); + await deleteDeviceRecord(row.account).catch(() => {}); + } + await flushConfirmations(); +} + +// ---- Hearing about it ---- + +/** Whether this device has an instance to talk to. The desktop app's own server has no admin to ask. */ +function hasInstance(): boolean { + if (IS_DESKTOP_BUILD) return false; + return getDesktopBridge()?.mode !== 'standalone'; +} + +function wantsRow(account: { id: string; awaitingSignIn?: boolean; impersonated?: boolean }): boolean { + if (account.awaitingSignIn || account.impersonated) return false; + return getDesktopBridge()?.mode === 'instance' || useOfflineStore.getState().enabled.includes(account.id); +} + +const lastCheckIn = new Map<string, number>(); +const lastRegisterTry = new Map<string, number>(); +/** An older instance, or a session cookie that isn't back yet: not a request a minute. */ +const REGISTER_RETRY_MS = 15 * 60 * 1000; +let checkInFlight: Promise<void> | null = null; + +async function checkInRecord(record: DeviceRecord, now: number): Promise<void> { + lastCheckIn.set(record.account, now); + const answer = await checkInWithInstance(record, AbortSignal.timeout(REPORT_BUDGET_MS * 3)); + if (answer === 'wipe') { + await wipeAccountFromDevice(record.account, 'admin', { ifRow: record.id }); + return; + } + // The row is gone, or wiped already: what it was for is over. The account stays, and gets a new one. + if (answer === 'forgotten' || answer === 'wiped') { + await deleteDeviceRecord(record.account).catch(() => {}); + lastRegisterTry.delete(record.account); + return; + } + // Signed out here with nothing kept: the row has nothing left to look after. + if (answer === 'clear') { + const known = useAccountStore.getState().accounts.some((entry) => entry.id === record.account); + if (!known && !useOfflineStore.getState().enabled.includes(record.account)) await dropRows(record.account); + } +} + +/** + * The cookie slot decides whose row the instance makes. A slot that has moved on + * to another account since would leave this account's mail on someone else's row, + * where a wipe of this account never finds it. A bare name is the same person as a + * whole address: a token sign-in can claim either. + */ +function ownsRow(row: RegisteredRow, account: AccountEntry): boolean { + if (serverKey(row.server) !== serverKey(account.serverUrl)) return false; + const user = row.user.toLowerCase(); + return [account.username, account.email].some((candidate) => { + const name = candidate?.toLowerCase(); + if (!name) return false; + if (name === user) return true; + return (!name.includes('@') || !user.includes('@')) && name.split('@')[0] === user.split('@')[0]; + }); +} + +async function registerAccount(account: AccountEntry): Promise<void> { + const register = async () => { + // Another window may have got here while this one waited. + if (await getDeviceRecord(account.id)) return; + const row = await registerWithInstance(account.cookieSlot ?? 0, AbortSignal.timeout(REPORT_BUDGET_MS * 3)); + if (!row) return; + if (ownsRow(row, account) && useAccountStore.getState().getAccountById(account.id)) { + await putDeviceRecord({ account: account.id, id: row.id, secret: row.secret, createdAt: Date.now() }); + return; + } + queueDrop(row); + await flushConfirmations(); + }; + if (typeof navigator !== 'undefined' && navigator.locks) await navigator.locks.request('bulwark-device-register', register); + else await register(); +} + +/** Each row that's due, and a row for each account that needs one. `force`: every row, now. One at a time. */ +export function checkInDue(force = false, now = Date.now()): Promise<void> { + if (checkInFlight) return checkInFlight; + checkInFlight = runCheckIns(force, now).finally(() => { checkInFlight = null; }); + return checkInFlight; +} + +async function runCheckIns(force: boolean, now: number): Promise<void> { + if (!hasInstance()) return; + if (typeof navigator !== 'undefined' && navigator.onLine === false) return; + void flushConfirmations(); + const accounts = useAccountStore.getState().accounts; + const wanted = accounts.filter(wantsRow); + // No account with a reason and no database to look in: don't make one by looking. + const records = await listDeviceRecords(wanted.length === 0).catch(() => [] as DeviceRecord[]); + await Promise.all([ + ...records + .filter((record) => force || now - (lastCheckIn.get(record.account) ?? 0) >= CHECK_IN_EVERY_MS) + .map((record) => checkInRecord(record, now)), + ...wanted + .filter((account) => !records.some((record) => record.account === account.id)) + .filter((account) => force || now - (lastRegisterTry.get(account.id) ?? 0) >= REGISTER_RETRY_MS) + .map((account) => { + lastRegisterTry.set(account.id, now); + return registerAccount(account).catch(() => {}); + }), + ]); +} + +/** A wipe cut short by a crash or a closed window: finished before anything else. No network. */ +export async function finishInterruptedWipes(): Promise<void> { + const pending = readPendingWipes(); + for (const [account, reason] of Object.entries(pending)) { + if (account === WHOLE_DEVICE) await wipeWholeDevice(reason); + else await wipeAccountFromDevice(account, reason); + } + await retryBlockedDatabases(); +} + +// ---- A refused login ---- + +function policyKnown(): boolean { + const { loaded, partial } = usePolicyStore.getState(); + return loaded && !partial; +} + +/** A number, for the sign-in page. Unknown stays unknown, and is asked again at the next look. */ +async function countRefused(account: string): Promise<void> { + if (!(account in readRefusedLogins())) return; + registerOfflineHooks(); + setRefusedCount(account, await unsentForWipe(account)); +} + +const wipeReasonFor = (kind: ForcedSignOutKind | undefined): WipeReason => (kind === 'session' ? 'session' : 'rejected'); + +/** + * The login ended with nobody asking, and the auth store is signing it out and + * hiding the data. It goes now only if the organisation asked for that, and only + * when it's certain: a single bad answer at a start can be a server in trouble. + */ +async function heardRefusal(account: string, certain: boolean, kind: ForcedSignOutKind): Promise<void> { + if (certain && policyKnown() && devicesForAccount(account).wipeOnForcedSignOut) { + await wipeAccountFromDevice(account, wipeReasonFor(kind)); + return; + } + await countRefused(account); +} + +/** What the sign-in page reads: signed in again, the wait is over. A count that couldn't be had, and a policy that's new. */ +export async function sweepRefusedLogins(): Promise<void> { + for (const [account, wait] of Object.entries(readRefusedLogins())) { + if (!isEvicted(account)) { + dropRefusedLogin(account); + continue; + } + // Nobody's signed in to it, so no groups to go by: what applies to everyone reaches it. + if (wait.certain && policyKnown() && devicesForNoOne().wipeOnForcedSignOut) { + await wipeAccountFromDevice(account, wipeReasonFor(wait.kind)); + continue; + } + if (wait.unsent === null) await countRefused(account); + } +} + +let registered = false; + +/** The hooks every wipe needs, once per page. */ +export function registerDeviceWipe(): void { + if (registered) return; + registered = true; + onCredentialsRejected((account, certain, kind) => { + void heardRefusal(account, certain, kind); + }); + onBeforeSignOut(async (accountId, { keepLocalStore }) => { + if (!keepLocalStore) await dropRows(accountId); + }); + onAccountRemoved((accountId, reason) => { + if (reason === 'explicit') void dropRows(accountId); + }); +} + +/** + * What a start waits for, before any local data is shown: a wipe that was cut + * short, without limit, and the instance's answer, up to the budget. An answer + * that comes later still wipes, from wherever the page has got to. + */ +export async function runDeviceGate(): Promise<void> { + registerDeviceWipe(); + await finishInterruptedWipes(); + await sweepRefusedLogins(); + const checks = checkInDue(true); + await Promise.race([ + checks.catch(() => {}), + new Promise((resolve) => setTimeout(resolve, BOOT_CHECK_IN_BUDGET_MS)), + ]); +} + +/** + * Another window is wiping. An account this one isn't showing leaves its lists at + * once and in place, or the next write of the account registry here brings it back. + * One it's showing: its mail is in this window's memory, so it reloads once the wipe + * is done. Another account's unsaved text isn't touched. + */ +function heardFromOtherWindow(account: string | null, phase: WipePhase): void { + const auth = useAuthStore.getState(); + if (account === null || account === auth.activeAccountId) { + if (phase === 'end') window.location.reload(); + return; + } + if (useAccountStore.getState().getAccountById(account)) auth.removeAccount(account, 'wiped'); + const { enabled } = useOfflineStore.getState(); + if (enabled.includes(account)) useOfflineStore.setState({ enabled: enabled.filter((id) => id !== account) }); +} + +function listenToOtherWindows(): () => void { + const channel = otherWindows(); + if (!channel) return () => {}; + channel.onmessage = (event: MessageEvent<{ account: string | null; phase?: WipePhase }>) => { + if (event.data?.account === undefined) return; + heardFromOtherWindow(event.data.account, event.data.phase ?? 'end'); + }; + return () => { channel.onmessage = null; }; +} + +/** For the host component: all of it, for as long as the page runs. */ +export function startDeviceWipe(): () => void { + registerDeviceWipe(); + if (isPopoutWindow()) return listenToOtherWindows(); + const stopOthers = listenToOtherWindows(); + void (async () => { + await finishInterruptedWipes(); + await sweepRefusedLogins(); + await checkInDue(); + })().catch(() => {}); + const tick = setInterval(() => { + void checkInDue().catch(() => {}); + void sweepRefusedLogins().catch(() => {}); + }, TICK_MS); + const onOnline = () => { void checkInDue(true).catch(() => {}); }; + window.addEventListener('online', onOnline); + const stopEnabled = useOfflineStore.subscribe((state, prev) => { + if (state.enabled === prev.enabled) return; + for (const account of state.enabled) lastRegisterTry.delete(account); + void checkInDue().catch(() => {}); + }); + const stopPolicy = usePolicyStore.subscribe((state, prev) => { + if (state.rawPolicy !== prev.rawPolicy || state.partial !== prev.partial) void sweepRefusedLogins().catch(() => {}); + }); + return () => { + stopOthers(); + stopEnabled(); + stopPolicy(); + clearInterval(tick); + window.removeEventListener('online', onOnline); + }; +} diff --git a/lib/offline/evicted-secrets.ts b/lib/offline/evicted-secrets.ts new file mode 100644 index 000000000..490992645 --- /dev/null +++ b/lib/offline/evicted-secrets.ts @@ -0,0 +1,23 @@ +/** + * Plugin secrets of an account the app dropped, in the desktop app, where they sit + * on this device's own server. The account has no cookie left to ask with, so the + * route takes who it was, from what was written down at the time. On an instance + * they aren't the device's to remove, and nothing is written down. + */ + +import { apiFetch } from '@/lib/browser-navigation'; +import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; +import { dropEvictedOwner, readEvictedOwners } from './state'; + +const BUDGET_MS = 3_000; + +/** `account` null: everyone's. */ +export async function forgetEvictedSecrets(account: string | null): Promise<void> { + if (!IS_DESKTOP_BUILD) return; + const owners = Object.entries(readEvictedOwners()).filter(([id]) => account === null || id === account); + await Promise.all(owners.map(async ([id, owner]) => { + const query = new URLSearchParams({ all: 'true', username: owner.username, server: owner.serverUrl }); + const response = await apiFetch(`/api/plugin-secrets?${query}`, { method: 'DELETE', signal: AbortSignal.timeout(BUDGET_MS) }).catch(() => null); + if (response?.ok) dropEvictedOwner(id); + })); +} diff --git a/lib/offline/offline-mode.ts b/lib/offline/offline-mode.ts index e473ccc0f..4a27d689a 100644 --- a/lib/offline/offline-mode.ts +++ b/lib/offline/offline-mode.ts @@ -11,15 +11,15 @@ * - Changes and sends made offline wait in the store's outbox and go out in * order once the server answers again and the organisation's policy was * fetched afresh (flush.ts). - * - Everything is wiped at a full sign-out, at the session limits and when the - * server really refuses the login (`invalid_grant`), by - * lib/sign-out-cleanup.ts; for one account when it signs out, is removed or - * switches offline mode off, and when the organisation forbids it (checked on - * every policy fetch). An account the app drops by itself because it couldn't - * confirm the login (an outage, an unknown refusal, a session cookie that ran - * out) keeps its data for 30 days or the next sign-in, hidden from everyone - * else. Unsent messages a sign-out deletes without the user's word are named - * (lost.ts). + * - Everything is wiped at a full sign-out, by lib/sign-out-cleanup.ts; for one + * account when it signs out, is removed or switches offline mode off, and when + * the organisation forbids it (checked on every policy fetch). An account the + * app drops by itself keeps its data for 30 days or the next sign-in, hidden from + * everyone else: when it couldn't confirm the login (an outage, an unknown + * refusal, a session cookie that ran out), at the organisation's session limit, + * and when the server refuses the login (`invalid_grant`, a lasting 401), unless + * the organisation asks for deletion at once (lib/offline/device-wipe.ts). Unsent + * messages a sign-out deletes without the user's word are named (lost.ts). */ import { IS_LITE } from '@/lib/lite'; @@ -30,6 +30,7 @@ import { labelsPolicyFor } from '@/lib/outgoing/classification'; import { getSendGuardSource, guardState, guardsSending } from '@/lib/plugin-send-guards'; import { emitPushStateChange } from '@/lib/push-events'; import { requestOutboxSync } from '@/lib/pwa-notify/outbox-sync'; +import { emitStoreEvent } from '@/lib/offline/store-events'; import { STORAGE_ERROR_AREA, type StoreScope, type StoreUsage } from '@/lib/store/area'; import type { DraftError } from '@/lib/store/drafts/pending'; import { configureStore, getStore, type StorePageHooks } from '@/lib/store/client/api'; @@ -92,6 +93,9 @@ import { flushQueue, LOOKUP_WAIT_MS, SENDING_STALE_MS, settleStaleSends } from ' import { LEGACY_DB_NAME, moveLegacyOutbox, strandedLegacyMessages } from './migrate-legacy'; import { deleteShellCaches, tellServiceWorker } from './shell'; import { rememberLost } from './lost'; +import { forgetEvictedSecrets } from './evicted-secrets'; +import { clearDesktopSurfaces } from '@/lib/desktop/bridge'; +import { addSleepHandler, reportStoreCreatedMail } from '@/lib/desktop/system-events'; export type OfflineNotice = | { kind: 'queued'; subject: string } @@ -252,6 +256,11 @@ const storeHooks: StorePageHooks = { void refreshQueueState(); }, onEvent(event) { + emitStoreEvent(event); + if (event.type === 'created' && event.collection === 'Email') { + const client = onlineClientFor(event.account); + if (client) reportStoreCreatedMail(client, event.jmap, event.ids); + } if (event.type === 'synced') { useOfflineStore.setState((s) => { const { [event.account]: _full, ...storageFull } = s.storageFull; @@ -1029,6 +1038,31 @@ export async function unsentCount(scope: string, waitMs = UNSENT_READ_MS): Promi return Promise.race([read, new Promise<typeof known>((resolve) => setTimeout(() => resolve(known), waitMs))]); } +/** How long a wipe waits for the count. A wipe's report is the only record of what it deleted. */ +export const UNSENT_FOR_WIPE_MS = 10_000; + +async function unsentOfAccount(account: string, waitMs: number): Promise<number | null> { + const shown = useOfflineStore.getState(); + // Reading an account's store would create it if it never had one. + if (!shown.enabled.includes(account)) return [...shown.outbox, ...shown.localDrafts].filter((row) => row.account === account).length; + let timer: ReturnType<typeof setTimeout> | undefined; + const read = Promise.all([readQueue(account), readLocalDrafts(account)]) + .then(([{ failed, outbox: entries }, drafts]) => (failed.length > 0 ? null : entries.length + drafts.length), () => null); + const answer = await Promise.race([read, new Promise<null>((resolve) => { timer = setTimeout(() => resolve(null), waitMs); })]); + clearTimeout(timer); + return answer; +} + +/** + * How many unsent messages a wipe of `scope` deletes, one account or 'all', hidden + * accounts included. Null when the store can't say: that isn't the same as none. + */ +export async function unsentForWipe(scope: string, waitMs = UNSENT_FOR_WIPE_MS): Promise<number | null> { + const accounts = scope === 'all' ? useOfflineStore.getState().enabled : [scope]; + const counts = await Promise.all(accounts.map((account) => unsentOfAccount(account, waitMs))); + return counts.includes(null) ? null : (counts as number[]).reduce((sum, count) => sum + count, 0); +} + /** Names the unsent messages a wipe of `scope` deletes, unless the user agreed. */ async function nameLost(scope: string, stillSignedIn: boolean): Promise<void> { if (named.has(scope) || named.has('all')) return; @@ -1047,11 +1081,15 @@ async function nameLost(scope: string, stillSignedIn: boolean): Promise<void> { } export async function wipeAccount(account: string): Promise<void> { + clearDesktopSurfaces(); const timer = syncTimers.get(account); if (timer) clearTimeout(timer); syncTimers.delete(account); // Waited for a sign-in that never came: whoever is here now mustn't read its subjects. - if (isEvicted(account)) named.add(account); + if (isEvicted(account)) { + named.add(account); + void forgetEvictedSecrets(account).catch(() => {}); + } const before = useOfflineStore.getState(); if (before.enabled.includes(account) || before.outbox.some((row) => row.account === account) || before.localDrafts.some((row) => row.account === account)) { await nameLost(account, useAuthStore.getState().isAuthenticated); @@ -1079,6 +1117,7 @@ export async function wipeAccount(account: string): Promise<void> { /** Nothing of offline mode stays on this device. */ export async function wipeEverything(): Promise<void> { + clearDesktopSurfaces(); for (const timer of syncTimers.values()) clearTimeout(timer); syncTimers.clear(); writeEnabled([]); @@ -1100,7 +1139,7 @@ export async function wipeEverything(): Promise<void> { } /** The organisation's word on this account, from the server or the last fetch. Defaults aren't its word. */ -function scopeDecided(account: string): boolean { +export function scopeDecided(account: string): boolean { const { loaded, source, partial } = usePolicyStore.getState(); // The public part a page gets before it's signed in has no caps and no scopes in it. return loaded && !partial && (source === 'server' || source === 'cache') && policyDecided(account); @@ -1222,6 +1261,11 @@ export function startOfflineMode(): () => void { window.removeEventListener('offline', onOffline); }); + // The desktop app going to sleep. Waking comes with the two events above and below. + cleanups.push(addSleepHandler(() => { + void getStore().setOnline(false).catch(() => {}); + })); + // Back in front: catch up now rather than at the next interval. const onVisible = () => { if (document.visibilityState !== 'visible') return; @@ -1352,7 +1396,7 @@ export function startOfflineMode(): () => void { * that left the registry on purpose before this ran (a login without "remember * me" ends at a reload, before the host mounts) goes now, naming lost mail. */ -async function sweepAccountsGone(now = Date.now()): Promise<void> { +export async function sweepAccountsGone(now = Date.now()): Promise<void> { const evicted = readEvicted(); const accounts = useAccountStore.getState().accounts; for (const account of useOfflineStore.getState().enabled) { diff --git a/lib/offline/state.ts b/lib/offline/state.ts index f85726a57..d78392c42 100644 --- a/lib/offline/state.ts +++ b/lib/offline/state.ts @@ -254,6 +254,29 @@ export function clearEvicted(account: string): void { writeEvicted(evicted); } +/** localStorage: who a dropped account was, only in the desktop app: its plugin secrets are on this device's server, under this. */ +export const OFFLINE_EVICTED_OWNERS_KEY = 'bulwark-offline-evicted-owners'; + +export interface EvictedOwner { + username: string; + serverUrl: string; +} + +export function readEvictedOwners(): Record<string, EvictedOwner> { + return readRecord<EvictedOwner>(OFFLINE_EVICTED_OWNERS_KEY); +} + +export function rememberEvictedOwner(account: string, owner: EvictedOwner): void { + writeRecord(OFFLINE_EVICTED_OWNERS_KEY, { ...readEvictedOwners(), [account]: { username: owner.username, serverUrl: owner.serverUrl } }); +} + +export function dropEvictedOwner(account: string): void { + const owners = readEvictedOwners(); + if (!(account in owners)) return; + delete owners[account]; + writeRecord(OFFLINE_EVICTED_OWNERS_KEY, owners); +} + export function isEvicted(account: string): boolean { return account in readEvicted(); } diff --git a/lib/offline/store-events.ts b/lib/offline/store-events.ts new file mode 100644 index 000000000..b857ec351 --- /dev/null +++ b/lib/offline/store-events.ts @@ -0,0 +1,18 @@ +/** The store's events, for the parts of the page that aren't offline mode itself. */ + +import type { StoreEvent } from '@/lib/store/area'; + +type Listener = (event: StoreEvent) => void; + +const listeners = new Set<Listener>(); + +export function addStoreEventListener(listener: Listener): () => void { + listeners.add(listener); + return () => { + listeners.delete(listener); + }; +} + +export function emitStoreEvent(event: StoreEvent): void { + for (const listener of [...listeners]) listener(event); +} diff --git a/lib/offline/wipe-registry.ts b/lib/offline/wipe-registry.ts new file mode 100644 index 000000000..2b9d8f393 --- /dev/null +++ b/lib/offline/wipe-registry.ts @@ -0,0 +1,39 @@ +/** + * Where a feature with data of its own on this device signs up for wipes: + * edit-in-place's opened files, for one. Free of the stores, so anything can + * import it. Registering is all a feature has to do. + * + * A cleaner runs on every remote wipe, policy wipe, wipe from settings and + * refused login, before the account signs out. `account` is an account id, or + * `null` when everything on this device goes. A cleaner should finish quickly + * and may not ask the user anything. Bridge calls are fine, network isn't: a + * wipe often runs because the server said no. + */ + +export type WipeCleaner = (account: string | null) => void | Promise<void>; + +const cleaners = new Set<WipeCleaner>(); + +export function onDeviceWipe(cleaner: WipeCleaner): () => void { + cleaners.add(cleaner); + return () => cleaners.delete(cleaner); +} + +/** How long a wipe waits for one cleaner. What's on screen waits with it. */ +const CLEANER_BUDGET_MS = 10_000; + +export async function runWipeCleaners(account: string | null): Promise<void> { + await Promise.all([...cleaners].map(async (cleaner) => { + let timer: ReturnType<typeof setTimeout> | undefined; + try { + await Promise.race([ + cleaner(account), + new Promise((resolve) => { timer = setTimeout(resolve, CLEANER_BUDGET_MS); }), + ]); + } catch { + // One feature failing must not keep the others' data. + } finally { + if (timer) clearTimeout(timer); + } + })); +} diff --git a/lib/outgoing-hosts.ts b/lib/outgoing-hosts.ts index c58c8608b..91f3f4dc7 100644 --- a/lib/outgoing-hosts.ts +++ b/lib/outgoing-hosts.ts @@ -21,6 +21,7 @@ export const BUILT_IN_HOSTNAMES: readonly string[] = [ 'www.google.com', 'randomuser.me', 'img.freepik.com', + 'redirector.gvt1.com', ]; function hostnameOf(url: string): string | null { diff --git a/lib/plugin-secrets/vault.ts b/lib/plugin-secrets/vault.ts index ce1e4d8de..c7c74329c 100644 --- a/lib/plugin-secrets/vault.ts +++ b/lib/plugin-secrets/vault.ts @@ -217,6 +217,11 @@ export function setUserCredentialSecret( }); } +/** Everything this user connected, for every plugin. */ +export async function deleteAllUserCredentials(user: VaultUser): Promise<void> { + await collection().delete(userKey(user)); +} + /** Remove one credential, or all of a plugin's when credentialId is omitted. */ export function deleteUserCredentials(user: VaultUser, pluginId: string, credentialId?: string): Promise<void> { return modify(user, (data) => { diff --git a/lib/popout/open.ts b/lib/popout/open.ts index e1d51ea37..3cee94b3d 100644 --- a/lib/popout/open.ts +++ b/lib/popout/open.ts @@ -75,6 +75,12 @@ export function openMessageWindow(target: MessageWindowTarget): boolean { return focused(openWindow(messagePopoutUrl(target), `bulwark-message-${target.emailId.replace(/\W/g, '_')}`, 'message')); } +/** A new message in its own window, with nothing to hand over. */ +export function openNewComposerWindow(localAccountId?: string | null): boolean { + const name = `bulwark-compose-new-${Date.now().toString(36)}`; + return focused(openWindow(appPath('/popout/compose') + query({ account: localAccountId }), name, 'compose')); +} + export interface ComposerWindow { /** Hands the draft over. True once the composer is on screen there; until then the sender keeps its copy. */ handOver(payload: ComposePopoutPayload): Promise<boolean>; diff --git a/lib/popout/rescued-drafts.ts b/lib/popout/rescued-drafts.ts index 98a5f7c4d..5e39a2672 100644 --- a/lib/popout/rescued-drafts.ts +++ b/lib/popout/rescued-drafts.ts @@ -46,6 +46,12 @@ export function takeRescuedDraft(): ComposerDraftData | null { return first; } +/** A wipe: the text of a message nobody could save goes too. */ +export function clearRescuedDrafts(): void { + memory = []; + write([]); +} + /** Calls `listener` when a draft comes in. Returns the unsubscribe. */ export function onRescuedDraft(listener: () => void): () => void { listeners.add(listener); diff --git a/lib/popout/window-role.ts b/lib/popout/window-role.ts index de20ee6cf..3b1efe642 100644 --- a/lib/popout/window-role.ts +++ b/lib/popout/window-role.ts @@ -7,6 +7,7 @@ * stores/auth-store.ts and stores/account-store.ts ask here. */ +import { getDesktopBridge } from '@/lib/desktop/bridge'; import { withBasePath } from '@/lib/browser-navigation'; import { locales } from '@/i18n/routing'; @@ -28,7 +29,7 @@ export function isPopoutPath(pathname: string): boolean { if (before.length > 0 && !(locales as readonly string[]).includes(before[before.length - 1])) return false; if (before.some((segment) => OTHER_SECTIONS.has(segment))) return false; const rest = segments.slice(at + 1); - return (rest.length === 1 && rest[0] === 'compose') || (rest.length === 2 && rest[0] === 'message'); + return (rest.length === 1 && (rest[0] === 'compose' || rest[0] === 'spare')) || (rest.length === 2 && rest[0] === 'message'); } export function isPopoutWindow(): boolean { @@ -61,6 +62,13 @@ export function mainWindowStorage(): Pick<Storage, 'getItem' | 'setItem' | 'remo */ export function closePopoutWindow(): void { if (typeof window === 'undefined') return; + // The desktop app closes it for us: however the window came to be, and past the + // shell's own bookkeeping. Whoever calls this has saved or discarded by now. + const closeSelf = getDesktopBridge()?.windows?.closeSelf; + if (closeSelf) { + closeSelf(); + return; + } window.close(); window.setTimeout(() => { if (!window.closed) window.location.replace(withBasePath('/')); diff --git a/lib/pwa-notify/__tests__/page-actions.test.ts b/lib/pwa-notify/__tests__/page-actions.test.ts index 39287cd2f..c911eeae8 100644 --- a/lib/pwa-notify/__tests__/page-actions.test.ts +++ b/lib/pwa-notify/__tests__/page-actions.test.ts @@ -13,6 +13,7 @@ const makeClient = (accountId: string) => ({ getAccountId: () => accountId, getEmail: vi.fn(async (id: string) => (id === 'gone' ? null : { id, receivedAt: '2026-01-01T00:00:00Z', mailboxIds: { [id === 'binned' ? 'bin' : 'inbox']: true } })), getMailboxes: vi.fn(async () => [{ id: 'inbox', role: 'inbox' }, { id: 'x', originalId: 'bin', role: 'trash' }]), + batchMoveEmails: vi.fn(async (..._args: unknown[]) => {}), }); let clients: Record<string, ReturnType<typeof makeClient>>; let activeAccountId = 'alice@one'; @@ -31,7 +32,9 @@ vi.mock('@/stores/auth-store', () => ({ }), }, })); -vi.mock('@/stores/email-store', () => ({ useEmailStore: { getState: () => ({ batchMarkAsRead, batchArchive }) } })); +let listed: { id: string; sourceClientAccountId?: string }[] = []; +const deleteEmail = vi.fn(async (..._args: unknown[]) => true); +vi.mock('@/stores/email-store', () => ({ useEmailStore: { getState: () => ({ batchMarkAsRead, batchArchive, deleteEmail, emails: listed }) } })); // Each login's own subject, and a policy that reads it: the gate of the login // the notification is for, not of the one that's active here. vi.mock('@/lib/org/account-subjects', () => ({ subjectForAccount: (id: string) => ({ email: id, groups: [] }) })); @@ -43,6 +46,7 @@ vi.mock('@/stores/policy-store', () => ({ }, })); vi.mock('../plugin-veto', () => ({ vetoHooksRegistered: () => hooksRegistered })); +vi.mock('@/stores/settings-store', () => ({ useSettingsStore: { getState: () => ({ deleteAction: 'trash' }) } })); async function run(over: Partial<NotificationActionRequest> = {}) { const request: NotificationActionRequest = { @@ -65,6 +69,7 @@ beforeEach(() => { activeAccountId = 'alice@one'; gateOff.clear(); hooksRegistered = false; + listed = []; batchMarkAsRead.mockResolvedValue(true); batchArchive.mockResolvedValue(true); }); @@ -278,3 +283,34 @@ describe('Reply', () => { removeCurrent(); }); }); + +describe("Delete, from the desktop app's toast", () => { + it('goes through the store when the message is in the list, with its hooks and the Delete setting', async () => { + listed = [{ id: 'e1' }]; + expect(await run({ action: 'delete' })).toEqual(['accepted', 'done']); + expect(deleteEmail).toHaveBeenCalledWith(clients['alice@one'], 'e1'); + expect(clients['alice@one'].batchMoveEmails).not.toHaveBeenCalled(); + }); + + it("moves it to Trash by the folder's real id when it is not in the list", async () => { + expect(await run({ action: 'delete' })).toEqual(['accepted', 'done']); + expect(clients['alice@one'].batchMoveEmails).toHaveBeenCalledWith(['e1'], 'bin', undefined, expect.any(Boolean)); + expect(deleteEmail).not.toHaveBeenCalled(); + }); + + it('plugins are never gone round: with a veto hook listening, the message opens instead', async () => { + hooksRegistered = true; + expect(await run({ action: 'delete' })).toEqual(['accepted', 'failed']); + expect(clients['alice@one'].batchMoveEmails).not.toHaveBeenCalled(); + }); + + it('a message since moved to Trash stays there', async () => { + clients['alice@one'].getEmail.mockResolvedValue({ id: 'e1', mailboxIds: { bin: true } } as never); + expect(await run({ action: 'delete' })).toEqual(['accepted', 'failed']); + expect(clients['alice@one'].batchMoveEmails).not.toHaveBeenCalled(); + }); + + it("the worker can't send one", () => { + expect(isNotificationActionRequest({ action: 'delete', emailId: 'e1', accountId: 'a', at: Date.now() })).toBe(false); + }); +}); diff --git a/lib/pwa-notify/page-actions.ts b/lib/pwa-notify/page-actions.ts index 96b1db101..1368a61be 100644 --- a/lib/pwa-notify/page-actions.ts +++ b/lib/pwa-notify/page-actions.ts @@ -5,10 +5,12 @@ import { useEmailStore } from '@/stores/email-store'; import { usePolicyStore } from '@/stores/policy-store'; import { loginFingerprint } from './login-fingerprint'; import { vetoHooksRegistered } from './plugin-veto'; +import { useSettingsStore } from '@/stores/settings-store'; /** What the service worker posts when a notification's button is clicked (public/sw.js). */ export interface NotificationActionRequest { - action: 'archive' | 'mark-read' | 'reply'; + /** `delete` only comes from the desktop app's toasts, never from the worker. */ + action: 'archive' | 'mark-read' | 'reply' | 'delete'; emailId: string; accountId: string; /** When the worker asked. */ @@ -149,6 +151,24 @@ export async function runNotificationAction( answer('failed'); return; } + if (request.action === 'delete') { + const store = useEmailStore.getState(); + // In the list: the store's own delete, with its hooks and the Delete setting. + if (store.emails.some((row) => row.id === request.emailId && (row.sourceClientAccountId ?? entry.id) === entry.id)) { + answer(await store.deleteEmail(client, request.emailId) ? 'done' : 'failed'); + return; + } + // Not in the list, so no store action can reach it, and plugins are never gone round. + const trash = mailboxes.find((mailbox) => mailbox.role === 'trash'); + if (!trash || !email || vetoHooksRegistered()) { + answer('failed'); + return; + } + const markRead = useSettingsStore.getState().deleteAction === 'trash-and-read'; + await client.batchMoveEmails([request.emailId], trash.originalId || trash.id, accountId, markRead); + answer('done'); + return; + } const done = request.action === 'mark-read' ? await useEmailStore.getState().batchMarkAsRead(activeClient, true, { emailIds: [request.emailId], client, accountId }) : await useEmailStore.getState().batchArchive(activeClient, { emailIds: [request.emailId], client, emails: email ? [email] : [], userArchive: true }); diff --git a/lib/shared-store/__tests__/import-data.test.ts b/lib/shared-store/__tests__/import-data.test.ts index 80e1c589c..9335c4b9d 100644 --- a/lib/shared-store/__tests__/import-data.test.ts +++ b/lib/shared-store/__tests__/import-data.test.ts @@ -14,6 +14,7 @@ import { VAULT_COLLECTION } from '@/lib/plugin-secrets/vault'; import { ARCHIVE_COLLECTION } from '@/lib/account-archive-storage'; import { TELEMETRY_COLLECTION } from '@/lib/telemetry/state'; import { VERSION_CHECK_COLLECTION } from '@/lib/version-check/state'; +import { DEVICES_COLLECTION } from '@/lib/devices/registry'; // An existing single instance's settings, plugin credentials, archives, // telemetry and update-check state go into an empty shared store once, as @@ -43,9 +44,12 @@ beforeEach(() => { vi.stubEnv('PLUGIN_SECRETS_DIR', path.join(data, 'plugin-secrets')); vi.stubEnv('TELEMETRY_DATA_DIR', path.join(data, 'telemetry')); vi.stubEnv('VERSION_CHECK_DATA_DIR', path.join(data, 'version-check')); + vi.stubEnv('ADMIN_STATE_DIR', path.join(data, 'admin-state')); for (const dir of ['settings/account-archives', 'plugin-secrets', 'telemetry', 'version-check']) { mkdirSync(path.join(data, dir), { recursive: true }); } + mkdirSync(path.join(data, 'admin-state', 'devices', hash('f')), { recursive: true }); + writeFileSync(path.join(data, 'admin-state', 'devices', hash('f'), `${'0'.repeat(32)}.json`), '{"user":"a"}'); writeFileSync(path.join(data, 'settings', `${hash('a')}.enc`), Buffer.from([1, 2, 3, 4])); writeFileSync(path.join(data, 'settings', `${hash('b')}.enc`), Buffer.from([5, 6])); writeFileSync(path.join(data, 'settings', `${hash('c')}.enc.tmp`), 'half written'); @@ -78,10 +82,10 @@ describe('importing part data', () => { const before = snapshot(data); expect(await runAll()).toEqual({ - settings: 2, 'plugin-secrets': 1, 'account-archives': 1, telemetry: 3, 'version-check': 1, + settings: 2, 'plugin-secrets': 1, 'account-archives': 1, telemetry: 3, 'version-check': 1, devices: 1, }); expect(await runAll()).toEqual({ - settings: 0, 'plugin-secrets': 0, 'account-archives': 0, telemetry: 0, 'version-check': 0, + settings: 0, 'plugin-secrets': 0, 'account-archives': 0, telemetry: 0, 'version-check': 0, devices: 0, }); expect(snapshot(data)).toEqual(before); @@ -92,6 +96,7 @@ describe('importing part data', () => { expect((await store.collection('account-archives', ARCHIVE_COLLECTION).get(hash('d')))?.data.toString()).toBe('{"version":1}'); expect((await store.collection('telemetry', TELEMETRY_COLLECTION).list()).sort()).toEqual(['.telemetry-id', 'logins.json', 'state.json']); expect((await store.collection('version-check', VERSION_CHECK_COLLECTION).get('state.json'))?.data.toString()).toBe('{"status":null}'); + expect((await store.collection('devices', DEVICES_COLLECTION).get(`${hash('f')}/${'0'.repeat(32)}`))?.data.toString()).toBe('{"user":"a"}'); }); it('keeps what the store already holds', async () => { diff --git a/lib/shared-store/export.ts b/lib/shared-store/export.ts index d14775c0f..9a7f2297f 100644 --- a/lib/shared-store/export.ts +++ b/lib/shared-store/export.ts @@ -11,6 +11,7 @@ import { VAULT_COLLECTION } from '@/lib/plugin-secrets/vault'; import { ARCHIVE_COLLECTION } from '@/lib/account-archive-storage'; import { TELEMETRY_COLLECTION } from '@/lib/telemetry/state'; import { VERSION_CHECK_COLLECTION } from '@/lib/version-check/state'; +import { DEVICES_COLLECTION } from '@/lib/devices/registry'; import { getStore } from './index'; import { exportSteps as extExportSteps } from './import/ext'; import { localCollection, localLog } from './local'; @@ -93,6 +94,7 @@ export const EXPORT_STEPS: ExportStep[] = [ exportCollection('account-archives', ARCHIVE_COLLECTION), exportCollection('telemetry', TELEMETRY_COLLECTION), exportCollection('version-check', VERSION_CHECK_COLLECTION), + exportCollection('devices', DEVICES_COLLECTION), ]; export async function exportSharedData(steps: ExportStep[] = EXPORT_STEPS): Promise<Record<string, number>> { diff --git a/lib/shared-store/import/data.ts b/lib/shared-store/import/data.ts index 9af9a1030..592cfe671 100644 --- a/lib/shared-store/import/data.ts +++ b/lib/shared-store/import/data.ts @@ -7,6 +7,7 @@ import { VAULT_COLLECTION } from '@/lib/plugin-secrets/vault'; import { ARCHIVE_COLLECTION } from '@/lib/account-archive-storage'; import { TELEMETRY_COLLECTION } from '@/lib/telemetry/state'; import { VERSION_CHECK_COLLECTION } from '@/lib/version-check/state'; +import { DEVICES_COLLECTION } from '@/lib/devices/registry'; /** * Part `data` of the shared-store import (#1066): every document of these @@ -39,4 +40,5 @@ export const steps: ImportStep[] = [ // state.json, logins.json and the instance id .telemetry-id copyCollection('telemetry', TELEMETRY_COLLECTION), copyCollection('version-check', VERSION_CHECK_COLLECTION), + copyCollection('devices', DEVICES_COLLECTION), ]; diff --git a/lib/sign-out-cleanup.ts b/lib/sign-out-cleanup.ts index 68f52791c..1e795e46d 100644 --- a/lib/sign-out-cleanup.ts +++ b/lib/sign-out-cleanup.ts @@ -1,6 +1,7 @@ import { fileStorage } from '@/lib/plugin-storage'; import { clearHandoffs } from '@/lib/launch-handoff'; import { clearAllCheckpoints } from '@/lib/mail-import/checkpoints'; +import { clearDesktopSurfaces } from '@/lib/desktop/bridge'; import { sweepPrivateExports } from '@/lib/mail-export/sinks'; import { purgeStoreFiles } from '@/lib/store/client/purge'; @@ -21,6 +22,7 @@ const SIGNED_OUT_STORAGE_KEYS = [ 'contact-storage', 'calendar-storage', 'calendar-notification-storage', + 'calendar-alert-claims', // Open tabs name messages and their subjects. 'pro-tabs', 'search-history-storage', @@ -38,13 +40,17 @@ const SIGNED_OUT_STORAGE_KEYS = [ 'bulwark-offline-accounts', // Which accounts' data waits for a new sign-in, and until when. 'bulwark-offline-evicted', + 'bulwark-offline-evicted-owners', 'bulwark-store-opened', // What each account chose to keep, and what's known about its store. 'bulwark-offline-scope', 'bulwark-offline-health', ]; -const LOCAL_STORE_KEYS = new Set(['bulwark-offline-accounts', 'bulwark-offline-evicted', 'bulwark-store-opened', 'bulwark-offline-scope', 'bulwark-offline-health']); +const LOCAL_STORE_KEYS = new Set(['bulwark-offline-accounts', 'bulwark-offline-evicted', 'bulwark-offline-evicted-owners', 'bulwark-store-opened', 'bulwark-offline-scope', 'bulwark-offline-health']); + +/** What's the accounts' but isn't the local store's: a wipe of one account that leaves others signed in takes these too. */ +export const ACCOUNT_STORAGE_KEYS = SIGNED_OUT_STORAGE_KEYS.filter((key) => !LOCAL_STORE_KEYS.has(key)); const SIGNED_OUT_SIGNAL = 'bulwark:signed-out'; export { SIGNED_OUT_SIGNAL as SIGNED_OUT_KEY }; @@ -131,7 +137,7 @@ export function purgeSignedOutData(options: SignOutCleanupOptions = {}): void { // it was encrypted with, and the app shell the service worker kept. Also the // database of older versions, in case it wasn't moved yet. if (!options.keepLocalStore) { - void purgeStoreFiles(); + void purgeStoreFiles().catch(() => {}); try { window.indexedDB?.deleteDatabase('bulwark-offline'); } catch { @@ -141,6 +147,7 @@ export function purgeSignedOutData(options: SignOutCleanupOptions = {}): void { } // Files and links on their way into a draft or an import. clearHandoffs(); + clearDesktopSurfaces(); for (const cleanup of signedOutCleanups) { try { cleanup(options); diff --git a/lib/store/__tests__/calendar-no-dom.test.ts b/lib/store/__tests__/calendar-no-dom.test.ts index 8cd3d10a1..1fcd8543f 100644 --- a/lib/store/__tests__/calendar-no-dom.test.ts +++ b/lib/store/__tests__/calendar-no-dom.test.ts @@ -22,7 +22,7 @@ async function inputsOf(entry: string): Promise<string[]> { } describe('what the worker pulls in', () => { - for (const entry of ['lib/store/calendar/index.ts', 'lib/store/calendar/reminders.ts']) { + for (const entry of ['lib/store/calendar/index.ts', 'lib/store/calendar/reminders.ts', 'lib/store/reminders/index.ts']) { it(`${entry} reaches no UI code`, async () => { const inputs = await inputsOf(entry); expect(inputs.length).toBeGreaterThan(3); diff --git a/lib/store/__tests__/reminders-review.test.ts b/lib/store/__tests__/reminders-review.test.ts new file mode 100644 index 000000000..ab834a7e8 --- /dev/null +++ b/lib/store/__tests__/reminders-review.test.ts @@ -0,0 +1,405 @@ +// @vitest-environment node +import { describe, expect, it } from 'vitest'; +import { DEFAULT_SCOPE } from '../area'; +import { calendarArea } from '../calendar'; +import { listUpcomingAlerts } from '../calendar/reminders'; +import { instantOf } from '../calendar/records'; +import { AccountEngine } from '../engine/account-engine'; +import { remindersArea } from '../reminders'; +import { AWAY_MS, type MissedBatch, type TickResult } from '../reminders/ledger'; +import { CALENDAR_SESSION, FakeCalendarJmap } from './helpers/fake-calendar'; +import { JMAP_ACCOUNT } from './helpers/fake-jmap'; +import { openMemoryStore } from './helpers/node-adapter'; + +const MIN = 60_000; +const DAY = 24 * 60 * MIN; +const START = Date.UTC(2026, 10, 10, 9); +const FIRE = START - 15 * MIN; +const ALERT = { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } }; +const WEEKLY = { '@type': 'RecurrenceRule', frequency: 'weekly' }; +const ZONE = 'Europe/Berlin'; +const PARAMS = { timeZone: ZONE, tasks: true }; + +function setup(startAt = FIRE - 60 * MIN) { + const server = new FakeCalendarJmap('1.0'); + const db = openMemoryStore(); + const rig = { server, db, now: startAt }; + const make = () => new AccountEngine({ + account: 'a@fake.test', + db, + session: CALENDAR_SESSION, + transport: server, + areas: [calendarArea, remindersArea], + scope: DEFAULT_SCOPE, + now: () => rig.now, + sleep: async () => {}, + }); + let engine = make(); + return Object.assign(rig, { + get engine() { + return engine; + }, + restart: () => { + engine = make(); + }, + call: <T,>(name: string, params?: unknown) => engine.areaCall(name, params) as Promise<T>, + tick: (params: Record<string, unknown> = {}) => engine.areaCall('reminders.tick', { ...PARAMS, ...params }) as Promise<TickResult>, + }); +} + +type Rig = ReturnType<typeof setup>; + +function event(partial: Record<string, unknown> = {}) { + return { id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', timeZone: ZONE, duration: 'PT30M', alerts: { a: ALERT }, ...partial }; +} + +async function syncedAndWatching(rig: Rig): Promise<void> { + await rig.engine.requestSync(); + await rig.tick(); +} + +/** The last check just before the alert, so nothing counts as away. */ +async function justBefore(rig: Rig): Promise<void> { + rig.now = FIRE - MIN; + await rig.tick(); +} + +describe('one bad event', () => { + const BAD: Array<[string, Record<string, unknown>]> = [ + ['an offset out of all range', { alerts: { a: { ...ALERT, trigger: { '@type': 'OffsetTrigger', offset: 'P999999999D' } } } }], + ['a huge negative offset on a series', { recurrenceRule: WEEKLY, start: '2026-10-06T10:00:00', alerts: { a: { ...ALERT, trigger: { '@type': 'OffsetTrigger', offset: '-P999999999W' } } } }], + ['an alert without a trigger', { alerts: { a: { '@type': 'Alert', action: 'display' } } }], + ['a null alert', { alerts: { a: null } }], + ['a null alert on a series', { recurrenceRule: WEEKLY, start: '2026-10-06T10:00:00', alerts: { a: null } }], + ['a start that is no date', { start: 'yesterday-ish' }], + ]; + + for (const [name, partial] of BAD) { + it(`doesn't stop the others: ${name}`, async () => { + const rig = setup(); + rig.server.addEvent(event({ id: 'bad', uid: 'bad', title: 'Bad', ...partial })); + rig.server.addEvent(event()); + await syncedAndWatching(rig); + await justBefore(rig); + rig.now = FIRE; + expect((await rig.tick()).due.map((alert) => alert.title)).toEqual(['Standup']); + }); + } + + it("doesn't stop the others: a row that can't be read at all", async () => { + const rig = setup(); + rig.server.addEvent(event()); + await syncedAndWatching(rig); + rig.db.run('INSERT INTO calendar_event (jmap, id, uid, json) VALUES (?, ?, ?, ?)', ['a-other', 'broken', 'broken', '{not json']); + await justBefore(rig); + rig.now = FIRE; + expect((await rig.tick()).due.map((alert) => alert.title)).toEqual(['Standup']); + }); + + it('keeps the good alert of an event with a bad one', async () => { + const rig = setup(); + rig.server.addEvent(event({ alerts: { bad: null, huge: { ...ALERT, trigger: { '@type': 'OffsetTrigger', offset: '-P999999999W' } }, a: ALERT } })); + await syncedAndWatching(rig); + await justBefore(rig); + rig.now = FIRE; + expect((await rig.tick()).due.map((alert) => alert.alertId)).toEqual(['a']); + }); +}); + +describe('Join', () => { + const OPTIONS = { from: FIRE - MIN, to: FIRE + MIN, timeZone: ZONE }; + + async function joinOf(uri: string, extra: Record<string, unknown> = {}) { + const rig = setup(); + rig.server.addEvent(event({ virtualLocations: { v: { '@type': 'VirtualLocation', uri } }, ...extra })); + await rig.engine.requestSync(); + const [alert] = listUpcomingAlerts(rig.db, OPTIONS); + return alert; + } + + for (const uri of ['ms-msdt:/id PCWDiagnostic', 'search-ms:query=x', 'smb://evil.example/share', 'msteams:/l/meetup-join/x', 'https://meet.google.com@evil.example/abc-defg-hij', 'javascript:alert(1)']) { + it(`offers none for ${uri}`, async () => { + expect((await joinOf(uri)).joinUrl).toBeNull(); + }); + } + + it('names the host of a link it does not know, not of one it does', async () => { + expect(await joinOf('https://calls.example.org/room')).toMatchObject({ joinUrl: 'https://calls.example.org/room', joinHost: 'calls.example.org' }); + expect(await joinOf('https://meet.jit.si/standup')).toMatchObject({ joinUrl: 'https://meet.jit.si/standup', joinHost: null }); + expect(await joinOf('https://meet.google.com/abc-defg-hij')).toMatchObject({ joinHost: null }); + }); +}); + +describe('shared calendars', () => { + function addOtherCopy(rig: Rig, jmap: string, json: Record<string, unknown>) { + rig.db.run('INSERT INTO calendar_event (jmap, id, uid, json) VALUES (?, ?, ?, ?)', [jmap, json.id as string, json.uid as string, JSON.stringify({ calendarIds: { cal1: true }, '@type': 'Event', ...json })]); + } + + it('leaves out a calendar the user has not subscribed to', async () => { + const rig = setup(); + rig.server.calendars.get('cal1')!.isSubscribed = false; + rig.server.addEvent(event()); + await rig.engine.requestSync(); + expect(listUpcomingAlerts(rig.db, { from: FIRE - MIN, to: FIRE + MIN, timeZone: ZONE })).toEqual([]); + }); + + it('still reads a calendar that says nothing about it', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await rig.engine.requestSync(); + expect(listUpcomingAlerts(rig.db, { from: FIRE - MIN, to: FIRE + MIN, timeZone: ZONE })).toHaveLength(1); + }); + + it('rings once for a meeting in two accounts, from the own account', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await rig.engine.requestSync(); + addOtherCopy(rig, 'a-shared', event({ id: 'other', alerts: { other: ALERT } })); + const alerts = listUpcomingAlerts(rig.db, { from: FIRE - MIN, to: FIRE + MIN, timeZone: ZONE, prefer: JMAP_ACCOUNT }); + expect(alerts.map((alert) => alert.jmap)).toEqual([JMAP_ACCOUNT]); + const other = listUpcomingAlerts(rig.db, { from: FIRE - MIN, to: FIRE + MIN, timeZone: ZONE, prefer: 'a-shared' }); + expect(other.map((alert) => alert.jmap)).toEqual(['a-shared']); + }); + + it('prefers the account the session names as primary when it fires', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await syncedAndWatching(rig); + addOtherCopy(rig, 'a-shared', event({ id: 'other' })); + await justBefore(rig); + rig.now = FIRE; + expect((await rig.tick()).due.map((alert) => alert.jmap)).toEqual([JMAP_ACCOUNT]); + }); +}); + +describe('an edit that keeps the time', () => { + it('does not fire again when only the alert id changed', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await syncedAndWatching(rig); + await justBefore(rig); + rig.now = FIRE; + expect((await rig.tick()).due).toHaveLength(1); + rig.server.patchEvent('e1', { alerts: { renamed: ALERT } }); + await rig.engine.requestSync(); + rig.now = FIRE + MIN; + expect((await rig.tick()).due).toEqual([]); + }); + + it('keeps the snooze, and brings it back once', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await syncedAndWatching(rig); + await justBefore(rig); + rig.now = FIRE; + const [fired] = (await rig.tick()).due; + await rig.call('reminders.snooze', { key: fired.key, minutes: 5 }); + rig.server.patchEvent('e1', { alerts: { renamed: ALERT } }); + await rig.engine.requestSync(); + rig.now = FIRE + 5 * MIN; + expect((await rig.tick()).due.map((alert) => alert.alertId)).toEqual(['renamed']); + rig.now += MIN; + expect((await rig.tick()).due).toEqual([]); + }); + + it('a move while snoozed: the old time is forgotten, the new one rings', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await syncedAndWatching(rig); + await justBefore(rig); + rig.now = FIRE; + const [fired] = (await rig.tick()).due; + await rig.call('reminders.snooze', { key: fired.key, minutes: 5 }); + rig.server.patchEvent('e1', { start: '2026-11-10T10:30:00' }); + await rig.engine.requestSync(); + rig.now = FIRE + 5 * MIN; + expect((await rig.tick()).due).toEqual([]); + rig.now = FIRE + 10 * MIN; + await rig.tick(); + rig.now = FIRE + 15 * MIN; + await rig.tick(); + rig.now = FIRE + 20 * MIN; + await rig.tick(); + rig.now = FIRE + 25 * MIN; + await rig.tick(); + rig.now = FIRE + 30 * MIN; + const moved = (await rig.tick()).due; + expect(moved.map((alert) => alert.fireTimeMs)).toEqual([FIRE + 30 * MIN]); + }); +}); + +describe('zones', () => { + it('reads an all-day series in the Time zone setting, in any zone', async () => { + for (const zone of ['Pacific/Auckland', 'America/Los_Angeles', 'UTC']) { + const rig = setup(); + rig.server.addEvent(event({ + start: '2026-10-06T00:00:00', + showWithoutTime: true, + timeZone: null, + duration: 'P1D', + recurrenceRule: WEEKLY, + alerts: { a: { ...ALERT, trigger: { '@type': 'OffsetTrigger', offset: '-PT1H' } } }, + })); + await rig.engine.requestSync(); + const startOfDay = instantOf('2026-11-10T00:00:00', zone)!; + const alerts = listUpcomingAlerts(rig.db, { from: startOfDay - 2 * 60 * MIN, to: startOfDay + MIN, timeZone: zone }); + expect(alerts.map((alert) => alert.fireTimeMs)).toEqual([startOfDay - 60 * MIN]); + expect(alerts[0].startMs).toBe(startOfDay); + } + }); +}); + +describe('a fixed-time alert on a series', () => { + it('rings as before', async () => { + const rig = setup(); + rig.server.addEvent(event({ + start: '2026-10-06T10:00:00', + recurrenceRule: WEEKLY, + alerts: { a: { ...ALERT, trigger: { '@type': 'AbsoluteTrigger', when: new Date(FIRE).toISOString() } } }, + })); + await rig.engine.requestSync(); + expect(listUpcomingAlerts(rig.db, { from: FIRE - MIN, to: FIRE + MIN, timeZone: ZONE })).toHaveLength(1); + }); + + it('stays quiet when the occurrence it was for was excluded', async () => { + const rig = setup(); + rig.server.addEvent(event({ + start: '2026-10-06T10:00:00', + recurrenceRule: WEEKLY, + alerts: { a: { ...ALERT, trigger: { '@type': 'AbsoluteTrigger', when: new Date(FIRE).toISOString() } } }, + recurrenceOverrides: { '2026-11-10T10:00:00': { excluded: true } }, + })); + await rig.engine.requestSync(); + expect(listUpcomingAlerts(rig.db, { from: FIRE - MIN, to: FIRE + MIN, timeZone: ZONE })).toEqual([]); + }); +}); + +describe('the edge of being away', () => { + async function twoAlerts(gapMs: number): Promise<TickResult> { + const rig = setup(); + rig.server.addEvent(event()); + rig.server.addEvent(event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + await rig.engine.requestSync(); + rig.now = FIRE - 1000; + await rig.tick(); + rig.now = FIRE - 1000 + gapMs; + return rig.tick(); + } + + it('a gap of exactly the limit is no absence', async () => { + expect(await twoAlerts(AWAY_MS)).toMatchObject({ missed: 0, due: [{ title: 'Standup' }, { title: 'Review' }] }); + }); + + it('a gap a moment longer is', async () => { + expect(await twoAlerts(AWAY_MS + 1)).toMatchObject({ missed: 2, due: [] }); + }); + + it('a single alert past the limit is a late reminder, not a summary', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await rig.engine.requestSync(); + rig.now = FIRE - 1000; + await rig.tick(); + rig.now = FIRE - 1000 + AWAY_MS + 1; + expect(await rig.tick()).toMatchObject({ missed: 0, due: [{ title: 'Standup' }] }); + }); +}); + +describe('pruning', () => { + it('forgets what is past the reach, and keeps what still waits', async () => { + const rig = setup(); + rig.server.addEvent(event()); + rig.server.addEvent(event({ id: 'e2', uid: 'uid-2', title: 'Snoozed' })); + rig.server.addEvent(event({ id: 'e3', uid: 'uid-3', title: 'Held' })); + await syncedAndWatching(rig); + await justBefore(rig); + rig.now = FIRE; + const fired = (await rig.tick()).due; + const byTitle = Object.fromEntries(fired.map((alert) => [alert.title, alert.key])); + await rig.call('reminders.snooze', { key: byTitle.Snoozed, minutes: 60 }); + await rig.call('reminders.hold', { keys: [byTitle.Held] }); + const rows = () => rig.db.all<{ key: string }>('SELECT key FROM reminder').map((row) => row.key).sort(); + expect(rows()).toHaveLength(3); + rig.now = FIRE + 9 * DAY; + await rig.tick(); + expect(rows()).toEqual([byTitle.Snoozed, byTitle.Held].sort()); + }); +}); + +describe('bounded keys', () => { + it('stays short with a very long uid, and tells two long ones apart', async () => { + const rig = setup(); + const long = 'u'.repeat(5000); + rig.server.addEvent(event({ uid: `${long}1` })); + rig.server.addEvent(event({ id: 'e2', uid: `${long}2` })); + await rig.engine.requestSync(); + const alerts = listUpcomingAlerts(rig.db, { from: FIRE - MIN, to: FIRE + MIN, timeZone: ZONE }); + expect(alerts).toHaveLength(2); + expect(new Set(alerts.map((alert) => alert.key)).size).toBe(2); + for (const alert of alerts) expect(alert.key.length).toBeLessThan(300); + }); +}); + +describe('a summary on loan', () => { + async function missedTwo(rig: Rig): Promise<MissedBatch> { + rig.server.addEvent(event()); + rig.server.addEvent(event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + await syncedAndWatching(rig); + await justBefore(rig); + rig.now = FIRE + 60 * MIN; + await rig.tick(); + return rig.call<MissedBatch>('reminders.takeMissed', PARAMS); + } + + it('comes back when whoever took it never said it was shown: a crash, a reload', async () => { + const rig = setup(); + const batch = await missedTwo(rig); + expect(batch.alerts).toHaveLength(2); + rig.now += MIN; + expect((await rig.tick()).missed).toBe(0); + rig.now += 5 * MIN; + expect((await rig.tick()).missed).toBe(2); + }); + + it('stays while the window showing it keeps saying so', async () => { + const rig = setup(); + const batch = await missedTwo(rig); + for (let i = 0; i < 6; i += 1) { + rig.now += MIN; + await rig.call('reminders.renewMissed', { batch: batch.batch }); + expect((await rig.tick()).missed).toBe(0); + } + expect(await rig.call('reminders.batch', { batch: batch.batch })).toHaveLength(2); + }); + + it('is done once a native notification showed it, and can still open later', async () => { + const rig = setup(); + const batch = await missedTwo(rig); + await rig.call('reminders.settleMissed', { batch: batch.batch }); + rig.now += 60 * MIN; + expect((await rig.tick()).missed).toBe(0); + expect(await rig.call('reminders.batch', { batch: batch.batch })).toHaveLength(2); + }); + + it('does not come back once dismissed', async () => { + const rig = setup(); + const batch = await missedTwo(rig); + await rig.call('reminders.dismiss', { keys: batch.alerts.map((alert) => alert.key) }); + rig.now += 60 * MIN; + expect((await rig.tick()).missed).toBe(0); + }); +}); + +describe('muted', () => { + it('asks for no summary of what already waited', async () => { + const rig = setup(); + rig.server.addEvent(event()); + rig.server.addEvent(event({ id: 'e2', uid: 'uid-2', title: 'Review' })); + await syncedAndWatching(rig); + await justBefore(rig); + rig.now = FIRE + 60 * MIN; + expect((await rig.tick()).missed).toBe(2); + rig.now += MIN; + expect((await rig.tick({ muted: true })).missed).toBe(0); + }); +}); diff --git a/lib/store/__tests__/reminders.test.ts b/lib/store/__tests__/reminders.test.ts new file mode 100644 index 000000000..8974b9050 --- /dev/null +++ b/lib/store/__tests__/reminders.test.ts @@ -0,0 +1,394 @@ +// @vitest-environment node +import { describe, expect, it } from 'vitest'; +import { DEFAULT_SCOPE } from '../area'; +import { calendarArea } from '../calendar'; +import { AccountEngine } from '../engine/account-engine'; +import { remindersArea } from '../reminders'; +import { FRESH_MS, MISSED_REACH_MS, type MissedBatch, type TickResult } from '../reminders/ledger'; +import type { StorageAdapter } from '../storage'; +import { CALENDAR_SESSION, FakeCalendarJmap, type StalwartVersion } from './helpers/fake-calendar'; +import { openMemoryStore } from './helpers/node-adapter'; + +const MIN = 60_000; +/** 10:00 in Berlin on 2026-11-10, a Tuesday. The events' alert goes 15 minutes before. */ +const START = Date.UTC(2026, 10, 10, 9); +const FIRE = START - 15 * MIN; +const ALERT = { '@type': 'Alert', action: 'display', trigger: { '@type': 'OffsetTrigger', offset: '-PT15M' } }; +const WEEKLY = { '@type': 'RecurrenceRule', frequency: 'weekly' }; +const PARAMS = { timeZone: 'Europe/Berlin', tasks: true }; + +interface Rig { + server: FakeCalendarJmap; + db: StorageAdapter; + engine: AccountEngine; + now: number; + /** What a tab, a window or the next start of the app asks. */ + tick(params?: Partial<typeof PARAMS> & { muted?: boolean }): Promise<TickResult>; + call<T>(name: string, params?: unknown): Promise<T>; + restart(): void; +} + +function makeEngine(rig: Pick<Rig, 'server' | 'db' | 'now'>): AccountEngine { + return new AccountEngine({ + account: 'a@fake.test', + db: rig.db, + session: CALENDAR_SESSION, + transport: rig.server, + areas: [calendarArea, remindersArea], + scope: DEFAULT_SCOPE, + now: () => rig.now, + sleep: async () => {}, + }); +} + +function setup(version: StalwartVersion = '1.0', startAt = FIRE - 60 * MIN): Rig { + const rig = { + server: new FakeCalendarJmap(version), + db: openMemoryStore(), + now: startAt, + } as Rig; + rig.engine = makeEngine(rig); + rig.call = <T,>(name: string, params?: unknown) => rig.engine.areaCall(name, params) as Promise<T>; + rig.tick = (params = {}) => rig.call<TickResult>('reminders.tick', { ...PARAMS, ...params }); + rig.restart = () => { + rig.engine = makeEngine(rig); + }; + return rig; +} + +/** Synced, with a first check done, so the store has been watching since before the alert. */ +async function synced(rig: Rig): Promise<Rig> { + await rig.engine.requestSync(); + await rig.tick(); + return rig; +} + +function event(partial: Record<string, unknown> = {}) { + return { id: 'e1', uid: 'uid-1', title: 'Standup', start: '2026-11-10T10:00:00', timeZone: 'Europe/Berlin', duration: 'PT30M', alerts: { a: ALERT }, ...partial }; +} + +/** Comes back every minute or so, with no gap that would look like being away. */ +async function walkTo(rig: Rig, to: number): Promise<TickResult['due']> { + const due: TickResult['due'] = []; + while (rig.now < to) { + rig.now = Math.min(rig.now + MIN, to); + due.push(...(await rig.tick()).due); + } + return due; +} + +describe('firing', () => { + it('fires from what is stored with the network gone', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await synced(rig); + rig.engine.setOnline(false); + rig.server.request = (() => { + throw new Error('Nothing may reach the server for a reminder'); + }) as unknown as FakeCalendarJmap['request']; + const due = await walkTo(rig, FIRE); + expect(due.map((alert) => [alert.title, alert.fireTimeMs, alert.startMs])).toEqual([['Standup', FIRE, START]]); + }); + + it('does not fire early, and says when to ask next', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await synced(rig); + rig.now = FIRE - 90_000; + const before = await rig.tick(); + expect(before.due).toEqual([]); + expect(before.nextAt).toBe(FIRE); + }); + + it('gives an alert to one caller only, across tabs and restarts', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await synced(rig); + rig.now = FIRE - MIN; + await rig.tick(); + rig.now = FIRE; + const [first, second] = await Promise.all([rig.tick(), rig.tick()]); + expect([first.due.length, second.due.length]).toEqual([1, 0]); + rig.restart(); + rig.now = FIRE + MIN; + expect((await rig.tick()).due).toEqual([]); + }); + + it('expands a series itself: every occurrence fires, under its own key', async () => { + for (const version of ['1.0', '0.16'] as const) { + const rig = setup(version); + rig.server.addEvent(event({ start: '2026-10-06T10:00:00', recurrenceRule: WEEKLY })); + await synced(rig); + const first = await walkTo(rig, FIRE); + const week = 7 * 24 * 60 * MIN; + rig.now = FIRE + week - MIN; + await rig.tick(); + await rig.tick(); + rig.now = FIRE + week; + const second = (await rig.tick()).due; + expect(first.map((alert) => alert.fireTimeMs)).toEqual([FIRE]); + expect(second.map((alert) => alert.fireTimeMs)).toEqual([FIRE + week]); + expect(second[0].baseEventId).toBe('e1'); + expect(second[0].key).not.toBe(first[0].key); + expect(second[0].recurrenceId).toBeTruthy(); + } + }); + + it('keeps one key when a series gets an override, so nothing fires twice', async () => { + const rig = setup(); + rig.server.addEvent(event({ start: '2026-10-06T10:00:00', recurrenceRule: WEEKLY })); + await synced(rig); + const [before] = await walkTo(rig, FIRE); + // Another occurrence changes. On a server with synthetic ids this reshuffles them. + rig.server.patchEvent('e1', { recurrenceOverrides: { '2026-11-17T10:00:00': { title: 'Other' } } }); + expect(before.key).toBe(`${before.jmap}:uid-1:a:${FIRE}`); + await rig.engine.requestSync(); + rig.now = FIRE + MIN; + expect((await rig.tick()).due).toEqual([]); + }); + + it('reads `acknowledged` on a series as covering what fired up to then', async () => { + const rig = setup(); + const week = 7 * 24 * 60 * MIN; + rig.server.addEvent(event({ + start: '2026-10-06T10:00:00', + recurrenceRule: WEEKLY, + alerts: { a: { ...ALERT, acknowledged: new Date(FIRE + 60_000).toISOString() } }, + })); + await synced(rig); + expect(await walkTo(rig, FIRE + 2 * MIN)).toEqual([]); + rig.now = FIRE + week - MIN; + await rig.tick(); + await rig.tick(); + rig.now = FIRE + week; + expect((await rig.tick()).due.map((alert) => alert.fireTimeMs)).toEqual([FIRE + week]); + }); + + it('uses the calendar defaults while the event does, and leaves tasks out when asked', async () => { + const rig = setup('0.16'); + rig.server.calendars.get('cal1')!.defaultAlertsWithTime = { d1: ALERT }; + rig.server.addEvent(event({ id: 'def', uid: 'def', useDefaultAlerts: true, alerts: null })); + rig.server.addEvent({ id: 'task', uid: 'task', '@type': 'Task', title: 'Pay', start: undefined, due: '2026-11-10T09:00:00Z', alerts: { a: ALERT } }); + await rig.engine.requestSync(); + rig.now = FIRE - MIN; + await rig.tick({ tasks: false }); + rig.now = FIRE; + const due = (await rig.tick({ tasks: false })).due; + expect(due.map((alert) => [alert.baseEventId, alert.alertId])).toEqual([['def', 'd1']]); + }); + + it('holds a join link only for an event that has one', async () => { + const rig = setup(); + rig.server.addEvent(event({ virtualLocations: { v: { '@type': 'VirtualLocation', uri: 'https://meet.jit.si/standup' } } })); + rig.server.addEvent(event({ id: 'e2', uid: 'uid-2', title: 'Lunch', locations: { l: { '@type': 'Location', name: 'Cafe' } } })); + await synced(rig); + const due = await walkTo(rig, FIRE); + expect(Object.fromEntries(due.map((alert) => [alert.title, alert.joinUrl]))).toEqual({ + Standup: 'https://meet.jit.si/standup', + Lunch: null, + }); + }); +}); + +describe('away', () => { + async function awayWithThree(): Promise<Rig> { + const rig = setup(); + rig.server.addEvent(event()); + rig.server.addEvent(event({ id: 'e2', uid: 'uid-2', title: 'Review', start: '2026-11-10T11:00:00' })); + rig.server.addEvent(event({ id: 'e3', uid: 'uid-3', title: 'Lunch', start: '2026-11-10T12:00:00' })); + await synced(rig); + rig.now = FIRE - MIN; + await rig.tick(); + return rig; + } + + it('sends what came due while away to one summary, not a burst, and only once', async () => { + const rig = await awayWithThree(); + rig.restart(); + rig.now = FIRE + 3 * 60 * MIN; + const back = await rig.tick(); + expect(back.due).toEqual([]); + expect(back.missed).toBe(3); + const [one, two] = await Promise.all([ + rig.call<MissedBatch | null>('reminders.takeMissed', PARAMS), + rig.call<MissedBatch | null>('reminders.takeMissed', PARAMS), + ]); + expect(one!.alerts.map((alert) => alert.title)).toEqual(['Standup', 'Review', 'Lunch']); + expect(two).toBeNull(); + rig.restart(); + rig.now += MIN; + expect(await rig.tick()).toMatchObject({ due: [], missed: 0 }); + expect(await rig.call('reminders.takeMissed', PARAMS)).toBeNull(); + }); + + it('summarises the ones within ten minutes as well: a wake-up is no time for a burst', async () => { + const rig = await awayWithThree(); + rig.now = START + 2 * 60 * MIN - 15 * MIN + 2 * MIN; + expect(await rig.tick()).toMatchObject({ due: [], missed: 3 }); + }); + + it('shows a single alert that just came due as a normal reminder', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await synced(rig); + rig.now = FIRE - 2 * MIN; + await rig.tick(); + // Over the limit for being away, and under ten minutes old. + rig.now = FIRE + 5 * MIN; + expect(await rig.tick()).toMatchObject({ due: [{ title: 'Standup' }], missed: 0 }); + }); + + it('summarises a single alert that is long past', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await synced(rig); + rig.now = FIRE - MIN; + await rig.tick(); + rig.now = FIRE + FRESH_MS + MIN; + expect(await rig.tick()).toMatchObject({ due: [], missed: 1 }); + }); + + it('counts nothing as missed on the very first check, however old the calendar', async () => { + const rig = setup('1.0', FIRE + 60 * MIN); + rig.server.addEvent(event()); + await rig.engine.requestSync(); + expect(await rig.tick()).toMatchObject({ due: [], missed: 0 }); + }); + + it('reaches back a week at most', async () => { + const rig = await awayWithThree(); + rig.now = FIRE + MISSED_REACH_MS + 3 * 60 * MIN; + expect((await rig.tick()).missed).toBe(0); + }); + + it('leaves out what was deleted while away', async () => { + const rig = await awayWithThree(); + rig.now = FIRE + 3 * 60 * MIN; + expect((await rig.tick()).missed).toBe(3); + rig.server.removeEvent('e2'); + await rig.engine.requestSync(); + const batch = await rig.call<MissedBatch>('reminders.takeMissed', PARAMS); + expect(batch.alerts.map((alert) => alert.title)).toEqual(['Standup', 'Lunch']); + }); + + it('puts a summary that could not be shown back, and reads a shown one again for a late click', async () => { + const rig = await awayWithThree(); + rig.now = FIRE + 3 * 60 * MIN; + await rig.tick(); + const refused = await rig.call<MissedBatch>('reminders.takeMissed', PARAMS); + await rig.call('reminders.releaseMissed', { batch: refused.batch }); + expect((await rig.tick()).missed).toBe(3); + const shown = await rig.call<MissedBatch>('reminders.takeMissed', PARAMS); + expect(shown.alerts).toHaveLength(3); + rig.restart(); + const read = await rig.call<unknown[]>('reminders.batch', { batch: shown.batch }); + expect(read).toHaveLength(3); + await rig.call('reminders.dismiss', { keys: shown.alerts.map((alert) => alert.key) }); + expect(await rig.call('reminders.batch', { batch: shown.batch })).toEqual([]); + }); + + it('moves a fired alert nobody could be told about to the summary', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await synced(rig); + const [fired] = await walkTo(rig, FIRE); + await rig.call('reminders.hold', { keys: [fired.key] }); + rig.now += MIN; + expect(await rig.tick()).toMatchObject({ due: [], missed: 1 }); + }); + + it('keeps quiet while reminders are off, and nothing from that time is missed later', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await synced(rig); + rig.now = FIRE - MIN; + await rig.tick(); + rig.now = FIRE + 60 * MIN; + expect(await rig.tick({ muted: true })).toMatchObject({ due: [], missed: 0, nextAt: null }); + rig.now += MIN; + expect(await rig.tick()).toMatchObject({ due: [], missed: 0 }); + }); +}); + +describe('snooze', () => { + async function fired(version: StalwartVersion = '1.0') { + const rig = setup(version); + rig.server.addEvent(event()); + await synced(rig); + const [alert] = await walkTo(rig, FIRE); + return { rig, alert }; + } + + it('comes back after the minutes asked for, once, and survives a restart', async () => { + const { rig, alert } = await fired(); + expect(await rig.call('reminders.snooze', { key: alert.key, minutes: 5 })).toBe(true); + rig.now = FIRE + 2 * MIN; + const during = await rig.tick(); + expect(during.due).toEqual([]); + expect(during.nextAt).toBe(FIRE + 5 * MIN); + + rig.restart(); + rig.now = FIRE + 4 * MIN; + expect((await rig.tick()).due).toEqual([]); + rig.now = FIRE + 5 * MIN; + const back = (await rig.tick()).due; + expect(back.map((a) => [a.title, a.snoozedUntil])).toEqual([['Standup', FIRE + 5 * MIN]]); + rig.now += MIN; + expect((await rig.tick()).due).toEqual([]); + }); + + it('can be snoozed again', async () => { + const { rig, alert } = await fired(); + await rig.call('reminders.snooze', { key: alert.key, minutes: 5 }); + rig.now = FIRE + 5 * MIN; + expect((await rig.tick()).due).toHaveLength(1); + await rig.call('reminders.snooze', { key: alert.key, minutes: 10 }); + rig.now = FIRE + 15 * MIN; + const back = (await rig.tick()).due; + expect(back[0].snoozedUntil).toBe(FIRE + 15 * MIN); + }); + + it('goes to the summary when it ran out while the app was quit', async () => { + const { rig, alert } = await fired(); + await rig.call('reminders.snooze', { key: alert.key, minutes: 5 }); + rig.restart(); + rig.now = FIRE + 3 * 60 * MIN; + expect(await rig.tick()).toMatchObject({ due: [], missed: 1 }); + }); + + it('does not come back for an event deleted in the meantime', async () => { + const { rig, alert } = await fired(); + await rig.call('reminders.snooze', { key: alert.key, minutes: 5 }); + rig.server.removeEvent('e1'); + await rig.engine.requestSync(); + rig.now = FIRE + 5 * MIN; + expect(await rig.tick()).toMatchObject({ due: [], missed: 0 }); + }); + + it('does not come back once dismissed in another window', async () => { + const { rig, alert } = await fired(); + await rig.call('reminders.snooze', { key: alert.key, minutes: 5 }); + await rig.call('reminders.dismiss', { keys: [alert.key] }); + rig.now = FIRE + 5 * MIN; + expect(await rig.tick()).toMatchObject({ due: [], nextAt: null }); + }); + + it('refuses an unknown reminder and silly minutes', async () => { + const { rig, alert } = await fired(); + expect(await rig.call('reminders.snooze', { key: 'nope', minutes: 5 })).toBe(false); + expect(await rig.call('reminders.snooze', { key: alert.key, minutes: -1 })).toBe(false); + expect(await rig.call('reminders.snooze', { key: alert.key, minutes: 99_999 })).toBe(false); + }); +}); + +it('keeps reminders off the server', async () => { + const rig = setup(); + rig.server.addEvent(event()); + await synced(rig); + const before = JSON.stringify(rig.server.events.get('e1')); + const [alert] = await walkTo(rig, FIRE); + await rig.call('reminders.snooze', { key: alert.key, minutes: 5 }); + await rig.call('reminders.dismiss', { keys: [alert.key] }); + await rig.engine.requestSync(); + expect(JSON.stringify(rig.server.events.get('e1'))).toBe(before); +}); diff --git a/lib/store/areas.ts b/lib/store/areas.ts index 4155c1487..a863cc3a9 100644 --- a/lib/store/areas.ts +++ b/lib/store/areas.ts @@ -6,5 +6,6 @@ import { contactsArea } from './contacts'; import { filesArea } from './files'; import { mailArea } from './mail'; import { outboxArea } from './outbox'; +import { remindersArea } from './reminders'; -export const STORE_AREAS: readonly StoreArea[] = [mailArea, outboxArea, calendarArea, contactsArea, filesArea]; +export const STORE_AREAS: readonly StoreArea[] = [mailArea, outboxArea, calendarArea, contactsArea, filesArea, remindersArea]; diff --git a/lib/store/calendar/reminders.ts b/lib/store/calendar/reminders.ts index b42307346..80f431328 100644 --- a/lib/store/calendar/reminders.ts +++ b/lib/store/calendar/reminders.ts @@ -12,16 +12,19 @@ import { format, parseISO } from 'date-fns'; import { buildAlertKey, computeFireTime, computeTaskFireTime, getEffectiveAlerts, parseAlertOffset } from '@/lib/calendar-alerts'; import { isTaskLikeObject } from '@/lib/calendar-component-detection'; import { normalizeCalendarEventLike, parseDurationSeconds } from '@/lib/calendar-event-normalization'; +import { findJoinLink, type EventPlaces } from '@/lib/event-links'; import type { Calendar, CalendarEvent, CalendarEventAlert, CalendarTask } from '@/lib/jmap/types'; import { expandRecurringEvents } from '@/lib/recurrence-expansion'; import { listObjects } from '../engine/core-schema'; import type { StorageAdapter } from '../storage'; -import { instantsOf, isSeries, type CalendarObject } from './records'; +import { instantOf, instantsOf, isSeries, type CalendarObject } from './records'; export interface UpcomingAlert { /** Stable for this alert at this time. Use it to remember what was shown. */ key: string; jmap: string; + /** The series' uid, or the id where there's none: the same one whichever path shows the reminder. */ + uid: string; kind: 'event' | 'task'; /** The stored event or task: the master of a series. */ baseEventId: string; @@ -32,6 +35,12 @@ export interface UpcomingAlert { title: string; /** The start as a wall clock, or a task's due when it has no start. */ start: string | null; + /** The start as an instant, to say how long until it. Null when it can't be told. */ + startMs: number | null; + /** Joins the meeting, when the event has a video link. Web links only. */ + joinUrl: string | null; + /** Where that goes, when it's no service this app knows. */ + joinHost: string | null; timeZone: string | null; calendarId: string | null; calendarName: string | null; @@ -44,23 +53,68 @@ export interface UpcomingAlertsOptions { to: number; /** Reads floating events. The user's zone. */ timeZone: string; + /** Which account's copy to use for a meeting that's in several. */ + prefer?: string; } type AlertMap = Record<string, CalendarEventAlert> | null | undefined; +/** Anyone asking to be reminded further off than this has made a typing error, and expanding that far has no end. */ +const LONGEST_OFFSET_MS = 366 * 24 * 3_600_000; + // An alert fires up to its offset away from its occurrence, and the occurrence's // wall clock is up to 26 hours from the instant. Expand wide, filter by instant. function offsetReachMs(alerts: AlertMap): number { let reach = 0; for (const alert of Object.values(alerts ?? {})) { - if (alert.trigger?.['@type'] === 'AbsoluteTrigger') continue; - reach = Math.max(reach, Math.abs(parseAlertOffset(alert.trigger?.offset ?? '') ?? 0)); + if (!alert?.trigger || alert.trigger['@type'] === 'AbsoluteTrigger') continue; + const offset = Math.abs(parseAlertOffset(alert.trigger.offset ?? '') ?? 0); + if (offset <= LONGEST_OFFSET_MS) reach = Math.max(reach, offset); } return reach; } +/** What can fire at all. The server keeps whatever a client wrote, so none of this is a given. */ +function usableAlerts(alerts: AlertMap): Array<[string, CalendarEventAlert]> { + return Object.entries(alerts ?? {}).filter(([, alert]) => { + if (!alert?.trigger || alert.action !== 'display') return false; + if (alert.trigger['@type'] === 'AbsoluteTrigger') return true; + return Math.abs(parseAlertOffset(alert.trigger.offset ?? '') ?? Infinity) <= LONGEST_OFFSET_MS; + }); +} + +/** Keeps keys, and the toast that hands one back, a sensible size. Not for secrecy. */ +function bounded(value: string, limit: number): string { + if (value.length <= limit) return value; + let h1 = 0xdeadbeef; + let h2 = 0x41c6ce57; + for (let i = 0; i < value.length; i += 1) { + const code = value.charCodeAt(i); + h1 = Math.imul(h1 ^ code, 2654435761); + h2 = Math.imul(h2 ^ code, 1597334677); + } + return `#${(h1 >>> 0).toString(36)}${(h2 >>> 0).toString(36)}:${value.length}`; +} + +/** + * A fixed time on a series is for the occurrence that follows it. When that one was + * excluded there's nothing to remind of, and no later occurrence takes it over. + */ +function fixedAlertForExcluded(master: CalendarEvent, fireTimeMs: number, occurrences: CalendarEvent[], zone: string): boolean { + const excluded = Object.entries(master.recurrenceOverrides ?? {}) + .filter(([, override]) => (override as { excluded?: boolean }).excluded) + .map(([at]) => instantOf(at, master.timeZone ?? zone)) + .filter((at): at is number => at !== null && at >= fireTimeMs); + if (excluded.length === 0) return false; + const nextExcluded = Math.min(...excluded); + return !occurrences.some((occurrence) => { + const at = instantOf(occurrence.start, occurrence.timeZone ?? zone); + return at !== null && at >= fireTimeMs && at < nextExcluded; + }); +} + function alertsInOverrides(event: CalendarEvent): AlertMap[] { - return Object.values(event.recurrenceOverrides ?? {}).map((override) => (override as { alerts?: AlertMap }).alerts); + return Object.values(event.recurrenceOverrides ?? {}).map((override) => (override as { alerts?: AlertMap } | null)?.alerts); } const ZONE_REACH_MS = 27 * 3_600_000; @@ -82,82 +136,139 @@ function withInstants(object: CalendarObject, zone: string): CalendarObject { }; } +/** + * RFC 8984 4.5.2: on a series `acknowledged` sits on the master and covers what fired + * up to then. Read as "never again", one dismissal in another app would silence every + * later occurrence. An event once is done with it either way. + */ +function acknowledgedAlready(alert: CalendarEventAlert, fireTimeMs: number, series: boolean): boolean { + if (!alert.acknowledged) return false; + if (!series) return true; + const at = new Date(alert.acknowledged).getTime(); + return Number.isNaN(at) || fireTimeMs <= at; +} + +function instant(value: string | null | undefined): number | null { + if (!value) return null; + const ms = new Date(value).getTime(); + return Number.isNaN(ms) ? null : ms; +} + function firstCalendar(calendarIds: unknown, calendars: Calendar[]): { id: string | null; name: string | null } { const id = Object.keys((calendarIds ?? {}) as Record<string, boolean>)[0] ?? null; return { id, name: calendars.find((calendar) => calendar.id === id)?.name ?? null }; } -/** Every `display` alert of the stored events and tasks that fires in the window, soonest first. */ +/** + * Someone else's calendar on 1.0 is unsubscribed until the user adds it, and an account + * can be shared without anyone asking for its reminders. Says nothing: it counts. + */ +function inSubscribedCalendar(calendarIds: unknown, calendars: Calendar[]): boolean { + const ids = Object.keys((calendarIds ?? {}) as Record<string, boolean>); + return ids.length === 0 || ids.some((id) => calendars.find((calendar) => calendar.id === id)?.isSubscribed !== false); +} + +function matchOf(alert: Pick<UpcomingAlert, 'uid' | 'fireTimeMs'>): string { + return `${alert.uid}:${alert.fireTimeMs}`; +} + +/** Every `display` alert of the stored events and tasks that fires in the window, soonest first. One event that can't be read is left out, not the rest. */ export function listUpcomingAlerts(db: StorageAdapter, options: UpcomingAlertsOptions): UpcomingAlert[] { + // By uid and time, not by account: one meeting in the own and a shared calendar rings once. const found = new Map<string, UpcomingAlert>(); const add = (alert: UpcomingAlert) => { - if (alert.fireTimeMs >= options.from && alert.fireTimeMs < options.to) found.set(alert.key, alert); + if (alert.fireTimeMs < options.from || alert.fireTimeMs >= options.to) return; + const match = matchOf(alert); + const held = found.get(match); + if (!held || (alert.jmap === options.prefer && held.jmap !== options.prefer)) found.set(match, alert); }; const rows = db.all<{ jmap: string; json: string }>('SELECT jmap, json FROM calendar_event WHERE hidden = 0'); const calendarsOf = new Map<string, Calendar[]>(); for (const row of rows) { if (!calendarsOf.has(row.jmap)) calendarsOf.set(row.jmap, listObjects<Calendar>(db, row.jmap, 'Calendar')); - const calendars = calendarsOf.get(row.jmap)!; - const object = JSON.parse(row.json) as CalendarObject; - const calendar = firstCalendar(object.calendarIds, calendars); - // With the account: Stalwart's ids repeat across accounts, and one meeting can be in two. - const stableId = `${row.jmap}:${typeof object.uid === 'string' && object.uid ? object.uid : object.id}`; - - if (isTaskLikeObject(object)) { - const task = object as unknown as CalendarTask; - if (task.progress === 'completed' || task.progress === 'cancelled') continue; - for (const [alertId, alert] of Object.entries(task.alerts ?? {})) { - if (alert.action !== 'display' || alert.acknowledged) continue; - const fireTimeMs = computeTaskFireTime(task, alert.trigger); - if (fireTimeMs === null) continue; - add({ - key: buildAlertKey(stableId, alertId, fireTimeMs), - jmap: row.jmap, - kind: 'task', - baseEventId: object.id, - recurrenceId: null, - alertId, - fireTimeMs, - title: task.title ?? '', - start: task.start ?? task.due ?? null, - timeZone: task.timeZone ?? null, - calendarId: calendar.id, - calendarName: calendar.name, - }); - } - continue; - } - - const master = normalizeCalendarEventLike(withInstants(object, options.timeZone) as unknown as CalendarEvent); - if (typeof master.start !== 'string' || Number.isNaN(parseISO(master.start).getTime())) continue; - const series = isSeries(object); - const occurrences = series ? occurrencesNear(master, calendars, options) : [master]; - // A fixed time doesn't need an occurrence nearby. - const candidates = series ? [master, ...occurrences] : occurrences; - for (const occurrence of candidates) { - if (occurrence.status === 'cancelled') continue; - const isMasterOfSeries = series && occurrence === master; - for (const [alertId, alert] of Object.entries(getEffectiveAlerts(occurrence, calendars) ?? {})) { - if (alert.action !== 'display' || alert.acknowledged) continue; - if (isMasterOfSeries && alert.trigger['@type'] !== 'AbsoluteTrigger') continue; - const fireTimeMs = computeFireTime(occurrence, alert.trigger); - if (fireTimeMs === null) continue; - add({ - key: buildAlertKey(stableId, alertId, fireTimeMs), - jmap: row.jmap, - kind: 'event', - baseEventId: object.id, - recurrenceId: occurrence.recurrenceId ?? null, - alertId, - fireTimeMs, - title: occurrence.title ?? '', - start: occurrence.start, - timeZone: occurrence.timeZone ?? null, - calendarId: calendar.id, - calendarName: calendar.name, - }); - } + try { + addAlertsOf(row, calendarsOf.get(row.jmap)!, options, add); + } catch { + // Whatever is wrong with this one, the others still have to ring. } } return [...found.values()].sort((a, b) => a.fireTimeMs - b.fireTimeMs || a.key.localeCompare(b.key)); } + +function addAlertsOf(row: { jmap: string; json: string }, calendars: Calendar[], options: UpcomingAlertsOptions, add: (alert: UpcomingAlert) => void): void { + const object = JSON.parse(row.json) as CalendarObject; + if (!inSubscribedCalendar(object.calendarIds, calendars)) return; + const calendar = firstCalendar(object.calendarIds, calendars); + const uid = typeof object.uid === 'string' && object.uid ? object.uid : object.id; + // With the account: Stalwart's ids repeat across accounts. + const stableId = `${row.jmap}:${bounded(uid, 200)}`; + + if (isTaskLikeObject(object)) { + const task = object as unknown as CalendarTask; + if (task.progress === 'completed' || task.progress === 'cancelled') return; + for (const [alertId, alert] of usableAlerts(task.alerts)) { + if (alert.acknowledged) continue; + const fireTimeMs = computeTaskFireTime(task, alert.trigger); + if (fireTimeMs === null) continue; + const join = findJoinLink(task as unknown as EventPlaces); + add({ + key: buildAlertKey(stableId, bounded(alertId, 64), fireTimeMs), + jmap: row.jmap, + uid, + kind: 'task', + baseEventId: object.id, + recurrenceId: null, + alertId, + fireTimeMs, + title: task.title ?? '', + start: task.start ?? task.due ?? null, + startMs: instant(task.start ?? task.due), + joinUrl: join?.url ?? null, + joinHost: join?.host ?? null, + timeZone: task.timeZone ?? null, + calendarId: calendar.id, + calendarName: calendar.name, + }); + } + return; + } + + const master = normalizeCalendarEventLike(withInstants(object, options.timeZone) as unknown as CalendarEvent); + if (typeof master.start !== 'string' || Number.isNaN(parseISO(master.start).getTime())) return; + const series = isSeries(object); + // Expansion reads an all-day or floating occurrence in this machine's zone. The setting decides. + const occurrences = series + ? occurrencesNear(master, calendars, options).map((occurrence) => withInstants(occurrence as unknown as CalendarObject, options.timeZone) as unknown as CalendarEvent) + : [master]; + // A fixed time doesn't need an occurrence nearby. + const candidates = series ? [master, ...occurrences] : occurrences; + for (const occurrence of candidates) { + if (occurrence.status === 'cancelled') continue; + const isMasterOfSeries = series && occurrence === master; + for (const [alertId, alert] of usableAlerts(getEffectiveAlerts(occurrence, calendars))) { + if (isMasterOfSeries && alert.trigger['@type'] !== 'AbsoluteTrigger') continue; + const fireTimeMs = computeFireTime(occurrence, alert.trigger); + if (fireTimeMs === null || acknowledgedAlready(alert, fireTimeMs, series)) continue; + if (series && alert.trigger['@type'] === 'AbsoluteTrigger' && fixedAlertForExcluded(master, fireTimeMs, occurrences, options.timeZone)) continue; + const join = findJoinLink(occurrence as unknown as EventPlaces); + add({ + key: buildAlertKey(stableId, bounded(alertId, 64), fireTimeMs), + jmap: row.jmap, + uid, + kind: 'event', + baseEventId: object.id, + recurrenceId: occurrence.recurrenceId ?? null, + alertId, + fireTimeMs, + title: occurrence.title ?? '', + start: occurrence.start, + startMs: instant(occurrence.utcStart) ?? instant(occurrence.start), + joinUrl: join?.url ?? null, + joinHost: join?.host ?? null, + timeZone: occurrence.timeZone ?? null, + calendarId: calendar.id, + calendarName: calendar.name, + }); + } + } +} diff --git a/lib/store/client/keys.ts b/lib/store/client/keys.ts index 059beb916..7a88e8240 100644 --- a/lib/store/client/keys.ts +++ b/lib/store/client/keys.ts @@ -170,6 +170,55 @@ export async function forgetAccountKey(account: string): Promise<void> { await withDb((db) => promisify(db.transaction(ACCOUNTS, 'readwrite').objectStore(ACCOUNTS).delete(account)).then(() => undefined)); } +/** + * This browser profile's row at the instance, for one account: its id, and the + * secret that lets a device answer for that row without a session. In this + * database and nowhere else, because a start has to read it before any store + * opens, and a copy in the store could never outlive the key that opens it. A + * cleared database means a new device at the next registration. + */ +export interface DeviceRecord { + account: string; + id: string; + secret: string; + createdAt: number; +} + +const DEVICE_RECORD_PREFIX = 'device:'; +// ':' + 1, so the range holds exactly the prefixed keys. +const DEVICE_RECORD_END = 'device;'; + +export async function getDeviceRecord(account: string): Promise<DeviceRecord | null> { + return withDb(async (db) => { + const found = await promisify(db.transaction(KEYS, 'readonly').objectStore(KEYS).get(DEVICE_RECORD_PREFIX + account)) as { record: DeviceRecord } | undefined; + return found?.record ?? null; + }); +} + +export async function putDeviceRecord(record: DeviceRecord): Promise<void> { + await withDb((db) => promisify(db.transaction(KEYS, 'readwrite').objectStore(KEYS).put({ id: DEVICE_RECORD_PREFIX + record.account, record })).then(() => undefined)); +} + +export async function deleteDeviceRecord(account: string): Promise<void> { + if (!(await keyDatabaseExists())) return; + await withDb((db) => promisify(db.transaction(KEYS, 'readwrite').objectStore(KEYS).delete(DEVICE_RECORD_PREFIX + account)).then(() => undefined)); +} + +/** Opening the database makes it, so a browser that can say it isn't there doesn't open it. */ +async function keyDatabaseExists(): Promise<boolean> { + if (typeof indexedDB.databases !== 'function') return true; + return (await indexedDB.databases()).some((database) => database.name === DB_NAME); +} + +export async function listDeviceRecords(onlyIfThere = true): Promise<DeviceRecord[]> { + if (onlyIfThere && !(await keyDatabaseExists())) return []; + return withDb(async (db) => { + const range = IDBKeyRange.bound(DEVICE_RECORD_PREFIX, DEVICE_RECORD_END, false, true); + const rows = await promisify(db.transaction(KEYS, 'readonly').objectStore(KEYS).getAll(range)) as Array<{ record: DeviceRecord }>; + return rows.map((row) => row.record); + }); +} + export class StoreKeyLayerMissingError extends Error { constructor(readonly layer: string) { super(`The key needs the ${layer} layer`); diff --git a/lib/store/mail/attachments.ts b/lib/store/mail/attachments.ts index 12feba84a..4b2fbc34d 100644 --- a/lib/store/mail/attachments.ts +++ b/lib/store/mail/attachments.ts @@ -169,6 +169,31 @@ export function rawBlob(ctx: Pick<StoreContext, 'db' | 'scope'>, jmap: string, b return { ok: true, type: RAW_TYPE, size: kept.size, blob: new Blob([kept.blob], { type: RAW_TYPE }) }; } +/** Which of these whole messages are here, so an online export asks the server only for the rest. */ +export function rawKept(ctx: Pick<StoreContext, 'db' | 'scope'>, jmap: string, blobIds: readonly string[]): string[] { + if (!ctx.scope.attachments || blobIds.length === 0) return []; + const marks = blobIds.map(() => '?').join(', '); + return ctx.db.all<{ blob_id: string }>( + `SELECT DISTINCT p.blob_id FROM email_part p JOIN blob b ON b.jmap = p.jmap AND b.blob_id = p.blob_id + WHERE p.jmap = ? AND p.raw = 1 AND p.blob_id IN (${marks})`, + [jmap, ...blobIds], + ).map((row) => String(row.blob_id)); +} + +/** How large the originals of a folder are, and the part of that kept here: what an export will need room for. */ +export function rawSize(ctx: Pick<StoreContext, 'db' | 'scope'>, jmap: string, mailboxId?: string): { bytes: number; keptBytes: number } { + const inFolder = mailboxId ? 'JOIN email_mailbox m ON m.email_rowid = e.rowid AND m.mailbox_id = ?' : ''; + const row = ctx.db.get<{ bytes: number | null; kept: number | null }>( + `SELECT SUM(p.size) AS bytes, SUM(CASE WHEN b.blob_id IS NULL THEN 0 ELSE p.size END) AS kept + FROM email e ${inFolder} + JOIN email_part p ON p.email_rowid = e.rowid AND p.raw = 1 + LEFT JOIN blob b ON b.jmap = p.jmap AND b.blob_id = p.blob_id + WHERE e.jmap = ?`, + mailboxId ? [mailboxId, jmap] : [jmap], + ); + return { bytes: Number(row?.bytes ?? 0), keptBytes: ctx.scope.attachments ? Number(row?.kept ?? 0) : 0 }; +} + /** How many messages (of one folder, or all) an export could write right now. */ export function rawStatus(ctx: Pick<StoreContext, 'db' | 'scope'>, jmap: string, mailboxId?: string): { total: number; kept: number } { const inFolder = mailboxId ? 'JOIN email_mailbox m ON m.email_rowid = e.rowid AND m.mailbox_id = ?' : ''; diff --git a/lib/store/mail/calls.ts b/lib/store/mail/calls.ts index b8202c86e..0169eceff 100644 --- a/lib/store/mail/calls.ts +++ b/lib/store/mail/calls.ts @@ -1,7 +1,7 @@ /** What the page asks the mail part of the store outside JMAP. */ import type { AreaCall, StoreContext } from '../area'; -import { keptBlob, rawBlob, rawStatus, recordKeptBlob } from './attachments'; +import { keptBlob, rawBlob, rawKept, rawSize, rawStatus, recordKeptBlob } from './attachments'; import { storeBody, upsertEmail, type EmailObject } from './records'; /** @@ -55,8 +55,12 @@ export const MAIL_CALLS: Readonly<Record<string, AreaCall>> = { 'mail.getBlob': getBlob, /** A whole message for an offline export, or why not. */ 'mail.rawBlob': (ctx, params: { jmap: string; blobId: string }) => rawBlob(ctx, params.jmap, params.blobId), + /** Which of a batch are here: an online export fetches the others in one request. */ + 'mail.rawKept': (ctx, params: { jmap: string; blobIds: string[] }) => rawKept(ctx, params.jmap, params.blobIds), /** How many messages an export could write now, so it can say how many it can't. */ 'mail.rawStatus': (ctx, params: { jmap: string; mailboxId?: string }) => rawStatus(ctx, params.jmap, params.mailboxId), + /** How much room an export of them takes. */ + 'mail.rawSize': (ctx, params: { jmap: string; mailboxId?: string }) => rawSize(ctx, params.jmap, params.mailboxId), 'mail.usage': usage, /** The session kept with the account, for a start from the local copy. */ 'mail.session': (ctx) => ctx.session, diff --git a/lib/store/reminders/index.ts b/lib/store/reminders/index.ts new file mode 100644 index 000000000..28d27e738 --- /dev/null +++ b/lib/store/reminders/index.ts @@ -0,0 +1,29 @@ +import type { StoreArea, StoreContext } from '../area'; +import { dismiss, holdFired, readBatch, readReminder, releaseMissed, renewMissed, settleMissed, snooze, takeMissed, tick, type TickParams } from './ledger'; +import { REMINDER_MIGRATIONS } from './schema'; + +const CALENDARS = 'urn:ietf:params:jmap:calendars'; + +/** For a meeting in the own and a shared calendar: the own copy. */ +function primaryAccount(ctx: Pick<StoreContext, 'session'>): string | undefined { + return ctx.session.primaryAccounts[CALENDARS]; +} + +export const remindersArea: StoreArea = { + name: 'reminders', + migrations: REMINDER_MIGRATIONS, + methods: {}, + syncers: [], + calls: { + 'reminders.tick': (ctx, params: TickParams) => tick(ctx.db, ctx.now(), { ...params, prefer: primaryAccount(ctx) }), + 'reminders.takeMissed': (ctx, params: { timeZone: string }) => takeMissed(ctx.db, ctx.now(), { ...params, prefer: primaryAccount(ctx) }), + 'reminders.releaseMissed': (ctx, params: { batch: number }) => releaseMissed(ctx.db, ctx.now(), params.batch), + 'reminders.renewMissed': (ctx, params: { batch: number }) => renewMissed(ctx.db, ctx.now(), params.batch), + 'reminders.settleMissed': (ctx, params: { batch: number }) => settleMissed(ctx.db, ctx.now(), params.batch), + 'reminders.batch': (ctx, params: { batch: number }) => readBatch(ctx.db, params.batch), + 'reminders.hold': (ctx, params: { keys: string[] }) => holdFired(ctx.db, ctx.now(), params.keys), + 'reminders.snooze': (ctx, params: { key: string; minutes: number }) => snooze(ctx.db, ctx.now(), params.key, params.minutes), + 'reminders.dismiss': (ctx, params: { keys: string[] }) => dismiss(ctx.db, ctx.now(), params.keys), + 'reminders.get': (ctx, params: { key: string }) => readReminder(ctx.db, params.key), + }, +}; diff --git a/lib/store/reminders/ledger.ts b/lib/store/reminders/ledger.ts new file mode 100644 index 000000000..35b81ea33 --- /dev/null +++ b/lib/store/reminders/ledger.ts @@ -0,0 +1,255 @@ +/** + * What has become of each reminder on this device: the one place that decides what + * fires. Every call is one synchronous transaction in the store's worker, and all tabs + * and windows reach the same worker, so whichever asks first gets an alert and nobody + * else ever does, across restarts too. localStorage can't do this: a worker can't read + * it, and two tabs can read it at the same moment. + * + * A row's status: + * - `fired`: shown, nothing more to do. + * - `snoozed`: comes back at `snooze_until`. + * - `missed`: waits for a summary, because the device was away or notifications were + * paused. + * - `summarised`: went into the summary `batch`. On loan until `lease_until` is cleared, + * so a crash or a reload before anyone saw it brings it back. + * - `dismissed`: the user is done with it. + * + * None of this goes to the server. JSCalendar's `acknowledged` is read (reminders.ts), + * never written: decisions file, reminders. + */ + +import { metaGet, metaSet } from '../engine/core-schema'; +import { listUpcomingAlerts, type UpcomingAlert } from '../calendar/reminders'; +import type { StorageAdapter } from '../storage'; + +/** Younger than this, an alert still fires by itself. As lib/calendar-alerts.ts. */ +export const FRESH_MS = 10 * 60_000; +/** A gap between two checks longer than this means the device was away. A little over the page's refresh. */ +export const AWAY_MS = 6 * 60_000; +/** How far back a summary reaches. After a month away nobody needs a month of reminders. */ +export const MISSED_REACH_MS = 7 * 24 * 3_600_000; +/** How far ahead a check looks for the next fire time. */ +export const LOOK_AHEAD_MS = 6 * 3_600_000; +/** Rows older than the reach can't come up again. */ +const KEEP_MS = MISSED_REACH_MS + 24 * 3_600_000; +const CURSOR = 'reminder_cursor'; +/** How long a summary stays with whoever took it, unless they keep saying it's on screen. */ +export const LEASE_MS = 3 * 60_000; +const LONGEST_SNOOZE_MIN = 24 * 60; + +export interface ReminderAlert extends UpcomingAlert { + /** Set when it comes back from a snooze: when that was due. */ + snoozedUntil?: number; +} + +export interface TickParams { + /** Reads floating events: the user's zone. */ + timeZone: string; + /** Tasks' alerts too. */ + tasks: boolean; + /** Reminders are switched off: time passes, and nothing counts as missed later. */ + muted?: boolean; + /** The account's own copy of a meeting that's in several. */ + prefer?: string; +} + +export interface TickResult { + /** Yours to show. No other caller gets these. */ + due: ReminderAlert[]; + /** How many wait for a summary. */ + missed: number; + /** When to ask again at the latest for the next reminder. Null: none in sight. */ + nextAt: number | null; + /** The calendar has synced at least once, so an empty answer means something. */ + ready: boolean; +} + +interface Row { + key: string; + uid: string; + status: string; + fire_time: number; + snooze_until: number | null; + alert: string; +} + +function put(db: StorageAdapter, alert: ReminderAlert, status: string, now: number): void { + db.run( + `INSERT INTO reminder (key, uid, status, fire_time, snooze_until, batch, lease_until, alert, updated_at) VALUES (?, ?, ?, ?, NULL, NULL, NULL, ?, ?) + ON CONFLICT (key) DO UPDATE SET status = excluded.status, snooze_until = NULL, batch = NULL, lease_until = NULL, alert = excluded.alert, updated_at = excluded.updated_at`, + [alert.key, alert.uid, status, alert.fireTimeMs, JSON.stringify(alert), now], + ); +} + +function readAlert(row: Pick<Row, 'alert'>): ReminderAlert { + return JSON.parse(row.alert) as ReminderAlert; +} + +function missedCount(db: StorageAdapter): number { + return Number(db.get<{ n: number }>("SELECT COUNT(*) AS n FROM reminder WHERE status = 'missed'")?.n ?? 0); +} + +function calendarReady(db: StorageAdapter): boolean { + return !!db.get("SELECT 1 AS yes FROM sync_state WHERE type = 'CalendarEvent' AND state IS NOT NULL LIMIT 1"); +} + +/** The same reminder to the user: an edit can give an alert a new id without moving it. */ +function sameReminder(uid: string, fireTime: number): string { + return `${uid}:${fireTime}`; +} + +/** Whether a snoozed alert still stands: the event may have gone, moved or been dismissed elsewhere. */ +function alertNow(db: StorageAdapter, row: Pick<Row, 'uid' | 'fire_time'>, params: Pick<TickParams, 'timeZone' | 'prefer'>): UpcomingAlert | undefined { + return listUpcomingAlerts(db, { from: row.fire_time, to: row.fire_time + 1, timeZone: params.timeZone, prefer: params.prefer }) + .find((alert) => alert.uid === row.uid); +} + +/** + * Hands out what's due and settles the rest. Alerts that came due while the device was + * away go to the summary instead of arriving as a burst. A single recent one is just a + * reminder that came a little late. + */ +export function tick(db: StorageAdapter, now: number, params: TickParams): TickResult { + return db.transaction(() => { + const raw = metaGet(db, CURSOR); + const cursor = raw === null ? null : Number(raw); + metaSet(db, CURSOR, String(now)); + db.run("UPDATE reminder SET status = 'missed', batch = NULL, lease_until = NULL WHERE status = 'summarised' AND lease_until IS NOT NULL AND lease_until <= ?", [now]); + if (params.muted) return { due: [], missed: 0, nextAt: null, ready: calendarReady(db) }; + + const freshFrom = now - FRESH_MS; + const from = cursor === null ? freshFrom : Math.max(Math.min(cursor, freshFrom), now - MISSED_REACH_MS); + const listed = listUpcomingAlerts(db, { from, to: now + LOOK_AHEAD_MS, timeZone: params.timeZone, prefer: params.prefer }) + .filter((alert) => params.tasks || alert.kind !== 'task'); + const past = listed.filter((alert) => alert.fireTimeMs <= now); + const known = new Set( + past.length === 0 + ? [] + : db.all<{ uid: string; fire_time: number }>('SELECT uid, fire_time FROM reminder WHERE fire_time >= ? AND fire_time <= ?', [past[0].fireTimeMs, past[past.length - 1].fireTimeMs]) + .map((row) => sameReminder(row.uid, row.fire_time)), + ); + const unseen = past.filter((alert) => !known.has(sameReminder(alert.uid, alert.fireTimeMs))); + + const away = cursor === null || now - cursor > AWAY_MS; + const lastSeen = cursor ?? freshFrom; + // Behind the cursor: it reached the store late, through a sync. Nobody was away from that. + const inGap = away ? unseen.filter((alert) => alert.fireTimeMs > lastSeen) : []; + const summarise = new Set( + inGap.length === 1 && inGap[0].fireTimeMs >= freshFrom ? [] : inGap.map((alert) => alert.key), + ); + const due: ReminderAlert[] = []; + for (const alert of unseen) { + if (summarise.has(alert.key) || alert.fireTimeMs < freshFrom) { + put(db, alert, 'missed', now); + } else { + put(db, alert, 'fired', now); + due.push(alert); + } + } + + const expired = db.all<Row>("SELECT key, uid, status, fire_time, snooze_until, alert FROM reminder WHERE status = 'snoozed' AND snooze_until <= ?", [now]); + for (const row of expired) { + const alert = alertNow(db, row, params); + if (!alert) { + db.run("UPDATE reminder SET status = 'dismissed', snooze_until = NULL, updated_at = ? WHERE key = ?", [now, row.key]); + continue; + } + // The alert got a new id: its row goes on under that. + if (alert.key !== row.key) db.run('DELETE FROM reminder WHERE key = ?', [row.key]); + if (now - row.snooze_until! < FRESH_MS) { + const back: ReminderAlert = { ...alert, snoozedUntil: row.snooze_until! }; + put(db, back, 'fired', now); + due.push(back); + } else { + put(db, alert, 'missed', now); + } + } + + db.run("DELETE FROM reminder WHERE fire_time < ? AND status NOT IN ('snoozed', 'missed')", [now - KEEP_MS]); + + const coming = listed.find((alert) => alert.fireTimeMs > now)?.fireTimeMs ?? null; + const snooze = db.get<{ at: number | null }>("SELECT MIN(snooze_until) AS at FROM reminder WHERE status = 'snoozed'")?.at ?? null; + const nextAt = coming === null ? snooze : snooze === null ? coming : Math.min(coming, snooze); + return { due, missed: missedCount(db), nextAt, ready: calendarReady(db) }; + }); +} + +export interface MissedBatch { + /** Says which summary, for a toast clicked later. */ + batch: number; + alerts: ReminderAlert[]; +} + +/** + * The summary, for one caller only. What's gone from the calendar since doesn't come + * back to haunt anyone. Null: nothing to say. + */ +export function takeMissed(db: StorageAdapter, now: number, params: { timeZone: string; prefer?: string }): MissedBatch | null { + return db.transaction(() => { + const rows = db.all<Row>("SELECT key, uid, status, fire_time, snooze_until, alert FROM reminder WHERE status = 'missed' ORDER BY fire_time, key"); + if (rows.length === 0) return null; + const standing = new Map( + listUpcomingAlerts(db, { from: rows[0].fire_time, to: rows[rows.length - 1].fire_time + 1, timeZone: params.timeZone, prefer: params.prefer }) + .map((alert) => [sameReminder(alert.uid, alert.fireTimeMs), alert]), + ); + const newest = db.get<{ batch: number | null }>('SELECT MAX(batch) AS batch FROM reminder')?.batch ?? 0; + const batch = Math.max(now, newest + 1); + const alerts: ReminderAlert[] = []; + for (const row of rows) { + const alert = standing.get(sameReminder(row.uid, row.fire_time)); + if (!alert) { + db.run("UPDATE reminder SET status = 'dismissed', updated_at = ? WHERE key = ?", [now, row.key]); + continue; + } + db.run("UPDATE reminder SET status = 'summarised', batch = ?, lease_until = ?, alert = ?, updated_at = ? WHERE key = ?", [batch, now + LEASE_MS, JSON.stringify(alert), now, row.key]); + alerts.push(alert); + } + return alerts.length > 0 ? { batch, alerts } : null; + }); +} + +/** The summary couldn't be shown after all (paused, quiet hours): it stays due. */ +export function releaseMissed(db: StorageAdapter, now: number, batch: number): void { + db.run("UPDATE reminder SET status = 'missed', batch = NULL, lease_until = NULL, updated_at = ? WHERE status = 'summarised' AND batch = ?", [now, batch]); +} + +/** Still on screen here. */ +export function renewMissed(db: StorageAdapter, now: number, batch: number): void { + db.run("UPDATE reminder SET lease_until = ?, updated_at = ? WHERE status = 'summarised' AND batch = ? AND lease_until IS NOT NULL", [now + LEASE_MS, now, batch]); +} + +/** A native notification has it now, and the OS keeps that for as long as it wants. */ +export function settleMissed(db: StorageAdapter, now: number, batch: number): void { + db.run("UPDATE reminder SET lease_until = NULL, updated_at = ? WHERE status = 'summarised' AND batch = ?", [now, batch]); +} + +/** What a summary said, for a click on it, possibly after a restart. */ +export function readBatch(db: StorageAdapter, batch: number): ReminderAlert[] { + return db.all<Row>("SELECT alert FROM reminder WHERE status = 'summarised' AND batch = ? ORDER BY fire_time, key", [batch]).map(readAlert); +} + +/** Fired, but nobody could be told: it goes in the next summary. */ +export function holdFired(db: StorageAdapter, now: number, keys: readonly string[]): void { + db.transaction(() => { + for (const key of keys) db.run("UPDATE reminder SET status = 'missed', updated_at = ? WHERE status = 'fired' AND key = ?", [now, key]); + }); +} + +/** False when this device knows no such reminder, or the minutes make no sense. */ +export function snooze(db: StorageAdapter, now: number, key: string, minutes: number): boolean { + if (!Number.isFinite(minutes) || minutes <= 0 || minutes > LONGEST_SNOOZE_MIN) return false; + const until = now + minutes * 60_000; + return db.run("UPDATE reminder SET status = 'snoozed', snooze_until = ?, batch = NULL, lease_until = NULL, updated_at = ? WHERE key = ?", [until, now, key]).changes > 0; +} + +export function dismiss(db: StorageAdapter, now: number, keys: readonly string[]): void { + db.transaction(() => { + for (const key of keys) db.run("UPDATE reminder SET status = 'dismissed', snooze_until = NULL, lease_until = NULL, updated_at = ? WHERE key = ?", [now, key]); + }); +} + +/** One reminder as it was last shown: what a toast's Join reads, since the toast holds only the key. */ +export function readReminder(db: StorageAdapter, key: string): ReminderAlert | null { + const row = db.get<Pick<Row, 'alert'>>('SELECT alert FROM reminder WHERE key = ?', [key]); + return row ? readAlert(row) : null; +} diff --git a/lib/store/reminders/schema.ts b/lib/store/reminders/schema.ts new file mode 100644 index 000000000..213eec18a --- /dev/null +++ b/lib/store/reminders/schema.ts @@ -0,0 +1,24 @@ +import type { Migration } from '../storage'; + +export const REMINDER_MIGRATIONS: readonly Migration[] = [ + { + id: 850, + name: 'reminders', + sql: ` + CREATE TABLE reminder ( + key TEXT PRIMARY KEY, + uid TEXT NOT NULL, + status TEXT NOT NULL, + fire_time INTEGER NOT NULL, + snooze_until INTEGER, + batch INTEGER, + -- A summary someone took: unless they say it's shown by then, it comes back. + lease_until INTEGER, + alert TEXT NOT NULL, + updated_at INTEGER NOT NULL + ) WITHOUT ROWID; + CREATE INDEX reminder_status ON reminder (status, snooze_until); + CREATE INDEX reminder_fire ON reminder (fire_time); + `, + }, +]; diff --git a/lib/telemetry/instant-errors.ts b/lib/telemetry/instant-errors.ts index bfc248153..2114a8017 100644 --- a/lib/telemetry/instant-errors.ts +++ b/lib/telemetry/instant-errors.ts @@ -1,9 +1,10 @@ import { logger } from '@/lib/logger'; import { readErrors, utcDay } from '@/lib/error-reporting/aggregate'; -import { effectiveConsent, effectiveErrorsConsent, endpointEnabled, getInstanceId } from './state'; +import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; +import { effectiveConsent, effectiveErrorsConsent, endpointEnabled, getInstanceId, telemetryEndpoint } from './state'; import { errorsForDay } from './payload'; import { fetchTelemetryTarget, resolveEndpointAllowed } from './endpoint-guard'; -import { DEFAULT_ENDPOINT, errorsEndpointFor, type TelemetryErrorBatch } from './types'; +import { errorsEndpointFor, type TelemetryErrorBatch } from './types'; /** * Instant error counts. With the error-count consent on "instant", the @@ -45,7 +46,7 @@ async function tick(now: number): Promise<void> { return; } const { state: stored } = await effectiveConsent(); - const endpoint = stored.endpoint ?? DEFAULT_ENDPOINT; + const endpoint = telemetryEndpoint(stored); if (!endpointEnabled(endpoint)) return; let target: string; try { @@ -81,7 +82,9 @@ async function tick(now: number): Promise<void> { if (!res.ok) { // Not marked as sent: the next tick tries them again. logger.warn('telemetry: instant error counts rejected', { status: res.status }); - return; + // A 4xx from the collector stays a 4xx. A desktop app, often a beta on a collector + // that doesn't know its version yet, shouldn't knock on the door every minute. + if (!IS_DESKTOP_BUILD || res.status < 400 || res.status >= 500 || res.status === 429) return; } for (const error of changed) s.sent.set(`${error.fingerprint}|${error.version}`, error.count); } diff --git a/lib/telemetry/payload.ts b/lib/telemetry/payload.ts index 6c56c0e4f..7d0b9fe75 100644 --- a/lib/telemetry/payload.ts +++ b/lib/telemetry/payload.ts @@ -5,6 +5,8 @@ import { effectiveErrorsConsent, getInstanceId } from './state'; import { getLoginCounts } from './login-tracker'; import { isErrorCode } from '@/lib/error-reporting/envelope'; import { readErrors, utcDay, type Aggregate } from '@/lib/error-reporting/aggregate'; +import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; +import { desktopServerPrivacy } from '@/lib/desktop/server-privacy'; import { MAX_TELEMETRY_ERRORS, MAX_TELEMETRY_FRAMES, @@ -23,6 +25,10 @@ export function markProcessStart(): void { } function readPackage(): { version: string; build: string | null } { + // The desktop app's version, not the webmail's it carries, and mode and channel in the + // one field the collector keeps (lib/desktop/desktop-telemetry.ts). + const desktop = desktopServerPrivacy(); + if (desktop) return { version: desktop.appVersion, build: desktop.build }; try { const pkg = JSON.parse( readFileSync(path.join(process.cwd(), 'package.json'), 'utf8'), @@ -34,6 +40,7 @@ function readPackage(): { version: string; build: string | null } { } function detectPlatform(): Platform { + if (IS_DESKTOP_BUILD) return 'desktop'; if (process.env.KUBERNETES_SERVICE_HOST) return 'k8s'; // /.dockerenv is the standard Docker container marker. try { @@ -154,6 +161,8 @@ export function errorsForDay(agg: Aggregate, day: string): TelemetryError[] { */ export async function buildPayload(): Promise<AnyTelemetryPayload> { const base = await buildPayloadV1(); + // Crash report consent has its own way out, /v1/errors. A heartbeat is only telemetry. + if (IS_DESKTOP_BUILD) return base; // Daily and instant mode both send the last complete day with the heartbeat. if ((await effectiveErrorsConsent()).consent === 'off') return base; return { ...base, schema: '2', errors: errorsForPayload(await readErrors()) }; diff --git a/lib/telemetry/sender.ts b/lib/telemetry/sender.ts index 5eeab4366..4157ce6b4 100644 --- a/lib/telemetry/sender.ts +++ b/lib/telemetry/sender.ts @@ -2,11 +2,12 @@ import { logger } from '@/lib/logger'; import { isSharedMode } from '@/lib/shared-store'; import { announceChange } from '@/lib/shared-store/changes'; import { - effectiveConsent, endpointEnabled, loadState, loadStateVersioned, saveStateIfUnchanged, updateState, + effectiveConsent, endpointEnabled, loadState, loadStateVersioned, saveStateIfUnchanged, telemetryEndpoint, updateState, } from './state'; import { buildPayload } from './payload'; import { fetchTelemetryTarget, resolveEndpointAllowed } from './endpoint-guard'; -import { DEFAULT_ENDPOINT } from './types'; +import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; +import { DESKTOP_RETRY_MS, desktopCatchUpMs } from '@/lib/desktop/desktop-telemetry'; const DAY_MS = 24 * 60 * 60 * 1000; const JITTER_MS = 2 * 60 * 60 * 1000; // ± 2 hours @@ -96,7 +97,7 @@ export async function sendOnce(opts?: { reason?: string; slot?: string }): Promi if (consent !== 'on') return { ok: false, error: `consent ${consent} (source ${source})` }; // A cleared collector URL is stored as '' and switches sending off; only a // state file without the field at all gets the project's collector. - const endpoint = state.endpoint ?? DEFAULT_ENDPOINT; + const endpoint = telemetryEndpoint(state); if (!endpointEnabled(endpoint)) return { ok: false, error: 'endpoint blank' }; // Re-check at fetch time: defeats DNS rebinding, and catches the case @@ -164,12 +165,18 @@ async function scheduleNext(delayMs: number, generation: number): Promise<void> } async function tick(slot: string, generation: number): Promise<void> { + let failed = false; try { - await sendOnce({ reason: 'scheduled', slot }); + const result = await sendOnce({ reason: 'scheduled', slot }); + // A 4xx says the collector won't take this, and an hour from now it still won't. + const refused = result.status !== undefined && result.status >= 400 && result.status < 500 && result.status !== 429; + failed = !result.ok && result.error !== 'already sent' && !refused; } catch (err) { + failed = true; logger.warn('telemetry: heartbeat failed', { error: err instanceof Error ? err.message : String(err) }); } - await scheduleNext(jitteredDelay(DAY_MS), generation); + // A laptop that woke up offline shouldn't lose the day. + await scheduleNext(IS_DESKTOP_BUILD && failed ? DESKTOP_RETRY_MS : jitteredDelay(DAY_MS), generation); } // Run by the scheduler leader (lib/scheduler-leader.ts). Idempotent. @@ -181,13 +188,16 @@ export async function startScheduler(): Promise<void> { return; } const state = await loadState(); - if (!endpointEnabled(state.endpoint ?? DEFAULT_ENDPOINT)) { + const endpoint = telemetryEndpoint(state); + if (!endpointEnabled(endpoint)) { logger.info('telemetry: scheduler not started', { consent, endpoint: 'blank' }); return; } // If we have a next-scheduled time in the future use it; otherwise schedule // FIRST_DELAY_MS out. This means after a restart we don't fire immediately. - let delay = FIRST_DELAY_MS; + // A desktop app isn't a server: quit within the hour on every start, and it would + // never send. So what's due goes out soon after a start, at a random delay. + let delay = IS_DESKTOP_BUILD ? desktopCatchUpMs() : FIRST_DELAY_MS; if (state.nextScheduledAt) { const remaining = new Date(state.nextScheduledAt).getTime() - Date.now(); if (remaining > 0) delay = Math.min(remaining, DAY_MS + JITTER_MS); @@ -195,7 +205,7 @@ export async function startScheduler(): Promise<void> { await scheduleNext(delay, generation); logger.info('telemetry: scheduler started', { nextInMs: delay, - endpoint: state.endpoint, + endpoint, }); } diff --git a/lib/telemetry/state.ts b/lib/telemetry/state.ts index ca9f8655b..7386a2ca3 100644 --- a/lib/telemetry/state.ts +++ b/lib/telemetry/state.ts @@ -6,6 +6,8 @@ import { isStoreUnavailable, StoredDataUnreadableError } from '@/lib/stored-data import type { TelemetryStateFile, ConsentState, ErrorsConsent } from './types'; import { DEFAULT_ENDPOINT } from './types'; import { isNoThirdPartyTrafficOn } from '@/lib/admin/third-party-mode'; +import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; +import { desktopServerPrivacy } from '@/lib/desktop/server-privacy'; export function getDir(): string { return process.env.TELEMETRY_DATA_DIR || @@ -195,6 +197,13 @@ export async function effectiveErrorsConsent(): Promise<{ }> { const telemetry = await effectiveConsent(); if (telemetry.source === 'no-third-party') return { consent: 'off', source: 'no-third-party' }; + // The desktop user's crash report consent, separate from telemetry: either can be on + // without the other. Instant, because without a heartbeat nothing else carries them. + // BULWARK_TELEMETRY=off stops these too, so it means what it says on a managed machine. + if (IS_DESKTOP_BUILD) { + const on = desktopServerPrivacy()?.crashReports && envOverride() !== 'off' && errorsEnvOverride() !== 'off'; + return { consent: on ? 'instant' : 'off', source: 'env' }; + } if (telemetry.consent !== 'on') return { consent: 'off', source: 'telemetry' }; const env = errorsEnvOverride(); if (env) return { consent: env, source: 'env' }; @@ -213,10 +222,22 @@ export async function effectiveConsent(): Promise<{ const envState = envOverride(); const state = await loadState(); if (await isNoThirdPartyTrafficOn()) return { consent: 'off', source: 'no-third-party', state }; + // The user answers in the shell. Nothing on disk can say yes for them, and in the + // environment only an off counts: main passes that through and nothing else. + if (IS_DESKTOP_BUILD) return { consent: desktopServerPrivacy()?.telemetry && envState !== 'off' ? 'on' : 'off', source: 'env', state }; if (envState) return { consent: envState, source: 'env', state }; return { consent: state.consent, source: 'file', state }; } +/** + * Where heartbeats go. On the desktop build the state file has no say, since anything on + * the machine can write to it. A desktop user has their two switches instead. + */ +export function telemetryEndpoint(state: TelemetryStateFile): string { + if (IS_DESKTOP_BUILD) return desktopServerPrivacy()?.endpoint ?? DEFAULT_ENDPOINT; + return state.endpoint ?? DEFAULT_ENDPOINT; +} + export function endpointEnabled(endpoint: string | undefined): boolean { return !!endpoint && endpoint.trim().length > 0; } diff --git a/lib/telemetry/types.ts b/lib/telemetry/types.ts index 21deb9eb4..bdbc9c9fb 100644 --- a/lib/telemetry/types.ts +++ b/lib/telemetry/types.ts @@ -4,7 +4,7 @@ export type ConsentState = 'pending' | 'on' | 'off'; -export type Platform = 'docker' | 'bare' | 'k8s' | 'unknown'; +export type Platform = 'docker' | 'bare' | 'k8s' | 'desktop' | 'unknown'; export type OsFamily = 'linux' | 'darwin' | 'windows' | 'unknown'; export type CountBucket = '0' | '1' | '2-5' | '6-10' | '11-50' | '51-200' | '201+'; diff --git a/lib/window-controls-overlay.ts b/lib/window-controls-overlay.ts index 481e2e2b1..f69cdca13 100644 --- a/lib/window-controls-overlay.ts +++ b/lib/window-controls-overlay.ts @@ -3,15 +3,20 @@ * titleBarOverlay window) draws the page up to the top of the window and lays * the native minimise, maximise and close buttons over it. * + * There's no title bar row. The app's own columns run to the top of the window, + * the window's controls sit in the top row of whichever column is there, and that + * row leaves them room. Its empty parts are what the window is dragged by, and a + * double-click on them maximises, as on a title bar. + * + * Which row that is depends on the page and the width: the reader's toolbar, the + * list's header when there's no reader, a dialog that fills the window. So this + * looks: an app row that sits at the top of the window gets marked, and CSS in + * app/globals.css does the rest. A row that starts the window's top row is an h-14 + * (or h-12, h-16) box all over the app; anything else says `data-window-top-row`. + * * Asks navigator.windowControlsOverlay, never the media query: * `(display-mode: window-controls-overlay)` is false in Electron with * titleBarOverlay, while the API and env(titlebar-area-*) work there. - * - * app/globals.css gives --titlebar-inset its first value from - * env(titlebar-area-height, 0px), so the page has the right top padding from - * the first paint, before any script runs. This module keeps the variable in - * step with the API afterwards, which is what a browser or bridge without the - * env() values relies on. */ export interface TitlebarArea { @@ -26,7 +31,19 @@ interface OverlayLike extends EventTarget { getTitlebarAreaRect?: () => { x: number; y: number; width: number; height: number }; } -export const TITLEBAR_INSET_VAR = '--titlebar-inset'; +export const TITLEBAR_RIGHT_VAR = '--titlebar-right-inset'; +export const TITLEBAR_LEFT_VAR = '--titlebar-left-inset'; +export const TITLEBAR_ROW_VAR = '--titlebar-row-height'; + +/** The window has its controls over the page. */ +export const CONTROLS_ATTRIBUTE = 'data-window-controls'; +/** They're at the left (macOS): the rail makes room at its top. */ +export const CONTROLS_LEFT_ATTRIBUTE = 'data-window-controls-left'; +/** This row is at the top of the window: its empty parts drag. */ +export const ROW_ATTRIBUTE = 'data-window-row'; +/** The window's controls are over this end of it. */ +export const ROW_RIGHT_ATTRIBUTE = 'data-window-row-right'; +export const ROW_LEFT_ATTRIBUTE = 'data-window-row-left'; function overlay(): OverlayLike | null { if (typeof navigator === 'undefined') return null; @@ -43,13 +60,28 @@ export function readTitlebarArea(): TitlebarArea | null { return { x: rect.x, y: rect.y, width: rect.width, height: rect.height }; } +/** What the controls take of each side, from the strip they leave. */ +export function controlsInsets(area: TitlebarArea, viewportWidth: number): { left: number; right: number } { + return { left: Math.max(0, area.x), right: Math.max(0, viewportWidth - area.x - area.width) }; +} + /** - * Sets --titlebar-inset for this area. With no area the inline value goes, so - * the stylesheet's value (0 without an overlay) is what counts again. + * Says where the controls are, for the CSS. With no area the inline values go, so + * what the stylesheet has from env() (nothing without an overlay) counts again. */ -export function applyTitlebarInset(area: TitlebarArea | null, root: HTMLElement = document.documentElement): void { - if (area) root.style.setProperty(TITLEBAR_INSET_VAR, `${area.height}px`); - else root.style.removeProperty(TITLEBAR_INSET_VAR); +export function applyControlsArea(area: TitlebarArea | null, root: HTMLElement = document.documentElement): void { + if (!area) { + for (const name of [TITLEBAR_RIGHT_VAR, TITLEBAR_LEFT_VAR, TITLEBAR_ROW_VAR]) root.style.removeProperty(name); + root.removeAttribute(CONTROLS_ATTRIBUTE); + root.removeAttribute(CONTROLS_LEFT_ATTRIBUTE); + return; + } + const { left, right } = controlsInsets(area, root.ownerDocument.defaultView?.innerWidth ?? 0); + root.style.setProperty(TITLEBAR_RIGHT_VAR, `${right}px`); + root.style.setProperty(TITLEBAR_LEFT_VAR, `${left}px`); + root.style.setProperty(TITLEBAR_ROW_VAR, `${area.height}px`); + root.setAttribute(CONTROLS_ATTRIBUTE, ''); + root.toggleAttribute(CONTROLS_LEFT_ATTRIBUTE, left > 0); } /** @@ -66,3 +98,73 @@ export function watchTitlebarArea(listener: (area: TitlebarArea | null) => void) current.addEventListener('geometrychange', onChange); return () => current.removeEventListener('geometrychange', onChange); } + +const ROW_CANDIDATES = '[data-window-top-row], [data-composer-header], header, div.h-14, div.min-h-14, div.h-12, div.h-16, div.min-h-16'; +/** No toolbar is taller than this: past it, it's a tile or a pane that happens to sit at the top. */ +const MAX_ROW_HEIGHT = 96; + +/** + * Marks the rows at the top of the window, for what lies over them, and returns them. + * One pass, cheap: a dozen rects. + */ +export function markWindowRows(area: TitlebarArea, doc: Document = document): HTMLElement[] { + const viewportWidth = doc.defaultView?.innerWidth ?? 0; + const { left, right } = controlsInsets(area, viewportWidth); + const seen = new Set<HTMLElement>(); + for (const el of Array.from(doc.querySelectorAll<HTMLElement>(ROW_CANDIDATES))) { + const rect = el.getBoundingClientRect(); + const explicit = el.hasAttribute('data-window-top-row'); + const fits = rect.top <= 1 && rect.height > 0 && rect.width > 0 && (explicit || rect.height <= MAX_ROW_HEIGHT); + // The outermost box of a row: an inner one sits inside its padding already. + const nested = fits && [...seen].some((outer) => outer.contains(el)); + if (!fits || nested) { + el.removeAttribute(ROW_ATTRIBUTE); + el.removeAttribute(ROW_RIGHT_ATTRIBUTE); + el.removeAttribute(ROW_LEFT_ATTRIBUTE); + continue; + } + seen.add(el); + el.setAttribute(ROW_ATTRIBUTE, ''); + el.toggleAttribute(ROW_RIGHT_ATTRIBUTE, right > 0 && rect.right > viewportWidth - right); + el.toggleAttribute(ROW_LEFT_ATTRIBUTE, left > 0 && rect.left < left); + } + return [...seen]; +} + +/** + * Keeps those marks right as the page changes, before the next paint. Mutation and + * resize callbacks both run ahead of painting, so a row never shows without its room. + * A pane can also change width with no change to the page, in a transition or by + * being dragged, so the rows themselves are watched too, and transitions' ends. + */ +export function watchWindowRows(area: TitlebarArea, doc: Document = document): () => void { + let queued = false; + let watched = new Set<HTMLElement>(); + const resize = typeof ResizeObserver === 'undefined' ? null : new ResizeObserver(() => queue()); + const run = () => { + queued = false; + const rows = new Set(markWindowRows(area, doc)); + if (!resize) return; + for (const row of watched) if (!rows.has(row)) resize.unobserve(row); + for (const row of rows) if (!watched.has(row)) resize.observe(row); + watched = rows; + }; + function queue() { + if (queued) return; + queued = true; + queueMicrotask(run); + } + run(); + const mutations = new MutationObserver((records) => { + // Our own marks changing say nothing new. + if (records.some((record) => record.type !== 'attributes' || !record.attributeName?.startsWith('data-window-'))) queue(); + }); + mutations.observe(doc.body, { subtree: true, childList: true, attributes: true, attributeFilter: ['class', 'hidden', 'style'] }); + resize?.observe(doc.documentElement); + doc.addEventListener('transitionend', queue, true); + return () => { + mutations.disconnect(); + resize?.disconnect(); + doc.removeEventListener('transitionend', queue, true); + }; +} diff --git a/locales/ar/common.json b/locales/ar/common.json index 90025e151..cba29af8a 100644 --- a/locales/ar/common.json +++ b/locales/ar/common.json @@ -5801,6 +5801,35 @@ "store_private": "لا يمكن للنوافذ الخاصة الاحتفاظ بالبريد للاستخدام دون اتصال.", "server_not_answering": "خادم البريد لا يستجيب. حاول مرة أخرى بعد قليل." }, + "offlineWipe": { + "note": "أزالت مؤسستك بيانات هذا الحساب من هذا الجهاز. سجّل الدخول للبدء من جديد.", + "note_unsent": "أزالت مؤسستك بيانات هذا الحساب من هذا الجهاز. الرسائل غير المرسلة المحذوفة: {count}.", + "settings_title": "إزالة كل شيء من هذا الجهاز", + "settings_description": "عندما تعطي هذا الحاسوب لشخص آخر أو تتوقف عن استخدامه. يبقى بريدك على الخادم.", + "settings_button": "إزالة كل شيء…", + "settings_wiping": "جارٍ الإزالة…", + "confirm_title": "هل تريد إزالة كل شيء من هذا الجهاز؟", + "confirm_message": "سيحذف هذا ما يحتفظ به التطبيق على هذا الجهاز، لكل الحسابات هنا. لن يتأثر بريدك على الخادم.", + "confirm_mail": "البريد والتقاويم وجهات الاتصال والملفات المحفوظة هنا", + "confirm_unsent": "الرسائل غير المرسلة المنتظرة هنا: {count}. ستُفقد.", + "confirm_keys": "مفاتيح S/MIME وOpenPGP. ستحتاج إلى نسختك الاحتياطية لاستخدامها مجددًا.", + "confirm_plugins": "البيانات التي خزّنتها الإضافات هنا", + "confirm_files": "المرفقات المفتوحة للتحرير والملفات المنتظرة للإرفاق", + "confirm_accounts": "يتم تسجيل الخروج من كل الحسابات", + "confirm_button": "إزالة كل شيء", + "note_unknown": "أزالت مؤسستك بيانات هذا الحساب من هذا الجهاز. ربما حُذفت أيضًا رسائل لم تُرسل.", + "refused_waiting": "رسائل لم تُرسل تنتظر كلمة مرورك الجديدة: {count}. تبقى حتى {date}.", + "refused_waiting_unknown": "ربما توجد رسائل لم تُرسل تنتظر كلمة مرورك الجديدة. تبقى حتى {date}.", + "confirm_unsent_unknown": "ربما توجد هنا رسائل لم تُرسل. ستُفقد.", + "confirm_templates": "قوالب البريد الإلكتروني المحفوظة على هذا الجهاز", + "session_waiting": "رسائل لم تُرسل تنتظر تسجيل دخولك التالي: {count}. تبقى حتى {date}.", + "session_waiting_unknown": "ربما توجد رسائل لم تُرسل تنتظر تسجيل دخولك التالي. تبقى حتى {date}.", + "needs_sign_in": "يلزم تسجيل الدخول", + "switcher_waiting": "رسائل لم تُرسل: {count}. ستُحذف من هذا الجهاز في {date}.", + "switcher_kept": "سيُحذف البريد الموجود على هذا الجهاز في {date}.", + "sibling_waiting": "تم تسجيل خروج {name}. رسائل لم تُرسل: {count}. سجّل الدخول قبل {date} وإلا فستُحذف من هذا الجهاز.", + "sibling_kept": "تم تسجيل خروج {name}. سجّل الدخول قبل {date} وإلا فسيُحذف البريد من هذا الجهاز." + }, "offlineStorage": { "keep_description": "يحتفظ ببريدك وتقويمك وجهات اتصالك والملفات التي تختارها، مشفّرة على هذا الجهاز. دون اتصال يمكنك قراءة البريد ووضع علامات عليه ونقله، وما تكتبه ينتظر في صندوق الصادر. يؤدي تسجيل الخروج إلى إزالة كل ذلك.", "window_label": "إلى أي مدة سابقة يُحتفظ بالبريد", @@ -5882,6 +5911,38 @@ "banner_refused": "المسودات التي رفضها الخادم: {count}", "banner_waiting": "مسودات في انتظار الخادم: {count}" }, + "offlineExport": { + "settings_label": "تصدير البريد المحفوظ", + "settings_description": "احفظ بريد هذا الجهاز كملفات mbox أو .eml. يعمل ذلك دون اتصال أيضًا.", + "title": "تصدير البريد المحفوظ", + "description": "يحفظ هذا النسخ الأصلية التي يحتفظ بها هذا الجهاز. ملفات .eml نسخ مطابقة تمامًا. أما ملف mbox فيضيف العلامات التي يتطلبها تنسيقه ويكتب حالة القراءة والتمييز في ترويسات كل رسالة بدلًا مما كان فيها. البريد الأقدم من الفترة التي اخترتها غير مشمول. لحفظ كل ما على الخادم، استخدم «تصدير كل البريد».", + "folders_label": "المجلدات", + "all_folders": "كل المجلدات", + "folder_kept": "هنا: {kept} من {total}", + "loading": "جارٍ قراءة ما على هذا الجهاز…", + "load_failed": "تعذّرت قراءة البريد على هذا الجهاز.", + "nothing_kept": "لا يوجد بريد محفوظ على هذا الجهاز بعد.", + "kept": "النسخ الأصلية على هذا الجهاز: {kept} من {total} رسالة", + "missing_online": "للتنزيل من الخادم: {count}", + "missing_offline": "يتعذّر التصدير دون اتصال: {count}. يمكنك المحاولة مرة أخرى عند الاتصال.", + "reason_attachments_off": "لا تُحفظ الرسائل الأصلية إلا عند تشغيل «الاحتفاظ بالمرفقات».", + "reason_not_kept": "تُنزَّل الرسائل الأصلية في النهاية، وما دامت هناك مساحة لها فقط.", + "not_kept_attachments_off": "لا توجد نسخة أصلية لأن هذا الجهاز لا يحتفظ بالمرفقات: {count}", + "not_kept_not_kept": "لا توجد نسخة أصلية على هذا الجهاز بعد: {count}", + "retry": "إعادة المحاولة عند الاتصال", + "retry_online": "أنت متصل الآن، لذا يمكن جلبها من الخادم.", + "retry_offline": "يمكنك المحاولة مرة أخرى عند الاتصال.", + "settings_button": "تصدير…", + "message_failed": "لم يسلّم الخادم هذه الرسالة.", + "failed_generic": "توقف التصدير بسبب خطأ. حاول مرة أخرى.", + "stopped_limit": "توقف التصدير عند {limit}، وهو أقصى ما يستطيع هذا المتصفح الاحتفاظ به. اختر مجلدات أقل، أو استخدم Chromium أو Firefox أو تطبيق سطح المكتب.", + "over_limit": "يستطيع هذا المتصفح الاحتفاظ بما لا يزيد عن {limit}، وهذا الاختيار نحو {size}. اختر مجلدات أقل، أو استخدم Chromium أو Firefox أو تطبيق سطح المكتب.", + "no_room": "يحتاج هذا التصدير إلى نحو {size}، والمتاح لهذا المتصفح {free}. اختر مجلدات أقل أو أفرغ مساحة.", + "stopped_no_room": "نفدت مساحة المتصفح أثناء التصدير. اختر مجلدات أقل أو أفرغ مساحة.", + "stopped_offline_off": "توقف التصدير لأن هذا الحساب لم يعد يحتفظ بالبريد على هذا الجهاز.", + "policy_unknown": "قواعد مؤسستك لهذا الحساب غير معروفة بعد، لذا يبقى التصدير متوقفًا حاليًا.", + "leftover_file": "تعذّرت إزالة الملف {name} من المكان الذي حفظته فيه. إنه غير مكتمل، ويمكنك حذفه." + }, "deep_link": { "message_not_found": "لم تعد هذه الرسالة متاحة.", "thread_not_found": "لم تعد هذه المحادثة متاحة.", @@ -6644,6 +6705,101 @@ "message_moved_to": "تم نقل هذه الرسالة إلى {folder}.", "window_not_ready": "لم تفتح النافذة الجديدة في الوقت المناسب. تبقى مسودتك هنا." }, + "desktopUi": { + "settings": { + "title": "النوافذ", + "double_click_label": "فتح الرسائل في نافذة جديدة بالنقر المزدوج", + "double_click_description": "النقرة الواحدة تفتح الرسالة بجانب القائمة كالمعتاد.", + "restore_label": "إعادة فتح النوافذ عند البدء", + "restore_description": "تعود نوافذ الرسائل والمسودات التي كانت مفتوحة عند الخروج." + }, + "attachment": { + "open": "فتح", + "save_as": "حفظ باسم…", + "copy": "نسخ", + "copy_failed": "تعذّر نسخ الملف." + }, + "menu": { + "file": "ملف", + "edit": "تحرير", + "view": "عرض", + "message": "رسالة", + "go": "انتقال", + "window": "نافذة", + "help": "مساعدة", + "new_window": "نافذة جديدة", + "print": "طباعة…", + "save_pdf": "حفظ بصيغة PDF…", + "switch_connection": "تغيير الاتصال…", + "close": "إغلاق", + "quit": "إنهاء", + "undo": "تراجع", + "redo": "إعادة", + "cut": "قص", + "copy": "نسخ", + "paste": "لصق", + "select_all": "تحديد الكل", + "search": "بحث في البريد", + "refresh": "التحقق من البريد الجديد", + "reading_pane": "جزء القراءة", + "pane_right": "على اليمين", + "pane_below": "أسفل القائمة", + "pane_off": "إيقاف", + "zoom_in": "تكبير", + "zoom_out": "تصغير", + "zoom_reset": "الحجم الفعلي", + "full_screen": "ملء الشاشة", + "open_in_window": "فتح في نافذة جديدة", + "next_message": "الرسالة التالية", + "previous_message": "الرسالة السابقة", + "next_unread": "الرسالة التالية غير المقروءة", + "mail": "البريد", + "files": "الملفات", + "back": "رجوع", + "forward": "للأمام", + "minimize": "تصغير", + "next_window": "النافذة التالية", + "shortcuts": "اختصارات لوحة المفاتيح", + "docs": "الوثائق", + "settings": "الإعدادات…", + "about": "حول Bulwark", + "from_plugins": "المزيد من الإضافات…", + "pick_gone": "هذه القائمة قديمة. افتحها مرة أخرى وحاول ثانية.", + "bar_label": "القائمة" + }, + "context": { + "add_to_dictionary": "إضافة «{word}» إلى القاموس", + "no_suggestions": "لا توجد اقتراحات", + "open_link": "فتح الرابط", + "copy_link": "نسخ الرابط", + "copy_address": "نسخ العنوان", + "save_image": "حفظ الصورة…", + "copy_image": "نسخ الصورة" + }, + "closing": { + "unsaved_title": "تعذّر حفظ مسودة", + "unsaved_detail": "إذا أغلقت الآن، سيضيع ما كتبته منذ آخر حفظ.", + "close_anyway": "إغلاق على أي حال", + "unsent_title": "توجد رسائل لم تُرسل بعد", + "unsent_one": "توجد رسالة واحدة في انتظار الإرسال. ستُرسل في المرة القادمة التي تفتح فيها Bulwark.", + "unsent_many": "توجد {count} رسائل في انتظار الإرسال. ستُرسل في المرة القادمة التي تفتح فيها Bulwark.", + "quit": "إنهاء", + "leave_title": "المغادرة مع تغييرات غير محفوظة؟", + "leave_detail": "لم تُحفظ بعد التغييرات التي أجريتها في هذه الصفحة.", + "leave": "مغادرة", + "stay": "بقاء" + }, + "spellcheck": { + "offer": "يحتاج التدقيق الإملائي بلغة {language} إلى قاموس. يمكن لـ Bulwark تنزيله من Google. لا يُرسل نصك.", + "download": "تنزيل" + }, + "restore": { + "unavailable_title": "تعذّر فتح هذه المسودة الآن", + "unavailable_body": "إنها محفوظة بأمان على الخادم في المسودات. حاول مرة أخرى عند عودة الاتصال.", + "try_again": "إعادة المحاولة", + "close": "إغلاق" + } + }, "desktop_sign_in": { "browser_button": "سجّل الدخول باستخدام المتصفح", "browser_waiting": "أكمل تسجيل الدخول في المتصفح", @@ -6661,6 +6817,53 @@ "revoke": "سحب الإذن", "revoked": "تم سحب الإذن" }, + "desktopOs": { + "section_title": "تطبيق سطح المكتب", + "section_description": "طريقة عمل التطبيق مع حاسوبك.", + "close_to_tray_label": "الاستمرار في العمل في شريط النظام عند الإغلاق", + "close_to_tray_description": "يستمر وصول البريد الجديد والتذكيرات بعد إغلاق النافذة.", + "start_at_login_label": "البدء عند تسجيل الدخول إلى الحاسوب", + "start_at_login_description": "يبدأ التطبيق تلقائيًا عند تسجيل الدخول.", + "start_minimized_label": "البدء في شريط النظام", + "start_minimized_description": "لا تُفتح نافذة عند تسجيل الدخول. استخدم أيقونة شريط النظام لفتحه.", + "attention_label": "وميض شريط المهام عند وصول بريد جديد", + "attention_mac_label": "قفز أيقونة Dock عند وصول بريد جديد", + "attention_description": "فقط عندما لا يكون التطبيق في المقدمة.", + "quiet_hours_label": "ساعات الهدوء", + "quiet_hours_description": "لا إشعارات ولا أصوات في هذه الأوقات. يستمر وصول البريد.", + "quiet_hours_from": "من", + "quiet_hours_to": "إلى", + "show_shortcut_label": "إظهار التطبيق باختصار لوحة المفاتيح", + "show_shortcut_description": "{keys} يُظهر التطبيق في المقدمة من أي تطبيق آخر.", + "show_shortcut_taken": "يستخدم تطبيق آخر {keys}. أغلق ذلك التطبيق، أو أوقف هذا الخيار ثم شغّله مرة أخرى.", + "default_app_label": "تطبيق البريد الافتراضي", + "default_app_description": "فتح روابط البريد وملفات .eml و.ics و.vcf بهذا التطبيق.", + "default_app_is_default": "هذا التطبيق يفتح روابط البريد لديك.", + "default_app_button": "اختيار التطبيق الافتراضي…", + "new_mail": "بريد جديد", + "no_subject": "(بدون موضوع)", + "action_delete": "حذف", + "copy_as_file": "نسخ كملف", + "copied": "تم نسخ الملف. يمكنك لصقه في مجلد.", + "copy_failed": "تعذّر نسخ الملف.", + "reply_lost": "تعذّر الاحتفاظ بالرد الذي كتبته. افتح الرسالة وأجب من هناك." + }, + "desktopReminders": { + "generic_title": "تذكير", + "snooze": "تأجيل {count} د", + "snooze_short": "{count} د", + "open": "فتح", + "join": "انضمام", + "missed_title": "{count, plural, zero {لا تذكيرات فائتة} one {تذكير فائت واحد} two {تذكيران فائتان} few {# تذكيرات فائتة} many {# تذكيرًا فائتًا} other {# تذكير فائت}}", + "missed_more": "و{count} أخرى", + "missed_show": "عرض", + "missed_dialog_title": "التذكيرات الفائتة", + "missed_dialog_description": "حان موعد هذه التذكيرات بينما كان التطبيق مغلقًا أو الكمبيوتر في وضع السكون أو الإشعارات متوقفة مؤقتًا.", + "open_calendar": "فتح التقويم", + "done": "تم", + "join_host": "انضمام ({host})", + "join_named": "انضمام: {title}" + }, "desktop_policy": { "server_refused": "لا تسمح مؤسستك بهذا الخادم على هذا الجهاز.", "plugin_refused": "لا تسمح مؤسستك بهذه الإضافة على هذا الجهاز، لذلك لا تعمل. تبقى إعداداتها وبياناتها محفوظة.", @@ -6669,5 +6872,30 @@ "plugins_off": "أوقفت مؤسستك الإضافات على هذا الجهاز.", "plugins_allowlist": "لا تسمح مؤسستك إلا بإضافات معينة على هذا الجهاز.", "off": "إيقاف" + }, + "desktopTelemetry": { + "section_title": "معلومات الاستخدام وتقارير الأعطال", + "section_description": "كلاهما متوقف حتى تشغّله، ولكل منهما مفتاحه الخاص.", + "telemetry_label": "إرسال معلومات الاستخدام", + "telemetry_description": "مرة واحدة في اليوم: معرّف عشوائي وإصدار التطبيق وإصدار Node ونظام التشغيل ومدة تشغيل التطبيق وطريقة اتصاله. ومع خادم بريد خاص بك، أيضًا الميزات المفعّلة وعدد تقريبي للحسابات وعدد الإضافات والسمات. لا يُرسل أبدًا البريد أو العناوين أو أسماء الخوادم.", + "crash_label": "إرسال تقارير الأعطال", + "crash_description": "تُرسل أخطاء التطبيق مع معرّف عشوائي وأسماء ملفات من شيفرة التطبيق نفسه ورسائل قصيرة منقّحة. وإذا تعطّل التطبيق نفسه، يبقى ملف العطل على هذا الحاسوب ولا يغادره إلا إذا أرسلته.", + "crash_memory": "ملف العطل نسخة من جزء من ذاكرة التطبيق لحظة العطل. يزيل Bulwark ما يجده من أسماء المستخدمين والعناوين ورموز تسجيل الدخول، لكن ملف العطل قد يظل يحتوي على نص بريدك.", + "instance_note": "على خادم Bulwark، يقرر مسؤول ذلك الخادم بشكل منفصل ما تبلّغه صفحاته به.", + "forced_off": "أوقفت مؤسستك هذا الخيار.", + "url_label": "وجهة ملفات الأعطال", + "url_description": "عنوان https الذي يستقبل ملف العطل. لا يأتي Bulwark بعنوان.", + "url_invalid": "أدخل عنوان https كاملًا.", + "url_save": "حفظ", + "files_label": "ملفات الأعطال على هذا الحاسوب", + "files_description": "يحتفظ Bulwark بالأحدث ويحذف ما مضى عليه أكثر من شهر.", + "files_empty": "لا توجد ملفات أعطال.", + "file_size": "{size} ك.ب", + "send": "إرسال تقرير العطل…", + "delete_all": "حذف الكل", + "sent": "أُرسل تقرير العطل.", + "send_no_consent": "شغّل تقارير الأعطال أولًا.", + "send_no_url": "لم يُحدَّد عنوان، لذا لا توجد وجهة للإرسال. أدخل عنوانًا في الأعلى.", + "send_failed": "تعذّر إرسال تقرير العطل." } } diff --git a/locales/ca/common.json b/locales/ca/common.json index fa88712b5..3d7486f70 100644 --- a/locales/ca/common.json +++ b/locales/ca/common.json @@ -5801,6 +5801,35 @@ "store_private": "Les finestres privades no poden desar correu per fer-lo servir sense connexió.", "server_not_answering": "El servidor de correu no respon. Torneu-ho a provar d'aquí a un moment." }, + "offlineWipe": { + "note": "La teva organització ha tret les dades d'aquest compte d'aquest dispositiu. Inicia la sessió per tornar a començar.", + "note_unsent": "La teva organització ha tret les dades d'aquest compte d'aquest dispositiu. Missatges sense enviar eliminats: {count}.", + "settings_title": "Treu-ho tot d'aquest dispositiu", + "settings_description": "Per quan regalis aquest ordinador o el deixis d'utilitzar. El teu correu al servidor es manté.", + "settings_button": "Treu-ho tot…", + "settings_wiping": "S'està traient…", + "confirm_title": "Vols treure-ho tot d'aquest dispositiu?", + "confirm_message": "Això elimina el que aquesta aplicació guarda en aquest dispositiu, per a tots els comptes d'aquí. El teu correu al servidor no es toca.", + "confirm_mail": "Correu, calendaris, contactes i fitxers guardats aquí", + "confirm_unsent": "Missatges sense enviar en espera aquí: {count}. Es perdran.", + "confirm_keys": "Claus S/MIME i OpenPGP. Necessitaràs la teva pròpia còpia de seguretat per tornar-les a utilitzar.", + "confirm_plugins": "Dades que els connectors han guardat aquí", + "confirm_files": "Adjunts oberts per editar i fitxers pendents d'adjuntar", + "confirm_accounts": "Es tanca la sessió de tots els comptes", + "confirm_button": "Treu-ho tot", + "note_unknown": "La teva organització ha eliminat les dades d'aquest compte d'aquest dispositiu. És possible que també s'hagin suprimit missatges sense enviar.", + "refused_waiting": "Missatges sense enviar que esperen la teva contrasenya nova: {count}. Es conserven fins al {date}.", + "refused_waiting_unknown": "És possible que hi hagi missatges sense enviar esperant la teva contrasenya nova. Es conserven fins al {date}.", + "confirm_unsent_unknown": "És possible que hi hagi missatges sense enviar esperant aquí. Es perdran.", + "confirm_templates": "Plantilles de correu desades en aquest dispositiu", + "session_waiting": "Missatges sense enviar que esperen el teu proper inici de sessió: {count}. Es conserven fins al {date}.", + "session_waiting_unknown": "És possible que hi hagi missatges sense enviar esperant el teu proper inici de sessió. Es conserven fins al {date}.", + "needs_sign_in": "Cal iniciar la sessió", + "switcher_waiting": "Missatges sense enviar: {count}. S'eliminaran d'aquest dispositiu el {date}.", + "switcher_kept": "El correu d'aquest dispositiu s'eliminarà el {date}.", + "sibling_waiting": "S'ha tancat la sessió de {name}. Missatges sense enviar: {count}. Inicia la sessió abans del {date} o s'eliminaran d'aquest dispositiu.", + "sibling_kept": "S'ha tancat la sessió de {name}. Inicia la sessió abans del {date} o el correu s'eliminarà d'aquest dispositiu." + }, "offlineStorage": { "keep_description": "Desa el vostre correu, calendari, contactes i els fitxers que trieu, xifrats en aquest dispositiu. Sense connexió podeu llegir, marcar i moure correu, i el que escriviu espera a la safata de sortida. En tancar la sessió s'esborra tot.", "window_label": "Fins a quan enrere desar", @@ -5882,6 +5911,38 @@ "banner_refused": "Esborranys rebutjats pel servidor: {count}", "banner_waiting": "Esborranys que esperen el servidor: {count}" }, + "offlineExport": { + "settings_label": "Exporta el correu desat", + "settings_description": "Desa el correu d'aquest dispositiu com a fitxers mbox o .eml. Funciona sense connexió.", + "title": "Exporta el correu desat", + "description": "Desa els originals que conserva aquest dispositiu. Els fitxers .eml són còpies exactes. Un fitxer mbox afegeix les marques que requereix el seu format i escriu l'estat de llegit i marcat a les capçaleres de cada missatge, en lloc de les que tingués. El correu anterior al període triat no hi és. Per desar-ho tot del servidor, fes servir «Exporta tot el correu».", + "folders_label": "Carpetes", + "all_folders": "Totes les carpetes", + "folder_kept": "{kept} de {total} aquí", + "loading": "S'està llegint el que hi ha en aquest dispositiu…", + "load_failed": "No s'ha pogut llegir el correu d'aquest dispositiu.", + "nothing_kept": "Encara no hi ha correu desat en aquest dispositiu.", + "kept": "Originals en aquest dispositiu: {kept} de {total} missatges", + "missing_online": "Per baixar del servidor: {count}", + "missing_offline": "No es poden exportar sense connexió: {count}. Pots tornar-ho a provar quan tinguis connexió.", + "reason_attachments_off": "Els missatges originals només es conserven si «Desa els fitxers adjunts» està activat.", + "reason_not_kept": "Els missatges originals es baixen al final, i només si queda espai.", + "not_kept_attachments_off": "Sense original aquí perquè aquest dispositiu no conserva adjunts: {count}", + "not_kept_not_kept": "Encara sense original en aquest dispositiu: {count}", + "retry": "Torna-ho a provar amb connexió", + "retry_online": "Ja tens connexió, així que poden venir del servidor.", + "retry_offline": "Pots tornar-ho a provar quan tinguis connexió.", + "settings_button": "Exporta…", + "message_failed": "El servidor no ha lliurat aquest missatge.", + "failed_generic": "L'exportació s'ha aturat per un error. Torna-ho a provar.", + "stopped_limit": "L'exportació s'ha aturat a {limit}, el màxim que pot contenir aquest navegador. Tria menys carpetes o fes servir Chromium, Firefox o l'aplicació d'escriptori.", + "over_limit": "Aquest navegador pot contenir com a màxim {limit}, i aquesta selecció ocupa uns {size}. Tria menys carpetes o fes servir Chromium, Firefox o l'aplicació d'escriptori.", + "no_room": "Aquesta exportació necessita uns {size}, i aquest navegador en té {free} disponibles. Tria menys carpetes o allibera espai.", + "stopped_no_room": "El navegador s'ha quedat sense espai per a l'exportació. Tria menys carpetes o allibera espai.", + "stopped_offline_off": "L'exportació s'ha aturat perquè aquest compte ja no conserva correu en aquest dispositiu.", + "policy_unknown": "Encara no es coneixen les regles de la teva organització per a aquest compte, així que l'exportació continua desactivada de moment.", + "leftover_file": "No s'ha pogut treure el fitxer {name} d'on l'has desat. Està incomplet, el pots suprimir." + }, "deep_link": { "message_not_found": "Aquest missatge ja no està disponible.", "thread_not_found": "Aquesta conversa ja no està disponible.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Aquest missatge s’ha mogut a {folder}.", "window_not_ready": "La finestra nova no s’ha obert a temps. L’esborrany es queda aquí." }, + "desktopUi": { + "settings": { + "title": "Finestres", + "double_click_label": "Obre els missatges en una finestra nova amb doble clic", + "double_click_description": "Un sol clic continua obrint el missatge al costat de la llista.", + "restore_label": "Torna a obrir les finestres en iniciar", + "restore_description": "Les finestres de missatges i esborranys obertes en sortir tornen a aparèixer." + }, + "attachment": { + "open": "Obre", + "save_as": "Desa com a…", + "copy": "Copia", + "copy_failed": "No s’ha pogut copiar el fitxer." + }, + "menu": { + "file": "Fitxer", + "edit": "Edita", + "view": "Visualitza", + "message": "Missatge", + "go": "Vés-hi", + "window": "Finestra", + "help": "Ajuda", + "new_window": "Finestra nova", + "print": "Imprimeix…", + "save_pdf": "Desa com a PDF…", + "switch_connection": "Canvia de connexió…", + "close": "Tanca", + "quit": "Surt", + "undo": "Desfés", + "redo": "Refés", + "cut": "Retalla", + "copy": "Copia", + "paste": "Enganxa", + "select_all": "Selecciona-ho tot", + "search": "Cerca al correu", + "refresh": "Comprova si hi ha correu nou", + "reading_pane": "Tauler de lectura", + "pane_right": "A la dreta", + "pane_below": "Sota la llista", + "pane_off": "Desactivat", + "zoom_in": "Amplia", + "zoom_out": "Redueix", + "zoom_reset": "Mida real", + "full_screen": "Pantalla completa", + "open_in_window": "Obre en una finestra nova", + "next_message": "Missatge següent", + "previous_message": "Missatge anterior", + "next_unread": "Següent missatge no llegit", + "mail": "Correu", + "files": "Fitxers", + "back": "Enrere", + "forward": "Endavant", + "minimize": "Minimitza", + "next_window": "Finestra següent", + "shortcuts": "Dreceres de teclat", + "docs": "Documentació", + "settings": "Configuració…", + "about": "Quant a Bulwark", + "from_plugins": "Més dels connectors…", + "pick_gone": "Aquest menú estava desfasat. Torneu-lo a obrir i proveu-ho una altra vegada.", + "bar_label": "Menú" + }, + "context": { + "add_to_dictionary": "Afegeix «{word}» al diccionari", + "no_suggestions": "Cap suggeriment", + "open_link": "Obre l’enllaç", + "copy_link": "Copia l’enllaç", + "copy_address": "Copia l’adreça", + "save_image": "Desa la imatge…", + "copy_image": "Copia la imatge" + }, + "closing": { + "unsaved_title": "No s’ha pogut desar un esborrany", + "unsaved_detail": "Si tanqueu ara, es perdrà el que heu escrit des de l’últim desament.", + "close_anyway": "Tanca igualment", + "unsent_title": "Hi ha correu sense enviar", + "unsent_one": "Hi ha un missatge pendent d’enviar. Se n’anirà la propera vegada que obriu Bulwark.", + "unsent_many": "Hi ha {count} missatges pendents d’enviar. Se n’aniran la propera vegada que obriu Bulwark.", + "quit": "Surt", + "leave_title": "Voleu sortir amb canvis sense desar?", + "leave_detail": "Els canvis fets en aquesta pàgina encara no s’han desat.", + "leave": "Surt", + "stay": "Queda’t" + }, + "spellcheck": { + "offer": "La revisió ortogràfica en {language} necessita un diccionari. Bulwark el pot baixar de Google. El vostre text no s’envia.", + "download": "Baixa" + }, + "restore": { + "unavailable_title": "Aquest esborrany no es pot obrir ara", + "unavailable_body": "Està segur al servidor, a Esborranys. Torneu-ho a provar quan hi hagi connexió.", + "try_again": "Torna-ho a provar", + "close": "Tanca" + } + }, "desktop_sign_in": { "browser_button": "Inicia la sessió amb el navegador", "browser_waiting": "Acaba d'iniciar la sessió al navegador", @@ -6661,6 +6817,53 @@ "revoke": "Retira", "revoked": "Permís retirat" }, + "desktopOs": { + "section_title": "Aplicació d'escriptori", + "section_description": "Com funciona l'aplicació amb l'ordinador.", + "close_to_tray_label": "Continua a la safata en tancar", + "close_to_tray_description": "El correu nou i els recordatoris continuen arribant després de tancar la finestra.", + "start_at_login_label": "Inicia en entrar a l'ordinador", + "start_at_login_description": "L'aplicació s'inicia sola quan entreu.", + "start_minimized_label": "Inicia a la safata", + "start_minimized_description": "No s'obre cap finestra en entrar. Obriu-la amb la icona de la safata.", + "attention_label": "Fes parpellejar la barra de tasques amb correu nou", + "attention_mac_label": "Fes botar la icona del Dock amb correu nou", + "attention_description": "Només quan l'aplicació no és al davant.", + "quiet_hours_label": "Hores de silenci", + "quiet_hours_description": "Cap notificació ni so en aquestes hores. El correu continua arribant.", + "quiet_hours_from": "De", + "quiet_hours_to": "a", + "show_shortcut_label": "Mostra l'aplicació amb una drecera de teclat", + "show_shortcut_description": "{keys} porta l'aplicació al davant des de qualsevol altra aplicació.", + "show_shortcut_taken": "Una altra aplicació fa servir {keys}. Tanqueu-la o desactiveu i torneu a activar això.", + "default_app_label": "Aplicació de correu predeterminada", + "default_app_description": "Obre els enllaços de correu i els fitxers .eml, .ics i .vcf amb aquesta aplicació.", + "default_app_is_default": "Aquesta aplicació obre els vostres enllaços de correu.", + "default_app_button": "Tria l'aplicació predeterminada…", + "new_mail": "Correu nou", + "no_subject": "(sense assumpte)", + "action_delete": "Suprimeix", + "copy_as_file": "Copia com a fitxer", + "copied": "Fitxer copiat. El podeu enganxar en una carpeta.", + "copy_failed": "No s'ha pogut copiar el fitxer.", + "reply_lost": "No s'ha pogut conservar la resposta que heu escrit. Obriu el missatge i responeu des d'allà." + }, + "desktopReminders": { + "generic_title": "Recordatori", + "snooze": "Posposa {count} min", + "snooze_short": "{count} min", + "open": "Obre", + "join": "Uneix-te", + "missed_title": "{count, plural, one {# recordatori perdut} other {# recordatoris perduts}}", + "missed_more": "i {count} més", + "missed_show": "Mostra", + "missed_dialog_title": "Recordatoris perduts", + "missed_dialog_description": "Van vèncer mentre l'aplicació estava tancada, l'ordinador en repòs o les notificacions en pausa.", + "open_calendar": "Obre el calendari", + "done": "Fet", + "join_host": "Uneix-te ({host})", + "join_named": "Uneix-te: {title}" + }, "desktop_policy": { "server_refused": "La teva organització no permet aquest servidor en aquest dispositiu.", "plugin_refused": "La teva organització no permet aquest connector en aquest dispositiu, per tant no s'executa. Se'n conserven la configuració i les dades.", @@ -6669,5 +6872,30 @@ "plugins_off": "La teva organització ha desactivat els connectors en aquest dispositiu.", "plugins_allowlist": "La teva organització només permet determinats connectors en aquest dispositiu.", "off": "Desactivat" + }, + "desktopTelemetry": { + "section_title": "Dades d'ús i informes d'errors greus", + "section_description": "Tots dos estan desactivats fins que els activis, i cadascun té el seu interruptor.", + "telemetry_label": "Envia dades d'ús", + "telemetry_description": "Un cop al dia: un identificador aleatori, la versió de l'aplicació, la versió de Node, el teu sistema operatiu, quant de temps fa que funciona l'aplicació i com es connecta. Amb un servidor de correu propi, també quines funcions estan actives, un nombre aproximat de comptes i quants connectors i temes tens. Mai correus, adreces ni noms de servidor.", + "crash_label": "Envia informes d'errors greus", + "crash_description": "Els errors de l'aplicació s'envien amb un identificador aleatori, noms de fitxer del codi de l'aplicació i missatges curts i nets. Si la mateixa aplicació es tanca per un error, un fitxer d'error queda en aquest ordinador i només en surt si l'envies.", + "crash_memory": "Un fitxer d'error és una còpia d'una part de la memòria de l'aplicació en el moment de l'error. Bulwark elimina els noms d'usuari, les adreces i els testimonis d'inici de sessió que troba, però un fitxer d'error encara pot contenir el text dels teus correus.", + "instance_note": "En un servidor Bulwark, el seu administrador decideix per separat què li comuniquen les pàgines.", + "forced_off": "La teva organització ho ha desactivat.", + "url_label": "Destinació dels fitxers d'error", + "url_description": "L'adreça https que rep un fitxer d'error. Bulwark no n'inclou cap.", + "url_invalid": "Escriu una adreça https completa.", + "url_save": "Desa", + "files_label": "Fitxers d'error en aquest ordinador", + "files_description": "Bulwark conserva els més recents i elimina els de més d'un mes.", + "files_empty": "No hi ha fitxers d'error.", + "file_size": "{size} KB", + "send": "Envia l'informe d'error…", + "delete_all": "Elimina-ho tot", + "sent": "Informe d'error enviat.", + "send_no_consent": "Activa primer els informes d'errors greus.", + "send_no_url": "No hi ha cap adreça, així que no hi ha on enviar-ho. Escriu-ne una a dalt.", + "send_failed": "No s'ha pogut enviar l'informe d'error." } } diff --git a/locales/cs/common.json b/locales/cs/common.json index 210734950..271be7ef7 100644 --- a/locales/cs/common.json +++ b/locales/cs/common.json @@ -5801,6 +5801,35 @@ "store_private": "Soukromá okna nemohou uchovávat poštu pro použití offline.", "server_not_answering": "Poštovní server neodpovídá. Zkuste to za chvíli znovu." }, + "offlineWipe": { + "note": "Vaše organizace odebrala data tohoto účtu z tohoto zařízení. Přihlaste se a začněte znovu.", + "note_unsent": "Vaše organizace odebrala data tohoto účtu z tohoto zařízení. Smazané neodeslané zprávy: {count}.", + "settings_title": "Odebrat vše z tohoto zařízení", + "settings_description": "Pro případ, že tento počítač předáte dál nebo ho přestanete používat. Vaše pošta na serveru zůstane.", + "settings_button": "Odebrat vše…", + "settings_wiping": "Odebírání…", + "confirm_title": "Odebrat vše z tohoto zařízení?", + "confirm_message": "Tím se smaže to, co tato aplikace uchovává na tomto zařízení, pro všechny zdejší účty. Vaší pošty na serveru se to nedotkne.", + "confirm_mail": "Pošta, kalendáře, kontakty a soubory uložené zde", + "confirm_unsent": "Neodeslané zprávy čekající zde: {count}. Budou ztraceny.", + "confirm_keys": "Klíče S/MIME a OpenPGP. Abyste je mohli znovu použít, budete potřebovat vlastní zálohu.", + "confirm_plugins": "Data, která sem uložily zásuvné moduly", + "confirm_files": "Přílohy otevřené k úpravám a soubory čekající na připojení", + "confirm_accounts": "Všechny účty budou odhlášeny", + "confirm_button": "Odebrat vše", + "note_unknown": "Vaše organizace odstranila data tohoto účtu z tohoto zařízení. Možná byly smazány i neodeslané zprávy.", + "refused_waiting": "Neodeslané zprávy čekající na nové heslo: {count}. Zůstanou do {date}.", + "refused_waiting_unknown": "Na nové heslo možná čekají neodeslané zprávy. Zůstanou do {date}.", + "confirm_unsent_unknown": "Možná tu čekají neodeslané zprávy. Budou ztraceny.", + "confirm_templates": "Šablony e-mailů uložené v tomto zařízení", + "session_waiting": "Neodeslané zprávy čekající na další přihlášení: {count}. Zůstanou do {date}.", + "session_waiting_unknown": "Na další přihlášení možná čekají neodeslané zprávy. Zůstanou do {date}.", + "needs_sign_in": "Vyžaduje přihlášení", + "switcher_waiting": "Neodeslané zprávy: {count}. Budou smazány z tohoto zařízení {date}.", + "switcher_kept": "Pošta v tomto zařízení bude smazána {date}.", + "sibling_waiting": "Účet {name} byl odhlášen. Neodeslané zprávy: {count}. Přihlaste se do {date}, jinak budou z tohoto zařízení smazány.", + "sibling_kept": "Účet {name} byl odhlášen. Přihlaste se do {date}, jinak bude pošta z tohoto zařízení smazána." + }, "offlineStorage": { "keep_description": "Uchovává vaši poštu, kalendář, kontakty a vybrané soubory zašifrované v tomto zařízení. Offline můžete poštu číst, označovat a přesouvat a to, co napíšete, čeká v odesílané poště. Odhlášení vše odstraní.", "window_label": "Jak dlouho do minulosti uchovávat", @@ -5882,6 +5911,38 @@ "banner_refused": "Koncepty odmítnuté serverem: {count}", "banner_waiting": "Koncepty čekající na server: {count}" }, + "offlineExport": { + "settings_label": "Exportovat uloženou poštu", + "settings_description": "Uložte poštu z tohoto zařízení jako soubory mbox nebo .eml. Funguje to i offline.", + "title": "Exportovat uloženou poštu", + "description": "Uloží originály, které toto zařízení uchovává. Soubory .eml jsou přesné kopie. Soubor mbox přidá značky, které jeho formát vyžaduje, a zapíše stav přečtení a označení do záhlaví každé zprávy místo těch, která měla. Pošta starší než zvolené období v tom není. Chcete-li uložit vše ze serveru, použijte „Exportovat všechnu poštu“.", + "folders_label": "Složky", + "all_folders": "Všechny složky", + "folder_kept": "{kept} z {total} zde", + "loading": "Čtení dat z tohoto zařízení…", + "load_failed": "Poštu na tomto zařízení se nepodařilo přečíst.", + "nothing_kept": "Na tomto zařízení zatím není uložená žádná pošta.", + "kept": "Originály na tomto zařízení: {kept} z {total} zpráv", + "missing_online": "Ke stažení ze serveru: {count}", + "missing_offline": "Nelze exportovat offline: {count}. Můžete to zkusit znovu, až budete online.", + "reason_attachments_off": "Původní zprávy se uchovávají jen tehdy, když je zapnuto „Uchovávat přílohy“.", + "reason_not_kept": "Původní zprávy se stahují jako poslední a jen tehdy, když je na ně místo.", + "not_kept_attachments_off": "Bez originálu, protože toto zařízení neuchovává přílohy: {count}", + "not_kept_not_kept": "Zatím bez originálu na tomto zařízení: {count}", + "retry": "Zkusit znovu online", + "retry_online": "Jste online, takže mohou přijít ze serveru.", + "retry_offline": "Můžete to zkusit znovu, až budete online.", + "settings_button": "Exportovat…", + "message_failed": "Server tuto zprávu nedodal.", + "failed_generic": "Export se zastavil kvůli chybě. Zkuste to znovu.", + "stopped_limit": "Export se zastavil na {limit}, což je nejvíc, co tento prohlížeč pojme. Vyberte méně složek nebo použijte Chromium, Firefox či desktopovou aplikaci.", + "over_limit": "Tento prohlížeč pojme nejvýše {limit} a tento výběr má asi {size}. Vyberte méně složek nebo použijte Chromium, Firefox či desktopovou aplikaci.", + "no_room": "Tento export potřebuje asi {size} a tento prohlížeč má k dispozici {free}. Vyberte méně složek nebo uvolněte místo.", + "stopped_no_room": "Prohlížeči došlo místo pro export. Vyberte méně složek nebo uvolněte místo.", + "stopped_offline_off": "Export se zastavil, protože tento účet už na tomto zařízení poštu neuchovává.", + "policy_unknown": "Pravidla vaší organizace pro tento účet zatím nejsou známa, proto export zatím zůstává vypnutý.", + "leftover_file": "Soubor {name} se nepodařilo odebrat z místa, kam jste ho uložili. Je neúplný, můžete ho smazat." + }, "deep_link": { "message_not_found": "Tato zpráva už není dostupná.", "thread_not_found": "Tato konverzace už není dostupná.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Tato zpráva byla přesunuta do {folder}.", "window_not_ready": "Nové okno se neotevřelo včas. Koncept zůstává zde." }, + "desktopUi": { + "settings": { + "title": "Okna", + "double_click_label": "Otevírat zprávy v novém okně dvojitým kliknutím", + "double_click_description": "Jedním kliknutím se zpráva dál otevře vedle seznamu.", + "restore_label": "Při spuštění znovu otevřít okna", + "restore_description": "Okna zpráv a konceptů otevřená při ukončení se znovu otevřou." + }, + "attachment": { + "open": "Otevřít", + "save_as": "Uložit jako…", + "copy": "Kopírovat", + "copy_failed": "Soubor se nepodařilo zkopírovat." + }, + "menu": { + "file": "Soubor", + "edit": "Úpravy", + "view": "Zobrazení", + "message": "Zpráva", + "go": "Přejít", + "window": "Okno", + "help": "Nápověda", + "new_window": "Nové okno", + "print": "Tisk…", + "save_pdf": "Uložit jako PDF…", + "switch_connection": "Změnit připojení…", + "close": "Zavřít", + "quit": "Ukončit", + "undo": "Zpět", + "redo": "Znovu", + "cut": "Vyjmout", + "copy": "Kopírovat", + "paste": "Vložit", + "select_all": "Vybrat vše", + "search": "Hledat v poště", + "refresh": "Zkontrolovat novou poštu", + "reading_pane": "Podokno čtení", + "pane_right": "Vpravo", + "pane_below": "Pod seznamem", + "pane_off": "Vypnuto", + "zoom_in": "Přiblížit", + "zoom_out": "Oddálit", + "zoom_reset": "Skutečná velikost", + "full_screen": "Celá obrazovka", + "open_in_window": "Otevřít v novém okně", + "next_message": "Další zpráva", + "previous_message": "Předchozí zpráva", + "next_unread": "Další nepřečtená zpráva", + "mail": "Pošta", + "files": "Soubory", + "back": "Zpět", + "forward": "Vpřed", + "minimize": "Minimalizovat", + "next_window": "Další okno", + "shortcuts": "Klávesové zkratky", + "docs": "Dokumentace", + "settings": "Nastavení…", + "about": "O aplikaci Bulwark", + "from_plugins": "Více z doplňků…", + "pick_gone": "Tato nabídka byla zastaralá. Otevřete ji znovu a zkuste to ještě jednou.", + "bar_label": "Nabídka" + }, + "context": { + "add_to_dictionary": "Přidat „{word}“ do slovníku", + "no_suggestions": "Žádné návrhy", + "open_link": "Otevřít odkaz", + "copy_link": "Kopírovat odkaz", + "copy_address": "Kopírovat adresu", + "save_image": "Uložit obrázek…", + "copy_image": "Kopírovat obrázek" + }, + "closing": { + "unsaved_title": "Koncept se nepodařilo uložit", + "unsaved_detail": "Pokud nyní okno zavřete, přijdete o to, co jste napsali od posledního uložení.", + "close_anyway": "Přesto zavřít", + "unsent_title": "Některá pošta ještě nebyla odeslána", + "unsent_one": "Jedna zpráva čeká na odeslání. Odejde při dalším spuštění Bulwark.", + "unsent_many": "Počet zpráv čekajících na odeslání: {count}. Odejdou při dalším spuštění Bulwark.", + "quit": "Ukončit", + "leave_title": "Odejít s neuloženými změnami?", + "leave_detail": "Změny na této stránce zatím nejsou uloženy.", + "leave": "Odejít", + "stay": "Zůstat" + }, + "spellcheck": { + "offer": "Kontrola pravopisu pro jazyk {language} potřebuje slovník. Bulwark ho může stáhnout od společnosti Google. Váš text se neodesílá.", + "download": "Stáhnout" + }, + "restore": { + "unavailable_title": "Tento koncept se teď nedá otevřít", + "unavailable_body": "Je v bezpečí na serveru ve složce Koncepty. Zkuste to znovu, až se obnoví připojení.", + "try_again": "Zkusit znovu", + "close": "Zavřít" + } + }, "desktop_sign_in": { "browser_button": "Přihlásit se v prohlížeči", "browser_waiting": "Dokončete přihlášení v prohlížeči", @@ -6661,6 +6817,53 @@ "revoke": "Odvolat", "revoked": "Povolení bylo odvoláno" }, + "desktopOs": { + "section_title": "Desktopová aplikace", + "section_description": "Jak aplikace spolupracuje s vaším počítačem.", + "close_to_tray_label": "Po zavření běžet dál v oznamovací oblasti", + "close_to_tray_description": "Nová pošta a připomenutí chodí i po zavření okna.", + "start_at_login_label": "Spustit po přihlášení k počítači", + "start_at_login_description": "Aplikace se po přihlášení spustí sama.", + "start_minimized_label": "Spustit v oznamovací oblasti", + "start_minimized_description": "Po přihlášení se neotevře žádné okno. Otevřete ji ikonou v oznamovací oblasti.", + "attention_label": "Při nové poště blikat na hlavním panelu", + "attention_mac_label": "Při nové poště poskakovat ikonou v Docku", + "attention_description": "Jen když aplikace není v popředí.", + "quiet_hours_label": "Doba klidu", + "quiet_hours_description": "V tuto dobu žádná oznámení ani zvuky. Pošta dál přichází.", + "quiet_hours_from": "Od", + "quiet_hours_to": "do", + "show_shortcut_label": "Zobrazit aplikaci klávesovou zkratkou", + "show_shortcut_description": "{keys} přenese aplikaci do popředí z jakékoli jiné aplikace.", + "show_shortcut_taken": "{keys} používá jiná aplikace. Zavřete ji, nebo tuto volbu vypněte a znovu zapněte.", + "default_app_label": "Výchozí poštovní aplikace", + "default_app_description": "Otevírat poštovní odkazy a soubory .eml, .ics a .vcf v této aplikaci.", + "default_app_is_default": "Tato aplikace otevírá vaše poštovní odkazy.", + "default_app_button": "Vybrat výchozí aplikaci…", + "new_mail": "Nová pošta", + "no_subject": "(bez předmětu)", + "action_delete": "Smazat", + "copy_as_file": "Kopírovat jako soubor", + "copied": "Soubor zkopírován. Můžete ho vložit do složky.", + "copy_failed": "Soubor se nepodařilo zkopírovat.", + "reply_lost": "Napsanou odpověď se nepodařilo zachovat. Otevřete zprávu a odpovězte v ní." + }, + "desktopReminders": { + "generic_title": "Připomenutí", + "snooze": "Odložit o {count} min", + "snooze_short": "{count} min", + "open": "Otevřít", + "join": "Připojit se", + "missed_title": "{count, plural, one {# zmeškané připomenutí} few {# zmeškaná připomenutí} many {# zmeškaného připomenutí} other {# zmeškaných připomenutí}}", + "missed_more": "a další ({count})", + "missed_show": "Zobrazit", + "missed_dialog_title": "Zmeškaná připomenutí", + "missed_dialog_description": "Nastala, když byla aplikace zavřená, počítač v režimu spánku nebo oznámení pozastavená.", + "open_calendar": "Otevřít kalendář", + "done": "Hotovo", + "join_host": "Připojit se ({host})", + "join_named": "Připojit se: {title}" + }, "desktop_policy": { "server_refused": "Vaše organizace tento server na tomto zařízení nepovoluje.", "plugin_refused": "Vaše organizace tento plugin na tomto zařízení nepovoluje, proto neběží. Jeho nastavení a data zůstávají zachována.", @@ -6669,5 +6872,30 @@ "plugins_off": "Vaše organizace na tomto zařízení vypnula pluginy.", "plugins_allowlist": "Vaše organizace na tomto zařízení povoluje jen některé pluginy.", "off": "Vypnuto" + }, + "desktopTelemetry": { + "section_title": "Údaje o používání a hlášení o pádech", + "section_description": "Obojí je vypnuté, dokud to nezapnete, a každé má vlastní přepínač.", + "telemetry_label": "Odesílat údaje o používání", + "telemetry_description": "Jednou denně: náhodné ID, verze aplikace, verze Node, váš operační systém, jak dlouho aplikace běží a jak se připojuje. U vlastního poštovního serveru také zapnuté funkce, přibližný počet účtů a počet pluginů a motivů. Nikdy pošta, adresy ani názvy serverů.", + "crash_label": "Odesílat hlášení o pádech", + "crash_description": "Chyby v aplikaci se odesílají s náhodným ID, názvy souborů z kódu aplikace a krátkými, očištěnými zprávami. Když spadne sama aplikace, soubor o pádu zůstane v tomto počítači a odejde jen tehdy, když ho odešlete.", + "crash_memory": "Soubor o pádu je kopie části paměti aplikace v okamžiku pádu. Bulwark odstraní uživatelská jména, adresy a přihlašovací tokeny, které najde, ale soubor o pádu může přesto obsahovat text vaší pošty.", + "instance_note": "Na serveru Bulwark rozhoduje jeho správce zvlášť o tom, co mu stránky hlásí.", + "forced_off": "Vaše organizace to vypnula.", + "url_label": "Kam jdou soubory o pádu", + "url_description": "Adresa https, která přijímá soubor o pádu. Bulwark žádnou nemá.", + "url_invalid": "Zadejte úplnou adresu https.", + "url_save": "Uložit", + "files_label": "Soubory o pádu v tomto počítači", + "files_description": "Bulwark ponechá ty nejnovější a smaže ty starší než měsíc.", + "files_empty": "Žádné soubory o pádu.", + "file_size": "{size} KB", + "send": "Odeslat hlášení o pádu…", + "delete_all": "Smazat vše", + "sent": "Hlášení o pádu odesláno.", + "send_no_consent": "Nejprve zapněte hlášení o pádech.", + "send_no_url": "Není nastavena žádná adresa, takže to nejde kam odeslat. Zadejte ji výše.", + "send_failed": "Hlášení o pádu se nepodařilo odeslat." } } diff --git a/locales/da/common.json b/locales/da/common.json index 017aa3a11..509e3882a 100644 --- a/locales/da/common.json +++ b/locales/da/common.json @@ -5801,6 +5801,35 @@ "store_private": "Private vinduer kan ikke gemme mail til brug offline.", "server_not_answering": "Mailserveren svarer ikke. Prøv igen om lidt." }, + "offlineWipe": { + "note": "Din organisation har fjernet denne kontos data fra denne enhed. Log ind for at starte forfra.", + "note_unsent": "Din organisation har fjernet denne kontos data fra denne enhed. Slettede ikke-sendte beskeder: {count}.", + "settings_title": "Fjern alt fra denne enhed", + "settings_description": "Til når du giver computeren væk eller holder op med at bruge den. Din post på serveren bliver.", + "settings_button": "Fjern alt…", + "settings_wiping": "Fjerner…", + "confirm_title": "Fjern alt fra denne enhed?", + "confirm_message": "Det sletter det, denne app gemmer på denne enhed, for alle konti her. Din post på serveren røres ikke.", + "confirm_mail": "Post, kalendere, kontakter og filer gemt her", + "confirm_unsent": "Ikke-sendte beskeder, der venter her: {count}. De går tabt.", + "confirm_keys": "S/MIME- og OpenPGP-nøgler. Du skal bruge din egen sikkerhedskopi for at bruge dem igen.", + "confirm_plugins": "Data, som plugins har gemt her", + "confirm_files": "Vedhæftede filer åbnet til redigering og filer, der venter på at blive vedhæftet", + "confirm_accounts": "Alle konti logges ud", + "confirm_button": "Fjern alt", + "note_unknown": "Din organisation har fjernet denne kontos data fra denne enhed. Usendte beskeder kan også være slettet.", + "refused_waiting": "Usendte beskeder, der venter på din nye adgangskode: {count}. De bliver til {date}.", + "refused_waiting_unknown": "Usendte beskeder venter måske på din nye adgangskode. De bliver til {date}.", + "confirm_unsent_unknown": "Der venter måske usendte beskeder her. De går tabt.", + "confirm_templates": "E-mailskabeloner gemt på denne enhed", + "session_waiting": "Usendte beskeder, der venter på din næste login: {count}. De bliver til {date}.", + "session_waiting_unknown": "Usendte beskeder venter måske på din næste login. De bliver til {date}.", + "needs_sign_in": "Kræver login", + "switcher_waiting": "Usendte beskeder: {count}. Slettes fra denne enhed den {date}.", + "switcher_kept": "Mailen på denne enhed slettes den {date}.", + "sibling_waiting": "{name} blev logget ud. Usendte beskeder: {count}. Log ind senest {date}, ellers slettes de fra denne enhed.", + "sibling_kept": "{name} blev logget ud. Log ind senest {date}, ellers slettes mailen fra denne enhed." + }, "offlineStorage": { "keep_description": "Beholder din mail, kalender, dine kontakter og de filer, du vælger, krypteret på denne enhed. Offline kan du læse, markere og flytte mail, og det, du skriver, venter i udbakken. Når du logger ud, fjernes det hele.", "window_label": "Hvor langt tilbage der beholdes", @@ -5882,6 +5911,38 @@ "banner_refused": "Kladder afvist af serveren: {count}", "banner_waiting": "Kladder, der venter på serveren: {count}" }, + "offlineExport": { + "settings_label": "Eksportér gemt post", + "settings_description": "Gem posten på denne enhed som mbox- eller .eml-filer. Det virker også offline.", + "title": "Eksportér gemt post", + "description": "Dette gemmer de originaler, enheden opbevarer. .eml-filer er nøjagtige kopier. En mbox-fil tilføjer de markeringer, formatet kræver, og skriver status for læst og markeret i hver beskeds overskrifter i stedet for dem, den havde. Post, der er ældre end den valgte periode, er ikke med. Brug “Eksportér al mail” for at gemme alt fra serveren.", + "folders_label": "Mapper", + "all_folders": "Alle mapper", + "folder_kept": "{kept} af {total} her", + "loading": "Læser det, der ligger på denne enhed…", + "load_failed": "Posten på denne enhed kunne ikke læses.", + "nothing_kept": "Der er endnu ikke gemt post på denne enhed.", + "kept": "Originaler på denne enhed: {kept} af {total} beskeder", + "missing_online": "Skal hentes fra serveren: {count}", + "missing_offline": "Kan ikke eksporteres offline: {count}. Du kan prøve igen, når du er online.", + "reason_attachments_off": "Originale beskeder gemmes kun, når “Behold vedhæftede filer” er slået til.", + "reason_not_kept": "Originale beskeder hentes til sidst, og kun så længe der er plads.", + "not_kept_attachments_off": "Ingen original her, fordi vedhæftede filer ikke gemmes på denne enhed: {count}", + "not_kept_not_kept": "Endnu ingen original på denne enhed: {count}", + "retry": "Prøv igen online", + "retry_online": "Du er online nu, så de kan komme fra serveren.", + "retry_offline": "Du kan prøve igen, når du er online.", + "settings_button": "Eksportér…", + "message_failed": "Serveren leverede ikke denne besked.", + "failed_generic": "Eksporten stoppede på grund af en fejl. Prøv igen.", + "stopped_limit": "Eksporten stoppede ved {limit}, det meste denne browser kan rumme. Vælg færre mapper, eller brug Chromium, Firefox eller skrivebordsappen.", + "over_limit": "Denne browser kan højst rumme {limit}, og dette valg fylder cirka {size}. Vælg færre mapper, eller brug Chromium, Firefox eller skrivebordsappen.", + "no_room": "Denne eksport kræver cirka {size}, og denne browser har {free} tilbage. Vælg færre mapper, eller frigør plads.", + "stopped_no_room": "Browseren løb tør for plads til eksporten. Vælg færre mapper, eller frigør plads.", + "stopped_offline_off": "Eksporten stoppede, fordi denne konto ikke længere gemmer post på denne enhed.", + "policy_unknown": "Din organisations regler for denne konto kendes endnu ikke, så eksport er slået fra indtil videre.", + "leftover_file": "Filen {name} kunne ikke fjernes fra det sted, du gemte den. Den er ufuldstændig, så du kan slette den." + }, "deep_link": { "message_not_found": "Denne besked er ikke længere tilgængelig.", "thread_not_found": "Denne samtale er ikke længere tilgængelig.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Denne besked er flyttet til {folder}.", "window_not_ready": "Det nye vindue åbnede ikke i tide. Din kladde bliver her." }, + "desktopUi": { + "settings": { + "title": "Vinduer", + "double_click_label": "Åbn beskeder i et nyt vindue ved dobbeltklik", + "double_click_description": "Et enkelt klik åbner stadig beskeden ved siden af listen.", + "restore_label": "Åbn vinduer igen ved start", + "restore_description": "Besked- og kladdevinduer, der var åbne, da du lukkede, kommer tilbage." + }, + "attachment": { + "open": "Åbn", + "save_as": "Gem som…", + "copy": "Kopiér", + "copy_failed": "Filen kunne ikke kopieres." + }, + "menu": { + "file": "Filer", + "edit": "Rediger", + "view": "Vis", + "message": "Besked", + "go": "Gå", + "window": "Vindue", + "help": "Hjælp", + "new_window": "Nyt vindue", + "print": "Udskriv…", + "save_pdf": "Gem som PDF…", + "switch_connection": "Skift forbindelse…", + "close": "Luk", + "quit": "Afslut", + "undo": "Fortryd", + "redo": "Gentag", + "cut": "Klip", + "copy": "Kopiér", + "paste": "Indsæt", + "select_all": "Markér alt", + "search": "Søg i mail", + "refresh": "Hent nye mails", + "reading_pane": "Læserude", + "pane_right": "Til højre", + "pane_below": "Under listen", + "pane_off": "Fra", + "zoom_in": "Zoom ind", + "zoom_out": "Zoom ud", + "zoom_reset": "Faktisk størrelse", + "full_screen": "Fuld skærm", + "open_in_window": "Åbn i nyt vindue", + "next_message": "Næste besked", + "previous_message": "Forrige besked", + "next_unread": "Næste ulæste besked", + "mail": "Mail", + "files": "Filer", + "back": "Tilbage", + "forward": "Frem", + "minimize": "Minimer", + "next_window": "Næste vindue", + "shortcuts": "Tastaturgenveje", + "docs": "Dokumentation", + "settings": "Indstillinger…", + "about": "Om Bulwark", + "from_plugins": "Mere fra plugins…", + "pick_gone": "Den menu var forældet. Åbn den igen, og prøv en gang til.", + "bar_label": "Menu" + }, + "context": { + "add_to_dictionary": "Føj “{word}” til ordbogen", + "no_suggestions": "Ingen forslag", + "open_link": "Åbn link", + "copy_link": "Kopiér link", + "copy_address": "Kopiér adresse", + "save_image": "Gem billede…", + "copy_image": "Kopiér billede" + }, + "closing": { + "unsaved_title": "En kladde kunne ikke gemmes", + "unsaved_detail": "Hvis du lukker nu, går det tabt, du har skrevet siden sidste gang, du gemte.", + "close_anyway": "Luk alligevel", + "unsent_title": "Nogle mails er ikke sendt endnu", + "unsent_one": "Én besked venter på at blive sendt. Den bliver sendt, næste gang du åbner Bulwark.", + "unsent_many": "{count} beskeder venter på at blive sendt. De bliver sendt, næste gang du åbner Bulwark.", + "quit": "Afslut", + "leave_title": "Forlad siden med ugemte ændringer?", + "leave_detail": "Dine ændringer på denne side er ikke gemt endnu.", + "leave": "Forlad", + "stay": "Bliv" + }, + "spellcheck": { + "offer": "Stavekontrol på {language} kræver en ordbog. Bulwark kan hente den fra Google. Din tekst bliver ikke sendt.", + "download": "Hent" + }, + "restore": { + "unavailable_title": "Denne kladde kan ikke åbnes lige nu", + "unavailable_body": "Den er sikker på serveren i Kladder. Prøv igen, når forbindelsen er tilbage.", + "try_again": "Prøv igen", + "close": "Luk" + } + }, "desktop_sign_in": { "browser_button": "Log ind med din browser", "browser_waiting": "Gør login færdigt i din browser", @@ -6661,6 +6817,53 @@ "revoke": "Træk tilbage", "revoked": "Tilladelsen er trukket tilbage" }, + "desktopOs": { + "section_title": "Skrivebordsapp", + "section_description": "Sådan arbejder appen sammen med din computer.", + "close_to_tray_label": "Fortsæt i systembakken ved lukning", + "close_to_tray_description": "Ny post og påmindelser bliver ved med at komme, når du lukker vinduet.", + "start_at_login_label": "Start, når du logger på computeren", + "start_at_login_description": "Appen starter selv, når du logger på.", + "start_minimized_label": "Start i systembakken", + "start_minimized_description": "Der åbnes intet vindue ved logon. Åbn appen med ikonet i systembakken.", + "attention_label": "Blink i proceslinjen ved ny post", + "attention_mac_label": "Lad Dock-ikonet hoppe ved ny post", + "attention_description": "Kun når appen ikke er forrest.", + "quiet_hours_label": "Stille timer", + "quiet_hours_description": "Ingen notifikationer eller lyde i dette tidsrum. Post kommer stadig.", + "quiet_hours_from": "Fra", + "quiet_hours_to": "til", + "show_shortcut_label": "Vis appen med en tastaturgenvej", + "show_shortcut_description": "{keys} henter appen frem fra enhver anden app.", + "show_shortcut_taken": "En anden app bruger {keys}. Luk den app, eller slå dette fra og til igen.", + "default_app_label": "Standardmailapp", + "default_app_description": "Åbn maillinks og .eml-, .ics- og .vcf-filer med denne app.", + "default_app_is_default": "Denne app åbner dine maillinks.", + "default_app_button": "Vælg standardapp…", + "new_mail": "Ny post", + "no_subject": "(intet emne)", + "action_delete": "Slet", + "copy_as_file": "Kopiér som fil", + "copied": "Filen er kopieret. Du kan indsætte den i en mappe.", + "copy_failed": "Filen kunne ikke kopieres.", + "reply_lost": "Dit skrevne svar kunne ikke gemmes. Åbn beskeden, og svar der." + }, + "desktopReminders": { + "generic_title": "Påmindelse", + "snooze": "Udsæt {count} min.", + "snooze_short": "{count} min.", + "open": "Åbn", + "join": "Deltag", + "missed_title": "{count, plural, one {# overset påmindelse} other {# oversete påmindelser}}", + "missed_more": "og {count} mere", + "missed_show": "Vis", + "missed_dialog_title": "Oversete påmindelser", + "missed_dialog_description": "De forfaldt, mens appen var lukket, computeren sov, eller notifikationer var sat på pause.", + "open_calendar": "Åbn kalender", + "done": "Færdig", + "join_host": "Deltag ({host})", + "join_named": "Deltag: {title}" + }, "desktop_policy": { "server_refused": "Din organisation tillader ikke denne server på denne enhed.", "plugin_refused": "Din organisation tillader ikke dette plugin på denne enhed, så det kører ikke. Dets indstillinger og data bevares.", @@ -6669,5 +6872,30 @@ "plugins_off": "Din organisation har slået plugins fra på denne enhed.", "plugins_allowlist": "Din organisation tillader kun bestemte plugins på denne enhed.", "off": "Fra" + }, + "desktopTelemetry": { + "section_title": "Brugsdata og nedbrudsrapporter", + "section_description": "Begge er slået fra, indtil du slår dem til, og hver har sin egen kontakt.", + "telemetry_label": "Send brugsdata", + "telemetry_description": "Én gang om dagen: et tilfældigt id, appens version, Node-versionen, dit styresystem, hvor længe appen har kørt, og hvordan den forbinder. Med din egen mailserver også hvilke funktioner der er slået til, et omtrentligt antal konti og hvor mange plugins og temaer du har. Aldrig mails, adresser eller servernavne.", + "crash_label": "Send nedbrudsrapporter", + "crash_description": "Fejl i appen sendes med et tilfældigt id, filnavne fra appens egen kode og korte, rensede beskeder. Hvis selve appen går ned, bliver en nedbrudsfil på denne computer og forlader den kun, hvis du sender den.", + "crash_memory": "En nedbrudsfil er en kopi af en del af appens hukommelse, da den gik ned. Bulwark fjerner de brugernavne, adresser og login-tokens, det finder, men en nedbrudsfil kan stadig indeholde teksten fra dine mails.", + "instance_note": "På en Bulwark-server bestemmer dens administrator særskilt, hvad siderne melder til den.", + "forced_off": "Din organisation har slået dette fra.", + "url_label": "Hvor nedbrudsfiler sendes hen", + "url_description": "Den https-adresse, der modtager en nedbrudsfil. Bulwark har ingen med.", + "url_invalid": "Skriv en fuld https-adresse.", + "url_save": "Gem", + "files_label": "Nedbrudsfiler på denne computer", + "files_description": "Bulwark beholder de nyeste og sletter dem, der er ældre end en måned.", + "files_empty": "Ingen nedbrudsfiler.", + "file_size": "{size} KB", + "send": "Send nedbrudsrapport…", + "delete_all": "Slet alle", + "sent": "Nedbrudsrapport sendt.", + "send_no_consent": "Slå først nedbrudsrapporter til.", + "send_no_url": "Der er ikke angivet en adresse, så den kan ikke sendes nogen steder. Skriv en ovenfor.", + "send_failed": "Nedbrudsrapporten kunne ikke sendes." } } diff --git a/locales/de/common.json b/locales/de/common.json index 77cfb82c0..ecd69dcd0 100644 --- a/locales/de/common.json +++ b/locales/de/common.json @@ -5801,6 +5801,35 @@ "store_private": "Private Fenster können keine E-Mails für die Offline-Nutzung behalten.", "server_not_answering": "Der Mailserver antwortet nicht. Versuchen Sie es gleich noch einmal." }, + "offlineWipe": { + "note": "Ihre Organisation hat die Daten dieses Kontos von diesem Gerät entfernt. Melden Sie sich an, um neu zu beginnen.", + "note_unsent": "Ihre Organisation hat die Daten dieses Kontos von diesem Gerät entfernt. Gelöschte ungesendete Nachrichten: {count}.", + "settings_title": "Alles von diesem Gerät entfernen", + "settings_description": "Für den Fall, dass Sie diesen Computer weitergeben oder nicht mehr nutzen. Ihre E-Mails auf dem Server bleiben erhalten.", + "settings_button": "Alles entfernen…", + "settings_wiping": "Wird entfernt…", + "confirm_title": "Alles von diesem Gerät entfernen?", + "confirm_message": "Damit wird gelöscht, was diese App auf diesem Gerät speichert, für alle Konten hier. Ihre E-Mails auf dem Server bleiben unberührt.", + "confirm_mail": "Hier gespeicherte E-Mails, Kalender, Kontakte und Dateien", + "confirm_unsent": "Hier wartende ungesendete Nachrichten: {count}. Sie gehen verloren.", + "confirm_keys": "S/MIME- und OpenPGP-Schlüssel. Um sie wieder zu nutzen, brauchen Sie Ihre eigene Sicherung.", + "confirm_plugins": "Daten, die Plugins hier gespeichert haben", + "confirm_files": "Zum Bearbeiten geöffnete Anhänge und Dateien, die noch angehängt werden sollen", + "confirm_accounts": "Alle Konten werden abgemeldet", + "confirm_button": "Alles entfernen", + "note_unknown": "Ihre Organisation hat die Daten dieses Kontos von diesem Gerät entfernt. Dabei wurden möglicherweise auch ungesendete Nachrichten gelöscht.", + "refused_waiting": "Auf Ihr neues Passwort warten ungesendete Nachrichten: {count}. Sie bleiben bis zum {date}.", + "refused_waiting_unknown": "Möglicherweise warten ungesendete Nachrichten auf Ihr neues Passwort. Sie bleiben bis zum {date}.", + "confirm_unsent_unknown": "Hier warten möglicherweise ungesendete Nachrichten. Sie gehen verloren.", + "confirm_templates": "Auf diesem Gerät gespeicherte E-Mail-Vorlagen", + "session_waiting": "Ungesendete Nachrichten, die auf Ihre nächste Anmeldung warten: {count}. Sie bleiben bis zum {date}.", + "session_waiting_unknown": "Möglicherweise warten ungesendete Nachrichten auf Ihre nächste Anmeldung. Sie bleiben bis zum {date}.", + "needs_sign_in": "Anmeldung nötig", + "switcher_waiting": "Ungesendete Nachrichten: {count}. Werden am {date} von diesem Gerät gelöscht.", + "switcher_kept": "Die E-Mails auf diesem Gerät werden am {date} gelöscht.", + "sibling_waiting": "{name} wurde abgemeldet. Ungesendete Nachrichten: {count}. Melden Sie sich bis zum {date} an, sonst werden sie von diesem Gerät gelöscht.", + "sibling_kept": "{name} wurde abgemeldet. Melden Sie sich bis zum {date} an, sonst werden die E-Mails von diesem Gerät gelöscht." + }, "offlineStorage": { "keep_description": "Behält Ihre E-Mails, Ihren Kalender, Ihre Kontakte und ausgewählte Dateien verschlüsselt auf diesem Gerät. Offline können Sie E-Mails lesen, markieren und verschieben, und was Sie schreiben, wartet im Postausgang. Beim Abmelden wird alles entfernt.", "window_label": "Wie weit zurück behalten", @@ -5882,6 +5911,38 @@ "banner_refused": "Vom Server abgelehnte Entwürfe: {count}", "banner_waiting": "Entwürfe warten auf den Server: {count}" }, + "offlineExport": { + "settings_label": "Gespeicherte E-Mails exportieren", + "settings_description": "Speichern Sie die E-Mails auf diesem Gerät als mbox- oder .eml-Dateien. Das geht auch offline.", + "title": "Gespeicherte E-Mails exportieren", + "description": "Das speichert die Originale, die dieses Gerät aufbewahrt. .eml-Dateien sind exakte Kopien. Eine mbox-Datei ergänzt die Markierungen, die ihr Format braucht, und schreibt den Gelesen- und Markiert-Status in die Kopfzeilen jeder Nachricht, anstelle vorhandener Angaben. E-Mails, die älter als der gewählte Zeitraum sind, fehlen darin. Um alles auf dem Server zu speichern, nutzen Sie „Alle E-Mails exportieren“.", + "folders_label": "Ordner", + "all_folders": "Alle Ordner", + "folder_kept": "{kept} von {total} hier", + "loading": "Daten auf diesem Gerät werden gelesen…", + "load_failed": "Die E-Mails auf diesem Gerät konnten nicht gelesen werden.", + "nothing_kept": "Auf diesem Gerät sind noch keine E-Mails gespeichert.", + "kept": "Originale auf diesem Gerät: {kept} von {total} Nachrichten", + "missing_online": "Vom Server zu laden: {count}", + "missing_offline": "Offline nicht exportierbar: {count}. Sie können es erneut versuchen, sobald Sie online sind.", + "reason_attachments_off": "Originalnachrichten werden nur aufbewahrt, wenn „Anhänge behalten“ eingeschaltet ist.", + "reason_not_kept": "Originalnachrichten werden zuletzt geladen, und nur, solange Platz dafür ist.", + "not_kept_attachments_off": "Kein Original hier, weil Anhänge auf diesem Gerät nicht aufbewahrt werden: {count}", + "not_kept_not_kept": "Noch kein Original auf diesem Gerät: {count}", + "retry": "Online erneut versuchen", + "retry_online": "Sie sind jetzt online, diese Nachrichten können also vom Server kommen.", + "retry_offline": "Sie können es erneut versuchen, sobald Sie online sind.", + "settings_button": "Exportieren…", + "message_failed": "Der Server hat diese Nachricht nicht geliefert.", + "failed_generic": "Der Export wurde wegen eines Fehlers beendet. Versuchen Sie es erneut.", + "stopped_limit": "Der Export wurde bei {limit} beendet, mehr kann dieser Browser nicht halten. Wählen Sie weniger Ordner aus, oder nutzen Sie Chromium, Firefox oder die Desktop-App.", + "over_limit": "Dieser Browser kann höchstens {limit} halten, und diese Auswahl hat etwa {size}. Wählen Sie weniger Ordner aus, oder nutzen Sie Chromium, Firefox oder die Desktop-App.", + "no_room": "Dieser Export braucht etwa {size}, und dieser Browser hat dafür noch {free} frei. Wählen Sie weniger Ordner aus, oder schaffen Sie Platz.", + "stopped_no_room": "Dem Browser ging der Platz für den Export aus. Wählen Sie weniger Ordner aus, oder schaffen Sie Platz.", + "stopped_offline_off": "Der Export wurde beendet, weil dieses Konto keine E-Mails mehr auf diesem Gerät aufbewahrt.", + "policy_unknown": "Die Regeln Ihrer Organisation für dieses Konto sind noch nicht bekannt, daher bleibt der Export vorerst aus.", + "leftover_file": "Die Datei {name} konnte nicht vom Speicherort entfernt werden. Sie ist unvollständig, Sie können sie löschen." + }, "deep_link": { "message_not_found": "Diese Nachricht ist nicht mehr verfügbar.", "thread_not_found": "Diese Unterhaltung ist nicht mehr verfügbar.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Diese Nachricht wurde nach {folder} verschoben.", "window_not_ready": "Das neue Fenster wurde nicht rechtzeitig geöffnet. Ihr Entwurf bleibt hier." }, + "desktopUi": { + "settings": { + "title": "Fenster", + "double_click_label": "Nachrichten per Doppelklick in einem neuen Fenster öffnen", + "double_click_description": "Ein einfacher Klick öffnet die Nachricht weiterhin neben der Liste.", + "restore_label": "Fenster beim Start wieder öffnen", + "restore_description": "Nachrichten- und Entwurfsfenster, die beim Beenden offen waren, werden wieder geöffnet." + }, + "attachment": { + "open": "Öffnen", + "save_as": "Speichern unter…", + "copy": "Kopieren", + "copy_failed": "Die Datei konnte nicht kopiert werden." + }, + "menu": { + "file": "Datei", + "edit": "Bearbeiten", + "view": "Ansicht", + "message": "Nachricht", + "go": "Gehe zu", + "window": "Fenster", + "help": "Hilfe", + "new_window": "Neues Fenster", + "print": "Drucken…", + "save_pdf": "Als PDF sichern…", + "switch_connection": "Verbindung wechseln…", + "close": "Schließen", + "quit": "Beenden", + "undo": "Rückgängig", + "redo": "Wiederholen", + "cut": "Ausschneiden", + "copy": "Kopieren", + "paste": "Einfügen", + "select_all": "Alles auswählen", + "search": "E-Mails durchsuchen", + "refresh": "Neue E-Mails abrufen", + "reading_pane": "Lesebereich", + "pane_right": "Rechts", + "pane_below": "Unter der Liste", + "pane_off": "Aus", + "zoom_in": "Vergrößern", + "zoom_out": "Verkleinern", + "zoom_reset": "Tatsächliche Größe", + "full_screen": "Vollbild", + "open_in_window": "In neuem Fenster öffnen", + "next_message": "Nächste Nachricht", + "previous_message": "Vorherige Nachricht", + "next_unread": "Nächste ungelesene Nachricht", + "mail": "E-Mail", + "files": "Dateien", + "back": "Zurück", + "forward": "Vorwärts", + "minimize": "Minimieren", + "next_window": "Nächstes Fenster", + "shortcuts": "Tastenkürzel", + "docs": "Dokumentation", + "settings": "Einstellungen…", + "about": "Über Bulwark", + "from_plugins": "Mehr von Plugins…", + "pick_gone": "Dieses Menü war veraltet. Öffnen Sie es erneut und versuchen Sie es noch einmal.", + "bar_label": "Menü" + }, + "context": { + "add_to_dictionary": "„{word}“ zum Wörterbuch hinzufügen", + "no_suggestions": "Keine Vorschläge", + "open_link": "Link öffnen", + "copy_link": "Link kopieren", + "copy_address": "Adresse kopieren", + "save_image": "Bild sichern…", + "copy_image": "Bild kopieren" + }, + "closing": { + "unsaved_title": "Ein Entwurf konnte nicht gespeichert werden", + "unsaved_detail": "Wenn Sie jetzt schließen, geht verloren, was Sie seit dem letzten Speichern geschrieben haben.", + "close_anyway": "Trotzdem schließen", + "unsent_title": "Einige E-Mails wurden noch nicht gesendet", + "unsent_one": "Eine Nachricht wartet auf den Versand. Sie wird beim nächsten Start von Bulwark gesendet.", + "unsent_many": "{count} Nachrichten warten auf den Versand. Sie werden beim nächsten Start von Bulwark gesendet.", + "quit": "Beenden", + "leave_title": "Mit ungespeicherten Änderungen verlassen?", + "leave_detail": "Ihre Änderungen auf dieser Seite sind noch nicht gespeichert.", + "leave": "Verlassen", + "stay": "Bleiben" + }, + "spellcheck": { + "offer": "Die Rechtschreibprüfung für {language} benötigt ein Wörterbuch. Bulwark kann es von Google herunterladen. Ihr Text wird nicht gesendet.", + "download": "Herunterladen" + }, + "restore": { + "unavailable_title": "Dieser Entwurf kann gerade nicht geöffnet werden", + "unavailable_body": "Er ist auf dem Server im Ordner „Entwürfe“ gesichert. Versuchen Sie es erneut, sobald die Verbindung wieder besteht.", + "try_again": "Erneut versuchen", + "close": "Schließen" + } + }, "desktop_sign_in": { "browser_button": "Mit dem Browser anmelden", "browser_waiting": "Schließen Sie die Anmeldung im Browser ab", @@ -6661,6 +6817,53 @@ "revoke": "Zurücknehmen", "revoked": "Erlaubnis zurückgenommen" }, + "desktopOs": { + "section_title": "Desktop-App", + "section_description": "Wie die App mit Ihrem Computer zusammenarbeitet.", + "close_to_tray_label": "Beim Schließen im Infobereich weiterlaufen", + "close_to_tray_description": "Neue E-Mails und Erinnerungen kommen auch dann an, wenn Sie das Fenster schließen.", + "start_at_login_label": "Beim Anmelden am Computer starten", + "start_at_login_description": "Die App startet von selbst, wenn Sie sich anmelden.", + "start_minimized_label": "Im Infobereich starten", + "start_minimized_description": "Beim Anmelden öffnet sich kein Fenster. Öffnen Sie die App über das Symbol im Infobereich.", + "attention_label": "Taskleiste bei neuen E-Mails blinken lassen", + "attention_mac_label": "Dock-Symbol bei neuen E-Mails hüpfen lassen", + "attention_description": "Nur wenn die App nicht im Vordergrund ist.", + "quiet_hours_label": "Ruhezeiten", + "quiet_hours_description": "In dieser Zeit keine Benachrichtigungen und Töne. E-Mails kommen trotzdem an.", + "quiet_hours_from": "Von", + "quiet_hours_to": "bis", + "show_shortcut_label": "App mit einer Tastenkombination anzeigen", + "show_shortcut_description": "{keys} holt die App aus jeder anderen App nach vorne.", + "show_shortcut_taken": "Eine andere App verwendet {keys}. Schließen Sie diese App oder schalten Sie das hier aus und wieder ein.", + "default_app_label": "Standard-E-Mail-App", + "default_app_description": "Mail-Links und .eml-, .ics- und .vcf-Dateien mit dieser App öffnen.", + "default_app_is_default": "Diese App öffnet Ihre Mail-Links.", + "default_app_button": "Standard-App auswählen…", + "new_mail": "Neue E-Mail", + "no_subject": "(kein Betreff)", + "action_delete": "Löschen", + "copy_as_file": "Als Datei kopieren", + "copied": "Datei kopiert. Sie können sie in einen Ordner einfügen.", + "copy_failed": "Die Datei konnte nicht kopiert werden.", + "reply_lost": "Ihre eingegebene Antwort konnte nicht übernommen werden. Öffnen Sie die Nachricht und antworten Sie dort." + }, + "desktopReminders": { + "generic_title": "Erinnerung", + "snooze": "{count} Min. schlummern", + "snooze_short": "{count} Min.", + "open": "Öffnen", + "join": "Teilnehmen", + "missed_title": "{count, plural, one {# verpasste Erinnerung} other {# verpasste Erinnerungen}}", + "missed_more": "und {count} weitere", + "missed_show": "Anzeigen", + "missed_dialog_title": "Verpasste Erinnerungen", + "missed_dialog_description": "Diese wurden fällig, während die App geschlossen war, der Computer im Ruhezustand war oder Benachrichtigungen pausiert waren.", + "open_calendar": "Kalender öffnen", + "done": "Fertig", + "join_host": "Teilnehmen ({host})", + "join_named": "Teilnehmen: {title}" + }, "desktop_policy": { "server_refused": "Ihre Organisation erlaubt diesen Server auf diesem Gerät nicht.", "plugin_refused": "Ihre Organisation erlaubt dieses Plugin auf diesem Gerät nicht, daher läuft es nicht. Seine Einstellungen und Daten bleiben erhalten.", @@ -6669,5 +6872,30 @@ "plugins_off": "Ihre Organisation hat Plugins auf diesem Gerät ausgeschaltet.", "plugins_allowlist": "Ihre Organisation erlaubt auf diesem Gerät nur bestimmte Plugins.", "off": "Aus" + }, + "desktopTelemetry": { + "section_title": "Nutzungsdaten und Absturzberichte", + "section_description": "Beides bleibt aus, bis Sie es einschalten, und jedes hat einen eigenen Schalter.", + "telemetry_label": "Nutzungsdaten senden", + "telemetry_description": "Einmal am Tag: eine zufällige ID, die App-Version, die Node-Version, Ihr Betriebssystem, wie lange die App schon läuft und die Art der Verbindung. Bei einem eigenen Mailserver auch, welche Funktionen aktiv sind, eine ungefähre Zahl der Konten und wie viele Plugins und Designs Sie haben. Niemals E-Mails, Adressen oder Servernamen.", + "crash_label": "Absturzberichte senden", + "crash_description": "Fehler in der App werden mit einer zufälligen ID, Dateinamen aus dem eigenen Code der App und kurzen, bereinigten Meldungen gesendet. Stürzt die App selbst ab, bleibt eine Absturzdatei auf diesem Computer und verlässt ihn nur, wenn Sie sie senden.", + "crash_memory": "Eine Absturzdatei ist eine Kopie eines Teils des Arbeitsspeichers der App beim Absturz. Bulwark entfernt Benutzernamen, Adressen und Anmeldetokens, die es findet, aber eine Absturzdatei kann trotzdem den Text Ihrer E-Mails enthalten.", + "instance_note": "Bei einem Bulwark-Server entscheidet dessen Administrator getrennt davon, was seine Seiten an ihn melden.", + "forced_off": "Ihre Organisation hat das ausgeschaltet.", + "url_label": "Ziel der Absturzdateien", + "url_description": "Die https-Adresse, die eine Absturzdatei empfängt. Bulwark bringt keine mit.", + "url_invalid": "Geben Sie eine vollständige https-Adresse ein.", + "url_save": "Speichern", + "files_label": "Absturzdateien auf diesem Computer", + "files_description": "Bulwark behält die neuesten und löscht alles, was älter als einen Monat ist.", + "files_empty": "Keine Absturzdateien.", + "file_size": "{size} KB", + "send": "Absturzbericht senden…", + "delete_all": "Alle löschen", + "sent": "Absturzbericht gesendet.", + "send_no_consent": "Schalten Sie zuerst die Absturzberichte ein.", + "send_no_url": "Es ist keine Adresse eingetragen, daher gibt es kein Ziel. Geben Sie oben eine ein.", + "send_failed": "Der Absturzbericht konnte nicht gesendet werden." } } diff --git a/locales/en/common.json b/locales/en/common.json index c3af620af..c15483bd9 100644 --- a/locales/en/common.json +++ b/locales/en/common.json @@ -5801,6 +5801,35 @@ "store_private": "Private windows can't keep mail for offline use.", "server_not_answering": "The mail server isn't answering. Try again in a moment." }, + "offlineWipe": { + "note": "Your organisation removed this account's data from this device. Sign in to start again.", + "note_unsent": "Your organisation removed this account's data from this device. Unsent messages deleted: {count}.", + "settings_title": "Remove everything from this device", + "settings_description": "For when you give this computer away or stop using it. Your mail on the server stays.", + "settings_button": "Remove everything…", + "settings_wiping": "Removing…", + "confirm_title": "Remove everything from this device?", + "confirm_message": "This deletes what this app keeps on this device, for every account here. Your mail on the server isn't touched.", + "confirm_mail": "Mail, calendars, contacts and files kept here", + "confirm_unsent": "Unsent messages waiting here: {count}. They will be lost.", + "confirm_keys": "S/MIME and OpenPGP keys. You need your own backup to use them again.", + "confirm_plugins": "Data that plugins stored here", + "confirm_files": "Attachments opened for editing and files waiting to be attached", + "confirm_accounts": "All accounts are signed out", + "confirm_button": "Remove everything", + "note_unknown": "Your organisation removed this account's data from this device. Unsent messages may have been deleted too.", + "refused_waiting": "{count, plural, one {# unsent message waits} other {# unsent messages wait}} for your new password, until {date}.", + "refused_waiting_unknown": "Unsent messages may be waiting for your new password, until {date}.", + "confirm_unsent_unknown": "Unsent messages may be waiting here. They will be lost.", + "confirm_templates": "Email templates saved on this device", + "session_waiting": "{count, plural, one {# unsent message waits} other {# unsent messages wait}} for you to sign in again, until {date}.", + "session_waiting_unknown": "Unsent messages may be waiting for you to sign in again, until {date}.", + "needs_sign_in": "Needs sign-in", + "switcher_waiting": "Unsent messages: {count}. Deleted from this device on {date}.", + "switcher_kept": "Its mail on this device is deleted on {date}.", + "sibling_waiting": "{name} was signed out. Unsent messages: {count}. Sign in by {date} or they're deleted from this device.", + "sibling_kept": "{name} was signed out. Sign in by {date} or its mail is deleted from this device." + }, "offlineStorage": { "keep_description": "Keeps your mail, calendar, contacts and chosen files encrypted on this device. Offline you can read, flag and move mail, and what you write waits in the outbox. Signing out removes all of it.", "window_label": "How far back to keep", @@ -5882,6 +5911,38 @@ "banner_refused": "Drafts the server refused: {count}", "banner_waiting": "Drafts waiting for the server: {count}" }, + "offlineExport": { + "settings_label": "Export kept mail", + "settings_description": "Save the mail on this device as mbox or .eml files. This works offline.", + "title": "Export kept mail", + "description": "This saves the originals this device keeps. .eml files are exact copies. An mbox file adds the markings its format needs and writes read and flag state into each message's headers, in place of any it had. Mail older than the period you chose isn't in it. To save everything on the server, use “Export all mail”.", + "folders_label": "Folders", + "all_folders": "All folders", + "folder_kept": "{kept} of {total} here", + "loading": "Reading what's on this device…", + "load_failed": "The mail on this device couldn't be read.", + "nothing_kept": "No mail is kept on this device yet.", + "kept": "Originals on this device: {kept} of {total} messages", + "missing_online": "To download from the server: {count}", + "missing_offline": "Can't be exported while you're offline: {count}. You can try again when you're online.", + "reason_attachments_off": "Original messages are only kept when “Keep attachments” is on.", + "reason_not_kept": "Original messages download last, and only while there's room for them.", + "not_kept_attachments_off": "No original here because attachments aren't kept on this device: {count}", + "not_kept_not_kept": "No original on this device yet: {count}", + "retry": "Try again online", + "retry_online": "You're online now, so these can come from the server.", + "retry_offline": "You can try again when you're online.", + "settings_button": "Export…", + "message_failed": "The server didn't give this message.", + "failed_generic": "The export stopped because of an error. Try again.", + "stopped_limit": "The export stopped at {limit}, the most this browser can hold. Choose fewer folders, or use Chromium, Firefox or the desktop app.", + "over_limit": "This browser can hold at most {limit}, and this choice is about {size}. Choose fewer folders, or use Chromium, Firefox or the desktop app.", + "no_room": "This export needs about {size}, and this browser has {free} left for it. Choose fewer folders or free up space.", + "stopped_no_room": "The browser ran out of room for the export. Choose fewer folders or free up space.", + "stopped_offline_off": "The export stopped because this account no longer keeps mail on this device.", + "policy_unknown": "Your organisation's rules for this account aren't known yet, so exporting stays off for now.", + "leftover_file": "The file {name} couldn't be removed from where you saved it. It's incomplete, so you can delete it." + }, "deep_link": { "message_not_found": "This message is no longer available.", "thread_not_found": "This conversation is no longer available.", @@ -6644,6 +6705,101 @@ "message_moved_to": "This message was moved to {folder}.", "window_not_ready": "The new window did not open in time. Your draft stays here." }, + "desktopUi": { + "settings": { + "title": "Windows", + "double_click_label": "Open messages in a new window on double-click", + "double_click_description": "A single click still opens the message next to the list.", + "restore_label": "Reopen windows at start", + "restore_description": "Message and draft windows that were open when you quit come back." + }, + "attachment": { + "open": "Open", + "save_as": "Save as…", + "copy": "Copy", + "copy_failed": "The file could not be copied." + }, + "menu": { + "file": "File", + "edit": "Edit", + "view": "View", + "message": "Message", + "go": "Go", + "window": "Window", + "help": "Help", + "new_window": "New window", + "print": "Print…", + "save_pdf": "Save as PDF…", + "switch_connection": "Change connection…", + "close": "Close", + "quit": "Quit", + "undo": "Undo", + "redo": "Redo", + "cut": "Cut", + "copy": "Copy", + "paste": "Paste", + "select_all": "Select all", + "search": "Search mail", + "refresh": "Check for new mail", + "reading_pane": "Reading pane", + "pane_right": "On the right", + "pane_below": "Below the list", + "pane_off": "Off", + "zoom_in": "Zoom in", + "zoom_out": "Zoom out", + "zoom_reset": "Actual size", + "full_screen": "Full screen", + "open_in_window": "Open in new window", + "next_message": "Next message", + "previous_message": "Previous message", + "next_unread": "Next unread message", + "mail": "Mail", + "files": "Files", + "back": "Back", + "forward": "Forward", + "minimize": "Minimize", + "next_window": "Next window", + "shortcuts": "Keyboard shortcuts", + "docs": "Documentation", + "settings": "Settings…", + "about": "About Bulwark", + "from_plugins": "More from plugins…", + "pick_gone": "That menu was out of date. Open it again and try once more.", + "bar_label": "Menu" + }, + "context": { + "add_to_dictionary": "Add \"{word}\" to dictionary", + "no_suggestions": "No suggestions", + "open_link": "Open link", + "copy_link": "Copy link", + "copy_address": "Copy address", + "save_image": "Save image…", + "copy_image": "Copy image" + }, + "closing": { + "unsaved_title": "A draft could not be saved", + "unsaved_detail": "If you close now, what you wrote since the last save is lost.", + "close_anyway": "Close anyway", + "unsent_title": "Some mail has not been sent yet", + "unsent_one": "One message is waiting to be sent. It goes out the next time you open Bulwark.", + "unsent_many": "{count} messages are waiting to be sent. They go out the next time you open Bulwark.", + "quit": "Quit", + "leave_title": "Leave with unsaved changes?", + "leave_detail": "What you changed on this page is not saved yet.", + "leave": "Leave", + "stay": "Stay" + }, + "spellcheck": { + "offer": "Spell checking in {language} needs a dictionary. Bulwark can download it from Google. Your text isn't sent.", + "download": "Download" + }, + "restore": { + "unavailable_title": "This draft can't be opened right now", + "unavailable_body": "It's safe on the server, in Drafts. Try again when the connection is back.", + "try_again": "Try again", + "close": "Close" + } + }, "desktop_sign_in": { "browser_button": "Sign in with your browser", "browser_waiting": "Finish signing in in your browser", @@ -6661,6 +6817,53 @@ "revoke": "Take back", "revoked": "Permission taken back" }, + "desktopOs": { + "section_title": "Desktop app", + "section_description": "How the app works with your computer.", + "close_to_tray_label": "Keep running in the tray when closed", + "close_to_tray_description": "New mail and reminders keep coming after you close the window.", + "start_at_login_label": "Start when you sign in to your computer", + "start_at_login_description": "The app starts by itself when you sign in.", + "start_minimized_label": "Start in the tray", + "start_minimized_description": "No window opens at sign-in. Use the tray icon to open it.", + "attention_label": "Flash the taskbar on new mail", + "attention_mac_label": "Bounce the Dock icon on new mail", + "attention_description": "Only when the app is not in front.", + "quiet_hours_label": "Quiet hours", + "quiet_hours_description": "No notifications or sounds at these times. Mail still arrives.", + "quiet_hours_from": "From", + "quiet_hours_to": "to", + "show_shortcut_label": "Show the app with a keyboard shortcut", + "show_shortcut_description": "{keys} brings the app to the front, from any other app.", + "show_shortcut_taken": "Another app is using {keys}. Close that app, or turn this off and on again.", + "default_app_label": "Default mail app", + "default_app_description": "Open mail links and .eml, .ics and .vcf files with this app.", + "default_app_is_default": "This app opens your mail links.", + "default_app_button": "Choose default app…", + "new_mail": "New mail", + "no_subject": "(no subject)", + "action_delete": "Delete", + "copy_as_file": "Copy as file", + "copied": "File copied. You can paste it into a folder.", + "copy_failed": "The file could not be copied.", + "reply_lost": "Your typed reply could not be kept. Open the message and reply there." + }, + "desktopReminders": { + "generic_title": "Reminder", + "snooze": "Snooze {count} min", + "snooze_short": "{count} min", + "open": "Open", + "join": "Join", + "missed_title": "{count, plural, one {# reminder you missed} other {# reminders you missed}}", + "missed_more": "and {count} more", + "missed_show": "Show", + "missed_dialog_title": "Reminders you missed", + "missed_dialog_description": "These came due while the app was closed, the computer was asleep or notifications were paused.", + "open_calendar": "Open calendar", + "done": "Done", + "join_host": "Join ({host})", + "join_named": "Join: {title}" + }, "desktop_policy": { "server_refused": "Your organisation doesn't allow this server on this device.", "plugin_refused": "Your organisation doesn't allow this plugin on this device, so it doesn't run. Its settings and data are kept.", @@ -6669,5 +6872,30 @@ "plugins_off": "Your organisation turned off plugins on this device.", "plugins_allowlist": "Your organisation only allows certain plugins on this device.", "off": "Off" + }, + "desktopTelemetry": { + "section_title": "Usage info and crash reports", + "section_description": "Both are off until you turn them on, and each has its own switch.", + "telemetry_label": "Send usage info", + "telemetry_description": "Once a day: a random ID, the app version, the Node version, your operating system, how long the app has been running and how it connects. With your own mail server, also which features are on, a rough number of accounts and how many plugins and themes you have. Never mail, addresses or server names.", + "crash_label": "Send crash reports", + "crash_description": "Errors in the app go out with a random ID, file names from the app's own code and short, cleaned-up messages. If the app itself crashes, a crash file stays on this computer and only leaves when you send it.", + "crash_memory": "A crash file is a copy of part of the app's memory when it crashed. Bulwark removes user names, addresses and sign-in tokens it can find, but a crash file can still contain the text of your mail.", + "instance_note": "On a Bulwark server, that server's admin decides separately what its pages report to it.", + "forced_off": "Your organisation turned this off.", + "url_label": "Where crash files go", + "url_description": "The https address that receives a crash file. Bulwark doesn't come with one.", + "url_invalid": "Enter a full https address.", + "url_save": "Save", + "files_label": "Crash files on this computer", + "files_description": "Bulwark keeps the newest few and deletes ones older than a month.", + "files_empty": "No crash files.", + "file_size": "{size} KB", + "send": "Send crash report…", + "delete_all": "Delete all", + "sent": "Crash report sent.", + "send_no_consent": "Turn on crash reports first.", + "send_no_url": "No address is set, so there's nowhere to send this. Enter one above.", + "send_failed": "The crash report couldn't be sent." } } diff --git a/locales/es/common.json b/locales/es/common.json index baf034fa8..ea38bd433 100644 --- a/locales/es/common.json +++ b/locales/es/common.json @@ -5801,6 +5801,35 @@ "store_private": "Las ventanas privadas no pueden guardar correo para usarlo sin conexión.", "server_not_answering": "El servidor de correo no responde. Inténtalo de nuevo en un momento." }, + "offlineWipe": { + "note": "Tu organización ha quitado los datos de esta cuenta de este dispositivo. Inicia sesión para empezar de nuevo.", + "note_unsent": "Tu organización ha quitado los datos de esta cuenta de este dispositivo. Mensajes sin enviar eliminados: {count}.", + "settings_title": "Quitar todo de este dispositivo", + "settings_description": "Para cuando regales este ordenador o dejes de usarlo. Tu correo en el servidor se mantiene.", + "settings_button": "Quitar todo…", + "settings_wiping": "Quitando…", + "confirm_title": "¿Quitar todo de este dispositivo?", + "confirm_message": "Esto elimina lo que esta aplicación guarda en este dispositivo, para todas las cuentas de aquí. Tu correo en el servidor no se toca.", + "confirm_mail": "Correo, calendarios, contactos y archivos guardados aquí", + "confirm_unsent": "Mensajes sin enviar en espera aquí: {count}. Se perderán.", + "confirm_keys": "Claves S/MIME y OpenPGP. Necesitarás tu propia copia de seguridad para volver a usarlas.", + "confirm_plugins": "Datos que los plugins guardaron aquí", + "confirm_files": "Adjuntos abiertos para editar y archivos a la espera de adjuntarse", + "confirm_accounts": "Se cierra la sesión de todas las cuentas", + "confirm_button": "Quitar todo", + "note_unknown": "Tu organización ha eliminado los datos de esta cuenta de este dispositivo. Puede que también se hayan eliminado mensajes sin enviar.", + "refused_waiting": "Mensajes sin enviar que esperan tu nueva contraseña: {count}. Se conservan hasta el {date}.", + "refused_waiting_unknown": "Puede que haya mensajes sin enviar esperando tu nueva contraseña. Se conservan hasta el {date}.", + "confirm_unsent_unknown": "Puede que haya mensajes sin enviar esperando aquí. Se perderán.", + "confirm_templates": "Plantillas de correo guardadas en este dispositivo", + "session_waiting": "Mensajes sin enviar que esperan tu próximo inicio de sesión: {count}. Se conservan hasta el {date}.", + "session_waiting_unknown": "Puede que haya mensajes sin enviar esperando tu próximo inicio de sesión. Se conservan hasta el {date}.", + "needs_sign_in": "Requiere iniciar sesión", + "switcher_waiting": "Mensajes sin enviar: {count}. Se eliminarán de este dispositivo el {date}.", + "switcher_kept": "Su correo en este dispositivo se eliminará el {date}.", + "sibling_waiting": "Se ha cerrado la sesión de {name}. Mensajes sin enviar: {count}. Inicia sesión antes del {date} o se eliminarán de este dispositivo.", + "sibling_kept": "Se ha cerrado la sesión de {name}. Inicia sesión antes del {date} o su correo se eliminará de este dispositivo." + }, "offlineStorage": { "keep_description": "Guarda tu correo, tu calendario, tus contactos y los archivos que elijas, cifrados en este dispositivo. Sin conexión puedes leer, marcar y mover correo, y lo que escribas espera en la bandeja de salida. Al cerrar sesión se borra todo.", "window_label": "Cuánto tiempo atrás guardar", @@ -5882,6 +5911,38 @@ "banner_refused": "Borradores rechazados por el servidor: {count}", "banner_waiting": "Borradores esperando al servidor: {count}" }, + "offlineExport": { + "settings_label": "Exportar el correo guardado", + "settings_description": "Guarda el correo de este dispositivo como archivos mbox o .eml. Funciona sin conexión.", + "title": "Exportar el correo guardado", + "description": "Guarda los originales que conserva este dispositivo. Los archivos .eml son copias exactas. Un archivo mbox añade las marcas que requiere su formato y escribe el estado de leído y marcado en los encabezados de cada mensaje, en lugar de los que tuviera. El correo anterior al periodo elegido no está incluido. Para guardar todo lo del servidor, usa «Exportar todo el correo».", + "folders_label": "Carpetas", + "all_folders": "Todas las carpetas", + "folder_kept": "{kept} de {total} aquí", + "loading": "Leyendo lo que hay en este dispositivo…", + "load_failed": "No se pudo leer el correo de este dispositivo.", + "nothing_kept": "Todavía no hay correo guardado en este dispositivo.", + "kept": "Originales en este dispositivo: {kept} de {total} mensajes", + "missing_online": "Por descargar del servidor: {count}", + "missing_offline": "No se pueden exportar sin conexión: {count}. Puedes volver a intentarlo cuando tengas conexión.", + "reason_attachments_off": "Los mensajes originales solo se guardan si «Guardar adjuntos» está activado.", + "reason_not_kept": "Los mensajes originales se descargan al final, y solo si queda espacio.", + "not_kept_attachments_off": "Sin original aquí porque este dispositivo no guarda adjuntos: {count}", + "not_kept_not_kept": "Todavía sin original en este dispositivo: {count}", + "retry": "Reintentar con conexión", + "retry_online": "Ya tienes conexión, así que estos pueden venir del servidor.", + "retry_offline": "Puedes volver a intentarlo cuando tengas conexión.", + "settings_button": "Exportar…", + "message_failed": "El servidor no entregó este mensaje.", + "failed_generic": "La exportación se detuvo por un error. Inténtalo de nuevo.", + "stopped_limit": "La exportación se detuvo en {limit}, lo máximo que puede contener este navegador. Elige menos carpetas o usa Chromium, Firefox o la aplicación de escritorio.", + "over_limit": "Este navegador puede contener como máximo {limit}, y esta selección ocupa unos {size}. Elige menos carpetas o usa Chromium, Firefox o la aplicación de escritorio.", + "no_room": "Esta exportación necesita unos {size}, y este navegador tiene {free} disponibles. Elige menos carpetas o libera espacio.", + "stopped_no_room": "El navegador se quedó sin espacio para la exportación. Elige menos carpetas o libera espacio.", + "stopped_offline_off": "La exportación se detuvo porque esta cuenta ya no guarda correo en este dispositivo.", + "policy_unknown": "Aún no se conocen las reglas de tu organización para esta cuenta, así que la exportación sigue desactivada por ahora.", + "leftover_file": "No se pudo quitar el archivo {name} de donde lo guardaste. Está incompleto, puedes borrarlo." + }, "deep_link": { "message_not_found": "Este mensaje ya no está disponible.", "thread_not_found": "Esta conversación ya no está disponible.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Este mensaje se movió a {folder}.", "window_not_ready": "La ventana nueva no se abrió a tiempo. Tu borrador se queda aquí." }, + "desktopUi": { + "settings": { + "title": "Ventanas", + "double_click_label": "Abrir mensajes en una ventana nueva con doble clic", + "double_click_description": "Un solo clic sigue abriendo el mensaje junto a la lista.", + "restore_label": "Volver a abrir las ventanas al iniciar", + "restore_description": "Las ventanas de mensajes y borradores abiertas al salir vuelven a aparecer." + }, + "attachment": { + "open": "Abrir", + "save_as": "Guardar como…", + "copy": "Copiar", + "copy_failed": "No se pudo copiar el archivo." + }, + "menu": { + "file": "Archivo", + "edit": "Edición", + "view": "Visualización", + "message": "Mensaje", + "go": "Ir", + "window": "Ventana", + "help": "Ayuda", + "new_window": "Nueva ventana", + "print": "Imprimir…", + "save_pdf": "Guardar como PDF…", + "switch_connection": "Cambiar de conexión…", + "close": "Cerrar", + "quit": "Salir", + "undo": "Deshacer", + "redo": "Rehacer", + "cut": "Cortar", + "copy": "Copiar", + "paste": "Pegar", + "select_all": "Seleccionar todo", + "search": "Buscar en el correo", + "refresh": "Comprobar correo nuevo", + "reading_pane": "Panel de lectura", + "pane_right": "A la derecha", + "pane_below": "Debajo de la lista", + "pane_off": "Desactivado", + "zoom_in": "Acercar", + "zoom_out": "Alejar", + "zoom_reset": "Tamaño real", + "full_screen": "Pantalla completa", + "open_in_window": "Abrir en una ventana nueva", + "next_message": "Mensaje siguiente", + "previous_message": "Mensaje anterior", + "next_unread": "Siguiente mensaje no leído", + "mail": "Correo", + "files": "Archivos", + "back": "Atrás", + "forward": "Adelante", + "minimize": "Minimizar", + "next_window": "Ventana siguiente", + "shortcuts": "Métodos abreviados de teclado", + "docs": "Documentación", + "settings": "Configuración…", + "about": "Acerca de Bulwark", + "from_plugins": "Más de los complementos…", + "pick_gone": "Ese menú estaba desactualizado. Ábralo de nuevo e inténtelo otra vez.", + "bar_label": "Menú" + }, + "context": { + "add_to_dictionary": "Añadir «{word}» al diccionario", + "no_suggestions": "Sin sugerencias", + "open_link": "Abrir enlace", + "copy_link": "Copiar enlace", + "copy_address": "Copiar dirección", + "save_image": "Guardar imagen…", + "copy_image": "Copiar imagen" + }, + "closing": { + "unsaved_title": "No se pudo guardar un borrador", + "unsaved_detail": "Si cierra ahora, se perderá lo que escribió desde el último guardado.", + "close_anyway": "Cerrar de todos modos", + "unsent_title": "Hay correo sin enviar", + "unsent_one": "Hay un mensaje esperando para enviarse. Saldrá la próxima vez que abra Bulwark.", + "unsent_many": "Hay {count} mensajes esperando para enviarse. Saldrán la próxima vez que abra Bulwark.", + "quit": "Salir", + "leave_title": "¿Salir con cambios sin guardar?", + "leave_detail": "Los cambios que hizo en esta página aún no se han guardado.", + "leave": "Salir", + "stay": "Quedarse" + }, + "spellcheck": { + "offer": "La revisión ortográfica en {language} necesita un diccionario. Bulwark puede descargarlo de Google. Su texto no se envía.", + "download": "Descargar" + }, + "restore": { + "unavailable_title": "Este borrador no se puede abrir ahora", + "unavailable_body": "Está a salvo en el servidor, en Borradores. Inténtelo de nuevo cuando vuelva la conexión.", + "try_again": "Reintentar", + "close": "Cerrar" + } + }, "desktop_sign_in": { "browser_button": "Iniciar sesión con el navegador", "browser_waiting": "Termina de iniciar sesión en el navegador", @@ -6661,6 +6817,53 @@ "revoke": "Retirar", "revoked": "Permiso retirado" }, + "desktopOs": { + "section_title": "Aplicación de escritorio", + "section_description": "Cómo funciona la aplicación con tu ordenador.", + "close_to_tray_label": "Seguir en la bandeja al cerrar", + "close_to_tray_description": "El correo nuevo y los recordatorios siguen llegando después de cerrar la ventana.", + "start_at_login_label": "Iniciar al entrar en el ordenador", + "start_at_login_description": "La aplicación se inicia sola cuando entras.", + "start_minimized_label": "Iniciar en la bandeja", + "start_minimized_description": "No se abre ninguna ventana al entrar. Ábrela con el icono de la bandeja.", + "attention_label": "Hacer parpadear la barra de tareas con correo nuevo", + "attention_mac_label": "Hacer rebotar el icono del Dock con correo nuevo", + "attention_description": "Solo cuando la aplicación no está delante.", + "quiet_hours_label": "Horas de silencio", + "quiet_hours_description": "Sin notificaciones ni sonidos en estas horas. El correo sigue llegando.", + "quiet_hours_from": "De", + "quiet_hours_to": "a", + "show_shortcut_label": "Mostrar la aplicación con un atajo de teclado", + "show_shortcut_description": "{keys} trae la aplicación al frente desde cualquier otra.", + "show_shortcut_taken": "Otra aplicación está usando {keys}. Ciérrala, o desactiva y vuelve a activar esta opción.", + "default_app_label": "Aplicación de correo predeterminada", + "default_app_description": "Abrir los enlaces de correo y los archivos .eml, .ics y .vcf con esta aplicación.", + "default_app_is_default": "Esta aplicación abre tus enlaces de correo.", + "default_app_button": "Elegir aplicación predeterminada…", + "new_mail": "Correo nuevo", + "no_subject": "(sin asunto)", + "action_delete": "Eliminar", + "copy_as_file": "Copiar como archivo", + "copied": "Archivo copiado. Puedes pegarlo en una carpeta.", + "copy_failed": "No se pudo copiar el archivo.", + "reply_lost": "No se pudo conservar la respuesta que escribiste. Abre el mensaje y responde desde allí." + }, + "desktopReminders": { + "generic_title": "Recordatorio", + "snooze": "Posponer {count} min", + "snooze_short": "{count} min", + "open": "Abrir", + "join": "Unirse", + "missed_title": "{count, plural, one {# recordatorio perdido} other {# recordatorios perdidos}}", + "missed_more": "y {count} más", + "missed_show": "Mostrar", + "missed_dialog_title": "Recordatorios perdidos", + "missed_dialog_description": "Vencieron mientras la aplicación estaba cerrada, el ordenador en reposo o las notificaciones en pausa.", + "open_calendar": "Abrir calendario", + "done": "Listo", + "join_host": "Unirse ({host})", + "join_named": "Unirse: {title}" + }, "desktop_policy": { "server_refused": "Tu organización no permite este servidor en este dispositivo.", "plugin_refused": "Tu organización no permite este complemento en este dispositivo, por lo que no se ejecuta. Se conservan sus ajustes y datos.", @@ -6669,5 +6872,30 @@ "plugins_off": "Tu organización ha desactivado los complementos en este dispositivo.", "plugins_allowlist": "Tu organización solo permite determinados complementos en este dispositivo.", "off": "Desactivado" + }, + "desktopTelemetry": { + "section_title": "Datos de uso e informes de fallos", + "section_description": "Ambos están desactivados hasta que los actives, y cada uno tiene su propio interruptor.", + "telemetry_label": "Enviar datos de uso", + "telemetry_description": "Una vez al día: un ID aleatorio, la versión de la aplicación, la versión de Node, tu sistema operativo, cuánto tiempo lleva abierta la aplicación y cómo se conecta. Con tu propio servidor de correo, también qué funciones están activas, un número aproximado de cuentas y cuántos plugins y temas tienes. Nunca correos, direcciones ni nombres de servidor.", + "crash_label": "Enviar informes de fallos", + "crash_description": "Los errores de la aplicación se envían con un ID aleatorio, nombres de archivo del propio código de la aplicación y mensajes breves y limpios. Si la propia aplicación falla, un archivo de fallo queda en este ordenador y solo sale de él si lo envías.", + "crash_memory": "Un archivo de fallo es una copia de parte de la memoria de la aplicación en el momento del fallo. Bulwark elimina los nombres de usuario, las direcciones y los tokens de inicio de sesión que encuentra, pero un archivo de fallo aún puede contener el texto de tus correos.", + "instance_note": "En un servidor Bulwark, su administrador decide por separado qué le comunican sus páginas.", + "forced_off": "Tu organización ha desactivado esto.", + "url_label": "Destino de los archivos de fallo", + "url_description": "La dirección https que recibe un archivo de fallo. Bulwark no incluye ninguna.", + "url_invalid": "Escribe una dirección https completa.", + "url_save": "Guardar", + "files_label": "Archivos de fallo en este ordenador", + "files_description": "Bulwark conserva los más recientes y elimina los de más de un mes.", + "files_empty": "No hay archivos de fallo.", + "file_size": "{size} KB", + "send": "Enviar informe de fallo…", + "delete_all": "Eliminar todo", + "sent": "Informe de fallo enviado.", + "send_no_consent": "Activa primero los informes de fallos.", + "send_no_url": "No hay ninguna dirección, así que no hay adónde enviarlo. Escribe una arriba.", + "send_failed": "No se ha podido enviar el informe de fallo." } } diff --git a/locales/et/common.json b/locales/et/common.json index eccf6c36e..0594ba259 100644 --- a/locales/et/common.json +++ b/locales/et/common.json @@ -5801,6 +5801,35 @@ "store_private": "Privaatsed aknad ei saa kirju võrguühenduseta kasutamiseks hoida.", "server_not_answering": "Meiliserver ei vasta. Proovige kohe uuesti." }, + "offlineWipe": { + "note": "Teie organisatsioon eemaldas selle konto andmed sellest seadmest. Alustamiseks logige uuesti sisse.", + "note_unsent": "Teie organisatsioon eemaldas selle konto andmed sellest seadmest. Kustutatud saatmata kirju: {count}.", + "settings_title": "Eemalda sellest seadmest kõik", + "settings_description": "Juhuks, kui annate selle arvuti ära või lõpetate selle kasutamise. Teie kirjad serveris jäävad alles.", + "settings_button": "Eemalda kõik…", + "settings_wiping": "Eemaldamine…", + "confirm_title": "Kas eemaldada sellest seadmest kõik?", + "confirm_message": "See kustutab kõik, mida see rakendus selles seadmes hoiab, kõigi siinsete kontode jaoks. Teie kirju serveris see ei puuduta.", + "confirm_mail": "Siin hoitavad kirjad, kalendrid, kontaktid ja failid", + "confirm_unsent": "Siin ootavaid saatmata kirju: {count}. Need lähevad kaotsi.", + "confirm_keys": "S/MIME- ja OpenPGP-võtmed. Nende uuesti kasutamiseks on vaja teie enda varukoopiat.", + "confirm_plugins": "Pistikprogrammide siia salvestatud andmed", + "confirm_files": "Muutmiseks avatud manused ja lisamist ootavad failid", + "confirm_accounts": "Kõik kontod logitakse välja", + "confirm_button": "Eemalda kõik", + "note_unknown": "Teie organisatsioon eemaldas selle konto andmed sellest seadmest. Võimalik, et kustutati ka saatmata sõnumid.", + "refused_waiting": "Saatmata sõnumid ootavad teie uut parooli: {count}. Need jäävad alles kuni {date}.", + "refused_waiting_unknown": "Saatmata sõnumid võivad oodata teie uut parooli. Need jäävad alles kuni {date}.", + "confirm_unsent_unknown": "Siin võivad oodata saatmata sõnumid. Need lähevad kaduma.", + "confirm_templates": "Selles seadmes salvestatud e-kirjade mallid", + "session_waiting": "Saatmata sõnumid ootavad järgmist sisselogimist: {count}. Need jäävad alles kuni {date}.", + "session_waiting_unknown": "Saatmata sõnumid võivad oodata järgmist sisselogimist. Need jäävad alles kuni {date}.", + "needs_sign_in": "Vajab sisselogimist", + "switcher_waiting": "Saatmata sõnumid: {count}. Kustutatakse sellest seadmest {date}.", + "switcher_kept": "Selle seadme e-kirjad kustutatakse {date}.", + "sibling_waiting": "{name} logiti välja. Saatmata sõnumid: {count}. Logige sisse hiljemalt {date}, muidu kustutatakse need sellest seadmest.", + "sibling_kept": "{name} logiti välja. Logige sisse hiljemalt {date}, muidu kustutatakse e-kirjad sellest seadmest." + }, "offlineStorage": { "keep_description": "Hoiab sinu kirju, kalendrit, kontakte ja valitud faile krüptitult selles seadmes. Võrguta saad kirju lugeda, märgistada ja teisaldada ning see, mida kirjutad, ootab väljuvate kirjade kastis. Välja logides eemaldatakse kõik.", "window_label": "Kui kaugele minevikku hoida", @@ -5882,6 +5911,38 @@ "banner_refused": "Serveri tagasi lükatud mustandid: {count}", "banner_waiting": "Serverit ootavad mustandid: {count}" }, + "offlineExport": { + "settings_label": "Hoitud kirjade eksport", + "settings_description": "Salvestage selle seadme kirjad mbox- või .eml-failidena. See töötab ka võrguühenduseta.", + "title": "Hoitud kirjade eksport", + "description": "Salvestab originaalid, mida see seade hoiab. .eml-failid on täpsed koopiad. mbox-fail lisab vormingu nõutud märgid ja kirjutab loetud ja märgistatud oleku iga kirja päistesse senise asemele. Valitud ajavahemikust vanemaid kirju selles pole. Kõige salvestamiseks serverist kasutage valikut „Ekspordi kõik kirjad”.", + "folders_label": "Kaustad", + "all_folders": "Kõik kaustad", + "folder_kept": "Siin: {kept} / {total}", + "loading": "Selle seadme andmete lugemine…", + "load_failed": "Selle seadme kirju ei õnnestunud lugeda.", + "nothing_kept": "Selles seadmes pole veel ühtegi kirja hoitud.", + "kept": "Originaalid selles seadmes: {kept} / {total} kirja", + "missing_online": "Serverist alla laadida: {count}", + "missing_offline": "Võrguühenduseta ei saa eksportida: {count}. Proovige uuesti, kui olete võrgus.", + "reason_attachments_off": "Originaalkirju hoitakse ainult siis, kui „Hoia manuseid” on sees.", + "reason_not_kept": "Originaalkirjad laaditakse alla viimasena ja ainult siis, kui ruumi on.", + "not_kept_attachments_off": "Originaali pole, sest see seade ei hoia manuseid: {count}", + "not_kept_not_kept": "Selles seadmes pole veel originaali: {count}", + "retry": "Proovi uuesti võrgus", + "retry_online": "Olete nüüd võrgus, nii et need võivad tulla serverist.", + "retry_offline": "Proovige uuesti, kui olete võrgus.", + "settings_button": "Ekspordi…", + "message_failed": "Server ei andnud seda kirja.", + "failed_generic": "Eksport peatus vea tõttu. Proovige uuesti.", + "stopped_limit": "Eksport peatus piiril {limit}, rohkem see brauser ei mahuta. Valige vähem kaustu või kasutage Chromiumi, Firefoxi või töölauarakendust.", + "over_limit": "See brauser mahutab kuni {limit}, see valik on umbes {size}. Valige vähem kaustu või kasutage Chromiumi, Firefoxi või töölauarakendust.", + "no_room": "See eksport vajab umbes {size}, brauseril on selleks {free}. Valige vähem kaustu või vabastage ruumi.", + "stopped_no_room": "Brauseril sai ekspordi jaoks ruum otsa. Valige vähem kaustu või vabastage ruumi.", + "stopped_offline_off": "Eksport peatus, sest see konto ei hoia enam selles seadmes kirju.", + "policy_unknown": "Teie organisatsiooni reeglid selle konto kohta pole veel teada, seega on eksport praegu väljas.", + "leftover_file": "Faili {name} ei saanud salvestuskohast eemaldada. See on poolik, võite selle kustutada." + }, "deep_link": { "message_not_found": "See sõnum ei ole enam saadaval.", "thread_not_found": "See vestlus ei ole enam saadaval.", @@ -6644,6 +6705,101 @@ "message_moved_to": "See kiri teisaldati kausta {folder}.", "window_not_ready": "Uus aken ei avanenud õigeks ajaks. Mustand jääb siia." }, + "desktopUi": { + "settings": { + "title": "Aknad", + "double_click_label": "Ava kirjad topeltklõpsuga uues aknas", + "double_click_description": "Üks klõps avab kirja endiselt loendi kõrval.", + "restore_label": "Ava aknad käivitamisel uuesti", + "restore_description": "Kirja- ja mustandiaknad, mis olid väljumisel avatud, tulevad tagasi." + }, + "attachment": { + "open": "Ava", + "save_as": "Salvesta nimega…", + "copy": "Kopeeri", + "copy_failed": "Faili ei saanud kopeerida." + }, + "menu": { + "file": "Fail", + "edit": "Redigeerimine", + "view": "Vaade", + "message": "Kiri", + "go": "Mine", + "window": "Aken", + "help": "Spikker", + "new_window": "Uus aken", + "print": "Prindi…", + "save_pdf": "Salvesta PDF-ina…", + "switch_connection": "Vaheta ühendust…", + "close": "Sulge", + "quit": "Välju", + "undo": "Võta tagasi", + "redo": "Tee uuesti", + "cut": "Lõika", + "copy": "Kopeeri", + "paste": "Kleebi", + "select_all": "Vali kõik", + "search": "Otsi kirjadest", + "refresh": "Kontrolli uusi kirju", + "reading_pane": "Lugemisvaade", + "pane_right": "Paremal", + "pane_below": "Loendi all", + "pane_off": "Väljas", + "zoom_in": "Suurenda", + "zoom_out": "Vähenda", + "zoom_reset": "Tegelik suurus", + "full_screen": "Täisekraan", + "open_in_window": "Ava uues aknas", + "next_message": "Järgmine kiri", + "previous_message": "Eelmine kiri", + "next_unread": "Järgmine lugemata kiri", + "mail": "Post", + "files": "Failid", + "back": "Tagasi", + "forward": "Edasi", + "minimize": "Minimeeri", + "next_window": "Järgmine aken", + "shortcuts": "Klaviatuuri otseteed", + "docs": "Dokumentatsioon", + "settings": "Seaded…", + "about": "Teave Bulwarki kohta", + "from_plugins": "Veel pistikprogrammidelt…", + "pick_gone": "See menüü oli aegunud. Avage see uuesti ja proovige veel kord.", + "bar_label": "Menüü" + }, + "context": { + "add_to_dictionary": "Lisa „{word}” sõnastikku", + "no_suggestions": "Soovitusi pole", + "open_link": "Ava link", + "copy_link": "Kopeeri link", + "copy_address": "Kopeeri aadress", + "save_image": "Salvesta pilt…", + "copy_image": "Kopeeri pilt" + }, + "closing": { + "unsaved_title": "Mustandit ei õnnestunud salvestada", + "unsaved_detail": "Kui sulgete nüüd, läheb kaduma see, mille olete pärast viimast salvestamist kirjutanud.", + "close_anyway": "Sulge siiski", + "unsent_title": "Mõni kiri on veel saatmata", + "unsent_one": "Üks kiri ootab saatmist. See läheb teele järgmine kord, kui Bulwarki avate.", + "unsent_many": "{count} kirja ootab saatmist. Need lähevad teele järgmine kord, kui Bulwarki avate.", + "quit": "Välju", + "leave_title": "Lahkuda salvestamata muudatustega?", + "leave_detail": "Selle lehe muudatused pole veel salvestatud.", + "leave": "Lahku", + "stay": "Jää" + }, + "spellcheck": { + "offer": "Õigekirjakontroll keelele {language} vajab sõnastikku. Bulwark saab selle Google’ilt alla laadida. Teie teksti ei saadeta.", + "download": "Laadi alla" + }, + "restore": { + "unavailable_title": "Seda mustandit ei saa praegu avada", + "unavailable_body": "See on serveris kaustas Mustandid turvaliselt alles. Proovige uuesti, kui ühendus on tagasi.", + "try_again": "Proovi uuesti", + "close": "Sulge" + } + }, "desktop_sign_in": { "browser_button": "Logi sisse brauseriga", "browser_waiting": "Lõpeta sisselogimine brauseris", @@ -6661,6 +6817,53 @@ "revoke": "Võta tagasi", "revoked": "Luba võeti tagasi" }, + "desktopOs": { + "section_title": "Töölauarakendus", + "section_description": "Kuidas rakendus sinu arvutiga koos töötab.", + "close_to_tray_label": "Sulgemisel jätka salves", + "close_to_tray_description": "Uus kiri ja meeldetuletused saabuvad ka pärast akna sulgemist.", + "start_at_login_label": "Käivita arvutisse sisselogimisel", + "start_at_login_description": "Rakendus käivitub sisselogimisel ise.", + "start_minimized_label": "Käivita salves", + "start_minimized_description": "Sisselogimisel akent ei avata. Ava rakendus salve ikoonist.", + "attention_label": "Vilguta tegumiriba uue kirja korral", + "attention_mac_label": "Põrgata Docki ikooni uue kirja korral", + "attention_description": "Ainult siis, kui rakendus pole esiplaanil.", + "quiet_hours_label": "Vaikne aeg", + "quiet_hours_description": "Sel ajal teavitusi ega helisid pole. Kirjad saabuvad ikka.", + "quiet_hours_from": "Alates", + "quiet_hours_to": "kuni", + "show_shortcut_label": "Näita rakendust kiirklahviga", + "show_shortcut_description": "{keys} toob rakenduse esiplaanile igast teisest rakendusest.", + "show_shortcut_taken": "{keys} on teise rakenduse kasutuses. Sulge see rakendus või lülita see valik välja ja uuesti sisse.", + "default_app_label": "Vaikimisi e-posti rakendus", + "default_app_description": "Ava e-posti lingid ning .eml-, .ics- ja .vcf-failid selle rakendusega.", + "default_app_is_default": "See rakendus avab sinu e-posti lingid.", + "default_app_button": "Vali vaikerakendus…", + "new_mail": "Uus kiri", + "no_subject": "(teema puudub)", + "action_delete": "Kustuta", + "copy_as_file": "Kopeeri failina", + "copied": "Fail on kopeeritud. Saad selle kausta kleepida.", + "copy_failed": "Faili ei saanud kopeerida.", + "reply_lost": "Kirjutatud vastust ei saanud säilitada. Ava kiri ja vasta seal." + }, + "desktopReminders": { + "generic_title": "Meeldetuletus", + "snooze": "Lükka {count} min edasi", + "snooze_short": "{count} min", + "open": "Ava", + "join": "Liitu", + "missed_title": "{count, plural, one {# kasutamata meeldetuletus} other {# kasutamata meeldetuletust}}", + "missed_more": "ja veel {count}", + "missed_show": "Näita", + "missed_dialog_title": "Kasutamata meeldetuletused", + "missed_dialog_description": "Need saabusid, kui rakendus oli suletud, arvuti puhkas või teavitused olid peatatud.", + "open_calendar": "Ava kalender", + "done": "Valmis", + "join_host": "Liitu ({host})", + "join_named": "Liitu: {title}" + }, "desktop_policy": { "server_refused": "Sinu organisatsioon ei luba seda serverit selles seadmes.", "plugin_refused": "Sinu organisatsioon ei luba seda pistikprogrammi selles seadmes, seega see ei tööta. Selle seaded ja andmed säilivad.", @@ -6669,5 +6872,30 @@ "plugins_off": "Sinu organisatsioon on selles seadmes pistikprogrammid välja lülitanud.", "plugins_allowlist": "Sinu organisatsioon lubab selles seadmes ainult teatud pistikprogramme.", "off": "Väljas" + }, + "desktopTelemetry": { + "section_title": "Kasutusandmed ja kokkujooksmise aruanded", + "section_description": "Mõlemad on välja lülitatud, kuni need sisse lülitate, ja kummalgi on oma lüliti.", + "telemetry_label": "Saada kasutusandmed", + "telemetry_description": "Kord päevas: juhuslik ID, rakenduse versioon, Node'i versioon, teie operatsioonisüsteem, kui kaua rakendus on töötanud ja kuidas see ühendub. Oma meiliserveri puhul ka see, millised funktsioonid on sees, kontode ligikaudne arv ning pistikprogrammide ja kujunduste arv. Mitte kunagi kirju, aadresse ega serverinimesid.", + "crash_label": "Saada kokkujooksmise aruanded", + "crash_description": "Rakenduse vead saadetakse koos juhusliku ID, rakenduse enda koodi failinimede ja lühikeste puhastatud teadetega. Kui rakendus ise kokku jookseb, jääb kokkujooksmise fail sellesse arvutisse ja lahkub sealt ainult siis, kui selle saadate.", + "crash_memory": "Kokkujooksmise fail on koopia osast rakenduse mälust kokkujooksmise hetkel. Bulwark eemaldab leitud kasutajanimed, aadressid ja sisselogimislubad, kuid kokkujooksmise fail võib siiski sisaldada teie kirjade teksti.", + "instance_note": "Bulwarki serveris otsustab selle administraator eraldi, mida lehed talle teatavad.", + "forced_off": "Teie organisatsioon on selle välja lülitanud.", + "url_label": "Kuhu kokkujooksmise failid lähevad", + "url_description": "Https-aadress, mis võtab kokkujooksmise faili vastu. Bulwarkil pole oma aadressi.", + "url_invalid": "Sisestage täielik https-aadress.", + "url_save": "Salvesta", + "files_label": "Kokkujooksmise failid selles arvutis", + "files_description": "Bulwark hoiab alles uusimad ja kustutab kuust vanemad.", + "files_empty": "Kokkujooksmise faile pole.", + "file_size": "{size} KB", + "send": "Saada kokkujooksmise aruanne…", + "delete_all": "Kustuta kõik", + "sent": "Kokkujooksmise aruanne saadetud.", + "send_no_consent": "Lülitage esmalt kokkujooksmise aruanded sisse.", + "send_no_url": "Aadressi pole määratud, seega pole seda kuhugi saata. Sisestage see ülal.", + "send_failed": "Kokkujooksmise aruannet ei õnnestunud saata." } } diff --git a/locales/fa/common.json b/locales/fa/common.json index 9d05bbbe4..fb3ac33f1 100644 --- a/locales/fa/common.json +++ b/locales/fa/common.json @@ -5801,6 +5801,35 @@ "store_private": "پنجرههای خصوصی نمیتوانند ایمیل را برای استفادهٔ آفلاین نگه دارند.", "server_not_answering": "سرور ایمیل پاسخ نمیدهد. کمی بعد دوباره امتحان کنید." }, + "offlineWipe": { + "note": "سازمان شما دادههای این حساب را از این دستگاه حذف کرد. برای شروع دوباره وارد شوید.", + "note_unsent": "سازمان شما دادههای این حساب را از این دستگاه حذف کرد. پیامهای ارسالنشدهٔ حذفشده: {count}.", + "settings_title": "حذف همه چیز از این دستگاه", + "settings_description": "برای زمانی که این رایانه را به کسی میدهید یا دیگر از آن استفاده نمیکنید. نامههای شما روی سرور میماند.", + "settings_button": "حذف همه چیز…", + "settings_wiping": "در حال حذف…", + "confirm_title": "همه چیز از این دستگاه حذف شود؟", + "confirm_message": "این کار آنچه این برنامه روی این دستگاه نگه میدارد را برای همهٔ حسابهای اینجا حذف میکند. به نامههای شما روی سرور دست زده نمیشود.", + "confirm_mail": "نامهها، تقویمها، مخاطبان و فایلهای نگهداریشده در اینجا", + "confirm_unsent": "پیامهای ارسالنشدهٔ در انتظار در اینجا: {count}. از بین خواهند رفت.", + "confirm_keys": "کلیدهای S/MIME و OpenPGP. برای استفادهٔ دوباره به نسخهٔ پشتیبان خودتان نیاز دارید.", + "confirm_plugins": "دادههایی که افزونهها اینجا ذخیره کردهاند", + "confirm_files": "پیوستهای بازشده برای ویرایش و فایلهای در انتظار پیوست", + "confirm_accounts": "از همهٔ حسابها خارج میشوید", + "confirm_button": "حذف همه چیز", + "note_unknown": "سازمان شما دادههای این حساب را از این دستگاه حذف کرد. شاید پیامهای ارسالنشده هم حذف شده باشند.", + "refused_waiting": "پیامهای ارسالنشده در انتظار گذرواژه جدید شما: {count}. تا {date} نگه داشته میشوند.", + "refused_waiting_unknown": "شاید پیامهای ارسالنشده در انتظار گذرواژه جدید شما باشند. تا {date} نگه داشته میشوند.", + "confirm_unsent_unknown": "شاید پیامهای ارسالنشده اینجا منتظر باشند. از بین خواهند رفت.", + "confirm_templates": "الگوهای ایمیل ذخیرهشده در این دستگاه", + "session_waiting": "پیامهای ارسالنشده در انتظار ورود بعدی شما: {count}. تا {date} نگه داشته میشوند.", + "session_waiting_unknown": "شاید پیامهای ارسالنشده در انتظار ورود بعدی شما باشند. تا {date} نگه داشته میشوند.", + "needs_sign_in": "نیاز به ورود دارد", + "switcher_waiting": "پیامهای ارسالنشده: {count}. در {date} از این دستگاه حذف میشوند.", + "switcher_kept": "ایمیلهای این دستگاه در {date} حذف میشوند.", + "sibling_waiting": "{name} از حساب خارج شد. پیامهای ارسالنشده: {count}. تا {date} وارد شوید، وگرنه از این دستگاه حذف میشوند.", + "sibling_kept": "{name} از حساب خارج شد. تا {date} وارد شوید، وگرنه ایمیلها از این دستگاه حذف میشوند." + }, "offlineStorage": { "keep_description": "ایمیلها، تقویم، مخاطبان و فایلهایی را که انتخاب میکنید بهصورت رمزگذاریشده در این دستگاه نگه میدارد. در حالت آفلاین میتوانید ایمیلها را بخوانید، پرچم بزنید و جابهجا کنید، و آنچه مینویسید در صندوق خروجی منتظر میماند. با خروج از حساب همه پاک میشود.", "window_label": "تا چه مدت قبل نگه داشته شود", @@ -5882,6 +5911,38 @@ "banner_refused": "پیشنویسهای ردشده توسط سرور: {count}", "banner_waiting": "پیشنویسهای در انتظار سرور: {count}" }, + "offlineExport": { + "settings_label": "برونبری نامههای نگهداشتهشده", + "settings_description": "نامههای این دستگاه را بهصورت فایل mbox یا .eml ذخیره کنید. بدون اتصال هم کار میکند.", + "title": "برونبری نامههای نگهداشتهشده", + "description": "نسخههای اصلی که این دستگاه نگه داشته است را ذخیره میکند. فایلهای .eml کپی دقیق هستند. فایل mbox نشانههایی را که قالبش لازم دارد اضافه میکند و وضعیت خواندهشده و پرچمدار را به جای مقادیر قبلی در سرآیندهای هر پیام مینویسد. نامههای قدیمیتر از بازهای که انتخاب کردهاید در آن نیستند. برای ذخیرهٔ همهچیز از سرور، از «برونبری همه نامهها» استفاده کنید.", + "folders_label": "پوشهها", + "all_folders": "همهٔ پوشهها", + "folder_kept": "اینجا: {kept} از {total}", + "loading": "در حال خواندن دادههای این دستگاه…", + "load_failed": "نامههای این دستگاه خوانده نشد.", + "nothing_kept": "هنوز نامهای روی این دستگاه نگه داشته نشده است.", + "kept": "نسخههای اصلی روی این دستگاه: {kept} از {total} پیام", + "missing_online": "برای دانلود از سرور: {count}", + "missing_offline": "بدون اتصال برونبری نمیشود: {count}. وقتی آنلاین شدید دوباره امتحان کنید.", + "reason_attachments_off": "پیامهای اصلی فقط وقتی نگه داشته میشوند که «نگه داشتن پیوستها» روشن باشد.", + "reason_not_kept": "پیامهای اصلی آخر از همه و فقط تا وقتی جا باشد دانلود میشوند.", + "not_kept_attachments_off": "نسخهٔ اصلی نیست چون این دستگاه پیوستها را نگه نمیدارد: {count}", + "not_kept_not_kept": "هنوز نسخهٔ اصلی روی این دستگاه نیست: {count}", + "retry": "تلاش دوباره بهصورت آنلاین", + "retry_online": "اکنون آنلاین هستید، پس میتوانند از سرور بیایند.", + "retry_offline": "وقتی آنلاین شدید دوباره امتحان کنید.", + "settings_button": "برونبری…", + "message_failed": "سرور این پیام را تحویل نداد.", + "failed_generic": "برونبری به دلیل خطا متوقف شد. دوباره امتحان کنید.", + "stopped_limit": "برونبری در {limit} متوقف شد، بیشترین مقداری که این مرورگر میتواند نگه دارد. پوشههای کمتری انتخاب کنید یا از Chromium، Firefox یا برنامهٔ رومیزی استفاده کنید.", + "over_limit": "این مرورگر حداکثر {limit} را نگه میدارد و این انتخاب حدود {size} است. پوشههای کمتری انتخاب کنید یا از Chromium، Firefox یا برنامهٔ رومیزی استفاده کنید.", + "no_room": "این برونبری حدود {size} نیاز دارد و این مرورگر {free} جا دارد. پوشههای کمتری انتخاب کنید یا فضا آزاد کنید.", + "stopped_no_room": "جای مرورگر برای برونبری تمام شد. پوشههای کمتری انتخاب کنید یا فضا آزاد کنید.", + "stopped_offline_off": "برونبری متوقف شد چون این حساب دیگر نامهای روی این دستگاه نگه نمیدارد.", + "policy_unknown": "قوانین سازمان شما برای این حساب هنوز مشخص نیست، پس برونبری فعلاً خاموش میماند.", + "leftover_file": "فایل {name} از جایی که ذخیره کردهاید حذف نشد. ناقص است و میتوانید پاکش کنید." + }, "deep_link": { "message_not_found": "این پیام دیگر در دسترس نیست.", "thread_not_found": "این گفتگو دیگر در دسترس نیست.", @@ -6644,6 +6705,101 @@ "message_moved_to": "این پیام به {folder} منتقل شد.", "window_not_ready": "پنجرهٔ جدید بهموقع باز نشد. پیشنویس شما همینجا میماند." }, + "desktopUi": { + "settings": { + "title": "پنجرهها", + "double_click_label": "باز کردن پیامها در پنجرهٔ جدید با دوبار کلیک", + "double_click_description": "یک کلیک همچنان پیام را کنار فهرست باز میکند.", + "restore_label": "باز کردن دوبارهٔ پنجرهها هنگام شروع", + "restore_description": "پنجرههای پیام و پیشنویس که هنگام خروج باز بودند برمیگردند." + }, + "attachment": { + "open": "باز کردن", + "save_as": "ذخیره با نام…", + "copy": "کپی", + "copy_failed": "فایل کپی نشد." + }, + "menu": { + "file": "پرونده", + "edit": "ویرایش", + "view": "نما", + "message": "پیام", + "go": "برو به", + "window": "پنجره", + "help": "راهنما", + "new_window": "پنجره جدید", + "print": "چاپ…", + "save_pdf": "ذخیره بهصورت PDF…", + "switch_connection": "تغییر اتصال…", + "close": "بستن", + "quit": "خروج", + "undo": "واگرد", + "redo": "ازنو", + "cut": "برش", + "copy": "رونوشت", + "paste": "چسباندن", + "select_all": "انتخاب همه", + "search": "جستجو در نامهها", + "refresh": "بررسی نامههای جدید", + "reading_pane": "قاب خواندن", + "pane_right": "سمت راست", + "pane_below": "زیر فهرست", + "pane_off": "خاموش", + "zoom_in": "بزرگنمایی", + "zoom_out": "کوچکنمایی", + "zoom_reset": "اندازه واقعی", + "full_screen": "تمامصفحه", + "open_in_window": "باز کردن در پنجره جدید", + "next_message": "پیام بعدی", + "previous_message": "پیام قبلی", + "next_unread": "پیام خواندهنشده بعدی", + "mail": "نامه", + "files": "پروندهها", + "back": "بازگشت", + "forward": "جلو", + "minimize": "کوچک کردن", + "next_window": "پنجره بعدی", + "shortcuts": "میانبرهای صفحهکلید", + "docs": "مستندات", + "settings": "تنظیمات…", + "about": "درباره Bulwark", + "from_plugins": "موارد بیشتر از افزونهها…", + "pick_gone": "این منو قدیمی شده بود. دوباره آن را باز کنید و یک بار دیگر امتحان کنید.", + "bar_label": "منو" + }, + "context": { + "add_to_dictionary": "افزودن «{word}» به واژهنامه", + "no_suggestions": "پیشنهادی نیست", + "open_link": "باز کردن پیوند", + "copy_link": "رونوشت پیوند", + "copy_address": "رونوشت نشانی", + "save_image": "ذخیره تصویر…", + "copy_image": "رونوشت تصویر" + }, + "closing": { + "unsaved_title": "یک پیشنویس ذخیره نشد", + "unsaved_detail": "اگر اکنون ببندید، آنچه از آخرین ذخیره نوشتهاید از بین میرود.", + "close_anyway": "با این حال بسته شود", + "unsent_title": "برخی نامهها هنوز ارسال نشدهاند", + "unsent_one": "یک پیام در انتظار ارسال است. دفعه بعد که Bulwark را باز کنید ارسال میشود.", + "unsent_many": "{count} پیام در انتظار ارسال هستند. دفعه بعد که Bulwark را باز کنید ارسال میشوند.", + "quit": "خروج", + "leave_title": "با تغییرات ذخیرهنشده خارج میشوید؟", + "leave_detail": "تغییراتی که در این صفحه دادهاید هنوز ذخیره نشده است.", + "leave": "خروج", + "stay": "ماندن" + }, + "spellcheck": { + "offer": "بررسی املای {language} به واژهنامه نیاز دارد. Bulwark میتواند آن را از Google دانلود کند. متن شما ارسال نمیشود.", + "download": "دانلود" + }, + "restore": { + "unavailable_title": "اکنون نمیتوان این پیشنویس را باز کرد", + "unavailable_body": "این پیشنویس در پوشه پیشنویسها روی سرور سالم است. وقتی اتصال برگشت دوباره امتحان کنید.", + "try_again": "تلاش دوباره", + "close": "بستن" + } + }, "desktop_sign_in": { "browser_button": "ورود با مرورگر", "browser_waiting": "ورود را در مرورگر کامل کنید", @@ -6661,6 +6817,53 @@ "revoke": "پس گرفتن", "revoked": "اجازه پس گرفته شد" }, + "desktopOs": { + "section_title": "برنامه دسکتاپ", + "section_description": "نحوه کار برنامه با رایانه شما.", + "close_to_tray_label": "هنگام بستن در سینی سیستم اجرا بماند", + "close_to_tray_description": "نامههای جدید و یادآوریها پس از بستن پنجره هم میرسند.", + "start_at_login_label": "هنگام ورود به رایانه شروع شود", + "start_at_login_description": "برنامه هنگام ورود خودش شروع میشود.", + "start_minimized_label": "شروع در سینی سیستم", + "start_minimized_description": "هنگام ورود پنجرهای باز نمیشود. با نماد سینی سیستم آن را باز کنید.", + "attention_label": "چشمک نوار وظیفه هنگام نامه جدید", + "attention_mac_label": "جهش نماد Dock هنگام نامه جدید", + "attention_description": "فقط وقتی برنامه در جلو نیست.", + "quiet_hours_label": "ساعات سکوت", + "quiet_hours_description": "در این ساعات اعلان و صدایی نیست. نامهها همچنان میرسند.", + "quiet_hours_from": "از", + "quiet_hours_to": "تا", + "show_shortcut_label": "نمایش برنامه با میانبر صفحهکلید", + "show_shortcut_description": "{keys} برنامه را از هر برنامه دیگری به جلو میآورد.", + "show_shortcut_taken": "برنامه دیگری از {keys} استفاده میکند. آن را ببندید، یا این گزینه را خاموش و دوباره روشن کنید.", + "default_app_label": "برنامه پیشفرض ایمیل", + "default_app_description": "باز کردن پیوندهای ایمیل و پروندههای .eml، .ics و .vcf با این برنامه.", + "default_app_is_default": "این برنامه پیوندهای ایمیل شما را باز میکند.", + "default_app_button": "انتخاب برنامه پیشفرض…", + "new_mail": "نامه جدید", + "no_subject": "(بدون موضوع)", + "action_delete": "حذف", + "copy_as_file": "رونوشت بهصورت پرونده", + "copied": "پرونده رونوشت شد. میتوانید آن را در یک پوشه بچسبانید.", + "copy_failed": "رونوشت پرونده ممکن نشد.", + "reply_lost": "پاسخی که نوشتید نگه داشته نشد. پیام را باز کنید و از آنجا پاسخ دهید." + }, + "desktopReminders": { + "generic_title": "یادآوری", + "snooze": "تعویق {count} دقیقه", + "snooze_short": "{count} دقیقه", + "open": "باز کردن", + "join": "پیوستن", + "missed_title": "{count, plural, one {# یادآوری از دسترفته} other {# یادآوری از دسترفته}}", + "missed_more": "و {count} مورد دیگر", + "missed_show": "نمایش", + "missed_dialog_title": "یادآوریهای از دسترفته", + "missed_dialog_description": "این یادآوریها زمانی رسیدند که برنامه بسته بود، رایانه در خواب بود یا اعلانها متوقف بودند.", + "open_calendar": "باز کردن تقویم", + "done": "تمام", + "join_host": "پیوستن ({host})", + "join_named": "پیوستن: {title}" + }, "desktop_policy": { "server_refused": "سازمان شما این سرور را در این دستگاه مجاز نمیداند.", "plugin_refused": "سازمان شما این افزونه را در این دستگاه مجاز نمیداند، بنابراین اجرا نمیشود. تنظیمات و دادههای آن حفظ میشوند.", @@ -6669,5 +6872,30 @@ "plugins_off": "سازمان شما افزونهها را در این دستگاه خاموش کرده است.", "plugins_allowlist": "سازمان شما در این دستگاه فقط برخی افزونهها را مجاز میداند.", "off": "خاموش" + }, + "desktopTelemetry": { + "section_title": "اطلاعات استفاده و گزارشهای خرابی", + "section_description": "هر دو خاموش هستند تا زمانی که روشنشان کنید و هرکدام کلید خودش را دارد.", + "telemetry_label": "ارسال اطلاعات استفاده", + "telemetry_description": "روزی یک بار: یک شناسهٔ تصادفی، نسخهٔ برنامه، نسخهٔ Node، سیستمعامل شما، مدت اجرای برنامه و نحوهٔ اتصال آن. با سرور ایمیل شخصی، همچنین قابلیتهای روشن، تعداد تقریبی حسابها و تعداد افزونهها و پوستهها. هرگز ایمیل، نشانی یا نام سرور ارسال نمیشود.", + "crash_label": "ارسال گزارشهای خرابی", + "crash_description": "خطاهای برنامه همراه با یک شناسهٔ تصادفی، نام فایلهای کد خود برنامه و پیامهای کوتاه پاکسازیشده ارسال میشوند. اگر خود برنامه از کار بیفتد، یک فایل خرابی روی این رایانه میماند و فقط وقتی شما ارسالش کنید خارج میشود.", + "crash_memory": "فایل خرابی کپی بخشی از حافظهٔ برنامه در لحظهٔ خرابی است. Bulwark نامهای کاربری، نشانیها و توکنهای ورودی را که پیدا کند حذف میکند، اما فایل خرابی همچنان ممکن است متن ایمیلهای شما را داشته باشد.", + "instance_note": "در سرور Bulwark، مدیر آن سرور جداگانه تصمیم میگیرد صفحهها چه چیزی به آن گزارش دهند.", + "forced_off": "سازمان شما این را خاموش کرده است.", + "url_label": "مقصد فایلهای خرابی", + "url_description": "نشانی https که فایل خرابی را دریافت میکند. Bulwark نشانی پیشفرضی ندارد.", + "url_invalid": "یک نشانی https کامل وارد کنید.", + "url_save": "ذخیره", + "files_label": "فایلهای خرابی روی این رایانه", + "files_description": "Bulwark جدیدترینها را نگه میدارد و قدیمیتر از یک ماه را حذف میکند.", + "files_empty": "فایل خرابی وجود ندارد.", + "file_size": "{size} کیلوبایت", + "send": "ارسال گزارش خرابی…", + "delete_all": "حذف همه", + "sent": "گزارش خرابی ارسال شد.", + "send_no_consent": "ابتدا گزارشهای خرابی را روشن کنید.", + "send_no_url": "نشانیای تنظیم نشده، پس جایی برای ارسال نیست. در بالا یکی وارد کنید.", + "send_failed": "گزارش خرابی ارسال نشد." } } diff --git a/locales/fr/common.json b/locales/fr/common.json index 488e868ee..d503568de 100644 --- a/locales/fr/common.json +++ b/locales/fr/common.json @@ -5801,6 +5801,35 @@ "store_private": "Les fenêtres privées ne peuvent pas conserver le courrier pour une utilisation hors ligne.", "server_not_answering": "Le serveur de messagerie ne répond pas. Réessayez dans un instant." }, + "offlineWipe": { + "note": "Votre organisation a supprimé les données de ce compte de cet appareil. Connectez-vous pour recommencer.", + "note_unsent": "Votre organisation a supprimé les données de ce compte de cet appareil. Messages non envoyés supprimés : {count}.", + "settings_title": "Tout supprimer de cet appareil", + "settings_description": "Si vous donnez cet ordinateur ou cessez de l'utiliser. Vos messages sur le serveur restent en place.", + "settings_button": "Tout supprimer…", + "settings_wiping": "Suppression…", + "confirm_title": "Tout supprimer de cet appareil ?", + "confirm_message": "Cela supprime ce que cette application garde sur cet appareil, pour tous les comptes présents. Vos messages sur le serveur ne sont pas touchés.", + "confirm_mail": "Messages, agendas, contacts et fichiers gardés ici", + "confirm_unsent": "Messages non envoyés en attente ici : {count}. Ils seront perdus.", + "confirm_keys": "Clés S/MIME et OpenPGP. Il vous faudra votre propre sauvegarde pour les réutiliser.", + "confirm_plugins": "Données enregistrées ici par les plugins", + "confirm_files": "Pièces jointes ouvertes pour modification et fichiers en attente d'être joints", + "confirm_accounts": "Tous les comptes sont déconnectés", + "confirm_button": "Tout supprimer", + "note_unknown": "Votre organisation a supprimé les données de ce compte sur cet appareil. Des messages non envoyés ont peut-être aussi été supprimés.", + "refused_waiting": "Messages non envoyés qui attendent votre nouveau mot de passe : {count}. Ils restent jusqu'au {date}.", + "refused_waiting_unknown": "Des messages non envoyés attendent peut-être votre nouveau mot de passe. Ils restent jusqu'au {date}.", + "confirm_unsent_unknown": "Des messages non envoyés attendent peut-être ici. Ils seront perdus.", + "confirm_templates": "Modèles d'e-mail enregistrés sur cet appareil", + "session_waiting": "Messages non envoyés qui attendent votre prochaine connexion : {count}. Ils restent jusqu'au {date}.", + "session_waiting_unknown": "Des messages non envoyés attendent peut-être votre prochaine connexion. Ils restent jusqu'au {date}.", + "needs_sign_in": "Connexion requise", + "switcher_waiting": "Messages non envoyés : {count}. Supprimés de cet appareil le {date}.", + "switcher_kept": "Ses e-mails sur cet appareil seront supprimés le {date}.", + "sibling_waiting": "{name} a été déconnecté. Messages non envoyés : {count}. Connectez-vous avant le {date}, sinon ils seront supprimés de cet appareil.", + "sibling_kept": "{name} a été déconnecté. Connectez-vous avant le {date}, sinon ses e-mails seront supprimés de cet appareil." + }, "offlineStorage": { "keep_description": "Garde vos e-mails, votre agenda, vos contacts et les fichiers que vous choisissez, chiffrés sur cet appareil. Hors ligne, vous pouvez lire, signaler et déplacer des e-mails, et ce que vous écrivez attend dans la boîte d'envoi. La déconnexion supprime tout.", "window_label": "Durée de conservation", @@ -5882,6 +5911,38 @@ "banner_refused": "Brouillons refusés par le serveur : {count}", "banner_waiting": "Brouillons en attente du serveur : {count}" }, + "offlineExport": { + "settings_label": "Exporter le courrier conservé", + "settings_description": "Enregistrez le courrier de cet appareil en fichiers mbox ou .eml. Cela fonctionne hors ligne.", + "title": "Exporter le courrier conservé", + "description": "Enregistre les originaux que cet appareil conserve. Les fichiers .eml sont des copies exactes. Un fichier mbox ajoute les marques que son format exige et écrit l'état lu et suivi dans les en-têtes de chaque message, à la place de ceux qu'il avait. Le courrier plus ancien que la période choisie n'y figure pas. Pour tout enregistrer depuis le serveur, utilisez « Exporter tous les e-mails ».", + "folders_label": "Dossiers", + "all_folders": "Tous les dossiers", + "folder_kept": "{kept} sur {total} ici", + "loading": "Lecture des données de cet appareil…", + "load_failed": "Le courrier de cet appareil n'a pas pu être lu.", + "nothing_kept": "Aucun courrier n'est encore conservé sur cet appareil.", + "kept": "Originaux sur cet appareil : {kept} messages sur {total}", + "missing_online": "À télécharger depuis le serveur : {count}", + "missing_offline": "Exportation impossible hors ligne : {count}. Vous pourrez réessayer une fois en ligne.", + "reason_attachments_off": "Les messages originaux ne sont conservés que si « Garder les pièces jointes » est activé.", + "reason_not_kept": "Les messages originaux sont téléchargés en dernier, et seulement s'il reste de la place.", + "not_kept_attachments_off": "Pas d'original ici car les pièces jointes ne sont pas conservées sur cet appareil : {count}", + "not_kept_not_kept": "Pas encore d'original sur cet appareil : {count}", + "retry": "Réessayer en ligne", + "retry_online": "Vous êtes en ligne : ces messages peuvent venir du serveur.", + "retry_offline": "Vous pourrez réessayer une fois en ligne.", + "settings_button": "Exporter…", + "message_failed": "Le serveur n'a pas fourni ce message.", + "failed_generic": "L'exportation s'est arrêtée à cause d'une erreur. Réessayez.", + "stopped_limit": "L'exportation s'est arrêtée à {limit}, le maximum que ce navigateur peut contenir. Choisissez moins de dossiers, ou utilisez Chromium, Firefox ou l'application de bureau.", + "over_limit": "Ce navigateur peut contenir au plus {limit}, et ce choix fait environ {size}. Choisissez moins de dossiers, ou utilisez Chromium, Firefox ou l'application de bureau.", + "no_room": "Cette exportation demande environ {size}, et ce navigateur dispose de {free}. Choisissez moins de dossiers ou libérez de l'espace.", + "stopped_no_room": "Le navigateur n'a plus de place pour l'exportation. Choisissez moins de dossiers ou libérez de l'espace.", + "stopped_offline_off": "L'exportation s'est arrêtée car ce compte ne conserve plus de courrier sur cet appareil.", + "policy_unknown": "Les règles de votre organisation pour ce compte ne sont pas encore connues, l'exportation reste donc désactivée pour l'instant.", + "leftover_file": "Le fichier {name} n'a pas pu être retiré de l'endroit où vous l'avez enregistré. Il est incomplet, vous pouvez le supprimer." + }, "deep_link": { "message_not_found": "Ce message n'est plus disponible.", "thread_not_found": "Cette conversation n'est plus disponible.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Ce message a été déplacé vers {folder}.", "window_not_ready": "La nouvelle fenêtre ne s’est pas ouverte à temps. Votre brouillon reste ici." }, + "desktopUi": { + "settings": { + "title": "Fenêtres", + "double_click_label": "Ouvrir les messages dans une nouvelle fenêtre par double-clic", + "double_click_description": "Un simple clic ouvre toujours le message à côté de la liste.", + "restore_label": "Rouvrir les fenêtres au démarrage", + "restore_description": "Les fenêtres de messages et de brouillons ouvertes à la fermeture reviennent." + }, + "attachment": { + "open": "Ouvrir", + "save_as": "Enregistrer sous…", + "copy": "Copier", + "copy_failed": "Impossible de copier le fichier." + }, + "menu": { + "file": "Fichier", + "edit": "Édition", + "view": "Présentation", + "message": "Message", + "go": "Aller", + "window": "Fenêtre", + "help": "Aide", + "new_window": "Nouvelle fenêtre", + "print": "Imprimer…", + "save_pdf": "Enregistrer au format PDF…", + "switch_connection": "Changer de connexion…", + "close": "Fermer", + "quit": "Quitter", + "undo": "Annuler", + "redo": "Rétablir", + "cut": "Couper", + "copy": "Copier", + "paste": "Coller", + "select_all": "Tout sélectionner", + "search": "Rechercher dans les messages", + "refresh": "Relever le courrier", + "reading_pane": "Volet de lecture", + "pane_right": "À droite", + "pane_below": "Sous la liste", + "pane_off": "Désactivé", + "zoom_in": "Zoom avant", + "zoom_out": "Zoom arrière", + "zoom_reset": "Taille réelle", + "full_screen": "Plein écran", + "open_in_window": "Ouvrir dans une nouvelle fenêtre", + "next_message": "Message suivant", + "previous_message": "Message précédent", + "next_unread": "Prochain message non lu", + "mail": "Courrier", + "files": "Fichiers", + "back": "Précédent", + "forward": "Suivant", + "minimize": "Réduire", + "next_window": "Fenêtre suivante", + "shortcuts": "Raccourcis clavier", + "docs": "Documentation", + "settings": "Paramètres…", + "about": "À propos de Bulwark", + "from_plugins": "Plus d’options des modules…", + "pick_gone": "Ce menu n’était plus à jour. Rouvrez-le et réessayez.", + "bar_label": "Menu" + }, + "context": { + "add_to_dictionary": "Ajouter « {word} » au dictionnaire", + "no_suggestions": "Aucune suggestion", + "open_link": "Ouvrir le lien", + "copy_link": "Copier le lien", + "copy_address": "Copier l’adresse", + "save_image": "Enregistrer l’image…", + "copy_image": "Copier l’image" + }, + "closing": { + "unsaved_title": "Un brouillon n’a pas pu être enregistré", + "unsaved_detail": "Si vous fermez maintenant, ce que vous avez écrit depuis le dernier enregistrement sera perdu.", + "close_anyway": "Fermer quand même", + "unsent_title": "Des messages n’ont pas encore été envoyés", + "unsent_one": "Un message attend d’être envoyé. Il partira à la prochaine ouverture de Bulwark.", + "unsent_many": "{count} messages attendent d’être envoyés. Ils partiront à la prochaine ouverture de Bulwark.", + "quit": "Quitter", + "leave_title": "Quitter sans enregistrer les modifications ?", + "leave_detail": "Vos modifications sur cette page ne sont pas encore enregistrées.", + "leave": "Quitter la page", + "stay": "Rester" + }, + "spellcheck": { + "offer": "La correction orthographique en {language} nécessite un dictionnaire. Bulwark peut le télécharger depuis Google. Votre texte n’est pas envoyé.", + "download": "Télécharger" + }, + "restore": { + "unavailable_title": "Ce brouillon ne peut pas être ouvert pour le moment", + "unavailable_body": "Il est en sécurité sur le serveur, dans Brouillons. Réessayez quand la connexion sera rétablie.", + "try_again": "Réessayer", + "close": "Fermer" + } + }, "desktop_sign_in": { "browser_button": "Se connecter avec le navigateur", "browser_waiting": "Terminez la connexion dans votre navigateur", @@ -6661,6 +6817,53 @@ "revoke": "Retirer", "revoked": "Autorisation retirée" }, + "desktopOs": { + "section_title": "Application de bureau", + "section_description": "Comment l'application fonctionne avec votre ordinateur.", + "close_to_tray_label": "Rester dans la zone de notification à la fermeture", + "close_to_tray_description": "Le courrier et les rappels continuent d'arriver après la fermeture de la fenêtre.", + "start_at_login_label": "Démarrer à l'ouverture de session", + "start_at_login_description": "L'application démarre seule quand vous ouvrez votre session.", + "start_minimized_label": "Démarrer dans la zone de notification", + "start_minimized_description": "Aucune fenêtre ne s'ouvre à l'ouverture de session. Ouvrez-la avec l'icône de la zone de notification.", + "attention_label": "Faire clignoter la barre des tâches à l'arrivée de courrier", + "attention_mac_label": "Faire rebondir l'icône du Dock à l'arrivée de courrier", + "attention_description": "Seulement quand l'application n'est pas au premier plan.", + "quiet_hours_label": "Heures calmes", + "quiet_hours_description": "Ni notifications ni sons pendant ces heures. Le courrier continue d'arriver.", + "quiet_hours_from": "De", + "quiet_hours_to": "à", + "show_shortcut_label": "Afficher l'application avec un raccourci clavier", + "show_shortcut_description": "{keys} amène l'application au premier plan depuis n'importe quelle autre.", + "show_shortcut_taken": "Une autre application utilise {keys}. Fermez-la, ou désactivez puis réactivez cette option.", + "default_app_label": "Application de messagerie par défaut", + "default_app_description": "Ouvrir les liens de messagerie et les fichiers .eml, .ics et .vcf avec cette application.", + "default_app_is_default": "Cette application ouvre vos liens de messagerie.", + "default_app_button": "Choisir l'application par défaut…", + "new_mail": "Nouveau courrier", + "no_subject": "(sans objet)", + "action_delete": "Supprimer", + "copy_as_file": "Copier en tant que fichier", + "copied": "Fichier copié. Vous pouvez le coller dans un dossier.", + "copy_failed": "Le fichier n'a pas pu être copié.", + "reply_lost": "Votre réponse saisie n'a pas pu être conservée. Ouvrez le message et répondez depuis celui-ci." + }, + "desktopReminders": { + "generic_title": "Rappel", + "snooze": "Reporter de {count} min", + "snooze_short": "{count} min", + "open": "Ouvrir", + "join": "Rejoindre", + "missed_title": "{count, plural, one {# rappel manqué} other {# rappels manqués}}", + "missed_more": "et {count} de plus", + "missed_show": "Afficher", + "missed_dialog_title": "Rappels manqués", + "missed_dialog_description": "Ils sont arrivés à échéance alors que l'application était fermée, l'ordinateur en veille ou les notifications en pause.", + "open_calendar": "Ouvrir le calendrier", + "done": "Terminé", + "join_host": "Rejoindre ({host})", + "join_named": "Rejoindre: {title}" + }, "desktop_policy": { "server_refused": "Votre organisation n'autorise pas ce serveur sur cet appareil.", "plugin_refused": "Votre organisation n'autorise pas ce plugin sur cet appareil, il ne s'exécute donc pas. Ses réglages et ses données sont conservés.", @@ -6669,5 +6872,30 @@ "plugins_off": "Votre organisation a désactivé les plugins sur cet appareil.", "plugins_allowlist": "Votre organisation n'autorise que certains plugins sur cet appareil.", "off": "Désactivé" + }, + "desktopTelemetry": { + "section_title": "Données d'utilisation et rapports de plantage", + "section_description": "Les deux restent désactivés tant que vous ne les activez pas, et chacun a son propre interrupteur.", + "telemetry_label": "Envoyer les données d'utilisation", + "telemetry_description": "Une fois par jour : un identifiant aléatoire, la version de l'application, la version de Node, votre système d'exploitation, depuis combien de temps l'application tourne et son mode de connexion. Avec votre propre serveur de messagerie, aussi les fonctions activées, un nombre approximatif de comptes et le nombre de plugins et de thèmes. Jamais de messages, d'adresses ni de noms de serveur.", + "crash_label": "Envoyer les rapports de plantage", + "crash_description": "Les erreurs de l'application partent avec un identifiant aléatoire, les noms de fichiers du code de l'application et de courts messages nettoyés. Si l'application elle-même plante, un fichier de plantage reste sur cet ordinateur et n'en sort que si vous l'envoyez.", + "crash_memory": "Un fichier de plantage est une copie d'une partie de la mémoire de l'application au moment du plantage. Bulwark retire les noms d'utilisateur, les adresses et les jetons de connexion qu'il trouve, mais un fichier de plantage peut quand même contenir le texte de vos messages.", + "instance_note": "Sur un serveur Bulwark, son administrateur décide séparément de ce que ses pages lui signalent.", + "forced_off": "Votre organisation a désactivé cette option.", + "url_label": "Destination des fichiers de plantage", + "url_description": "L'adresse https qui reçoit un fichier de plantage. Bulwark n'en fournit aucune.", + "url_invalid": "Saisissez une adresse https complète.", + "url_save": "Enregistrer", + "files_label": "Fichiers de plantage sur cet ordinateur", + "files_description": "Bulwark garde les plus récents et supprime ceux de plus d'un mois.", + "files_empty": "Aucun fichier de plantage.", + "file_size": "{size} Ko", + "send": "Envoyer le rapport de plantage…", + "delete_all": "Tout supprimer", + "sent": "Rapport de plantage envoyé.", + "send_no_consent": "Activez d'abord les rapports de plantage.", + "send_no_url": "Aucune adresse n'est définie, il n'y a donc nulle part où envoyer ce rapport. Saisissez-en une ci-dessus.", + "send_failed": "Le rapport de plantage n'a pas pu être envoyé." } } diff --git a/locales/he/common.json b/locales/he/common.json index a973c9603..120c65da1 100644 --- a/locales/he/common.json +++ b/locales/he/common.json @@ -5802,6 +5802,35 @@ "store_private": "חלונות פרטיים לא יכולים לשמור דואר לשימוש לא מקוון.", "server_not_answering": "שרת הדואר לא עונה. אפשר לנסות שוב בעוד רגע." }, + "offlineWipe": { + "note": "הארגון שלך הסיר את נתוני החשבון הזה מהמכשיר הזה. יש להיכנס כדי להתחיל מחדש.", + "note_unsent": "הארגון שלך הסיר את נתוני החשבון הזה מהמכשיר הזה. הודעות שלא נשלחו ונמחקו: {count}.", + "settings_title": "הסרת הכול מהמכשיר הזה", + "settings_description": "למקרה שמעבירים את המחשב הזה למישהו אחר או מפסיקים להשתמש בו. הדואר שלך בשרת נשאר.", + "settings_button": "הסרת הכול…", + "settings_wiping": "מתבצעת הסרה…", + "confirm_title": "להסיר הכול מהמכשיר הזה?", + "confirm_message": "פעולה זו מוחקת את מה שהיישום הזה שומר במכשיר הזה, לכל החשבונות כאן. הדואר שלך בשרת לא ייפגע.", + "confirm_mail": "דואר, יומנים, אנשי קשר וקבצים השמורים כאן", + "confirm_unsent": "הודעות שלא נשלחו וממתינות כאן: {count}. הן יאבדו.", + "confirm_keys": "מפתחות S/MIME ו-OpenPGP. כדי להשתמש בהם שוב צריך גיבוי משלך.", + "confirm_plugins": "נתונים שתוספים שמרו כאן", + "confirm_files": "קבצים מצורפים שנפתחו לעריכה וקבצים שממתינים לצירוף", + "confirm_accounts": "מתבצעת יציאה מכל החשבונות", + "confirm_button": "הסרת הכול", + "note_unknown": "הארגון שלך הסיר את נתוני החשבון הזה מהמכשיר הזה. ייתכן שגם הודעות שלא נשלחו נמחקו.", + "refused_waiting": "הודעות שלא נשלחו ממתינות לסיסמה החדשה שלך: {count}. הן יישמרו עד {date}.", + "refused_waiting_unknown": "ייתכן שהודעות שלא נשלחו ממתינות לסיסמה החדשה שלך. הן יישמרו עד {date}.", + "confirm_unsent_unknown": "ייתכן שיש כאן הודעות שלא נשלחו. הן יאבדו.", + "confirm_templates": "תבניות דוא\"ל שנשמרו במכשיר הזה", + "session_waiting": "הודעות שלא נשלחו ממתינות לכניסה הבאה שלך: {count}. הן יישמרו עד {date}.", + "session_waiting_unknown": "ייתכן שהודעות שלא נשלחו ממתינות לכניסה הבאה שלך. הן יישמרו עד {date}.", + "needs_sign_in": "נדרשת כניסה", + "switcher_waiting": "הודעות שלא נשלחו: {count}. יימחקו מהמכשיר הזה ב-{date}.", + "switcher_kept": "הדואר במכשיר הזה יימחק ב-{date}.", + "sibling_waiting": "{name} נותק. הודעות שלא נשלחו: {count}. יש להיכנס עד {date}, אחרת הן יימחקו מהמכשיר הזה.", + "sibling_kept": "{name} נותק. יש להיכנס עד {date}, אחרת הדואר יימחק מהמכשיר הזה." + }, "offlineStorage": { "keep_description": "שומר את הדואר, היומן, אנשי הקשר והקבצים שבחרת, מוצפנים במכשיר הזה. במצב לא מקוון אפשר לקרוא, לסמן ולהעביר דואר, ומה שכותבים ממתין בתיבת הדואר היוצא. התנתקות מוחקת הכול.", "window_label": "כמה זמן אחורה לשמור", @@ -5883,6 +5912,38 @@ "banner_refused": "טיוטות שהשרת דחה: {count}", "banner_waiting": "טיוטות שממתינות לשרת: {count}" }, + "offlineExport": { + "settings_label": "ייצוא דואר שנשמר", + "settings_description": "שמרו את הדואר שבמכשיר הזה כקובצי mbox או .eml. זה עובד גם בלי חיבור.", + "title": "ייצוא דואר שנשמר", + "description": "שומר את המקוריים שהמכשיר הזה מחזיק. קובצי .eml הם העתקים מדויקים. קובץ mbox מוסיף את הסימונים שהפורמט שלו דורש וכותב את מצב הקריאה והסימון בכותרות של כל הודעה, במקום מה שהיה בהן. דואר ישן יותר מהתקופה שבחרתם לא נכלל. כדי לשמור הכול מהשרת, השתמשו ב„ייצוא כל הדואר”.", + "folders_label": "תיקיות", + "all_folders": "כל התיקיות", + "folder_kept": "כאן: {kept} מתוך {total}", + "loading": "קורא את מה שיש במכשיר הזה…", + "load_failed": "לא ניתן היה לקרוא את הדואר במכשיר הזה.", + "nothing_kept": "עדיין לא נשמר דואר במכשיר הזה.", + "kept": "מקוריים במכשיר הזה: {kept} מתוך {total} הודעות", + "missing_online": "להורדה מהשרת: {count}", + "missing_offline": "לא ניתן לייצא בלי חיבור: {count}. אפשר לנסות שוב כשיהיה חיבור.", + "reason_attachments_off": "הודעות מקוריות נשמרות רק כש„שמירת קבצים מצורפים” פעיל.", + "reason_not_kept": "הודעות מקוריות יורדות אחרונות, ורק כל עוד יש מקום.", + "not_kept_attachments_off": "אין מקור כי המכשיר הזה לא שומר קבצים מצורפים: {count}", + "not_kept_not_kept": "עדיין אין מקור במכשיר הזה: {count}", + "retry": "לנסות שוב עם חיבור", + "retry_online": "יש חיבור עכשיו, אז הן יכולות להגיע מהשרת.", + "retry_offline": "אפשר לנסות שוב כשיהיה חיבור.", + "settings_button": "ייצוא…", + "message_failed": "השרת לא מסר את ההודעה הזו.", + "failed_generic": "הייצוא נעצר בגלל שגיאה. נסו שוב.", + "stopped_limit": "הייצוא נעצר ב־{limit}, המקסימום שהדפדפן הזה יכול להחזיק. בחרו פחות תיקיות, או השתמשו ב־Chromium, ב־Firefox או באפליקציה למחשב.", + "over_limit": "הדפדפן הזה יכול להחזיק עד {limit}, והבחירה הזו היא בערך {size}. בחרו פחות תיקיות, או השתמשו ב־Chromium, ב־Firefox או באפליקציה למחשב.", + "no_room": "הייצוא הזה צריך בערך {size}, ולדפדפן הזה נשארו {free}. בחרו פחות תיקיות או פנו מקום.", + "stopped_no_room": "לדפדפן נגמר המקום לייצוא. בחרו פחות תיקיות או פנו מקום.", + "stopped_offline_off": "הייצוא נעצר כי החשבון הזה כבר לא שומר דואר במכשיר הזה.", + "policy_unknown": "הכללים של הארגון שלכם לחשבון הזה עדיין לא ידועים, ולכן הייצוא כבוי בינתיים.", + "leftover_file": "לא ניתן היה להסיר את הקובץ {name} מהמקום שבו שמרתם אותו. הוא חלקי, ואפשר למחוק אותו." + }, "deep_link": { "message_not_found": "הודעה זו אינה זמינה עוד.", "thread_not_found": "שיחה זו אינה זמינה עוד.", @@ -6645,6 +6706,101 @@ "message_moved_to": "ההודעה הזו הועברה אל {folder}.", "window_not_ready": "החלון החדש לא נפתח בזמן. הטיוטה נשארת כאן." }, + "desktopUi": { + "settings": { + "title": "חלונות", + "double_click_label": "פתיחת הודעות בחלון חדש בלחיצה כפולה", + "double_click_description": "לחיצה אחת עדיין פותחת את ההודעה ליד הרשימה.", + "restore_label": "פתיחה מחדש של חלונות בהפעלה", + "restore_description": "חלונות הודעות וטיוטות שהיו פתוחים ביציאה חוזרים." + }, + "attachment": { + "open": "פתיחה", + "save_as": "שמירה בשם…", + "copy": "העתקה", + "copy_failed": "לא ניתן היה להעתיק את הקובץ." + }, + "menu": { + "file": "קובץ", + "edit": "עריכה", + "view": "תצוגה", + "message": "הודעה", + "go": "מעבר", + "window": "חלון", + "help": "עזרה", + "new_window": "חלון חדש", + "print": "הדפסה…", + "save_pdf": "שמירה כ-PDF…", + "switch_connection": "שינוי חיבור…", + "close": "סגירה", + "quit": "יציאה", + "undo": "ביטול", + "redo": "ביצוע חוזר", + "cut": "גזירה", + "copy": "העתקה", + "paste": "הדבקה", + "select_all": "בחירת הכול", + "search": "חיפוש בדואר", + "refresh": "בדיקת דואר חדש", + "reading_pane": "חלונית קריאה", + "pane_right": "מימין", + "pane_below": "מתחת לרשימה", + "pane_off": "כבויה", + "zoom_in": "הגדלה", + "zoom_out": "הקטנה", + "zoom_reset": "גודל בפועל", + "full_screen": "מסך מלא", + "open_in_window": "פתיחה בחלון חדש", + "next_message": "ההודעה הבאה", + "previous_message": "ההודעה הקודמת", + "next_unread": "ההודעה הבאה שלא נקראה", + "mail": "דואר", + "files": "קבצים", + "back": "חזרה", + "forward": "קדימה", + "minimize": "מזעור", + "next_window": "החלון הבא", + "shortcuts": "קיצורי מקלדת", + "docs": "תיעוד", + "settings": "הגדרות…", + "about": "מידע על Bulwark", + "from_plugins": "עוד מהתוספים…", + "pick_gone": "התפריט הזה היה מיושן. פתחו אותו שוב ונסו פעם נוספת.", + "bar_label": "תפריט" + }, + "context": { + "add_to_dictionary": "הוספת “{word}” למילון", + "no_suggestions": "אין הצעות", + "open_link": "פתיחת קישור", + "copy_link": "העתקת קישור", + "copy_address": "העתקת כתובת", + "save_image": "שמירת תמונה…", + "copy_image": "העתקת תמונה" + }, + "closing": { + "unsaved_title": "לא ניתן היה לשמור טיוטה", + "unsaved_detail": "אם תסגרו עכשיו, מה שכתבתם מאז השמירה האחרונה יאבד.", + "close_anyway": "לסגור בכל זאת", + "unsent_title": "יש הודעות שעדיין לא נשלחו", + "unsent_one": "הודעה אחת ממתינה לשליחה. היא תישלח בפעם הבאה שתפתחו את Bulwark.", + "unsent_many": "{count} הודעות ממתינות לשליחה. הן יישלחו בפעם הבאה שתפתחו את Bulwark.", + "quit": "יציאה", + "leave_title": "לעזוב עם שינויים שלא נשמרו?", + "leave_detail": "השינויים שביצעתם בדף הזה עדיין לא נשמרו.", + "leave": "עזיבה", + "stay": "להישאר" + }, + "spellcheck": { + "offer": "בדיקת איות ב{language} דורשת מילון. Bulwark יכול להוריד אותו מ-Google. הטקסט שלכם לא נשלח.", + "download": "הורדה" + }, + "restore": { + "unavailable_title": "אי אפשר לפתוח את הטיוטה הזאת כרגע", + "unavailable_body": "היא שמורה בשרת, בתיקיית הטיוטות. נסו שוב כשהחיבור יחזור.", + "try_again": "ניסיון חוזר", + "close": "סגירה" + } + }, "desktop_sign_in": { "browser_button": "כניסה באמצעות הדפדפן", "browser_waiting": "יש להשלים את הכניסה בדפדפן", @@ -6662,6 +6818,53 @@ "revoke": "ביטול", "revoked": "ההרשאה בוטלה" }, + "desktopOs": { + "section_title": "יישום שולחן עבודה", + "section_description": "איך היישום עובד עם המחשב שלך.", + "close_to_tray_label": "להמשיך לפעול במגש המערכת בסגירה", + "close_to_tray_description": "דואר חדש ותזכורות ממשיכים להגיע אחרי סגירת החלון.", + "start_at_login_label": "להפעיל בכניסה למחשב", + "start_at_login_description": "היישום מופעל מעצמו כשנכנסים.", + "start_minimized_label": "להפעיל במגש המערכת", + "start_minimized_description": "בכניסה לא נפתח חלון. פותחים אותו מהסמל במגש המערכת.", + "attention_label": "הבהוב בשורת המשימות בדואר חדש", + "attention_mac_label": "קפיצת סמל ה-Dock בדואר חדש", + "attention_description": "רק כשהיישום לא בחזית.", + "quiet_hours_label": "שעות שקט", + "quiet_hours_description": "בשעות אלה אין התראות וצלילים. הדואר ממשיך להגיע.", + "quiet_hours_from": "מ-", + "quiet_hours_to": "עד", + "show_shortcut_label": "הצגת היישום בקיצור מקשים", + "show_shortcut_description": "{keys} מביא את היישום לחזית מכל יישום אחר.", + "show_shortcut_taken": "יישום אחר משתמש ב-{keys}. סגרו אותו, או כבו והפעילו מחדש את האפשרות הזו.", + "default_app_label": "יישום הדואר המוגדר כברירת מחדל", + "default_app_description": "פתיחת קישורי דואר וקובצי .eml, .ics ו-.vcf ביישום זה.", + "default_app_is_default": "יישום זה פותח את קישורי הדואר שלך.", + "default_app_button": "בחירת יישום ברירת מחדל…", + "new_mail": "דואר חדש", + "no_subject": "(ללא נושא)", + "action_delete": "מחיקה", + "copy_as_file": "העתקה כקובץ", + "copied": "הקובץ הועתק. אפשר להדביק אותו בתיקייה.", + "copy_failed": "לא ניתן להעתיק את הקובץ.", + "reply_lost": "לא ניתן היה לשמור את התשובה שהקלדת. פתחו את ההודעה והשיבו משם." + }, + "desktopReminders": { + "generic_title": "תזכורת", + "snooze": "דחייה ב-{count} דק'", + "snooze_short": "{count} דק'", + "open": "פתיחה", + "join": "הצטרפות", + "missed_title": "{count, plural, one {תזכורת אחת שהוחמצה} two {# תזכורות שהוחמצו} other {# תזכורות שהוחמצו}}", + "missed_more": "ועוד {count}", + "missed_show": "הצגה", + "missed_dialog_title": "תזכורות שהוחמצו", + "missed_dialog_description": "הן הגיעו כשהאפליקציה הייתה סגורה, המחשב היה במצב שינה או שההתראות הושהו.", + "open_calendar": "פתיחת היומן", + "done": "סיום", + "join_host": "הצטרפות ({host})", + "join_named": "הצטרפות: {title}" + }, "desktop_policy": { "server_refused": "הארגון שלך לא מאפשר את השרת הזה במכשיר הזה.", "plugin_refused": "הארגון שלך לא מאפשר את התוסף הזה במכשיר הזה, ולכן הוא לא פועל. ההגדרות והנתונים שלו נשמרים.", @@ -6670,5 +6873,30 @@ "plugins_off": "הארגון שלך כיבה תוספים במכשיר הזה.", "plugins_allowlist": "הארגון שלך מאפשר במכשיר הזה רק תוספים מסוימים.", "off": "כבוי" + }, + "desktopTelemetry": { + "section_title": "מידע על שימוש ודוחות קריסה", + "section_description": "שניהם כבויים עד שתפעילו אותם, ולכל אחד מתג משלו.", + "telemetry_label": "שליחת מידע על שימוש", + "telemetry_description": "פעם ביום: מזהה אקראי, גרסת האפליקציה, גרסת Node, מערכת ההפעלה, כמה זמן האפליקציה פועלת ואופן החיבור שלה. עם שרת דואר משלכם, גם אילו תכונות פעילות, מספר משוער של חשבונות וכמה תוספים וערכות נושא יש לכם. אף פעם לא דואר, כתובות או שמות שרתים.", + "crash_label": "שליחת דוחות קריסה", + "crash_description": "שגיאות באפליקציה נשלחות עם מזהה אקראי, שמות קבצים מהקוד של האפליקציה עצמה והודעות קצרות ומנוקות. אם האפליקציה עצמה קורסת, קובץ קריסה נשאר במחשב הזה ויוצא ממנו רק אם תשלחו אותו.", + "crash_memory": "קובץ קריסה הוא העתק של חלק מזיכרון האפליקציה ברגע הקריסה. Bulwark מסיר שמות משתמש, כתובות ואסימוני התחברות שהוא מוצא, אבל קובץ קריסה עדיין עשוי להכיל את הטקסט של הדואר שלכם.", + "instance_note": "בשרת Bulwark, מנהל השרת מחליט בנפרד מה הדפים מדווחים לו.", + "forced_off": "הארגון שלכם כיבה את זה.", + "url_label": "לאן קובצי הקריסה הולכים", + "url_description": "כתובת ה-https שמקבלת קובץ קריסה. Bulwark לא מגיע עם כתובת.", + "url_invalid": "הזינו כתובת https מלאה.", + "url_save": "שמירה", + "files_label": "קובצי קריסה במחשב הזה", + "files_description": "Bulwark שומר את החדשים ביותר ומוחק קבצים בני יותר מחודש.", + "files_empty": "אין קובצי קריסה.", + "file_size": "{size} ק״ב", + "send": "שליחת דוח קריסה…", + "delete_all": "מחיקת הכול", + "sent": "דוח הקריסה נשלח.", + "send_no_consent": "הפעילו קודם את דוחות הקריסה.", + "send_no_url": "לא הוגדרה כתובת, ולכן אין לאן לשלוח. הזינו כתובת למעלה.", + "send_failed": "לא ניתן היה לשלוח את דוח הקריסה." } } diff --git a/locales/hu/common.json b/locales/hu/common.json index eb73fddb6..c7412429a 100644 --- a/locales/hu/common.json +++ b/locales/hu/common.json @@ -5801,6 +5801,35 @@ "store_private": "A privát ablakok nem tudnak leveleket megőrizni offline használatra.", "server_not_answering": "A levelezőszerver nem válaszol. Próbálja újra egy pillanat múlva." }, + "offlineWipe": { + "note": "A szervezete eltávolította a fiók adatait erről az eszközről. Jelentkezzen be az újrakezdéshez.", + "note_unsent": "A szervezete eltávolította a fiók adatait erről az eszközről. Törölt, el nem küldött üzenetek: {count}.", + "settings_title": "Minden eltávolítása erről az eszközről", + "settings_description": "Arra az esetre, ha továbbadja ezt a számítógépet, vagy már nem használja. A levelei a kiszolgálón megmaradnak.", + "settings_button": "Minden eltávolítása…", + "settings_wiping": "Eltávolítás…", + "confirm_title": "Eltávolít mindent erről az eszközről?", + "confirm_message": "Ez törli mindazt, amit ez az alkalmazás ezen az eszközön tárol, az itteni összes fiókhoz. A kiszolgálón lévő leveleit nem érinti.", + "confirm_mail": "Az itt tárolt levelek, naptárak, névjegyek és fájlok", + "confirm_unsent": "Itt várakozó, el nem küldött üzenetek: {count}. Elvesznek.", + "confirm_keys": "S/MIME- és OpenPGP-kulcsok. Az újbóli használatukhoz saját biztonsági másolatra lesz szüksége.", + "confirm_plugins": "A bővítmények által itt tárolt adatok", + "confirm_files": "Szerkesztésre megnyitott mellékletek és csatolásra váró fájlok", + "confirm_accounts": "Minden fiók kijelentkezik", + "confirm_button": "Minden eltávolítása", + "note_unknown": "A szervezete eltávolította a fiók adatait erről az eszközről. Lehet, hogy az el nem küldött üzenetek is törlődtek.", + "refused_waiting": "Az új jelszóra váró, el nem küldött üzenetek: {count}. Eddig maradnak: {date}.", + "refused_waiting_unknown": "Lehet, hogy el nem küldött üzenetek várnak az új jelszóra. Eddig maradnak: {date}.", + "confirm_unsent_unknown": "Lehet, hogy el nem küldött üzenetek várakoznak itt. Elvesznek.", + "confirm_templates": "Ezen az eszközön mentett e-mail-sablonok", + "session_waiting": "A következő bejelentkezésre váró, el nem küldött üzenetek: {count}. Eddig maradnak: {date}.", + "session_waiting_unknown": "Lehet, hogy el nem küldött üzenetek várnak a következő bejelentkezésre. Eddig maradnak: {date}.", + "needs_sign_in": "Bejelentkezés szükséges", + "switcher_waiting": "El nem küldött üzenetek: {count}. Törlés erről az eszközről: {date}.", + "switcher_kept": "Az eszközön lévő levelek törlése: {date}.", + "sibling_waiting": "{name} kijelentkezett. El nem küldött üzenetek: {count}. Jelentkezzen be eddig: {date}, különben törlődnek erről az eszközről.", + "sibling_kept": "{name} kijelentkezett. Jelentkezzen be eddig: {date}, különben a levelek törlődnek erről az eszközről." + }, "offlineStorage": { "keep_description": "Megtartja a leveleit, a naptárát, a névjegyeit és a kiválasztott fájlokat, titkosítva ezen az eszközön. Offline olvashat, megjelölhet és áthelyezhet leveleket, a megírt levelek pedig a postázandók között várnak. Kijelentkezéskor minden törlődik.", "window_label": "Mennyi időre visszamenőleg maradjon meg", @@ -5882,6 +5911,38 @@ "banner_refused": "A szerver által elutasított piszkozatok: {count}", "banner_waiting": "A szerverre váró piszkozatok: {count}" }, + "offlineExport": { + "settings_label": "Megőrzött levelek exportálása", + "settings_description": "Mentse az eszközön lévő leveleket mbox vagy .eml fájlként. Offline is működik.", + "title": "Megőrzött levelek exportálása", + "description": "Elmenti az eszközön megőrzött eredeti üzeneteket. Az .eml fájlok pontos másolatok. Az mbox fájl hozzáadja a formátumához szükséges jelöléseket, és az olvasott és megjelölt állapotot minden üzenet fejlécébe írja a korábbiak helyett. A választott időszaknál régebbi levelek nincsenek benne. A szerveren lévő összes levél mentéséhez használja ezt: „Az összes levél exportálása”.", + "folders_label": "Mappák", + "all_folders": "Minden mappa", + "folder_kept": "{kept} / {total} itt", + "loading": "Az eszközön lévő adatok olvasása…", + "load_failed": "Az eszközön lévő leveleket nem sikerült beolvasni.", + "nothing_kept": "Ezen az eszközön még nincsenek megőrzött levelek.", + "kept": "Eredetik ezen az eszközön: {kept} / {total} üzenet", + "missing_online": "A szerverről letöltendő: {count}", + "missing_offline": "Offline nem exportálható: {count}. Ha újra online lesz, megpróbálhatja újra.", + "reason_attachments_off": "Az eredeti üzeneteket csak akkor őrzi meg az eszköz, ha be van kapcsolva ez: „Mellékletek megtartása”.", + "reason_not_kept": "Az eredeti üzenetek utoljára töltődnek le, és csak addig, amíg van hely.", + "not_kept_attachments_off": "Nincs itt eredeti, mert ez az eszköz nem őrzi meg a mellékleteket: {count}", + "not_kept_not_kept": "Még nincs eredeti ezen az eszközön: {count}", + "retry": "Újra online", + "retry_online": "Most online van, így ezek jöhetnek a szerverről.", + "retry_offline": "Ha újra online lesz, megpróbálhatja újra.", + "settings_button": "Exportálás…", + "message_failed": "A szerver nem adta át ezt az üzenetet.", + "failed_generic": "Az exportálás hiba miatt leállt. Próbálja újra.", + "stopped_limit": "Az exportálás {limit} méretnél leállt, ennél többet ez a böngésző nem tud tárolni. Válasszon kevesebb mappát, vagy használja a Chromiumot, a Firefoxot vagy az asztali alkalmazást.", + "over_limit": "Ez a böngésző legfeljebb {limit} méretet tud tárolni, ez a választás pedig körülbelül {size}. Válasszon kevesebb mappát, vagy használja a Chromiumot, a Firefoxot vagy az asztali alkalmazást.", + "no_room": "Ehhez az exportáláshoz körülbelül {size} kell, a böngészőnek pedig {free} áll rendelkezésére. Válasszon kevesebb mappát, vagy szabadítson fel helyet.", + "stopped_no_room": "A böngészőnek elfogyott a helye az exportáláshoz. Válasszon kevesebb mappát, vagy szabadítson fel helyet.", + "stopped_offline_off": "Az exportálás leállt, mert ez a fiók már nem őriz meg leveleket ezen az eszközön.", + "policy_unknown": "A szervezet erre a fiókra vonatkozó szabályai még nem ismertek, ezért az exportálás egyelőre ki van kapcsolva.", + "leftover_file": "A(z) {name} fájlt nem sikerült eltávolítani a mentés helyéről. Hiányos, ezért törölheti." + }, "deep_link": { "message_not_found": "Ez az üzenet már nem érhető el.", "thread_not_found": "Ez a beszélgetés már nem érhető el.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Ezt az üzenetet ide helyezték át: {folder}.", "window_not_ready": "Az új ablak nem nyílt meg időben. A piszkozat itt marad." }, + "desktopUi": { + "settings": { + "title": "Ablakok", + "double_click_label": "Üzenetek megnyitása új ablakban dupla kattintással", + "double_click_description": "Egy kattintás továbbra is a lista mellett nyitja meg az üzenetet.", + "restore_label": "Ablakok újranyitása indításkor", + "restore_description": "A kilépéskor nyitva lévő üzenet- és piszkozatablakok visszatérnek." + }, + "attachment": { + "open": "Megnyitás", + "save_as": "Mentés másként…", + "copy": "Másolás", + "copy_failed": "A fájlt nem sikerült másolni." + }, + "menu": { + "file": "Fájl", + "edit": "Szerkesztés", + "view": "Nézet", + "message": "Üzenet", + "go": "Ugrás", + "window": "Ablak", + "help": "Súgó", + "new_window": "Új ablak", + "print": "Nyomtatás…", + "save_pdf": "Mentés PDF-ként…", + "switch_connection": "Kapcsolat váltása…", + "close": "Bezárás", + "quit": "Kilépés", + "undo": "Visszavonás", + "redo": "Ismétlés", + "cut": "Kivágás", + "copy": "Másolás", + "paste": "Beillesztés", + "select_all": "Összes kijelölése", + "search": "Keresés a levelek között", + "refresh": "Új levelek lekérése", + "reading_pane": "Olvasópanel", + "pane_right": "Jobbra", + "pane_below": "A lista alatt", + "pane_off": "Ki", + "zoom_in": "Nagyítás", + "zoom_out": "Kicsinyítés", + "zoom_reset": "Tényleges méret", + "full_screen": "Teljes képernyő", + "open_in_window": "Megnyitás új ablakban", + "next_message": "Következő üzenet", + "previous_message": "Előző üzenet", + "next_unread": "Következő olvasatlan üzenet", + "mail": "Levelek", + "files": "Fájlok", + "back": "Vissza", + "forward": "Előre", + "minimize": "Minimalizálás", + "next_window": "Következő ablak", + "shortcuts": "Billentyűparancsok", + "docs": "Dokumentáció", + "settings": "Beállítások…", + "about": "A Bulwark névjegye", + "from_plugins": "Továbbiak a bővítményektől…", + "pick_gone": "Ez a menü elavult volt. Nyissa meg újra, és próbálja meg még egyszer.", + "bar_label": "Menü" + }, + "context": { + "add_to_dictionary": "„{word}” hozzáadása a szótárhoz", + "no_suggestions": "Nincs javaslat", + "open_link": "Hivatkozás megnyitása", + "copy_link": "Hivatkozás másolása", + "copy_address": "Cím másolása", + "save_image": "Kép mentése…", + "copy_image": "Kép másolása" + }, + "closing": { + "unsaved_title": "Egy piszkozatot nem sikerült menteni", + "unsaved_detail": "Ha most bezárja, elvész, amit az utolsó mentés óta írt.", + "close_anyway": "Bezárás mégis", + "unsent_title": "Néhány levél még nincs elküldve", + "unsent_one": "Egy üzenet küldésre vár. A Bulwark következő megnyitásakor elmegy.", + "unsent_many": "{count} üzenet küldésre vár. A Bulwark következő megnyitásakor elmennek.", + "quit": "Kilépés", + "leave_title": "Elhagyja az oldalt mentetlen módosításokkal?", + "leave_detail": "Az oldalon végzett módosítások még nincsenek mentve.", + "leave": "Elhagyás", + "stay": "Maradás" + }, + "spellcheck": { + "offer": "A(z) {language} nyelvű helyesírás-ellenőrzéshez szótár kell. A Bulwark letöltheti a Google-tól. A szövege nem kerül elküldésre.", + "download": "Letöltés" + }, + "restore": { + "unavailable_title": "Ez a piszkozat most nem nyitható meg", + "unavailable_body": "Biztonságban van a kiszolgálón, a Piszkozatok mappában. Próbálja újra, ha visszatért a kapcsolat.", + "try_again": "Újrapróbálás", + "close": "Bezárás" + } + }, "desktop_sign_in": { "browser_button": "Bejelentkezés böngészővel", "browser_waiting": "Fejezze be a bejelentkezést a böngészőben", @@ -6661,6 +6817,53 @@ "revoke": "Visszavonás", "revoked": "Engedély visszavonva" }, + "desktopOs": { + "section_title": "Asztali alkalmazás", + "section_description": "Hogyan működik az alkalmazás a számítógépével.", + "close_to_tray_label": "Bezáráskor fusson tovább a tálcán", + "close_to_tray_description": "Az új levelek és emlékeztetők az ablak bezárása után is megérkeznek.", + "start_at_login_label": "Indítás a számítógépre való bejelentkezéskor", + "start_at_login_description": "Az alkalmazás bejelentkezéskor magától elindul.", + "start_minimized_label": "Indítás a tálcán", + "start_minimized_description": "Bejelentkezéskor nem nyílik ablak. A tálcaikonnal nyithatja meg.", + "attention_label": "Tálca villogtatása új levélnél", + "attention_mac_label": "Dock-ikon ugráltatása új levélnél", + "attention_description": "Csak ha az alkalmazás nincs előtérben.", + "quiet_hours_label": "Csendes órák", + "quiet_hours_description": "Ekkor nincs értesítés és hang. A levelek továbbra is megérkeznek.", + "quiet_hours_from": "Ettől", + "quiet_hours_to": "eddig", + "show_shortcut_label": "Az alkalmazás megjelenítése billentyűparanccsal", + "show_shortcut_description": "{keys} bármely más alkalmazásból előtérbe hozza az alkalmazást.", + "show_shortcut_taken": "Egy másik alkalmazás használja ezt: {keys}. Zárja be azt, vagy kapcsolja ki és be ezt a beállítást.", + "default_app_label": "Alapértelmezett levelezőalkalmazás", + "default_app_description": "A levélhivatkozások és a .eml, .ics és .vcf fájlok megnyitása ezzel az alkalmazással.", + "default_app_is_default": "Ez az alkalmazás nyitja meg a levélhivatkozásait.", + "default_app_button": "Alapértelmezett alkalmazás kiválasztása…", + "new_mail": "Új levél", + "no_subject": "(nincs tárgy)", + "action_delete": "Törlés", + "copy_as_file": "Másolás fájlként", + "copied": "Fájl másolva. Beillesztheti egy mappába.", + "copy_failed": "A fájlt nem sikerült másolni.", + "reply_lost": "A beírt válasz nem maradt meg. Nyissa meg az üzenetet, és válaszoljon ott." + }, + "desktopReminders": { + "generic_title": "Emlékeztető", + "snooze": "Halasztás {count} perccel", + "snooze_short": "{count} perc", + "open": "Megnyitás", + "join": "Csatlakozás", + "missed_title": "{count, plural, one {# elmulasztott emlékeztető} other {# elmulasztott emlékeztető}}", + "missed_more": "és még {count}", + "missed_show": "Megjelenítés", + "missed_dialog_title": "Elmulasztott emlékeztetők", + "missed_dialog_description": "Akkor jártak le, amikor az alkalmazás be volt zárva, a számítógép alvó állapotban volt, vagy az értesítések szüneteltek.", + "open_calendar": "Naptár megnyitása", + "done": "Kész", + "join_host": "Csatlakozás ({host})", + "join_named": "Csatlakozás: {title}" + }, "desktop_policy": { "server_refused": "A szervezete ezen az eszközön nem engedélyezi ezt a kiszolgálót.", "plugin_refused": "A szervezete ezen az eszközön nem engedélyezi ezt a bővítményt, ezért nem fut. A beállításai és adatai megmaradnak.", @@ -6669,5 +6872,30 @@ "plugins_off": "A szervezete ezen az eszközön kikapcsolta a bővítményeket.", "plugins_allowlist": "A szervezete ezen az eszközön csak bizonyos bővítményeket engedélyez.", "off": "Ki" + }, + "desktopTelemetry": { + "section_title": "Használati adatok és összeomlási jelentések", + "section_description": "Mindkettő ki van kapcsolva, amíg be nem kapcsolja, és mindegyiknek saját kapcsolója van.", + "telemetry_label": "Használati adatok küldése", + "telemetry_description": "Naponta egyszer: egy véletlenszerű azonosító, az alkalmazás verziója, a Node verziója, az operációs rendszer, az alkalmazás futási ideje és a kapcsolódás módja. Saját levelezőszervernél azt is, mely funkciók vannak bekapcsolva, a fiókok hozzávetőleges számát, valamint a bővítmények és témák számát. Soha nem küld leveleket, címeket vagy szerverneveket.", + "crash_label": "Összeomlási jelentések küldése", + "crash_description": "Az alkalmazás hibái egy véletlenszerű azonosítóval, az alkalmazás saját kódjának fájlneveivel és rövid, megtisztított üzenetekkel mennek ki. Ha maga az alkalmazás omlik össze, egy összeomlási fájl marad ezen a számítógépen, és csak akkor kerül ki, ha elküldi.", + "crash_memory": "Az összeomlási fájl az alkalmazás memóriájának egy részéről készült másolat az összeomlás pillanatából. A Bulwark eltávolítja a talált felhasználóneveket, címeket és bejelentkezési tokeneket, de az összeomlási fájl így is tartalmazhatja a levelei szövegét.", + "instance_note": "Bulwark-szerveren annak rendszergazdája külön dönt arról, mit jelentenek neki az oldalak.", + "forced_off": "A szervezete ezt kikapcsolta.", + "url_label": "Hová kerülnek az összeomlási fájlok", + "url_description": "A https-cím, amely fogadja az összeomlási fájlt. A Bulwark nem ad ilyet.", + "url_invalid": "Adjon meg egy teljes https-címet.", + "url_save": "Mentés", + "files_label": "Összeomlási fájlok ezen a számítógépen", + "files_description": "A Bulwark megtartja a legújabbakat, és törli az egy hónapnál régebbieket.", + "files_empty": "Nincsenek összeomlási fájlok.", + "file_size": "{size} KB", + "send": "Összeomlási jelentés küldése…", + "delete_all": "Összes törlése", + "sent": "Összeomlási jelentés elküldve.", + "send_no_consent": "Először kapcsolja be az összeomlási jelentéseket.", + "send_no_url": "Nincs megadva cím, így nincs hová küldeni. Adjon meg egyet fent.", + "send_failed": "Az összeomlási jelentést nem sikerült elküldeni." } } diff --git a/locales/it/common.json b/locales/it/common.json index b781ec680..16d478cfb 100644 --- a/locales/it/common.json +++ b/locales/it/common.json @@ -5801,6 +5801,35 @@ "store_private": "Le finestre private non possono conservare la posta per l'uso offline.", "server_not_answering": "Il server di posta non risponde. Riprova tra un momento." }, + "offlineWipe": { + "note": "La tua organizzazione ha rimosso i dati di questo account da questo dispositivo. Accedi per ricominciare.", + "note_unsent": "La tua organizzazione ha rimosso i dati di questo account da questo dispositivo. Messaggi non inviati eliminati: {count}.", + "settings_title": "Rimuovi tutto da questo dispositivo", + "settings_description": "Per quando cedi questo computer o smetti di usarlo. La tua posta sul server resta.", + "settings_button": "Rimuovi tutto…", + "settings_wiping": "Rimozione…", + "confirm_title": "Rimuovere tutto da questo dispositivo?", + "confirm_message": "Questo elimina ciò che questa app conserva su questo dispositivo, per tutti gli account presenti. La tua posta sul server non viene toccata.", + "confirm_mail": "Posta, calendari, contatti e file conservati qui", + "confirm_unsent": "Messaggi non inviati in attesa qui: {count}. Andranno persi.", + "confirm_keys": "Chiavi S/MIME e OpenPGP. Per riusarle ti serve un tuo backup.", + "confirm_plugins": "Dati salvati qui dai plugin", + "confirm_files": "Allegati aperti per la modifica e file in attesa di essere allegati", + "confirm_accounts": "Tutti gli account vengono disconnessi", + "confirm_button": "Rimuovi tutto", + "note_unknown": "La tua organizzazione ha rimosso i dati di questo account da questo dispositivo. Potrebbero essere stati eliminati anche messaggi non inviati.", + "refused_waiting": "Messaggi non inviati in attesa della nuova password: {count}. Restano fino al {date}.", + "refused_waiting_unknown": "Alcuni messaggi non inviati potrebbero essere in attesa della nuova password. Restano fino al {date}.", + "confirm_unsent_unknown": "Qui potrebbero esserci messaggi non inviati in attesa. Andranno persi.", + "confirm_templates": "Modelli di email salvati su questo dispositivo", + "session_waiting": "Messaggi non inviati in attesa del prossimo accesso: {count}. Restano fino al {date}.", + "session_waiting_unknown": "Alcuni messaggi non inviati potrebbero essere in attesa del prossimo accesso. Restano fino al {date}.", + "needs_sign_in": "Accesso richiesto", + "switcher_waiting": "Messaggi non inviati: {count}. Eliminati da questo dispositivo il {date}.", + "switcher_kept": "Le sue email su questo dispositivo verranno eliminate il {date}.", + "sibling_waiting": "{name} è stato disconnesso. Messaggi non inviati: {count}. Accedi entro il {date} o verranno eliminati da questo dispositivo.", + "sibling_kept": "{name} è stato disconnesso. Accedi entro il {date} o le sue email verranno eliminate da questo dispositivo." + }, "offlineStorage": { "keep_description": "Conserva la tua posta, il calendario, i contatti e i file che scegli, cifrati su questo dispositivo. Offline puoi leggere, contrassegnare e spostare la posta, e ciò che scrivi aspetta nella posta in uscita. Uscendo dall'account viene rimosso tutto.", "window_label": "Da quanto tempo conservare", @@ -5882,6 +5911,38 @@ "banner_refused": "Bozze rifiutate dal server: {count}", "banner_waiting": "Bozze in attesa del server: {count}" }, + "offlineExport": { + "settings_label": "Esporta la posta conservata", + "settings_description": "Salva la posta di questo dispositivo come file mbox o .eml. Funziona anche offline.", + "title": "Esporta la posta conservata", + "description": "Salva gli originali che questo dispositivo conserva. I file .eml sono copie esatte. Un file mbox aggiunge i segni richiesti dal suo formato e scrive lo stato di letto e contrassegnato nelle intestazioni di ogni messaggio, al posto di quelle presenti. La posta più vecchia del periodo scelto non è inclusa. Per salvare tutto dal server, usa «Esporta tutta la posta».", + "folders_label": "Cartelle", + "all_folders": "Tutte le cartelle", + "folder_kept": "{kept} di {total} qui", + "loading": "Lettura dei dati su questo dispositivo…", + "load_failed": "Impossibile leggere la posta su questo dispositivo.", + "nothing_kept": "Su questo dispositivo non è ancora conservata posta.", + "kept": "Originali su questo dispositivo: {kept} di {total} messaggi", + "missing_online": "Da scaricare dal server: {count}", + "missing_offline": "Non esportabili offline: {count}. Puoi riprovare quando sei online.", + "reason_attachments_off": "I messaggi originali vengono conservati solo se «Conserva gli allegati» è attivo.", + "reason_not_kept": "I messaggi originali vengono scaricati per ultimi e solo se c'è spazio.", + "not_kept_attachments_off": "Nessun originale qui perché su questo dispositivo gli allegati non vengono conservati: {count}", + "not_kept_not_kept": "Ancora nessun originale su questo dispositivo: {count}", + "retry": "Riprova online", + "retry_online": "Ora sei online, quindi possono arrivare dal server.", + "retry_offline": "Puoi riprovare quando sei online.", + "settings_button": "Esporta…", + "message_failed": "Il server non ha fornito questo messaggio.", + "failed_generic": "L'esportazione si è interrotta per un errore. Riprova.", + "stopped_limit": "L'esportazione si è interrotta a {limit}, il massimo che questo browser può contenere. Scegli meno cartelle, oppure usa Chromium, Firefox o l'app desktop.", + "over_limit": "Questo browser può contenere al massimo {limit}, e questa scelta occupa circa {size}. Scegli meno cartelle, oppure usa Chromium, Firefox o l'app desktop.", + "no_room": "Questa esportazione richiede circa {size}, e questo browser ha {free} disponibili. Scegli meno cartelle o libera spazio.", + "stopped_no_room": "Il browser ha esaurito lo spazio per l'esportazione. Scegli meno cartelle o libera spazio.", + "stopped_offline_off": "L'esportazione si è interrotta perché questo account non conserva più posta su questo dispositivo.", + "policy_unknown": "Le regole della tua organizzazione per questo account non sono ancora note, quindi l'esportazione resta disattivata per ora.", + "leftover_file": "Impossibile rimuovere il file {name} dal punto in cui l'hai salvato. È incompleto, puoi eliminarlo." + }, "deep_link": { "message_not_found": "Questo messaggio non è più disponibile.", "thread_not_found": "Questa conversazione non è più disponibile.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Questo messaggio è stato spostato in {folder}.", "window_not_ready": "La nuova finestra non si è aperta in tempo. La bozza rimane qui." }, + "desktopUi": { + "settings": { + "title": "Finestre", + "double_click_label": "Apri i messaggi in una nuova finestra con il doppio clic", + "double_click_description": "Un solo clic apre comunque il messaggio accanto all’elenco.", + "restore_label": "Riapri le finestre all’avvio", + "restore_description": "Le finestre di messaggi e bozze aperte all’uscita tornano." + }, + "attachment": { + "open": "Apri", + "save_as": "Salva con nome…", + "copy": "Copia", + "copy_failed": "Impossibile copiare il file." + }, + "menu": { + "file": "File", + "edit": "Modifica", + "view": "Vista", + "message": "Messaggio", + "go": "Vai", + "window": "Finestra", + "help": "Aiuto", + "new_window": "Nuova finestra", + "print": "Stampa…", + "save_pdf": "Salva come PDF…", + "switch_connection": "Cambia connessione…", + "close": "Chiudi", + "quit": "Esci", + "undo": "Annulla", + "redo": "Ripeti", + "cut": "Taglia", + "copy": "Copia", + "paste": "Incolla", + "select_all": "Seleziona tutto", + "search": "Cerca nella posta", + "refresh": "Controlla nuova posta", + "reading_pane": "Pannello di lettura", + "pane_right": "A destra", + "pane_below": "Sotto l’elenco", + "pane_off": "Disattivato", + "zoom_in": "Ingrandisci", + "zoom_out": "Riduci", + "zoom_reset": "Dimensione effettiva", + "full_screen": "Schermo intero", + "open_in_window": "Apri in una nuova finestra", + "next_message": "Messaggio successivo", + "previous_message": "Messaggio precedente", + "next_unread": "Prossimo messaggio non letto", + "mail": "Posta", + "files": "File", + "back": "Indietro", + "forward": "Avanti", + "minimize": "Riduci a icona", + "next_window": "Finestra successiva", + "shortcuts": "Scorciatoie da tastiera", + "docs": "Documentazione", + "settings": "Impostazioni…", + "about": "Informazioni su Bulwark", + "from_plugins": "Altro dai plugin…", + "pick_gone": "Questo menu non era aggiornato. Riaprilo e riprova.", + "bar_label": "Menu" + }, + "context": { + "add_to_dictionary": "Aggiungi «{word}» al dizionario", + "no_suggestions": "Nessun suggerimento", + "open_link": "Apri link", + "copy_link": "Copia link", + "copy_address": "Copia indirizzo", + "save_image": "Salva immagine…", + "copy_image": "Copia immagine" + }, + "closing": { + "unsaved_title": "Impossibile salvare una bozza", + "unsaved_detail": "Se chiudi ora, quello che hai scritto dall’ultimo salvataggio andrà perso.", + "close_anyway": "Chiudi comunque", + "unsent_title": "Alcuni messaggi non sono ancora stati inviati", + "unsent_one": "Un messaggio è in attesa di invio. Partirà alla prossima apertura di Bulwark.", + "unsent_many": "{count} messaggi sono in attesa di invio. Partiranno alla prossima apertura di Bulwark.", + "quit": "Esci", + "leave_title": "Uscire con modifiche non salvate?", + "leave_detail": "Le modifiche fatte in questa pagina non sono ancora salvate.", + "leave": "Esci", + "stay": "Rimani" + }, + "spellcheck": { + "offer": "Il controllo ortografico in {language} richiede un dizionario. Bulwark può scaricarlo da Google. Il tuo testo non viene inviato.", + "download": "Scarica" + }, + "restore": { + "unavailable_title": "Questa bozza non può essere aperta ora", + "unavailable_body": "È al sicuro sul server, in Bozze. Riprova quando la connessione sarà tornata.", + "try_again": "Riprova", + "close": "Chiudi" + } + }, "desktop_sign_in": { "browser_button": "Accedi con il browser", "browser_waiting": "Completa l'accesso nel browser", @@ -6661,6 +6817,53 @@ "revoke": "Ritira", "revoked": "Permesso ritirato" }, + "desktopOs": { + "section_title": "App desktop", + "section_description": "Come l'app funziona con il tuo computer.", + "close_to_tray_label": "Resta nell'area di notifica alla chiusura", + "close_to_tray_description": "La nuova posta e i promemoria continuano ad arrivare dopo la chiusura della finestra.", + "start_at_login_label": "Avvia all'accesso al computer", + "start_at_login_description": "L'app si avvia da sola quando accedi.", + "start_minimized_label": "Avvia nell'area di notifica", + "start_minimized_description": "All'accesso non si apre alcuna finestra. Aprila con l'icona nell'area di notifica.", + "attention_label": "Fai lampeggiare la barra delle applicazioni con nuova posta", + "attention_mac_label": "Fai rimbalzare l'icona del Dock con nuova posta", + "attention_description": "Solo quando l'app non è in primo piano.", + "quiet_hours_label": "Ore di silenzio", + "quiet_hours_description": "Nessuna notifica o suono in queste ore. La posta continua ad arrivare.", + "quiet_hours_from": "Da", + "quiet_hours_to": "a", + "show_shortcut_label": "Mostra l'app con una scorciatoia da tastiera", + "show_shortcut_description": "{keys} porta l'app in primo piano da qualsiasi altra app.", + "show_shortcut_taken": "Un'altra app usa {keys}. Chiudila, oppure disattiva e riattiva questa opzione.", + "default_app_label": "App di posta predefinita", + "default_app_description": "Apri i link di posta e i file .eml, .ics e .vcf con questa app.", + "default_app_is_default": "Questa app apre i tuoi link di posta.", + "default_app_button": "Scegli app predefinita…", + "new_mail": "Nuova posta", + "no_subject": "(nessun oggetto)", + "action_delete": "Elimina", + "copy_as_file": "Copia come file", + "copied": "File copiato. Puoi incollarlo in una cartella.", + "copy_failed": "Impossibile copiare il file.", + "reply_lost": "Non è stato possibile conservare la risposta digitata. Apri il messaggio e rispondi da lì." + }, + "desktopReminders": { + "generic_title": "Promemoria", + "snooze": "Rimanda di {count} min", + "snooze_short": "{count} min", + "open": "Apri", + "join": "Partecipa", + "missed_title": "{count, plural, one {# promemoria perso} other {# promemoria persi}}", + "missed_more": "e altri {count}", + "missed_show": "Mostra", + "missed_dialog_title": "Promemoria persi", + "missed_dialog_description": "Sono scattati mentre l'app era chiusa, il computer in sospensione o le notifiche in pausa.", + "open_calendar": "Apri calendario", + "done": "Fatto", + "join_host": "Partecipa ({host})", + "join_named": "Partecipa: {title}" + }, "desktop_policy": { "server_refused": "La tua organizzazione non consente questo server su questo dispositivo.", "plugin_refused": "La tua organizzazione non consente questo plugin su questo dispositivo, quindi non viene eseguito. Le sue impostazioni e i suoi dati restano conservati.", @@ -6669,5 +6872,30 @@ "plugins_off": "La tua organizzazione ha disattivato i plugin su questo dispositivo.", "plugins_allowlist": "La tua organizzazione consente solo alcuni plugin su questo dispositivo.", "off": "Disattivato" + }, + "desktopTelemetry": { + "section_title": "Dati di utilizzo e segnalazioni di arresto anomalo", + "section_description": "Entrambi restano disattivati finché non li attivi, e ognuno ha il proprio interruttore.", + "telemetry_label": "Invia dati di utilizzo", + "telemetry_description": "Una volta al giorno: un ID casuale, la versione dell'app, la versione di Node, il tuo sistema operativo, da quanto tempo è in esecuzione l'app e come si connette. Con un tuo server di posta, anche quali funzioni sono attive, un numero approssimativo di account e quanti plugin e temi hai. Mai email, indirizzi o nomi di server.", + "crash_label": "Invia segnalazioni di arresto anomalo", + "crash_description": "Gli errori dell'app vengono inviati con un ID casuale, i nomi dei file del codice dell'app e brevi messaggi ripuliti. Se l'app stessa si arresta, un file di arresto resta su questo computer e ne esce solo se lo invii.", + "crash_memory": "Un file di arresto è una copia di parte della memoria dell'app al momento dell'arresto. Bulwark rimuove i nomi utente, gli indirizzi e i token di accesso che trova, ma un file di arresto può comunque contenere il testo delle tue email.", + "instance_note": "Su un server Bulwark, il suo amministratore decide separatamente cosa le sue pagine gli segnalano.", + "forced_off": "La tua organizzazione ha disattivato questa opzione.", + "url_label": "Destinazione dei file di arresto", + "url_description": "L'indirizzo https che riceve un file di arresto. Bulwark non ne include nessuno.", + "url_invalid": "Inserisci un indirizzo https completo.", + "url_save": "Salva", + "files_label": "File di arresto su questo computer", + "files_description": "Bulwark conserva i più recenti ed elimina quelli più vecchi di un mese.", + "files_empty": "Nessun file di arresto.", + "file_size": "{size} KB", + "send": "Invia segnalazione di arresto…", + "delete_all": "Elimina tutti", + "sent": "Segnalazione di arresto inviata.", + "send_no_consent": "Attiva prima le segnalazioni di arresto anomalo.", + "send_no_url": "Non è impostato alcun indirizzo, quindi non c'è dove inviarla. Inseriscine uno qui sopra.", + "send_failed": "Impossibile inviare la segnalazione di arresto." } } diff --git a/locales/ja/common.json b/locales/ja/common.json index dca3af1e3..593358ecf 100644 --- a/locales/ja/common.json +++ b/locales/ja/common.json @@ -5801,6 +5801,35 @@ "store_private": "プライベートウィンドウではオフライン用にメールを保存できません。", "server_not_answering": "メールサーバーが応答していません。少ししてからもう一度お試しください。" }, + "offlineWipe": { + "note": "組織がこのアカウントのデータをこのデバイスから削除しました。もう一度始めるにはサインインしてください。", + "note_unsent": "組織がこのアカウントのデータをこのデバイスから削除しました。削除された未送信メッセージ: {count} 件。", + "settings_title": "このデバイスからすべて削除", + "settings_description": "このコンピューターを譲渡するときや使わなくなるときのためのものです。サーバー上のメールは残ります。", + "settings_button": "すべて削除…", + "settings_wiping": "削除しています…", + "confirm_title": "このデバイスからすべて削除しますか?", + "confirm_message": "このアプリがこのデバイスに保存している内容を、ここにあるすべてのアカウントについて削除します。サーバー上のメールには影響しません。", + "confirm_mail": "ここに保存されたメール、カレンダー、連絡先、ファイル", + "confirm_unsent": "ここで待機中の未送信メッセージ: {count} 件。失われます。", + "confirm_keys": "S/MIME と OpenPGP の鍵。再度使うにはご自身のバックアップが必要です。", + "confirm_plugins": "プラグインがここに保存したデータ", + "confirm_files": "編集のために開いた添付ファイルと、添付待ちのファイル", + "confirm_accounts": "すべてのアカウントがサインアウトされます", + "confirm_button": "すべて削除", + "note_unknown": "組織がこのアカウントのデータをこのデバイスから削除しました。未送信のメッセージも削除された可能性があります。", + "refused_waiting": "新しいパスワードを待っている未送信メッセージ: {count} 件。{date} まで保持されます。", + "refused_waiting_unknown": "未送信のメッセージが新しいパスワードを待っている可能性があります。{date} まで保持されます。", + "confirm_unsent_unknown": "ここに未送信のメッセージがある可能性があります。失われます。", + "confirm_templates": "このデバイスに保存されたメールテンプレート", + "session_waiting": "次回のサインインを待っている未送信メッセージ: {count} 件。{date} まで保持されます。", + "session_waiting_unknown": "未送信のメッセージが次回のサインインを待っている可能性があります。{date} まで保持されます。", + "needs_sign_in": "サインインが必要", + "switcher_waiting": "未送信メッセージ: {count} 件。{date} にこのデバイスから削除されます。", + "switcher_kept": "このデバイス上のメールは {date} に削除されます。", + "sibling_waiting": "{name} はサインアウトされました。未送信メッセージ: {count} 件。{date} までにサインインしないと、このデバイスから削除されます。", + "sibling_kept": "{name} はサインアウトされました。{date} までにサインインしないと、メールはこのデバイスから削除されます。" + }, "offlineStorage": { "keep_description": "メール、カレンダー、連絡先、選んだファイルを暗号化してこのデバイスに保存します。オフラインでもメールを読む、フラグを付ける、移動することができ、書いたメールは送信トレイで待機します。サインアウトするとすべて削除されます。", "window_label": "保存する期間", @@ -5882,6 +5911,38 @@ "banner_refused": "サーバーが拒否した下書き: {count}", "banner_waiting": "サーバーを待っている下書き: {count}" }, + "offlineExport": { + "settings_label": "保存済みメールをエクスポート", + "settings_description": "このデバイスのメールを mbox または .eml ファイルとして保存します。オフラインでも使えます。", + "title": "保存済みメールをエクスポート", + "description": "このデバイスに保存されている原本を書き出します。.eml ファイルは完全なコピーです。mbox ファイルでは、形式に必要な印が加わり、既読とフラグの状態が各メッセージのヘッダーに、元の値に代えて書き込まれます。選んだ期間より古いメールは含まれません。サーバーのすべてを保存するには「すべてのメールをエクスポート」を使ってください。", + "folders_label": "フォルダー", + "all_folders": "すべてのフォルダー", + "folder_kept": "ここに {kept} / {total}", + "loading": "このデバイスのデータを読み込んでいます…", + "load_failed": "このデバイスのメールを読み込めませんでした。", + "nothing_kept": "このデバイスにはまだメールが保存されていません。", + "kept": "このデバイスにある原本: {kept} / {total} 件", + "missing_online": "サーバーからダウンロード: {count}", + "missing_offline": "オフラインではエクスポートできません: {count}。オンラインになったらもう一度お試しください。", + "reason_attachments_off": "元のメッセージは「添付ファイルを保存」がオンのときだけ保存されます。", + "reason_not_kept": "元のメッセージは最後に、空きがある間だけダウンロードされます。", + "not_kept_attachments_off": "このデバイスに添付ファイルを保存していないため原本なし: {count}", + "not_kept_not_kept": "このデバイスにまだ原本なし: {count}", + "retry": "オンラインでもう一度試す", + "retry_online": "オンラインなので、サーバーから取得できます。", + "retry_offline": "オンラインになったらもう一度お試しください。", + "settings_button": "エクスポート…", + "message_failed": "サーバーからこのメッセージを取得できませんでした。", + "failed_generic": "エラーのためエクスポートが止まりました。もう一度お試しください。", + "stopped_limit": "このブラウザーが保持できる上限の {limit} でエクスポートが止まりました。フォルダーを減らすか、Chromium、Firefox、またはデスクトップアプリをお使いください。", + "over_limit": "このブラウザーが保持できるのは最大 {limit} で、この選択は約 {size} です。フォルダーを減らすか、Chromium、Firefox、またはデスクトップアプリをお使いください。", + "no_room": "このエクスポートには約 {size} 必要ですが、このブラウザーの空きは {free} です。フォルダーを減らすか、空き容量を増やしてください。", + "stopped_no_room": "ブラウザーの空き容量が足りなくなりました。フォルダーを減らすか、空き容量を増やしてください。", + "stopped_offline_off": "このアカウントがこのデバイスにメールを保存しなくなったため、エクスポートが止まりました。", + "policy_unknown": "このアカウントに対する組織のルールがまだ分からないため、エクスポートは今のところオフです。", + "leftover_file": "保存先からファイル {name} を削除できませんでした。不完全なファイルなので削除してかまいません。" + }, "deep_link": { "message_not_found": "このメッセージは利用できなくなりました。", "thread_not_found": "この会話は利用できなくなりました。", @@ -6644,6 +6705,101 @@ "message_moved_to": "このメッセージは {folder} に移動されました。", "window_not_ready": "新しいウィンドウが時間内に開きませんでした。下書きはここに残ります。" }, + "desktopUi": { + "settings": { + "title": "ウィンドウ", + "double_click_label": "ダブルクリックでメッセージを新しいウィンドウで開く", + "double_click_description": "シングルクリックでは、これまでどおりリストの横に開きます。", + "restore_label": "起動時にウィンドウを再び開く", + "restore_description": "終了時に開いていたメッセージと下書きのウィンドウが戻ります。" + }, + "attachment": { + "open": "開く", + "save_as": "名前を付けて保存…", + "copy": "コピー", + "copy_failed": "ファイルをコピーできませんでした。" + }, + "menu": { + "file": "ファイル", + "edit": "編集", + "view": "表示", + "message": "メッセージ", + "go": "移動", + "window": "ウインドウ", + "help": "ヘルプ", + "new_window": "新規ウインドウ", + "print": "印刷…", + "save_pdf": "PDFとして保存…", + "switch_connection": "接続を変更…", + "close": "閉じる", + "quit": "終了", + "undo": "取り消す", + "redo": "やり直す", + "cut": "切り取り", + "copy": "コピー", + "paste": "貼り付け", + "select_all": "すべてを選択", + "search": "メールを検索", + "refresh": "新着メールを確認", + "reading_pane": "閲覧ウインドウ", + "pane_right": "右側", + "pane_below": "リストの下", + "pane_off": "オフ", + "zoom_in": "拡大", + "zoom_out": "縮小", + "zoom_reset": "実際のサイズ", + "full_screen": "フルスクリーン", + "open_in_window": "新規ウインドウで開く", + "next_message": "次のメッセージ", + "previous_message": "前のメッセージ", + "next_unread": "次の未読メッセージ", + "mail": "メール", + "files": "ファイル", + "back": "戻る", + "forward": "進む", + "minimize": "最小化", + "next_window": "次のウインドウ", + "shortcuts": "キーボードショートカット", + "docs": "ドキュメント", + "settings": "設定…", + "about": "Bulwarkについて", + "from_plugins": "プラグインのその他の項目…", + "pick_gone": "このメニューは古くなっています。もう一度開いて、やり直してください。", + "bar_label": "メニュー" + }, + "context": { + "add_to_dictionary": "「{word}」を辞書に追加", + "no_suggestions": "候補なし", + "open_link": "リンクを開く", + "copy_link": "リンクをコピー", + "copy_address": "アドレスをコピー", + "save_image": "画像を保存…", + "copy_image": "画像をコピー" + }, + "closing": { + "unsaved_title": "下書きを保存できませんでした", + "unsaved_detail": "今閉じると、最後に保存した後に書いた内容は失われます。", + "close_anyway": "このまま閉じる", + "unsent_title": "未送信のメールがあります", + "unsent_one": "1件のメッセージが送信を待っています。次にBulwarkを開いたときに送信されます。", + "unsent_many": "{count}件のメッセージが送信を待っています。次にBulwarkを開いたときに送信されます。", + "quit": "終了", + "leave_title": "保存されていない変更を残して移動しますか?", + "leave_detail": "このページで行った変更はまだ保存されていません。", + "leave": "移動する", + "stay": "とどまる" + }, + "spellcheck": { + "offer": "{language}のスペルチェックには辞書が必要です。BulwarkはGoogleから辞書をダウンロードできます。入力した文章は送信されません。", + "download": "ダウンロード" + }, + "restore": { + "unavailable_title": "この下書きは今は開けません", + "unavailable_body": "下書きはサーバーの「下書き」に安全に保管されています。接続が戻ってから、もう一度お試しください。", + "try_again": "再試行", + "close": "閉じる" + } + }, "desktop_sign_in": { "browser_button": "ブラウザでサインイン", "browser_waiting": "ブラウザでサインインを完了してください", @@ -6661,6 +6817,53 @@ "revoke": "取り消す", "revoked": "許可を取り消しました" }, + "desktopOs": { + "section_title": "デスクトップアプリ", + "section_description": "アプリとパソコンの連携方法です。", + "close_to_tray_label": "閉じてもトレイで実行を続ける", + "close_to_tray_description": "ウィンドウを閉じても新着メールとリマインダーは届きます。", + "start_at_login_label": "パソコンへのサインイン時に起動", + "start_at_login_description": "サインインするとアプリが自動で起動します。", + "start_minimized_label": "トレイで起動", + "start_minimized_description": "サインイン時にウィンドウは開きません。トレイのアイコンから開いてください。", + "attention_label": "新着メールでタスクバーを点滅", + "attention_mac_label": "新着メールで Dock アイコンを跳ねさせる", + "attention_description": "アプリが前面にないときのみ。", + "quiet_hours_label": "おやすみ時間", + "quiet_hours_description": "この時間は通知も音も出ません。メールは届きます。", + "quiet_hours_from": "開始", + "quiet_hours_to": "終了", + "show_shortcut_label": "キーボードショートカットでアプリを表示", + "show_shortcut_description": "{keys} で、ほかのアプリからこのアプリを前面に表示します。", + "show_shortcut_taken": "別のアプリが {keys} を使っています。そのアプリを閉じるか、この設定をオフにしてからオンに戻してください。", + "default_app_label": "既定のメールアプリ", + "default_app_description": "メールのリンクと .eml、.ics、.vcf ファイルをこのアプリで開きます。", + "default_app_is_default": "メールのリンクはこのアプリで開きます。", + "default_app_button": "既定のアプリを選択…", + "new_mail": "新着メール", + "no_subject": "(件名なし)", + "action_delete": "削除", + "copy_as_file": "ファイルとしてコピー", + "copied": "ファイルをコピーしました。フォルダーに貼り付けられます。", + "copy_failed": "ファイルをコピーできませんでした。", + "reply_lost": "入力した返信を保持できませんでした。メッセージを開いて返信してください。" + }, + "desktopReminders": { + "generic_title": "リマインダー", + "snooze": "{count} 分後に再通知", + "snooze_short": "{count} 分", + "open": "開く", + "join": "参加", + "missed_title": "{count, plural, other {見逃したリマインダー # 件}}", + "missed_more": "ほか {count} 件", + "missed_show": "表示", + "missed_dialog_title": "見逃したリマインダー", + "missed_dialog_description": "アプリが閉じていた間、コンピューターがスリープしていた間、または通知を一時停止していた間に期限が来たものです。", + "open_calendar": "カレンダーを開く", + "done": "完了", + "join_host": "参加 ({host})", + "join_named": "参加: {title}" + }, "desktop_policy": { "server_refused": "組織はこのデバイスでこのサーバーを許可していません。", "plugin_refused": "組織はこのデバイスでこのプラグインを許可していないため、実行されません。設定とデータは保持されます。", @@ -6669,5 +6872,30 @@ "plugins_off": "組織はこのデバイスのプラグインをオフにしています。", "plugins_allowlist": "組織はこのデバイスで特定のプラグインのみを許可しています。", "off": "オフ" + }, + "desktopTelemetry": { + "section_title": "利用情報とクラッシュレポート", + "section_description": "どちらもオンにするまでオフのままで、それぞれに専用のスイッチがあります。", + "telemetry_label": "利用情報を送信", + "telemetry_description": "1日に1回、ランダムなID、アプリのバージョン、Node のバージョン、OS、アプリの稼働時間、接続方法を送信します。自分のメールサーバーを使う場合は、有効な機能、おおよそのアカウント数、プラグインとテーマの数も送信します。メール、アドレス、サーバー名は送信しません。", + "crash_label": "クラッシュレポートを送信", + "crash_description": "アプリのエラーは、ランダムなID、アプリ自身のコードのファイル名、整理された短いメッセージとともに送信されます。アプリ自体がクラッシュした場合、クラッシュファイルはこのコンピューターに残り、あなたが送信したときだけ外に出ます。", + "crash_memory": "クラッシュファイルはクラッシュ時のアプリのメモリの一部のコピーです。Bulwark は見つけたユーザー名、アドレス、サインイントークンを削除しますが、クラッシュファイルにはメールの本文が残っていることがあります。", + "instance_note": "Bulwark サーバーでは、ページがサーバーに何を報告するかはそのサーバーの管理者が別途決めます。", + "forced_off": "組織によってオフにされています。", + "url_label": "クラッシュファイルの送信先", + "url_description": "クラッシュファイルを受け取る https アドレスです。Bulwark には用意されていません。", + "url_invalid": "完全な https アドレスを入力してください。", + "url_save": "保存", + "files_label": "このコンピューター上のクラッシュファイル", + "files_description": "Bulwark は新しいものを保持し、1か月より古いものを削除します。", + "files_empty": "クラッシュファイルはありません。", + "file_size": "{size} KB", + "send": "クラッシュレポートを送信…", + "delete_all": "すべて削除", + "sent": "クラッシュレポートを送信しました。", + "send_no_consent": "先にクラッシュレポートをオンにしてください。", + "send_no_url": "アドレスが設定されていないため、送信先がありません。上で入力してください。", + "send_failed": "クラッシュレポートを送信できませんでした。" } } diff --git a/locales/ko/common.json b/locales/ko/common.json index 1804ee97a..6e0fc0121 100644 --- a/locales/ko/common.json +++ b/locales/ko/common.json @@ -5801,6 +5801,35 @@ "store_private": "개인 정보 보호 창에서는 오프라인용 메일을 보관할 수 없습니다.", "server_not_answering": "메일 서버가 응답하지 않습니다. 잠시 후 다시 시도하세요." }, + "offlineWipe": { + "note": "조직에서 이 기기의 이 계정 데이터를 제거했습니다. 다시 시작하려면 로그인하세요.", + "note_unsent": "조직에서 이 기기의 이 계정 데이터를 제거했습니다. 삭제된 보내지 않은 메시지: {count}개.", + "settings_title": "이 기기에서 모두 제거", + "settings_description": "이 컴퓨터를 다른 사람에게 주거나 더 이상 사용하지 않을 때 사용합니다. 서버의 메일은 그대로 남습니다.", + "settings_button": "모두 제거…", + "settings_wiping": "제거하는 중…", + "confirm_title": "이 기기에서 모두 제거할까요?", + "confirm_message": "이 앱이 이 기기에 보관하는 내용을 여기 있는 모든 계정에 대해 삭제합니다. 서버의 메일은 건드리지 않습니다.", + "confirm_mail": "여기에 보관된 메일, 캘린더, 연락처, 파일", + "confirm_unsent": "여기에서 대기 중인 보내지 않은 메시지: {count}개. 사라집니다.", + "confirm_keys": "S/MIME 및 OpenPGP 키. 다시 사용하려면 직접 만든 백업이 필요합니다.", + "confirm_plugins": "플러그인이 여기에 저장한 데이터", + "confirm_files": "편집하려고 연 첨부 파일과 첨부를 기다리는 파일", + "confirm_accounts": "모든 계정이 로그아웃됩니다", + "confirm_button": "모두 제거", + "note_unknown": "조직에서 이 계정의 데이터를 이 기기에서 삭제했습니다. 보내지 않은 메시지도 삭제되었을 수 있습니다.", + "refused_waiting": "새 비밀번호를 기다리는 보내지 않은 메시지: {count}개. {date}까지 보관됩니다.", + "refused_waiting_unknown": "보내지 않은 메시지가 새 비밀번호를 기다리고 있을 수 있습니다. {date}까지 보관됩니다.", + "confirm_unsent_unknown": "여기에 보내지 않은 메시지가 있을 수 있습니다. 사라지게 됩니다.", + "confirm_templates": "이 기기에 저장된 이메일 템플릿", + "session_waiting": "다음 로그인을 기다리는 보내지 않은 메시지: {count}개. {date}까지 보관됩니다.", + "session_waiting_unknown": "보내지 않은 메시지가 다음 로그인을 기다리고 있을 수 있습니다. {date}까지 보관됩니다.", + "needs_sign_in": "로그인 필요", + "switcher_waiting": "보내지 않은 메시지: {count}개. {date}에 이 기기에서 삭제됩니다.", + "switcher_kept": "이 기기의 메일은 {date}에 삭제됩니다.", + "sibling_waiting": "{name} 계정이 로그아웃되었습니다. 보내지 않은 메시지: {count}개. {date}까지 로그인하지 않으면 이 기기에서 삭제됩니다.", + "sibling_kept": "{name} 계정이 로그아웃되었습니다. {date}까지 로그인하지 않으면 메일이 이 기기에서 삭제됩니다." + }, "offlineStorage": { "keep_description": "메일, 캘린더, 연락처, 선택한 파일을 이 기기에 암호화해 보관합니다. 오프라인에서도 메일을 읽고, 플래그를 지정하고, 이동할 수 있으며, 작성한 메일은 보낼편지함에서 대기합니다. 로그아웃하면 모두 삭제됩니다.", "window_label": "보관할 기간", @@ -5882,6 +5911,38 @@ "banner_refused": "서버가 거부한 임시 보관 메일: {count}", "banner_waiting": "서버를 기다리는 임시 보관 메일: {count}" }, + "offlineExport": { + "settings_label": "보관된 메일 내보내기", + "settings_description": "이 기기의 메일을 mbox 또는 .eml 파일로 저장합니다. 오프라인에서도 됩니다.", + "title": "보관된 메일 내보내기", + "description": "이 기기에 보관된 원본을 저장합니다. .eml 파일은 정확한 사본입니다. mbox 파일은 형식에 필요한 표시를 추가하고, 읽음 및 플래그 상태를 각 메시지의 헤더에 기존 값 대신 기록합니다. 선택한 기간보다 오래된 메일은 포함되지 않습니다. 서버의 모든 메일을 저장하려면 “모든 메일 내보내기”을(를) 사용하세요.", + "folders_label": "폴더", + "all_folders": "모든 폴더", + "folder_kept": "여기에 {kept}/{total}", + "loading": "이 기기의 데이터를 읽는 중…", + "load_failed": "이 기기의 메일을 읽지 못했습니다.", + "nothing_kept": "이 기기에 아직 보관된 메일이 없습니다.", + "kept": "이 기기의 원본: {kept}/{total}개 메시지", + "missing_online": "서버에서 다운로드: {count}", + "missing_offline": "오프라인에서는 내보낼 수 없음: {count}. 온라인이 되면 다시 시도할 수 있습니다.", + "reason_attachments_off": "원본 메시지는 “첨부 파일 보관”이(가) 켜져 있을 때만 보관됩니다.", + "reason_not_kept": "원본 메시지는 맨 마지막에, 공간이 있을 때만 다운로드됩니다.", + "not_kept_attachments_off": "이 기기에 첨부 파일을 보관하지 않아 원본 없음: {count}", + "not_kept_not_kept": "이 기기에 아직 원본 없음: {count}", + "retry": "온라인에서 다시 시도", + "retry_online": "지금 온라인이므로 서버에서 가져올 수 있습니다.", + "retry_offline": "온라인이 되면 다시 시도할 수 있습니다.", + "settings_button": "내보내기…", + "message_failed": "서버가 이 메시지를 주지 않았습니다.", + "failed_generic": "오류로 내보내기가 중단되었습니다. 다시 시도하세요.", + "stopped_limit": "이 브라우저가 담을 수 있는 최대치인 {limit}에서 내보내기가 중단되었습니다. 폴더를 줄이거나 Chromium, Firefox 또는 데스크톱 앱을 사용하세요.", + "over_limit": "이 브라우저는 최대 {limit}까지 담을 수 있는데 이 선택은 약 {size}입니다. 폴더를 줄이거나 Chromium, Firefox 또는 데스크톱 앱을 사용하세요.", + "no_room": "이 내보내기에는 약 {size}이(가) 필요한데 이 브라우저에는 {free} 남아 있습니다. 폴더를 줄이거나 공간을 확보하세요.", + "stopped_no_room": "브라우저에 내보내기 공간이 부족해졌습니다. 폴더를 줄이거나 공간을 확보하세요.", + "stopped_offline_off": "이 계정이 더 이상 이 기기에 메일을 보관하지 않아 내보내기가 중단되었습니다.", + "policy_unknown": "이 계정에 대한 조직의 규칙을 아직 알 수 없어 내보내기가 당분간 꺼져 있습니다.", + "leftover_file": "저장한 위치에서 {name} 파일을 제거하지 못했습니다. 불완전한 파일이므로 삭제해도 됩니다." + }, "deep_link": { "message_not_found": "이 메시지를 더 이상 사용할 수 없습니다.", "thread_not_found": "이 대화를 더 이상 사용할 수 없습니다.", @@ -6644,6 +6705,101 @@ "message_moved_to": "이 메시지는 {folder}(으)로 이동되었습니다.", "window_not_ready": "새 창이 제때 열리지 않았습니다. 임시 보관 메일은 여기에 남아 있습니다." }, + "desktopUi": { + "settings": { + "title": "창", + "double_click_label": "두 번 클릭하면 메시지를 새 창에서 열기", + "double_click_description": "한 번 클릭하면 지금처럼 목록 옆에 메시지가 열립니다.", + "restore_label": "시작할 때 창 다시 열기", + "restore_description": "종료할 때 열려 있던 메시지와 임시보관 창이 다시 열립니다." + }, + "attachment": { + "open": "열기", + "save_as": "다른 이름으로 저장…", + "copy": "복사", + "copy_failed": "파일을 복사할 수 없습니다." + }, + "menu": { + "file": "파일", + "edit": "편집", + "view": "보기", + "message": "메시지", + "go": "이동", + "window": "창", + "help": "도움말", + "new_window": "새 창", + "print": "인쇄…", + "save_pdf": "PDF로 저장…", + "switch_connection": "연결 변경…", + "close": "닫기", + "quit": "종료", + "undo": "실행 취소", + "redo": "다시 실행", + "cut": "잘라내기", + "copy": "복사", + "paste": "붙여넣기", + "select_all": "모두 선택", + "search": "메일 검색", + "refresh": "새 메일 확인", + "reading_pane": "읽기 창", + "pane_right": "오른쪽", + "pane_below": "목록 아래", + "pane_off": "끄기", + "zoom_in": "확대", + "zoom_out": "축소", + "zoom_reset": "실제 크기", + "full_screen": "전체 화면", + "open_in_window": "새 창에서 열기", + "next_message": "다음 메시지", + "previous_message": "이전 메시지", + "next_unread": "다음 읽지 않은 메시지", + "mail": "메일", + "files": "파일", + "back": "뒤로", + "forward": "앞으로", + "minimize": "최소화", + "next_window": "다음 창", + "shortcuts": "키보드 단축키", + "docs": "문서", + "settings": "설정…", + "about": "Bulwark 정보", + "from_plugins": "플러그인 더 보기…", + "pick_gone": "이 메뉴는 오래된 것입니다. 다시 열어 한 번 더 시도해 주세요.", + "bar_label": "메뉴" + }, + "context": { + "add_to_dictionary": "“{word}”을(를) 사전에 추가", + "no_suggestions": "추천 없음", + "open_link": "링크 열기", + "copy_link": "링크 복사", + "copy_address": "주소 복사", + "save_image": "이미지 저장…", + "copy_image": "이미지 복사" + }, + "closing": { + "unsaved_title": "임시 보관 메일을 저장하지 못했습니다", + "unsaved_detail": "지금 닫으면 마지막으로 저장한 이후에 작성한 내용이 사라집니다.", + "close_anyway": "그래도 닫기", + "unsent_title": "아직 보내지 않은 메일이 있습니다", + "unsent_one": "메시지 1개가 전송을 기다리고 있습니다. 다음에 Bulwark를 열 때 전송됩니다.", + "unsent_many": "메시지 {count}개가 전송을 기다리고 있습니다. 다음에 Bulwark를 열 때 전송됩니다.", + "quit": "종료", + "leave_title": "저장하지 않은 변경 사항이 있습니다. 나가시겠습니까?", + "leave_detail": "이 페이지에서 변경한 내용이 아직 저장되지 않았습니다.", + "leave": "나가기", + "stay": "머무르기" + }, + "spellcheck": { + "offer": "{language} 맞춤법 검사에는 사전이 필요합니다. Bulwark가 Google에서 내려받을 수 있습니다. 입력한 텍스트는 전송되지 않습니다.", + "download": "내려받기" + }, + "restore": { + "unavailable_title": "지금은 이 임시 보관 메일을 열 수 없습니다", + "unavailable_body": "서버의 임시 보관함에 안전하게 있습니다. 연결이 돌아오면 다시 시도해 주세요.", + "try_again": "다시 시도", + "close": "닫기" + } + }, "desktop_sign_in": { "browser_button": "브라우저로 로그인", "browser_waiting": "브라우저에서 로그인을 마치세요", @@ -6661,6 +6817,53 @@ "revoke": "취소", "revoked": "허용을 취소했습니다" }, + "desktopOs": { + "section_title": "데스크톱 앱", + "section_description": "앱이 컴퓨터와 함께 작동하는 방식입니다.", + "close_to_tray_label": "닫을 때 트레이에서 계속 실행", + "close_to_tray_description": "창을 닫아도 새 메일과 리마인더가 계속 도착합니다.", + "start_at_login_label": "컴퓨터에 로그인할 때 시작", + "start_at_login_description": "로그인하면 앱이 자동으로 시작됩니다.", + "start_minimized_label": "트레이에서 시작", + "start_minimized_description": "로그인할 때 창이 열리지 않습니다. 트레이 아이콘으로 여세요.", + "attention_label": "새 메일이 오면 작업 표시줄 깜박이기", + "attention_mac_label": "새 메일이 오면 Dock 아이콘 튀기기", + "attention_description": "앱이 앞에 있지 않을 때만 작동합니다.", + "quiet_hours_label": "방해 금지 시간", + "quiet_hours_description": "이 시간에는 알림과 소리가 없습니다. 메일은 계속 도착합니다.", + "quiet_hours_from": "시작", + "quiet_hours_to": "종료", + "show_shortcut_label": "키보드 단축키로 앱 표시", + "show_shortcut_description": "{keys} 키로 다른 앱에서도 이 앱을 앞으로 가져옵니다.", + "show_shortcut_taken": "다른 앱이 {keys} 키를 사용 중입니다. 그 앱을 닫거나 이 옵션을 껐다가 다시 켜세요.", + "default_app_label": "기본 메일 앱", + "default_app_description": "메일 링크와 .eml, .ics, .vcf 파일을 이 앱으로 엽니다.", + "default_app_is_default": "이 앱이 메일 링크를 엽니다.", + "default_app_button": "기본 앱 선택…", + "new_mail": "새 메일", + "no_subject": "(제목 없음)", + "action_delete": "삭제", + "copy_as_file": "파일로 복사", + "copied": "파일을 복사했습니다. 폴더에 붙여넣을 수 있습니다.", + "copy_failed": "파일을 복사할 수 없습니다.", + "reply_lost": "입력한 답장을 유지할 수 없습니다. 메시지를 열어 답장하세요." + }, + "desktopReminders": { + "generic_title": "알림", + "snooze": "{count}분 후 다시 알림", + "snooze_short": "{count}분", + "open": "열기", + "join": "참가", + "missed_title": "{count, plural, other {놓친 알림 #개}}", + "missed_more": "외 {count}개", + "missed_show": "보기", + "missed_dialog_title": "놓친 알림", + "missed_dialog_description": "앱이 닫혀 있거나 컴퓨터가 절전 상태이거나 알림이 일시 중지된 동안 시간이 된 알림입니다.", + "open_calendar": "캘린더 열기", + "done": "완료", + "join_host": "참가 ({host})", + "join_named": "참가: {title}" + }, "desktop_policy": { "server_refused": "조직에서 이 기기의 이 서버 사용을 허용하지 않습니다.", "plugin_refused": "조직에서 이 기기의 이 플러그인 사용을 허용하지 않아 실행되지 않습니다. 설정과 데이터는 유지됩니다.", @@ -6669,5 +6872,30 @@ "plugins_off": "조직에서 이 기기의 플러그인을 껐습니다.", "plugins_allowlist": "조직에서 이 기기에 특정 플러그인만 허용합니다.", "off": "끔" + }, + "desktopTelemetry": { + "section_title": "사용 정보 및 충돌 보고서", + "section_description": "둘 다 켤 때까지 꺼져 있으며, 각각 별도의 스위치가 있습니다.", + "telemetry_label": "사용 정보 보내기", + "telemetry_description": "하루에 한 번: 임의의 ID, 앱 버전, Node 버전, 운영 체제, 앱 실행 시간, 앱의 연결 방식을 보냅니다. 자체 메일 서버를 쓰면 켜진 기능, 대략적인 계정 수, 플러그인과 테마 수도 보냅니다. 메일, 주소, 서버 이름은 절대 보내지 않습니다.", + "crash_label": "충돌 보고서 보내기", + "crash_description": "앱 오류는 임의의 ID, 앱 자체 코드의 파일 이름, 정리된 짧은 메시지와 함께 전송됩니다. 앱 자체가 충돌하면 충돌 파일이 이 컴퓨터에 남고, 직접 보낼 때만 밖으로 나갑니다.", + "crash_memory": "충돌 파일은 충돌 당시 앱 메모리 일부의 복사본입니다. Bulwark는 찾아낸 사용자 이름, 주소, 로그인 토큰을 제거하지만 충돌 파일에 메일 본문이 남아 있을 수 있습니다.", + "instance_note": "Bulwark 서버에서는 페이지가 서버에 무엇을 보고할지 해당 서버의 관리자가 별도로 정합니다.", + "forced_off": "조직에서 이 기능을 껐습니다.", + "url_label": "충돌 파일을 보낼 곳", + "url_description": "충돌 파일을 받는 https 주소입니다. Bulwark에는 기본 주소가 없습니다.", + "url_invalid": "전체 https 주소를 입력하세요.", + "url_save": "저장", + "files_label": "이 컴퓨터의 충돌 파일", + "files_description": "Bulwark는 최신 파일을 보관하고 한 달이 지난 파일은 삭제합니다.", + "files_empty": "충돌 파일이 없습니다.", + "file_size": "{size} KB", + "send": "충돌 보고서 보내기…", + "delete_all": "모두 삭제", + "sent": "충돌 보고서를 보냈습니다.", + "send_no_consent": "먼저 충돌 보고서를 켜세요.", + "send_no_url": "주소가 설정되지 않아 보낼 곳이 없습니다. 위에 입력하세요.", + "send_failed": "충돌 보고서를 보낼 수 없습니다." } } diff --git a/locales/lv/common.json b/locales/lv/common.json index df0d38815..3f0fe60b6 100644 --- a/locales/lv/common.json +++ b/locales/lv/common.json @@ -5801,6 +5801,35 @@ "store_private": "Privātie logi nevar glabāt pastu lietošanai bezsaistē.", "server_not_answering": "Pasta serveris neatbild. Mēģiniet vēlreiz pēc brīža." }, + "offlineWipe": { + "note": "Jūsu organizācija ir noņēmusi šī konta datus no šīs ierīces. Piesakieties, lai sāktu no jauna.", + "note_unsent": "Jūsu organizācija ir noņēmusi šī konta datus no šīs ierīces. Dzēstie nenosūtītie ziņojumi: {count}.", + "settings_title": "Noņemt visu no šīs ierīces", + "settings_description": "Gadījumam, ja atdodat šo datoru vai vairs to neizmantojat. Jūsu pasts serverī paliek.", + "settings_button": "Noņemt visu…", + "settings_wiping": "Notiek noņemšana…", + "confirm_title": "Vai noņemt visu no šīs ierīces?", + "confirm_message": "Tiek izdzēsts tas, ko šī lietotne glabā šajā ierīcē, visiem šeit esošajiem kontiem. Jūsu pasts serverī netiek skarts.", + "confirm_mail": "Šeit glabātais pasts, kalendāri, kontakti un faili", + "confirm_unsent": "Šeit gaidošie nenosūtītie ziņojumi: {count}. Tie tiks zaudēti.", + "confirm_keys": "S/MIME un OpenPGP atslēgas. Lai tās izmantotu atkal, būs vajadzīga jūsu pašu dublējumkopija.", + "confirm_plugins": "Dati, ko šeit saglabājuši spraudņi", + "confirm_files": "Rediģēšanai atvērti pielikumi un faili, kas gaida pievienošanu", + "confirm_accounts": "Visi konti tiek izrakstīti", + "confirm_button": "Noņemt visu", + "note_unknown": "Jūsu organizācija noņēma šī konta datus no šīs ierīces. Iespējams, ir izdzēsti arī nenosūtītie ziņojumi.", + "refused_waiting": "Nenosūtītie ziņojumi gaida jūsu jauno paroli: {count}. Tie paliek līdz {date}.", + "refused_waiting_unknown": "Iespējams, nenosūtītie ziņojumi gaida jūsu jauno paroli. Tie paliek līdz {date}.", + "confirm_unsent_unknown": "Šeit var būt nenosūtīti ziņojumi. Tie tiks zaudēti.", + "confirm_templates": "Šajā ierīcē saglabātās e-pasta veidnes", + "session_waiting": "Nenosūtītie ziņojumi gaida nākamo pieteikšanos: {count}. Tie paliek līdz {date}.", + "session_waiting_unknown": "Iespējams, nenosūtītie ziņojumi gaida nākamo pieteikšanos. Tie paliek līdz {date}.", + "needs_sign_in": "Nepieciešama pieteikšanās", + "switcher_waiting": "Nenosūtītie ziņojumi: {count}. Tiks izdzēsti no šīs ierīces {date}.", + "switcher_kept": "E-pasts šajā ierīcē tiks izdzēsts {date}.", + "sibling_waiting": "{name} tika izrakstīts. Nenosūtītie ziņojumi: {count}. Piesakieties līdz {date}, citādi tie tiks izdzēsti no šīs ierīces.", + "sibling_kept": "{name} tika izrakstīts. Piesakieties līdz {date}, citādi e-pasts tiks izdzēsts no šīs ierīces." + }, "offlineStorage": { "keep_description": "Glabā jūsu e-pastu, kalendāru, kontaktpersonas un izvēlētos failus šifrētus šajā ierīcē. Bezsaistē varat lasīt, atzīmēt un pārvietot vēstules, un tas, ko rakstāt, gaida izsūtnē. Izrakstoties viss tiek noņemts.", "window_label": "Cik tālu atpakaļ glabāt", @@ -5882,6 +5911,38 @@ "banner_refused": "Servera noraidītie melnraksti: {count}", "banner_waiting": "Melnraksti, kas gaida serveri: {count}" }, + "offlineExport": { + "settings_label": "Eksportēt saglabāto pastu", + "settings_description": "Saglabājiet šīs ierīces pastu kā mbox vai .eml failus. Darbojas arī bezsaistē.", + "title": "Eksportēt saglabāto pastu", + "description": "Saglabā oriģinālus, ko glabā šī ierīce. .eml faili ir precīzas kopijas. mbox fails pievieno formātam vajadzīgās atzīmes un ieraksta izlasīts un atzīmēts statusu katra ziņojuma galvenēs iepriekšējo vietā. Pasta, kas vecāks par izvēlēto periodu, tajā nav. Lai saglabātu visu no servera, izmantojiet “Eksportēt visu pastu”.", + "folders_label": "Mapes", + "all_folders": "Visas mapes", + "folder_kept": "Šeit: {kept} no {total}", + "loading": "Tiek lasīti šīs ierīces dati…", + "load_failed": "Neizdevās nolasīt šīs ierīces pastu.", + "nothing_kept": "Šajā ierīcē vēl nav saglabāta pasta.", + "kept": "Oriģināli šajā ierīcē: {kept} no {total} ziņojumiem", + "missing_online": "Jālejupielādē no servera: {count}", + "missing_offline": "Bezsaistē nevar eksportēt: {count}. Varat mēģināt vēlreiz, kad būsiet tiešsaistē.", + "reason_attachments_off": "Oriģinālie ziņojumi tiek glabāti tikai tad, ja ir ieslēgts “Glabāt pielikumus”.", + "reason_not_kept": "Oriģinālie ziņojumi tiek lejupielādēti pēdējie un tikai tad, ja ir vieta.", + "not_kept_attachments_off": "Oriģināla nav, jo šī ierīce neglabā pielikumus: {count}", + "not_kept_not_kept": "Šajā ierīcē vēl nav oriģināla: {count}", + "retry": "Mēģināt vēlreiz tiešsaistē", + "retry_online": "Tagad esat tiešsaistē, tāpēc tie var nākt no servera.", + "retry_offline": "Varat mēģināt vēlreiz, kad būsiet tiešsaistē.", + "settings_button": "Eksportēt…", + "message_failed": "Serveris nedeva šo ziņojumu.", + "failed_generic": "Eksports apstājās kļūdas dēļ. Mēģiniet vēlreiz.", + "stopped_limit": "Eksports apstājās pie {limit}, vairāk šī pārlūkprogramma nevar turēt. Izvēlieties mazāk mapju vai izmantojiet Chromium, Firefox vai datora lietotni.", + "over_limit": "Šī pārlūkprogramma var turēt ne vairāk kā {limit}, un šī izvēle ir aptuveni {size}. Izvēlieties mazāk mapju vai izmantojiet Chromium, Firefox vai datora lietotni.", + "no_room": "Šim eksportam vajag aptuveni {size}, un šai pārlūkprogrammai ir pieejami {free}. Izvēlieties mazāk mapju vai atbrīvojiet vietu.", + "stopped_no_room": "Pārlūkprogrammai eksportam pietrūka vietas. Izvēlieties mazāk mapju vai atbrīvojiet vietu.", + "stopped_offline_off": "Eksports apstājās, jo šis konts vairs neglabā pastu šajā ierīcē.", + "policy_unknown": "Jūsu organizācijas noteikumi šim kontam vēl nav zināmi, tāpēc eksports pagaidām ir izslēgts.", + "leftover_file": "Failu {name} neizdevās noņemt no saglabāšanas vietas. Tas ir nepilnīgs, varat to izdzēst." + }, "deep_link": { "message_not_found": "Šī ziņa vairs nav pieejama.", "thread_not_found": "Šī sarakste vairs nav pieejama.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Šis ziņojums tika pārvietots uz {folder}.", "window_not_ready": "Jaunais logs neatvērās laikus. Melnraksts paliek šeit." }, + "desktopUi": { + "settings": { + "title": "Logi", + "double_click_label": "Atvērt ziņojumus jaunā logā ar dubultklikšķi", + "double_click_description": "Viens klikšķis joprojām atver ziņojumu blakus sarakstam.", + "restore_label": "Startējot atkal atvērt logus", + "restore_description": "Ziņojumu un melnrakstu logi, kas bija atvērti izejot, atgriežas." + }, + "attachment": { + "open": "Atvērt", + "save_as": "Saglabāt kā…", + "copy": "Kopēt", + "copy_failed": "Failu neizdevās nokopēt." + }, + "menu": { + "file": "Fails", + "edit": "Rediģēt", + "view": "Skats", + "message": "Ziņojums", + "go": "Doties uz", + "window": "Logs", + "help": "Palīdzība", + "new_window": "Jauns logs", + "print": "Drukāt…", + "save_pdf": "Saglabāt kā PDF…", + "switch_connection": "Mainīt savienojumu…", + "close": "Aizvērt", + "quit": "Iziet", + "undo": "Atsaukt", + "redo": "Atkārtot", + "cut": "Izgriezt", + "copy": "Kopēt", + "paste": "Ielīmēt", + "select_all": "Atlasīt visu", + "search": "Meklēt pastā", + "refresh": "Pārbaudīt jaunu pastu", + "reading_pane": "Lasīšanas rūts", + "pane_right": "Labajā pusē", + "pane_below": "Zem saraksta", + "pane_off": "Izslēgta", + "zoom_in": "Tuvināt", + "zoom_out": "Tālināt", + "zoom_reset": "Faktiskais izmērs", + "full_screen": "Pilnekrāna režīms", + "open_in_window": "Atvērt jaunā logā", + "next_message": "Nākamais ziņojums", + "previous_message": "Iepriekšējais ziņojums", + "next_unread": "Nākamais nelasītais ziņojums", + "mail": "Pasts", + "files": "Faili", + "back": "Atpakaļ", + "forward": "Uz priekšu", + "minimize": "Minimizēt", + "next_window": "Nākamais logs", + "shortcuts": "Tastatūras īsinājumtaustiņi", + "docs": "Dokumentācija", + "settings": "Iestatījumi…", + "about": "Par Bulwark", + "from_plugins": "Vairāk no spraudņiem…", + "pick_gone": "Šī izvēlne bija novecojusi. Atveriet to vēlreiz un mēģiniet vēlreiz.", + "bar_label": "Izvēlne" + }, + "context": { + "add_to_dictionary": "Pievienot “{word}” vārdnīcai", + "no_suggestions": "Nav ieteikumu", + "open_link": "Atvērt saiti", + "copy_link": "Kopēt saiti", + "copy_address": "Kopēt adresi", + "save_image": "Saglabāt attēlu…", + "copy_image": "Kopēt attēlu" + }, + "closing": { + "unsaved_title": "Melnrakstu neizdevās saglabāt", + "unsaved_detail": "Ja aizvērsiet tagad, kas uzrakstīts kopš pēdējās saglabāšanas, tiks zaudēts.", + "close_anyway": "Tomēr aizvērt", + "unsent_title": "Daļa pasta vēl nav nosūtīta", + "unsent_one": "Viens ziņojums gaida nosūtīšanu. Tas tiks nosūtīts nākamreiz, kad atvērsiet Bulwark.", + "unsent_many": "Ziņojumi, kas gaida nosūtīšanu: {count}. Tie tiks nosūtīti nākamreiz, kad atvērsiet Bulwark.", + "quit": "Iziet", + "leave_title": "Pamest lapu ar nesaglabātām izmaiņām?", + "leave_detail": "Šajā lapā veiktās izmaiņas vēl nav saglabātas.", + "leave": "Pamest", + "stay": "Palikt" + }, + "spellcheck": { + "offer": "Pareizrakstības pārbaudei valodā {language} nepieciešama vārdnīca. Bulwark to var lejupielādēt no Google. Jūsu teksts netiek sūtīts.", + "download": "Lejupielādēt" + }, + "restore": { + "unavailable_title": "Šo melnrakstu pašlaik nevar atvērt", + "unavailable_body": "Tas ir drošībā serverī, mapē Melnraksti. Mēģiniet vēlreiz, kad savienojums būs atjaunots.", + "try_again": "Mēģināt vēlreiz", + "close": "Aizvērt" + } + }, "desktop_sign_in": { "browser_button": "Pierakstīties ar pārlūku", "browser_waiting": "Pabeidziet pierakstīšanos pārlūkā", @@ -6661,6 +6817,53 @@ "revoke": "Atsaukt", "revoked": "Atļauja atsaukta" }, + "desktopOs": { + "section_title": "Darbvirsmas lietotne", + "section_description": "Kā lietotne darbojas ar jūsu datoru.", + "close_to_tray_label": "Aizverot turpināt darbu teknē", + "close_to_tray_description": "Jauns pasts un atgādinājumi turpina pienākt arī pēc loga aizvēršanas.", + "start_at_login_label": "Sākt, piesakoties datorā", + "start_at_login_description": "Lietotne sākas pati, kad piesakāties.", + "start_minimized_label": "Sākt teknē", + "start_minimized_description": "Piesakoties logs neatveras. Atveriet to ar teknes ikonu.", + "attention_label": "Mirgot uzdevumjoslā, pienākot pastam", + "attention_mac_label": "Lēkāt Dock ikonai, pienākot pastam", + "attention_description": "Tikai tad, ja lietotne nav priekšplānā.", + "quiet_hours_label": "Klusuma stundas", + "quiet_hours_description": "Šajā laikā nav paziņojumu un skaņu. Pasts turpina pienākt.", + "quiet_hours_from": "No", + "quiet_hours_to": "līdz", + "show_shortcut_label": "Rādīt lietotni ar īsinājumtaustiņu", + "show_shortcut_description": "{keys} parāda lietotni priekšplānā no jebkuras citas lietotnes.", + "show_shortcut_taken": "{keys} izmanto cita lietotne. Aizveriet to vai izslēdziet un atkal ieslēdziet šo iestatījumu.", + "default_app_label": "Noklusējuma pasta lietotne", + "default_app_description": "Atvērt pasta saites un .eml, .ics un .vcf failus ar šo lietotni.", + "default_app_is_default": "Šī lietotne atver jūsu pasta saites.", + "default_app_button": "Izvēlēties noklusējuma lietotni…", + "new_mail": "Jauns pasts", + "no_subject": "(nav tēmas)", + "action_delete": "Dzēst", + "copy_as_file": "Kopēt kā failu", + "copied": "Fails nokopēts. Varat to ielīmēt mapē.", + "copy_failed": "Failu neizdevās nokopēt.", + "reply_lost": "Ievadīto atbildi neizdevās saglabāt. Atveriet ziņojumu un atbildiet tur." + }, + "desktopReminders": { + "generic_title": "Atgādinājums", + "snooze": "Atlikt par {count} min", + "snooze_short": "{count} min", + "open": "Atvērt", + "join": "Pievienoties", + "missed_title": "{count, plural, zero {# nokavētu atgādinājumu} one {# nokavēts atgādinājums} other {# nokavēti atgādinājumi}}", + "missed_more": "un vēl {count}", + "missed_show": "Rādīt", + "missed_dialog_title": "Nokavētie atgādinājumi", + "missed_dialog_description": "Tie pienāca, kamēr lietotne bija aizvērta, dators bija miega režīmā vai paziņojumi bija apturēti.", + "open_calendar": "Atvērt kalendāru", + "done": "Gatavs", + "join_host": "Pievienoties ({host})", + "join_named": "Pievienoties: {title}" + }, "desktop_policy": { "server_refused": "Jūsu organizācija šajā ierīcē neatļauj šo serveri.", "plugin_refused": "Jūsu organizācija šajā ierīcē neatļauj šo spraudni, tāpēc tas nedarbojas. Tā iestatījumi un dati tiek saglabāti.", @@ -6669,5 +6872,30 @@ "plugins_off": "Jūsu organizācija šajā ierīcē ir izslēgusi spraudņus.", "plugins_allowlist": "Jūsu organizācija šajā ierīcē atļauj tikai noteiktus spraudņus.", "off": "Izslēgts" + }, + "desktopTelemetry": { + "section_title": "Lietošanas dati un avāriju atskaites", + "section_description": "Abi ir izslēgti, līdz tos ieslēdzat, un katram ir savs slēdzis.", + "telemetry_label": "Sūtīt lietošanas datus", + "telemetry_description": "Reizi dienā: nejaušs ID, lietotnes versija, Node versija, jūsu operētājsistēma, cik ilgi lietotne darbojas un kā tā savienojas. Ar savu pasta serveri arī tas, kuras funkcijas ir ieslēgtas, aptuvens kontu skaits un cik spraudņu un motīvu jums ir. Nekad vēstules, adreses vai serveru nosaukumi.", + "crash_label": "Sūtīt avāriju atskaites", + "crash_description": "Lietotnes kļūdas tiek sūtītas ar nejaušu ID, failu nosaukumiem no pašas lietotnes koda un īsiem, attīrītiem ziņojumiem. Ja avarē pati lietotne, avārijas fails paliek šajā datorā un to atstāj tikai tad, ja to nosūtāt.", + "crash_memory": "Avārijas fails ir daļas lietotnes atmiņas kopija avārijas brīdī. Bulwark noņem atrastos lietotājvārdus, adreses un pierakstīšanās marķierus, bet avārijas failā joprojām var būt jūsu vēstuļu teksts.", + "instance_note": "Bulwark serverī tā administrators atsevišķi izlemj, ko lapas tam ziņo.", + "forced_off": "Jūsu organizācija to ir izslēgusi.", + "url_label": "Kurp nonāk avārijas faili", + "url_description": "Https adrese, kas saņem avārijas failu. Bulwark tādu nenodrošina.", + "url_invalid": "Ievadiet pilnu https adresi.", + "url_save": "Saglabāt", + "files_label": "Avārijas faili šajā datorā", + "files_description": "Bulwark patur jaunākos un dzēš tos, kas vecāki par mēnesi.", + "files_empty": "Nav avārijas failu.", + "file_size": "{size} KB", + "send": "Sūtīt avārijas atskaiti…", + "delete_all": "Dzēst visus", + "sent": "Avārijas atskaite nosūtīta.", + "send_no_consent": "Vispirms ieslēdziet avāriju atskaites.", + "send_no_url": "Adrese nav iestatīta, tāpēc to nav kur sūtīt. Ievadiet to augstāk.", + "send_failed": "Avārijas atskaiti neizdevās nosūtīt." } } diff --git a/locales/mn/common.json b/locales/mn/common.json index b01095b91..9a7cfd2fa 100644 --- a/locales/mn/common.json +++ b/locales/mn/common.json @@ -5801,6 +5801,35 @@ "store_private": "Хувийн цонх офлайн ашиглах захидал хадгалж чадахгүй.", "server_not_answering": "Шуудангийн сервер хариу өгөхгүй байна. Хэсэг хугацааны дараа дахин оролдоно уу." }, + "offlineWipe": { + "note": "Таны байгууллага энэ бүртгэлийн өгөгдлийг энэ төхөөрөмжөөс устгасан. Дахин эхлэхийн тулд нэвтэрнэ үү.", + "note_unsent": "Таны байгууллага энэ бүртгэлийн өгөгдлийг энэ төхөөрөмжөөс устгасан. Устгасан илгээгээгүй зурвас: {count}.", + "settings_title": "Энэ төхөөрөмжөөс бүгдийг устгах", + "settings_description": "Энэ компьютерийг бусдад өгөх эсвэл ашиглахаа болих үед. Сервер дээрх таны шуудан хэвээр үлдэнэ.", + "settings_button": "Бүгдийг устгах…", + "settings_wiping": "Устгаж байна…", + "confirm_title": "Энэ төхөөрөмжөөс бүгдийг устгах уу?", + "confirm_message": "Энэ аппын энэ төхөөрөмж дээр хадгалсан бүх зүйлийг эндхийн бүх бүртгэлд устгана. Сервер дээрх таны шуудан хөндөгдөхгүй.", + "confirm_mail": "Энд хадгалсан шуудан, хуанли, харилцагч, файлууд", + "confirm_unsent": "Энд хүлээгдэж буй илгээгээгүй зурвас: {count}. Тэд алга болно.", + "confirm_keys": "S/MIME болон OpenPGP түлхүүрүүд. Дахин ашиглахын тулд өөрийн нөөц хуулбар хэрэгтэй.", + "confirm_plugins": "Өргөтгөлүүдийн энд хадгалсан өгөгдөл", + "confirm_files": "Засахаар нээсэн хавсралтууд болон хавсаргахаар хүлээж буй файлууд", + "confirm_accounts": "Бүх бүртгэлээс гарна", + "confirm_button": "Бүгдийг устгах", + "note_unknown": "Таны байгууллага энэ бүртгэлийн өгөгдлийг энэ төхөөрөмжөөс устгасан. Илгээгээгүй зурвасууд мөн устсан байж магадгүй.", + "refused_waiting": "Шинэ нууц үгийг тань хүлээж буй илгээгээгүй зурвас: {count}. {date} хүртэл хадгалагдана.", + "refused_waiting_unknown": "Илгээгээгүй зурвасууд шинэ нууц үгийг тань хүлээж байж магадгүй. {date} хүртэл хадгалагдана.", + "confirm_unsent_unknown": "Энд илгээгээгүй зурвас хүлээж байж магадгүй. Тэдгээр нь алдагдана.", + "confirm_templates": "Энэ төхөөрөмжид хадгалсан имэйлийн загварууд", + "session_waiting": "Дараагийн нэвтрэлтийг хүлээж буй илгээгээгүй зурвас: {count}. {date} хүртэл хадгалагдана.", + "session_waiting_unknown": "Илгээгээгүй зурвасууд дараагийн нэвтрэлтийг хүлээж байж магадгүй. {date} хүртэл хадгалагдана.", + "needs_sign_in": "Нэвтрэх шаардлагатай", + "switcher_waiting": "Илгээгээгүй зурвас: {count}. {date}-нд энэ төхөөрөмжөөс устгагдана.", + "switcher_kept": "Энэ төхөөрөмж дээрх имэйл {date}-нд устгагдана.", + "sibling_waiting": "{name} системээс гарсан. Илгээгээгүй зурвас: {count}. {date} хүртэл нэвтэрнэ үү, эс бөгөөс энэ төхөөрөмжөөс устгагдана.", + "sibling_kept": "{name} системээс гарсан. {date} хүртэл нэвтэрнэ үү, эс бөгөөс имэйл энэ төхөөрөмжөөс устгагдана." + }, "offlineStorage": { "keep_description": "Таны имэйл, хуанли, харилцагчид болон сонгосон файлуудыг энэ төхөөрөмж дээр шифрлэн хадгална. Офлайн үед имэйл уншиж, тэмдэглэж, зөөж болох ба бичсэн зүйл тань гарах хайрцагт хүлээнэ. Гарахад бүгд устна.", "window_label": "Хэр удаан хугацаагаар хадгалах вэ", @@ -5882,6 +5911,38 @@ "banner_refused": "Серверийн татгалзсан ноорог: {count}", "banner_waiting": "Серверийг хүлээж буй ноорог: {count}" }, + "offlineExport": { + "settings_label": "Хадгалсан захидлыг экспортлох", + "settings_description": "Энэ төхөөрөмжийн захидлыг mbox эсвэл .eml файлаар хадгална. Офлайн үед ч ажиллана.", + "title": "Хадгалсан захидлыг экспортлох", + "description": "Энэ төхөөрөмжид хадгалсан эх хувиудыг хадгална. .eml файлууд яг хуулбар байна. mbox файл нь форматад шаардлагатай тэмдгүүдийг нэмж, уншсан болон тэмдэглэсэн төлөвийг захидал бүрийн толгойд өмнөхийнх нь оронд бичнэ. Сонгосон хугацаанаас хуучин захидал орохгүй. Серверт байгаа бүгдийг хадгалахын тулд “Бүх шуудан экспортлох”-г ашиглана уу.", + "folders_label": "Хавтаснууд", + "all_folders": "Бүх хавтас", + "folder_kept": "Энд: {total}-с {kept}", + "loading": "Энэ төхөөрөмжийн өгөгдлийг уншиж байна…", + "load_failed": "Энэ төхөөрөмжийн захидлыг уншиж чадсангүй.", + "nothing_kept": "Энэ төхөөрөмжид хадгалсан захидал одоогоор алга.", + "kept": "Энэ төхөөрөмж дээрх эх хувь: {total}-с {kept}", + "missing_online": "Серверээс татах: {count}", + "missing_offline": "Офлайн үед экспортлох боломжгүй: {count}. Онлайн болсны дараа дахин оролдоно уу.", + "reason_attachments_off": "Эх захидлуудыг зөвхөн “Хавсралтуудыг хадгалах” асаалттай үед хадгална.", + "reason_not_kept": "Эх захидлууд хамгийн сүүлд, зөвхөн зай байвал татагдана.", + "not_kept_attachments_off": "Энэ төхөөрөмж хавсралт хадгалдаггүй тул эх хувь алга: {count}", + "not_kept_not_kept": "Энэ төхөөрөмжид эх хувь одоогоор алга: {count}", + "retry": "Онлайнаар дахин оролдох", + "retry_online": "Та одоо онлайн байгаа тул серверээс авч болно.", + "retry_offline": "Онлайн болсны дараа дахин оролдоно уу.", + "settings_button": "Экспортлох…", + "message_failed": "Сервер энэ захидлыг өгсөнгүй.", + "failed_generic": "Алдааны улмаас экспорт зогслоо. Дахин оролдоно уу.", + "stopped_limit": "Экспорт {limit} дээр зогслоо, энэ хөтчийн багтаах дээд хэмжээ. Цөөн хавтас сонгох, эсвэл Chromium, Firefox, ширээний аппыг ашиглана уу.", + "over_limit": "Энэ хөтөч дээд тал нь {limit} багтаана, энэ сонголт ойролцоогоор {size}. Цөөн хавтас сонгох, эсвэл Chromium, Firefox, ширээний аппыг ашиглана уу.", + "no_room": "Энэ экспортод ойролцоогоор {size} хэрэгтэй, энэ хөтөчид {free} үлдсэн. Цөөн хавтас сонгох эсвэл зай чөлөөлнө үү.", + "stopped_no_room": "Хөтчид экспортын зай дууслаа. Цөөн хавтас сонгох эсвэл зай чөлөөлнө үү.", + "stopped_offline_off": "Энэ бүртгэл энэ төхөөрөмжид захидал хадгалахаа больсон тул экспорт зогслоо.", + "policy_unknown": "Танай байгууллагын энэ бүртгэлд хамаарах дүрэм одоогоор тодорхойгүй тул экспорт түр унтраалттай байна.", + "leftover_file": "{name} файлыг хадгалсан газраас нь устгаж чадсангүй. Энэ нь бүрэн бус тул та устгаж болно." + }, "deep_link": { "message_not_found": "Энэ зурвас дахин ашиглах боломжгүй болсон.", "thread_not_found": "Энэ харилцан яриа дахин ашиглах боломжгүй болсон.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Энэ мессежийг {folder} руу зөөсөн.", "window_not_ready": "Шинэ цонх цагтаа нээгдсэнгүй. Таны ноорог энд үлдэнэ." }, + "desktopUi": { + "settings": { + "title": "Цонх", + "double_click_label": "Давхар товшиход мессежийг шинэ цонхонд нээх", + "double_click_description": "Нэг товшилт мессежийг жагсаалтын хажууд нээсээр байна.", + "restore_label": "Эхлэхэд цонхнуудыг дахин нээх", + "restore_description": "Гарах үед нээлттэй байсан мессеж, ноорог цонхнууд буцаж нээгдэнэ." + }, + "attachment": { + "open": "Нээх", + "save_as": "Өөрөөр хадгалах…", + "copy": "Хуулах", + "copy_failed": "Файлыг хуулж чадсангүй." + }, + "menu": { + "file": "Файл", + "edit": "Засах", + "view": "Харах", + "message": "Зурвас", + "go": "Очих", + "window": "Цонх", + "help": "Тусламж", + "new_window": "Шинэ цонх", + "print": "Хэвлэх…", + "save_pdf": "PDF хэлбэрээр хадгалах…", + "switch_connection": "Холболт солих…", + "close": "Хаах", + "quit": "Гарах", + "undo": "Буцаах", + "redo": "Дахин хийх", + "cut": "Хайчлах", + "copy": "Хуулах", + "paste": "Буулгах", + "select_all": "Бүгдийг сонгох", + "search": "Захидлаас хайх", + "refresh": "Шинэ захидал шалгах", + "reading_pane": "Унших хэсэг", + "pane_right": "Баруун талд", + "pane_below": "Жагсаалтын доор", + "pane_off": "Идэвхгүй", + "zoom_in": "Томруулах", + "zoom_out": "Жижигрүүлэх", + "zoom_reset": "Бодит хэмжээ", + "full_screen": "Бүтэн дэлгэц", + "open_in_window": "Шинэ цонхонд нээх", + "next_message": "Дараагийн зурвас", + "previous_message": "Өмнөх зурвас", + "next_unread": "Дараагийн уншаагүй зурвас", + "mail": "Имэйл", + "files": "Файлууд", + "back": "Буцах", + "forward": "Урагш", + "minimize": "Жижигрүүлэх", + "next_window": "Дараагийн цонх", + "shortcuts": "Гарын товчлол", + "docs": "Баримт бичиг", + "settings": "Тохиргоо…", + "about": "Bulwark-ийн тухай", + "from_plugins": "Залгаснуудын бусад зүйл…", + "pick_gone": "Энэ цэс хуучирсан байна. Дахин нээгээд нэг удаа оролдоно уу.", + "bar_label": "Цэс" + }, + "context": { + "add_to_dictionary": "“{word}”-ийг толь бичигт нэмэх", + "no_suggestions": "Санал алга", + "open_link": "Холбоос нээх", + "copy_link": "Холбоос хуулах", + "copy_address": "Хаяг хуулах", + "save_image": "Зураг хадгалах…", + "copy_image": "Зураг хуулах" + }, + "closing": { + "unsaved_title": "Ноорогийг хадгалж чадсангүй", + "unsaved_detail": "Одоо хаавал сүүлд хадгалснаас хойш бичсэн зүйл тань алдагдана.", + "close_anyway": "Ямартай ч хаах", + "unsent_title": "Зарим захидал хараахан илгээгдээгүй байна", + "unsent_one": "Нэг зурвас илгээгдэхийг хүлээж байна. Bulwark-ийг дараа нээхэд илгээгдэнэ.", + "unsent_many": "{count} зурвас илгээгдэхийг хүлээж байна. Bulwark-ийг дараа нээхэд илгээгдэнэ.", + "quit": "Гарах", + "leave_title": "Хадгалаагүй өөрчлөлттэй гарах уу?", + "leave_detail": "Энэ хуудсанд хийсэн өөрчлөлт тань хараахан хадгалагдаагүй байна.", + "leave": "Гарах", + "stay": "Үлдэх" + }, + "spellcheck": { + "offer": "{language} хэлний үсгийн алдаа шалгагчид толь бичиг хэрэгтэй. Bulwark үүнийг Google-ээс татаж авч чадна. Таны бичвэр илгээгдэхгүй.", + "download": "Татах" + }, + "restore": { + "unavailable_title": "Энэ ноорогийг одоо нээх боломжгүй", + "unavailable_body": "Ноорог серверийн Ноорог хавтсанд аюулгүй байна. Холболт сэргэхэд дахин оролдоно уу.", + "try_again": "Дахин оролдох", + "close": "Хаах" + } + }, "desktop_sign_in": { "browser_button": "Хөтчөөр нэвтрэх", "browser_waiting": "Нэвтрэлтээ хөтөч дээр дуусгана уу", @@ -6661,6 +6817,53 @@ "revoke": "Буцааж авах", "revoked": "Зөвшөөрлийг буцааж авлаа" }, + "desktopOs": { + "section_title": "Ширээний апп", + "section_description": "Апп таны компьютертэй хэрхэн ажиллах.", + "close_to_tray_label": "Хаахад тавиур дээр үргэлжлүүлэн ажиллах", + "close_to_tray_description": "Цонхыг хаасны дараа ч шинэ захиа, сануулга ирсээр байна.", + "start_at_login_label": "Компьютерт нэвтрэхэд эхлүүлэх", + "start_at_login_description": "Нэвтрэхэд апп өөрөө эхэлнэ.", + "start_minimized_label": "Тавиур дээр эхлүүлэх", + "start_minimized_description": "Нэвтрэхэд цонх нээгдэхгүй. Тавиурын дүрсээр нээнэ үү.", + "attention_label": "Шинэ захиа ирэхэд ажлын самбарыг анивчуулах", + "attention_mac_label": "Шинэ захиа ирэхэд Dock дүрсийг үсрүүлэх", + "attention_description": "Зөвхөн апп урд талд байхгүй үед.", + "quiet_hours_label": "Чимээгүй цаг", + "quiet_hours_description": "Энэ үед мэдэгдэл, дуу гарахгүй. Захиа ирсээр байна.", + "quiet_hours_from": "Эхлэх", + "quiet_hours_to": "хүртэл", + "show_shortcut_label": "Гарын товчлолоор аппыг харуулах", + "show_shortcut_description": "{keys} нь аль ч аппаас энэ аппыг урд гаргана.", + "show_shortcut_taken": "{keys}-г өөр апп ашиглаж байна. Тэр аппыг хаах, эсвэл үүнийг унтраагаад дахин асаана уу.", + "default_app_label": "Үндсэн шуудангийн апп", + "default_app_description": "Шуудангийн холбоос болон .eml, .ics, .vcf файлыг энэ аппаар нээх.", + "default_app_is_default": "Энэ апп таны шуудангийн холбоосыг нээдэг.", + "default_app_button": "Үндсэн апп сонгох…", + "new_mail": "Шинэ захиа", + "no_subject": "(гарчиггүй)", + "action_delete": "Устгах", + "copy_as_file": "Файл болгож хуулах", + "copied": "Файлыг хууллаа. Хавтсанд буулгаж болно.", + "copy_failed": "Файлыг хуулж чадсангүй.", + "reply_lost": "Бичсэн хариуг хадгалж чадсангүй. Захиаг нээгээд тэндээс хариулна уу." + }, + "desktopReminders": { + "generic_title": "Сануулга", + "snooze": "{count} минут хойшлуулах", + "snooze_short": "{count} мин", + "open": "Нээх", + "join": "Нэгдэх", + "missed_title": "{count, plural, one {Алдсан # сануулга} other {Алдсан # сануулга}}", + "missed_more": "бас {count}", + "missed_show": "Харуулах", + "missed_dialog_title": "Алдсан сануулгууд", + "missed_dialog_description": "Апп хаалттай, компьютер унтсан эсвэл мэдэгдэл түр зогссон үед хугацаа нь болсон.", + "open_calendar": "Хуанли нээх", + "done": "Болсон", + "join_host": "Нэгдэх ({host})", + "join_named": "Нэгдэх: {title}" + }, "desktop_policy": { "server_refused": "Танай байгууллага энэ төхөөрөмж дээр энэ серверийг зөвшөөрөхгүй байна.", "plugin_refused": "Танай байгууллага энэ төхөөрөмж дээр энэ залгаасыг зөвшөөрөхгүй тул ажиллахгүй. Тохиргоо, өгөгдөл нь хадгалагдана.", @@ -6669,5 +6872,30 @@ "plugins_off": "Танай байгууллага энэ төхөөрөмж дээр залгаасуудыг унтраасан.", "plugins_allowlist": "Танай байгууллага энэ төхөөрөмж дээр зөвхөн тодорхой залгаасуудыг зөвшөөрдөг.", "off": "Унтраалттай" + }, + "desktopTelemetry": { + "section_title": "Хэрэглээний мэдээлэл ба гэмтлийн тайлан", + "section_description": "Хоёулаа таныг асаах хүртэл унтраалттай бөгөөд тус бүр өөрийн унтраалгатай.", + "telemetry_label": "Хэрэглээний мэдээлэл илгээх", + "telemetry_description": "Өдөрт нэг удаа: санамсаргүй ID, аппын хувилбар, Node-ийн хувилбар, таны үйлдлийн систем, апп хэр удаан ажиллаж байгаа, хэрхэн холбогддог. Өөрийн шуудангийн сервертэй бол мөн ямар боломжууд асаалттай, бүртгэлийн ойролцоо тоо, хэдэн залгаас ба загвартай. Захидал, хаяг, серверийн нэрийг хэзээ ч илгээхгүй.", + "crash_label": "Гэмтлийн тайлан илгээх", + "crash_description": "Аппын алдаанууд санамсаргүй ID, аппын өөрийн кодын файлын нэрс болон богино, цэвэрлэсэн мессежтэй хамт илгээгдэнэ. Апп өөрөө гэмтвэл гэмтлийн файл энэ компьютерт үлдэх бөгөөд та илгээсэн үед л гарна.", + "crash_memory": "Гэмтлийн файл нь гэмтэх үеийн аппын санах ойн хэсгийн хуулбар юм. Bulwark олсон хэрэглэгчийн нэр, хаяг, нэвтрэх токенуудыг устгадаг ч гэмтлийн файлд таны захидлын текст үлдэж болно.", + "instance_note": "Bulwark сервер дээр хуудсууд түүнд юу мэдээлэхийг админ нь тусад нь шийддэг.", + "forced_off": "Танай байгууллага үүнийг унтраасан.", + "url_label": "Гэмтлийн файлууд хаашаа очих", + "url_description": "Гэмтлийн файлыг хүлээн авах https хаяг. Bulwark-д ийм хаяг байхгүй.", + "url_invalid": "Бүтэн https хаяг оруулна уу.", + "url_save": "Хадгалах", + "files_label": "Энэ компьютер дээрх гэмтлийн файлууд", + "files_description": "Bulwark хамгийн сүүлийнхийг хадгалж, сараас хуучныг устгадаг.", + "files_empty": "Гэмтлийн файл алга.", + "file_size": "{size} КБ", + "send": "Гэмтлийн тайлан илгээх…", + "delete_all": "Бүгдийг устгах", + "sent": "Гэмтлийн тайлан илгээгдлээ.", + "send_no_consent": "Эхлээд гэмтлийн тайланг асаана уу.", + "send_no_url": "Хаяг тохируулаагүй тул илгээх газаргүй. Дээр нэгийг оруулна уу.", + "send_failed": "Гэмтлийн тайланг илгээж чадсангүй." } } diff --git a/locales/nb/common.json b/locales/nb/common.json index cabb65954..0f6870287 100644 --- a/locales/nb/common.json +++ b/locales/nb/common.json @@ -5801,6 +5801,35 @@ "store_private": "Private vinduer kan ikke beholde e-post for bruk uten nett.", "server_not_answering": "E-postserveren svarer ikke. Prøv igjen om litt." }, + "offlineWipe": { + "note": "Organisasjonen din har fjernet dataene for denne kontoen fra denne enheten. Logg på for å begynne på nytt.", + "note_unsent": "Organisasjonen din har fjernet dataene for denne kontoen fra denne enheten. Slettede usendte meldinger: {count}.", + "settings_title": "Fjern alt fra denne enheten", + "settings_description": "For når du gir bort denne datamaskinen eller slutter å bruke den. E-posten din på serveren blir værende.", + "settings_button": "Fjern alt…", + "settings_wiping": "Fjerner…", + "confirm_title": "Vil du fjerne alt fra denne enheten?", + "confirm_message": "Dette sletter det denne appen lagrer på denne enheten, for alle kontoer her. E-posten din på serveren blir ikke rørt.", + "confirm_mail": "E-post, kalendere, kontakter og filer som er lagret her", + "confirm_unsent": "Usendte meldinger som venter her: {count}. De går tapt.", + "confirm_keys": "S/MIME- og OpenPGP-nøkler. Du trenger din egen sikkerhetskopi for å bruke dem igjen.", + "confirm_plugins": "Data som programtillegg har lagret her", + "confirm_files": "Vedlegg som er åpnet for redigering, og filer som venter på å bli lagt ved", + "confirm_accounts": "Alle kontoer logges av", + "confirm_button": "Fjern alt", + "note_unknown": "Organisasjonen din har fjernet dataene til denne kontoen fra denne enheten. Usendte meldinger kan også være slettet.", + "refused_waiting": "Usendte meldinger som venter på det nye passordet: {count}. De blir til {date}.", + "refused_waiting_unknown": "Usendte meldinger venter kanskje på det nye passordet. De blir til {date}.", + "confirm_unsent_unknown": "Det venter kanskje usendte meldinger her. De går tapt.", + "confirm_templates": "E-postmaler lagret på denne enheten", + "session_waiting": "Usendte meldinger som venter på neste pålogging: {count}. De blir til {date}.", + "session_waiting_unknown": "Usendte meldinger venter kanskje på neste pålogging. De blir til {date}.", + "needs_sign_in": "Krever pålogging", + "switcher_waiting": "Usendte meldinger: {count}. Slettes fra denne enheten {date}.", + "switcher_kept": "E-posten på denne enheten slettes {date}.", + "sibling_waiting": "{name} ble logget ut. Usendte meldinger: {count}. Logg på innen {date}, ellers slettes de fra denne enheten.", + "sibling_kept": "{name} ble logget ut. Logg på innen {date}, ellers slettes e-posten fra denne enheten." + }, "offlineStorage": { "keep_description": "Beholder e-posten, kalenderen, kontaktene og filene du velger, kryptert på denne enheten. Frakoblet kan du lese, flagge og flytte e-post, og det du skriver, venter i utboksen. Når du logger av, fjernes alt.", "window_label": "Hvor langt tilbake som beholdes", @@ -5882,6 +5911,38 @@ "banner_refused": "Utkast avvist av serveren: {count}", "banner_waiting": "Utkast som venter på serveren: {count}" }, + "offlineExport": { + "settings_label": "Eksporter lagret e-post", + "settings_description": "Lagre e-posten på denne enheten som mbox- eller .eml-filer. Dette virker også frakoblet.", + "title": "Eksporter lagret e-post", + "description": "Dette lagrer originalene denne enheten beholder. .eml-filer er nøyaktige kopier. En mbox-fil legger til merkene formatet trenger, og skriver status for lest og flagget i hver meldings overskrifter, i stedet for dem den hadde. E-post eldre enn perioden du valgte, er ikke med. Bruk «Eksporter all e-post» for å lagre alt fra serveren.", + "folders_label": "Mapper", + "all_folders": "Alle mapper", + "folder_kept": "{kept} av {total} her", + "loading": "Leser det som ligger på denne enheten…", + "load_failed": "Kunne ikke lese e-posten på denne enheten.", + "nothing_kept": "Ingen e-post er lagret på denne enheten ennå.", + "kept": "Originaler på denne enheten: {kept} av {total} meldinger", + "missing_online": "Skal lastes ned fra serveren: {count}", + "missing_offline": "Kan ikke eksporteres frakoblet: {count}. Du kan prøve igjen når du er tilkoblet.", + "reason_attachments_off": "Originale meldinger beholdes bare når «Behold vedlegg» er på.", + "reason_not_kept": "Originale meldinger lastes ned sist, og bare så lenge det er plass.", + "not_kept_attachments_off": "Ingen original her fordi vedlegg ikke beholdes på denne enheten: {count}", + "not_kept_not_kept": "Ingen original på denne enheten ennå: {count}", + "retry": "Prøv igjen tilkoblet", + "retry_online": "Du er tilkoblet nå, så disse kan komme fra serveren.", + "retry_offline": "Du kan prøve igjen når du er tilkoblet.", + "settings_button": "Eksporter…", + "message_failed": "Serveren leverte ikke denne meldingen.", + "failed_generic": "Eksporten stoppet på grunn av en feil. Prøv igjen.", + "stopped_limit": "Eksporten stoppet ved {limit}, det meste denne nettleseren kan holde. Velg færre mapper, eller bruk Chromium, Firefox eller skrivebordsappen.", + "over_limit": "Denne nettleseren kan holde høyst {limit}, og dette valget er omtrent {size}. Velg færre mapper, eller bruk Chromium, Firefox eller skrivebordsappen.", + "no_room": "Denne eksporten trenger omtrent {size}, og denne nettleseren har {free} igjen. Velg færre mapper, eller frigjør plass.", + "stopped_no_room": "Nettleseren gikk tom for plass til eksporten. Velg færre mapper, eller frigjør plass.", + "stopped_offline_off": "Eksporten stoppet fordi denne kontoen ikke lenger beholder e-post på denne enheten.", + "policy_unknown": "Organisasjonens regler for denne kontoen er ikke kjent ennå, så eksport er av inntil videre.", + "leftover_file": "Filen {name} kunne ikke fjernes fra stedet du lagret den. Den er ufullstendig, så du kan slette den." + }, "deep_link": { "message_not_found": "Denne meldingen er ikke lenger tilgjengelig.", "thread_not_found": "Denne samtalen er ikke lenger tilgjengelig.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Denne meldingen ble flyttet til {folder}.", "window_not_ready": "Det nye vinduet åpnet seg ikke i tide. Utkastet blir her." }, + "desktopUi": { + "settings": { + "title": "Vinduer", + "double_click_label": "Åpne meldinger i et nytt vindu ved dobbeltklikk", + "double_click_description": "Et enkelt klikk åpner fortsatt meldingen ved siden av listen.", + "restore_label": "Åpne vinduer på nytt ved start", + "restore_description": "Meldings- og utkastvinduer som var åpne da du avsluttet, kommer tilbake." + }, + "attachment": { + "open": "Åpne", + "save_as": "Lagre som…", + "copy": "Kopier", + "copy_failed": "Filen kunne ikke kopieres." + }, + "menu": { + "file": "Fil", + "edit": "Rediger", + "view": "Vis", + "message": "Melding", + "go": "Gå", + "window": "Vindu", + "help": "Hjelp", + "new_window": "Nytt vindu", + "print": "Skriv ut…", + "save_pdf": "Lagre som PDF…", + "switch_connection": "Bytt tilkobling…", + "close": "Lukk", + "quit": "Avslutt", + "undo": "Angre", + "redo": "Gjør om", + "cut": "Klipp ut", + "copy": "Kopier", + "paste": "Lim inn", + "select_all": "Velg alt", + "search": "Søk i e-post", + "refresh": "Se etter ny e-post", + "reading_pane": "Leserute", + "pane_right": "Til høyre", + "pane_below": "Under listen", + "pane_off": "Av", + "zoom_in": "Zoom inn", + "zoom_out": "Zoom ut", + "zoom_reset": "Faktisk størrelse", + "full_screen": "Fullskjerm", + "open_in_window": "Åpne i nytt vindu", + "next_message": "Neste melding", + "previous_message": "Forrige melding", + "next_unread": "Neste uleste melding", + "mail": "E-post", + "files": "Filer", + "back": "Tilbake", + "forward": "Fremover", + "minimize": "Minimer", + "next_window": "Neste vindu", + "shortcuts": "Tastatursnarveier", + "docs": "Dokumentasjon", + "settings": "Innstillinger…", + "about": "Om Bulwark", + "from_plugins": "Mer fra utvidelser…", + "pick_gone": "Den menyen var utdatert. Åpne den på nytt og prøv igjen.", + "bar_label": "Meny" + }, + "context": { + "add_to_dictionary": "Legg til «{word}» i ordboken", + "no_suggestions": "Ingen forslag", + "open_link": "Åpne lenke", + "copy_link": "Kopier lenke", + "copy_address": "Kopier adresse", + "save_image": "Lagre bilde…", + "copy_image": "Kopier bilde" + }, + "closing": { + "unsaved_title": "Et utkast kunne ikke lagres", + "unsaved_detail": "Hvis du lukker nå, går det du har skrevet siden forrige lagring tapt.", + "close_anyway": "Lukk likevel", + "unsent_title": "Noe e-post er ikke sendt ennå", + "unsent_one": "Én melding venter på å bli sendt. Den sendes neste gang du åpner Bulwark.", + "unsent_many": "{count} meldinger venter på å bli sendt. De sendes neste gang du åpner Bulwark.", + "quit": "Avslutt", + "leave_title": "Forlate siden med ulagrede endringer?", + "leave_detail": "Endringene dine på denne siden er ikke lagret ennå.", + "leave": "Forlat", + "stay": "Bli" + }, + "spellcheck": { + "offer": "Stavekontroll for {language} trenger en ordbok. Bulwark kan laste den ned fra Google. Teksten din blir ikke sendt.", + "download": "Last ned" + }, + "restore": { + "unavailable_title": "Dette utkastet kan ikke åpnes akkurat nå", + "unavailable_body": "Det er trygt på serveren, i Utkast. Prøv igjen når tilkoblingen er tilbake.", + "try_again": "Prøv igjen", + "close": "Lukk" + } + }, "desktop_sign_in": { "browser_button": "Logg på med nettleseren", "browser_waiting": "Fullfør påloggingen i nettleseren", @@ -6661,6 +6817,53 @@ "revoke": "Trekk tilbake", "revoked": "Tillatelsen er trukket tilbake" }, + "desktopOs": { + "section_title": "Skrivebordsapp", + "section_description": "Slik samarbeider appen med datamaskinen din.", + "close_to_tray_label": "Fortsett i systemstatusfeltet ved lukking", + "close_to_tray_description": "Ny e-post og påminnelser fortsetter å komme etter at du lukker vinduet.", + "start_at_login_label": "Start når du logger på datamaskinen", + "start_at_login_description": "Appen starter av seg selv når du logger på.", + "start_minimized_label": "Start i systemstatusfeltet", + "start_minimized_description": "Det åpnes ikke noe vindu ved pålogging. Åpne appen med ikonet i systemstatusfeltet.", + "attention_label": "Blink i oppgavelinjen ved ny e-post", + "attention_mac_label": "La Dock-ikonet sprette ved ny e-post", + "attention_description": "Bare når appen ikke er foran.", + "quiet_hours_label": "Stille timer", + "quiet_hours_description": "Ingen varsler eller lyder i dette tidsrommet. E-post kommer fortsatt.", + "quiet_hours_from": "Fra", + "quiet_hours_to": "til", + "show_shortcut_label": "Vis appen med en hurtigtast", + "show_shortcut_description": "{keys} henter appen frem fra hvilken som helst annen app.", + "show_shortcut_taken": "En annen app bruker {keys}. Lukk den appen, eller slå dette av og på igjen.", + "default_app_label": "Standard e-postapp", + "default_app_description": "Åpne e-postlenker og .eml-, .ics- og .vcf-filer med denne appen.", + "default_app_is_default": "Denne appen åpner e-postlenkene dine.", + "default_app_button": "Velg standardapp…", + "new_mail": "Ny e-post", + "no_subject": "(uten emne)", + "action_delete": "Slett", + "copy_as_file": "Kopier som fil", + "copied": "Filen er kopiert. Du kan lime den inn i en mappe.", + "copy_failed": "Filen kunne ikke kopieres.", + "reply_lost": "Svaret du skrev, kunne ikke beholdes. Åpne meldingen og svar der." + }, + "desktopReminders": { + "generic_title": "Påminnelse", + "snooze": "Utsett {count} min", + "snooze_short": "{count} min", + "open": "Åpne", + "join": "Bli med", + "missed_title": "{count, plural, one {# tapt påminnelse} other {# tapte påminnelser}}", + "missed_more": "og {count} til", + "missed_show": "Vis", + "missed_dialog_title": "Tapte påminnelser", + "missed_dialog_description": "De forfalt mens appen var lukket, datamaskinen sov eller varsler var satt på pause.", + "open_calendar": "Åpne kalender", + "done": "Ferdig", + "join_host": "Bli med ({host})", + "join_named": "Bli med: {title}" + }, "desktop_policy": { "server_refused": "Organisasjonen din tillater ikke denne serveren på denne enheten.", "plugin_refused": "Organisasjonen din tillater ikke dette programtillegget på denne enheten, så det kjører ikke. Innstillingene og dataene beholdes.", @@ -6669,5 +6872,30 @@ "plugins_off": "Organisasjonen din har slått av programtillegg på denne enheten.", "plugins_allowlist": "Organisasjonen din tillater bare bestemte programtillegg på denne enheten.", "off": "Av" + }, + "desktopTelemetry": { + "section_title": "Bruksdata og krasjrapporter", + "section_description": "Begge er av til du slår dem på, og hver har sin egen bryter.", + "telemetry_label": "Send bruksdata", + "telemetry_description": "Én gang om dagen: en tilfeldig ID, appversjonen, Node-versjonen, operativsystemet ditt, hvor lenge appen har kjørt og hvordan den kobler til. Med egen e-postserver også hvilke funksjoner som er på, et omtrentlig antall kontoer og hvor mange programtillegg og temaer du har. Aldri e-post, adresser eller servernavn.", + "crash_label": "Send krasjrapporter", + "crash_description": "Feil i appen sendes med en tilfeldig ID, filnavn fra appens egen kode og korte, rensede meldinger. Hvis selve appen krasjer, blir en krasjfil liggende på denne datamaskinen og forlater den bare hvis du sender den.", + "crash_memory": "En krasjfil er en kopi av en del av appens minne da den krasjet. Bulwark fjerner brukernavn, adresser og påloggingstokener det finner, men en krasjfil kan likevel inneholde teksten i e-posten din.", + "instance_note": "På en Bulwark-server bestemmer administratoren separat hva sidene rapporterer til den.", + "forced_off": "Organisasjonen din har slått av dette.", + "url_label": "Hvor krasjfiler sendes", + "url_description": "Https-adressen som mottar en krasjfil. Bulwark har ingen med.", + "url_invalid": "Skriv inn en fullstendig https-adresse.", + "url_save": "Lagre", + "files_label": "Krasjfiler på denne datamaskinen", + "files_description": "Bulwark beholder de nyeste og sletter dem som er eldre enn en måned.", + "files_empty": "Ingen krasjfiler.", + "file_size": "{size} KB", + "send": "Send krasjrapport…", + "delete_all": "Slett alle", + "sent": "Krasjrapport sendt.", + "send_no_consent": "Slå på krasjrapporter først.", + "send_no_url": "Ingen adresse er angitt, så den kan ikke sendes noe sted. Skriv inn en ovenfor.", + "send_failed": "Krasjrapporten kunne ikke sendes." } } diff --git a/locales/nl/common.json b/locales/nl/common.json index 3c71c53c3..fed19b92f 100644 --- a/locales/nl/common.json +++ b/locales/nl/common.json @@ -5801,6 +5801,35 @@ "store_private": "Privévensters kunnen geen mail bewaren voor offline gebruik.", "server_not_answering": "De mailserver antwoordt niet. Probeer het zo meteen opnieuw." }, + "offlineWipe": { + "note": "Je organisatie heeft de gegevens van dit account van dit apparaat verwijderd. Meld je aan om opnieuw te beginnen.", + "note_unsent": "Je organisatie heeft de gegevens van dit account van dit apparaat verwijderd. Verwijderde onverzonden berichten: {count}.", + "settings_title": "Alles van dit apparaat verwijderen", + "settings_description": "Voor als je deze computer weggeeft of niet meer gebruikt. Je e-mail op de server blijft staan.", + "settings_button": "Alles verwijderen…", + "settings_wiping": "Verwijderen…", + "confirm_title": "Alles van dit apparaat verwijderen?", + "confirm_message": "Dit verwijdert wat deze app op dit apparaat bewaart, voor alle accounts hier. Je e-mail op de server blijft ongemoeid.", + "confirm_mail": "E-mail, agenda's, contacten en bestanden die hier bewaard zijn", + "confirm_unsent": "Onverzonden berichten die hier wachten: {count}. Die gaan verloren.", + "confirm_keys": "S/MIME- en OpenPGP-sleutels. Om ze weer te gebruiken heb je je eigen back-up nodig.", + "confirm_plugins": "Gegevens die plug-ins hier hebben opgeslagen", + "confirm_files": "Bijlagen die zijn geopend om te bewerken en bestanden die nog worden bijgevoegd", + "confirm_accounts": "Alle accounts worden afgemeld", + "confirm_button": "Alles verwijderen", + "note_unknown": "Uw organisatie heeft de gegevens van dit account van dit apparaat verwijderd. Mogelijk zijn ook niet-verzonden berichten verwijderd.", + "refused_waiting": "Niet-verzonden berichten die op uw nieuwe wachtwoord wachten: {count}. Ze blijven tot {date}.", + "refused_waiting_unknown": "Mogelijk wachten niet-verzonden berichten op uw nieuwe wachtwoord. Ze blijven tot {date}.", + "confirm_unsent_unknown": "Hier wachten mogelijk niet-verzonden berichten. Ze gaan verloren.", + "confirm_templates": "E-mailsjablonen die op dit apparaat zijn opgeslagen", + "session_waiting": "Niet-verzonden berichten die op uw volgende aanmelding wachten: {count}. Ze blijven tot {date}.", + "session_waiting_unknown": "Mogelijk wachten niet-verzonden berichten op uw volgende aanmelding. Ze blijven tot {date}.", + "needs_sign_in": "Aanmelden nodig", + "switcher_waiting": "Niet-verzonden berichten: {count}. Op {date} van dit apparaat verwijderd.", + "switcher_kept": "De e-mail op dit apparaat wordt op {date} verwijderd.", + "sibling_waiting": "{name} is afgemeld. Niet-verzonden berichten: {count}. Meld u uiterlijk {date} aan, anders worden ze van dit apparaat verwijderd.", + "sibling_kept": "{name} is afgemeld. Meld u uiterlijk {date} aan, anders wordt de e-mail van dit apparaat verwijderd." + }, "offlineStorage": { "keep_description": "Bewaart je e-mail, agenda, contacten en gekozen bestanden versleuteld op dit apparaat. Offline kun je e-mail lezen, markeren en verplaatsen, en wat je schrijft wacht in Postvak UIT. Afmelden verwijdert alles.", "window_label": "Hoe ver terug bewaren", @@ -5882,6 +5911,38 @@ "banner_refused": "Door de server geweigerde concepten: {count}", "banner_waiting": "Concepten die op de server wachten: {count}" }, + "offlineExport": { + "settings_label": "Bewaarde e-mail exporteren", + "settings_description": "Sla de e-mail op dit apparaat op als mbox- of .eml-bestanden. Dit werkt ook offline.", + "title": "Bewaarde e-mail exporteren", + "description": "Dit slaat de originelen op die dit apparaat bewaart. .eml-bestanden zijn exacte kopieën. Een mbox-bestand voegt de markeringen toe die het formaat nodig heeft en schrijft de status gelezen en gemarkeerd in de kopregels van elk bericht, in plaats van wat daar stond. E-mail ouder dan de gekozen periode zit er niet bij. Gebruik “Alle e-mail exporteren” om alles van de server op te slaan.", + "folders_label": "Mappen", + "all_folders": "Alle mappen", + "folder_kept": "{kept} van {total} hier", + "loading": "Gegevens op dit apparaat lezen…", + "load_failed": "De e-mail op dit apparaat kon niet worden gelezen.", + "nothing_kept": "Op dit apparaat is nog geen e-mail bewaard.", + "kept": "Originelen op dit apparaat: {kept} van {total} berichten", + "missing_online": "Te downloaden van de server: {count}", + "missing_offline": "Niet te exporteren terwijl u offline bent: {count}. U kunt het opnieuw proberen als u online bent.", + "reason_attachments_off": "Originele berichten worden alleen bewaard als “Bijlagen bewaren” aan staat.", + "reason_not_kept": "Originele berichten worden als laatste gedownload, en alleen als er ruimte voor is.", + "not_kept_attachments_off": "Geen origineel hier omdat bijlagen niet op dit apparaat worden bewaard: {count}", + "not_kept_not_kept": "Nog geen origineel op dit apparaat: {count}", + "retry": "Opnieuw proberen online", + "retry_online": "U bent nu online, dus deze kunnen van de server komen.", + "retry_offline": "U kunt het opnieuw proberen als u online bent.", + "settings_button": "Exporteren…", + "message_failed": "De server heeft dit bericht niet geleverd.", + "failed_generic": "De export is gestopt door een fout. Probeer het opnieuw.", + "stopped_limit": "De export is gestopt bij {limit}, het maximum dat deze browser kan bevatten. Kies minder mappen, of gebruik Chromium, Firefox of de desktop-app.", + "over_limit": "Deze browser kan maximaal {limit} bevatten, en deze keuze is ongeveer {size}. Kies minder mappen, of gebruik Chromium, Firefox of de desktop-app.", + "no_room": "Deze export heeft ongeveer {size} nodig, en deze browser heeft nog {free} beschikbaar. Kies minder mappen of maak ruimte vrij.", + "stopped_no_room": "De browser had geen ruimte meer voor de export. Kies minder mappen of maak ruimte vrij.", + "stopped_offline_off": "De export is gestopt omdat dit account geen e-mail meer op dit apparaat bewaart.", + "policy_unknown": "De regels van uw organisatie voor dit account zijn nog niet bekend, dus exporteren blijft voorlopig uit.", + "leftover_file": "Het bestand {name} kon niet worden verwijderd van de plek waar u het hebt opgeslagen. Het is onvolledig, u kunt het verwijderen." + }, "deep_link": { "message_not_found": "Dit bericht is niet meer beschikbaar.", "thread_not_found": "Dit gesprek is niet meer beschikbaar.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Dit bericht is verplaatst naar {folder}.", "window_not_ready": "Het nieuwe venster is niet op tijd geopend. Je concept blijft hier." }, + "desktopUi": { + "settings": { + "title": "Vensters", + "double_click_label": "Berichten openen in een nieuw venster met dubbelklikken", + "double_click_description": "Eén klik opent het bericht nog steeds naast de lijst.", + "restore_label": "Vensters opnieuw openen bij het starten", + "restore_description": "Bericht- en conceptvensters die open waren bij het afsluiten, komen terug." + }, + "attachment": { + "open": "Openen", + "save_as": "Opslaan als…", + "copy": "Kopiëren", + "copy_failed": "Het bestand kon niet worden gekopieerd." + }, + "menu": { + "file": "Bestand", + "edit": "Bewerken", + "view": "Weergave", + "message": "Bericht", + "go": "Ga", + "window": "Venster", + "help": "Help", + "new_window": "Nieuw venster", + "print": "Afdrukken…", + "save_pdf": "Bewaar als pdf…", + "switch_connection": "Verbinding wijzigen…", + "close": "Sluit", + "quit": "Stop", + "undo": "Herstel", + "redo": "Opnieuw", + "cut": "Knip", + "copy": "Kopieer", + "paste": "Plak", + "select_all": "Selecteer alles", + "search": "Zoek in e-mail", + "refresh": "Controleer op nieuwe e-mail", + "reading_pane": "Leesvenster", + "pane_right": "Rechts", + "pane_below": "Onder de lijst", + "pane_off": "Uit", + "zoom_in": "Zoom in", + "zoom_out": "Zoom uit", + "zoom_reset": "Werkelijke grootte", + "full_screen": "Volledig scherm", + "open_in_window": "Open in nieuw venster", + "next_message": "Volgend bericht", + "previous_message": "Vorig bericht", + "next_unread": "Volgend ongelezen bericht", + "mail": "E-mail", + "files": "Bestanden", + "back": "Terug", + "forward": "Vooruit", + "minimize": "Minimaliseer", + "next_window": "Volgend venster", + "shortcuts": "Toetsenbordsneltoetsen", + "docs": "Documentatie", + "settings": "Instellingen…", + "about": "Over Bulwark", + "from_plugins": "Meer van plug-ins…", + "pick_gone": "Dat menu was verouderd. Open het opnieuw en probeer het nog eens.", + "bar_label": "Menu" + }, + "context": { + "add_to_dictionary": "Voeg ‘{word}’ toe aan woordenboek", + "no_suggestions": "Geen suggesties", + "open_link": "Open link", + "copy_link": "Kopieer link", + "copy_address": "Kopieer adres", + "save_image": "Bewaar afbeelding…", + "copy_image": "Kopieer afbeelding" + }, + "closing": { + "unsaved_title": "Een concept kon niet worden bewaard", + "unsaved_detail": "Als u nu sluit, gaat verloren wat u sinds de laatste keer bewaren hebt geschreven.", + "close_anyway": "Toch sluiten", + "unsent_title": "Er is e-mail die nog niet is verzonden", + "unsent_one": "Eén bericht wacht om te worden verzonden. Het wordt verzonden de volgende keer dat u Bulwark opent.", + "unsent_many": "{count} berichten wachten om te worden verzonden. Ze worden verzonden de volgende keer dat u Bulwark opent.", + "quit": "Stop", + "leave_title": "Verlaten met niet-bewaarde wijzigingen?", + "leave_detail": "Uw wijzigingen op deze pagina zijn nog niet bewaard.", + "leave": "Verlaat", + "stay": "Blijf" + }, + "spellcheck": { + "offer": "Voor spellingcontrole in het {language} is een woordenboek nodig. Bulwark kan dit downloaden van Google. Uw tekst wordt niet verzonden.", + "download": "Download" + }, + "restore": { + "unavailable_title": "Dit concept kan nu niet worden geopend", + "unavailable_body": "Het staat veilig op de server, in Concepten. Probeer het opnieuw zodra de verbinding terug is.", + "try_again": "Probeer opnieuw", + "close": "Sluit" + } + }, "desktop_sign_in": { "browser_button": "Inloggen met je browser", "browser_waiting": "Rond het inloggen af in je browser", @@ -6661,6 +6817,53 @@ "revoke": "Intrekken", "revoked": "Toestemming ingetrokken" }, + "desktopOs": { + "section_title": "Desktop-app", + "section_description": "Hoe de app samenwerkt met je computer.", + "close_to_tray_label": "Bij sluiten doorgaan in het systeemvak", + "close_to_tray_description": "Nieuwe mail en herinneringen blijven komen nadat je het venster sluit.", + "start_at_login_label": "Starten als je je aanmeldt op de computer", + "start_at_login_description": "De app start vanzelf als je je aanmeldt.", + "start_minimized_label": "Starten in het systeemvak", + "start_minimized_description": "Bij het aanmelden opent geen venster. Open de app met het pictogram in het systeemvak.", + "attention_label": "Taakbalk laten knipperen bij nieuwe mail", + "attention_mac_label": "Dock-pictogram laten stuiteren bij nieuwe mail", + "attention_description": "Alleen als de app niet vooraan staat.", + "quiet_hours_label": "Stille uren", + "quiet_hours_description": "Geen meldingen of geluiden op deze tijden. Mail blijft binnenkomen.", + "quiet_hours_from": "Van", + "quiet_hours_to": "tot", + "show_shortcut_label": "App tonen met een sneltoets", + "show_shortcut_description": "{keys} haalt de app naar voren vanuit elke andere app.", + "show_shortcut_taken": "Een andere app gebruikt {keys}. Sluit die app, of zet dit uit en weer aan.", + "default_app_label": "Standaard-mailapp", + "default_app_description": "Maillinks en .eml-, .ics- en .vcf-bestanden openen met deze app.", + "default_app_is_default": "Deze app opent je maillinks.", + "default_app_button": "Standaard-app kiezen…", + "new_mail": "Nieuwe mail", + "no_subject": "(geen onderwerp)", + "action_delete": "Verwijderen", + "copy_as_file": "Kopiëren als bestand", + "copied": "Bestand gekopieerd. Je kunt het in een map plakken.", + "copy_failed": "Het bestand kon niet worden gekopieerd.", + "reply_lost": "Je getypte antwoord kon niet worden bewaard. Open het bericht en antwoord daar." + }, + "desktopReminders": { + "generic_title": "Herinnering", + "snooze": "{count} min uitstellen", + "snooze_short": "{count} min", + "open": "Openen", + "join": "Deelnemen", + "missed_title": "{count, plural, one {# gemiste herinnering} other {# gemiste herinneringen}}", + "missed_more": "en nog {count}", + "missed_show": "Tonen", + "missed_dialog_title": "Gemiste herinneringen", + "missed_dialog_description": "Deze kwamen op terwijl de app gesloten was, de computer sliep of meldingen gepauzeerd waren.", + "open_calendar": "Agenda openen", + "done": "Klaar", + "join_host": "Deelnemen ({host})", + "join_named": "Deelnemen: {title}" + }, "desktop_policy": { "server_refused": "Je organisatie staat deze server niet toe op dit apparaat.", "plugin_refused": "Je organisatie staat deze plug-in niet toe op dit apparaat, dus hij draait niet. De instellingen en gegevens blijven bewaard.", @@ -6669,5 +6872,30 @@ "plugins_off": "Je organisatie heeft plug-ins op dit apparaat uitgeschakeld.", "plugins_allowlist": "Je organisatie staat op dit apparaat alleen bepaalde plug-ins toe.", "off": "Uit" + }, + "desktopTelemetry": { + "section_title": "Gebruiksgegevens en crashrapporten", + "section_description": "Beide staan uit totdat je ze aanzet, en elk heeft een eigen schakelaar.", + "telemetry_label": "Gebruiksgegevens verzenden", + "telemetry_description": "Eén keer per dag: een willekeurige ID, de appversie, de Node-versie, je besturingssysteem, hoe lang de app al draait en hoe hij verbinding maakt. Met je eigen mailserver ook welke functies aan staan, een ruw aantal accounts en hoeveel plug-ins en thema's je hebt. Nooit e-mail, adressen of servernamen.", + "crash_label": "Crashrapporten verzenden", + "crash_description": "Fouten in de app gaan mee met een willekeurige ID, bestandsnamen uit de eigen code van de app en korte, opgeschoonde meldingen. Als de app zelf crasht, blijft er een crashbestand op deze computer staan dat alleen weggaat als jij het verzendt.", + "crash_memory": "Een crashbestand is een kopie van een deel van het geheugen van de app op het moment van de crash. Bulwark verwijdert gebruikersnamen, adressen en aanmeldtokens die het vindt, maar een crashbestand kan nog steeds de tekst van je e-mail bevatten.", + "instance_note": "Op een Bulwark-server bepaalt de beheerder daarvan apart wat de pagina's aan die server melden.", + "forced_off": "Je organisatie heeft dit uitgezet.", + "url_label": "Bestemming van crashbestanden", + "url_description": "Het https-adres dat een crashbestand ontvangt. Bulwark heeft er zelf geen.", + "url_invalid": "Vul een volledig https-adres in.", + "url_save": "Opslaan", + "files_label": "Crashbestanden op deze computer", + "files_description": "Bulwark bewaart de nieuwste en verwijdert bestanden die ouder zijn dan een maand.", + "files_empty": "Geen crashbestanden.", + "file_size": "{size} KB", + "send": "Crashrapport verzenden…", + "delete_all": "Alles verwijderen", + "sent": "Crashrapport verzonden.", + "send_no_consent": "Zet eerst crashrapporten aan.", + "send_no_url": "Er is geen adres ingesteld, dus dit kan nergens heen. Vul hierboven een adres in.", + "send_failed": "Het crashrapport kon niet worden verzonden." } } diff --git a/locales/pl/common.json b/locales/pl/common.json index 308e79148..f96763ba6 100644 --- a/locales/pl/common.json +++ b/locales/pl/common.json @@ -5801,6 +5801,35 @@ "store_private": "Okna prywatne nie mogą przechowywać poczty do użytku offline.", "server_not_answering": "Serwer poczty nie odpowiada. Spróbuj ponownie za chwilę." }, + "offlineWipe": { + "note": "Twoja organizacja usunęła dane tego konta z tego urządzenia. Zaloguj się, aby zacząć od nowa.", + "note_unsent": "Twoja organizacja usunęła dane tego konta z tego urządzenia. Usunięte niewysłane wiadomości: {count}.", + "settings_title": "Usuń wszystko z tego urządzenia", + "settings_description": "Na wypadek, gdy oddajesz ten komputer lub przestajesz go używać. Twoja poczta na serwerze zostaje.", + "settings_button": "Usuń wszystko…", + "settings_wiping": "Usuwanie…", + "confirm_title": "Usunąć wszystko z tego urządzenia?", + "confirm_message": "Spowoduje to usunięcie tego, co ta aplikacja przechowuje na tym urządzeniu, dla wszystkich kont. Twoja poczta na serwerze pozostanie nietknięta.", + "confirm_mail": "Poczta, kalendarze, kontakty i pliki przechowywane tutaj", + "confirm_unsent": "Niewysłane wiadomości czekające tutaj: {count}. Zostaną utracone.", + "confirm_keys": "Klucze S/MIME i OpenPGP. Aby znów ich używać, potrzebujesz własnej kopii zapasowej.", + "confirm_plugins": "Dane zapisane tutaj przez wtyczki", + "confirm_files": "Załączniki otwarte do edycji i pliki czekające na dołączenie", + "confirm_accounts": "Wszystkie konta zostaną wylogowane", + "confirm_button": "Usuń wszystko", + "note_unknown": "Twoja organizacja usunęła dane tego konta z tego urządzenia. Mogły też zostać usunięte niewysłane wiadomości.", + "refused_waiting": "Niewysłane wiadomości czekające na nowe hasło: {count}. Pozostaną do {date}.", + "refused_waiting_unknown": "Niewysłane wiadomości mogą czekać na nowe hasło. Pozostaną do {date}.", + "confirm_unsent_unknown": "Tutaj mogą czekać niewysłane wiadomości. Zostaną utracone.", + "confirm_templates": "Szablony e-maili zapisane na tym urządzeniu", + "session_waiting": "Niewysłane wiadomości czekające na następne logowanie: {count}. Pozostaną do {date}.", + "session_waiting_unknown": "Niewysłane wiadomości mogą czekać na następne logowanie. Pozostaną do {date}.", + "needs_sign_in": "Wymaga zalogowania", + "switcher_waiting": "Niewysłane wiadomości: {count}. Zostaną usunięte z tego urządzenia {date}.", + "switcher_kept": "Poczta na tym urządzeniu zostanie usunięta {date}.", + "sibling_waiting": "Konto {name} zostało wylogowane. Niewysłane wiadomości: {count}. Zaloguj się do {date}, inaczej zostaną usunięte z tego urządzenia.", + "sibling_kept": "Konto {name} zostało wylogowane. Zaloguj się do {date}, inaczej poczta zostanie usunięta z tego urządzenia." + }, "offlineStorage": { "keep_description": "Przechowuje Twoją pocztę, kalendarz, kontakty i wybrane pliki zaszyfrowane na tym urządzeniu. Offline możesz czytać, oznaczać i przenosić wiadomości, a to, co napiszesz, czeka w skrzynce nadawczej. Wylogowanie usuwa wszystko.", "window_label": "Jak daleko wstecz przechowywać", @@ -5882,6 +5911,38 @@ "banner_refused": "Wersje robocze odrzucone przez serwer: {count}", "banner_waiting": "Wersje robocze czekające na serwer: {count}" }, + "offlineExport": { + "settings_label": "Eksportuj zachowaną pocztę", + "settings_description": "Zapisz pocztę z tego urządzenia jako pliki mbox lub .eml. Działa to też offline.", + "title": "Eksportuj zachowaną pocztę", + "description": "Zapisuje oryginały przechowywane na tym urządzeniu. Pliki .eml są dokładnymi kopiami. Plik mbox dodaje oznaczenia wymagane przez ten format i zapisuje stan przeczytania i oflagowania w nagłówkach każdej wiadomości, zamiast dotychczasowych. Poczty starszej niż wybrany okres tu nie ma. Aby zapisać wszystko z serwera, użyj opcji „Eksportuj całą pocztę”.", + "folders_label": "Foldery", + "all_folders": "Wszystkie foldery", + "folder_kept": "{kept} z {total} tutaj", + "loading": "Odczytywanie danych z tego urządzenia…", + "load_failed": "Nie udało się odczytać poczty na tym urządzeniu.", + "nothing_kept": "Na tym urządzeniu nie ma jeszcze zachowanej poczty.", + "kept": "Oryginały na tym urządzeniu: {kept} z {total} wiadomości", + "missing_online": "Do pobrania z serwera: {count}", + "missing_offline": "Nie można wyeksportować offline: {count}. Spróbuj ponownie, gdy będziesz online.", + "reason_attachments_off": "Oryginalne wiadomości są zachowywane tylko wtedy, gdy opcja „Przechowuj załączniki” jest włączona.", + "reason_not_kept": "Oryginalne wiadomości są pobierane na końcu i tylko wtedy, gdy jest na nie miejsce.", + "not_kept_attachments_off": "Brak oryginału, bo załączniki nie są zachowywane na tym urządzeniu: {count}", + "not_kept_not_kept": "Jeszcze bez oryginału na tym urządzeniu: {count}", + "retry": "Spróbuj ponownie online", + "retry_online": "Masz połączenie, więc mogą przyjść z serwera.", + "retry_offline": "Spróbuj ponownie, gdy będziesz online.", + "settings_button": "Eksportuj…", + "message_failed": "Serwer nie dostarczył tej wiadomości.", + "failed_generic": "Eksport zatrzymał się z powodu błędu. Spróbuj ponownie.", + "stopped_limit": "Eksport zatrzymał się przy {limit}, to najwięcej, ile ta przeglądarka może pomieścić. Wybierz mniej folderów albo użyj Chromium, Firefoksa lub aplikacji na komputer.", + "over_limit": "Ta przeglądarka może pomieścić najwyżej {limit}, a ten wybór to około {size}. Wybierz mniej folderów albo użyj Chromium, Firefoksa lub aplikacji na komputer.", + "no_room": "Ten eksport wymaga około {size}, a ta przeglądarka ma do dyspozycji {free}. Wybierz mniej folderów lub zwolnij miejsce.", + "stopped_no_room": "W przeglądarce zabrakło miejsca na eksport. Wybierz mniej folderów lub zwolnij miejsce.", + "stopped_offline_off": "Eksport zatrzymał się, bo to konto nie przechowuje już poczty na tym urządzeniu.", + "policy_unknown": "Zasady Twojej organizacji dla tego konta nie są jeszcze znane, więc eksport pozostaje na razie wyłączony.", + "leftover_file": "Nie udało się usunąć pliku {name} z miejsca zapisu. Jest niekompletny, możesz go usunąć." + }, "deep_link": { "message_not_found": "Ta wiadomość nie jest już dostępna.", "thread_not_found": "Ta rozmowa nie jest już dostępna.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Ta wiadomość została przeniesiona do {folder}.", "window_not_ready": "Nowe okno nie otworzyło się na czas. Twój szkic zostaje tutaj." }, + "desktopUi": { + "settings": { + "title": "Okna", + "double_click_label": "Otwieraj wiadomości w nowym oknie po dwukrotnym kliknięciu", + "double_click_description": "Pojedyncze kliknięcie nadal otwiera wiadomość obok listy.", + "restore_label": "Otwieraj okna ponownie przy starcie", + "restore_description": "Okna wiadomości i wersji roboczych otwarte przy zamykaniu wrócą." + }, + "attachment": { + "open": "Otwórz", + "save_as": "Zapisz jako…", + "copy": "Kopiuj", + "copy_failed": "Nie udało się skopiować pliku." + }, + "menu": { + "file": "Plik", + "edit": "Edycja", + "view": "Widok", + "message": "Wiadomość", + "go": "Przejdź", + "window": "Okno", + "help": "Pomoc", + "new_window": "Nowe okno", + "print": "Drukuj…", + "save_pdf": "Zapisz jako PDF…", + "switch_connection": "Zmień połączenie…", + "close": "Zamknij", + "quit": "Zakończ", + "undo": "Cofnij", + "redo": "Ponów", + "cut": "Wytnij", + "copy": "Kopiuj", + "paste": "Wklej", + "select_all": "Zaznacz wszystko", + "search": "Szukaj w poczcie", + "refresh": "Sprawdź nową pocztę", + "reading_pane": "Okienko podglądu", + "pane_right": "Po prawej", + "pane_below": "Pod listą", + "pane_off": "Wyłączone", + "zoom_in": "Powiększ", + "zoom_out": "Pomniejsz", + "zoom_reset": "Rzeczywisty rozmiar", + "full_screen": "Pełny ekran", + "open_in_window": "Otwórz w nowym oknie", + "next_message": "Następna wiadomość", + "previous_message": "Poprzednia wiadomość", + "next_unread": "Następna nieprzeczytana wiadomość", + "mail": "Poczta", + "files": "Pliki", + "back": "Wstecz", + "forward": "Dalej", + "minimize": "Minimalizuj", + "next_window": "Następne okno", + "shortcuts": "Skróty klawiszowe", + "docs": "Dokumentacja", + "settings": "Ustawienia…", + "about": "O programie Bulwark", + "from_plugins": "Więcej z wtyczek…", + "pick_gone": "To menu było nieaktualne. Otwórz je ponownie i spróbuj jeszcze raz.", + "bar_label": "Menu" + }, + "context": { + "add_to_dictionary": "Dodaj „{word}” do słownika", + "no_suggestions": "Brak podpowiedzi", + "open_link": "Otwórz łącze", + "copy_link": "Kopiuj łącze", + "copy_address": "Kopiuj adres", + "save_image": "Zapisz obraz…", + "copy_image": "Kopiuj obraz" + }, + "closing": { + "unsaved_title": "Nie udało się zapisać wersji roboczej", + "unsaved_detail": "Jeśli zamkniesz teraz, utracisz wszystko, co zostało napisane od ostatniego zapisu.", + "close_anyway": "Zamknij mimo to", + "unsent_title": "Część poczty nie została jeszcze wysłana", + "unsent_one": "Jedna wiadomość czeka na wysłanie. Zostanie wysłana przy następnym uruchomieniu Bulwark.", + "unsent_many": "Wiadomości czekające na wysłanie: {count}. Zostaną wysłane przy następnym uruchomieniu Bulwark.", + "quit": "Zakończ", + "leave_title": "Opuścić stronę bez zapisania zmian?", + "leave_detail": "Zmiany wprowadzone na tej stronie nie zostały jeszcze zapisane.", + "leave": "Opuść", + "stay": "Zostań" + }, + "spellcheck": { + "offer": "Sprawdzanie pisowni dla języka {language} wymaga słownika. Bulwark może go pobrać od Google. Twój tekst nie jest wysyłany.", + "download": "Pobierz" + }, + "restore": { + "unavailable_title": "Nie można teraz otworzyć tej wersji roboczej", + "unavailable_body": "Jest bezpieczna na serwerze, w folderze Wersje robocze. Spróbuj ponownie, gdy połączenie wróci.", + "try_again": "Spróbuj ponownie", + "close": "Zamknij" + } + }, "desktop_sign_in": { "browser_button": "Zaloguj się w przeglądarce", "browser_waiting": "Dokończ logowanie w przeglądarce", @@ -6661,6 +6817,53 @@ "revoke": "Cofnij", "revoked": "Zgoda została cofnięta" }, + "desktopOs": { + "section_title": "Aplikacja na komputer", + "section_description": "Jak aplikacja współpracuje z Twoim komputerem.", + "close_to_tray_label": "Po zamknięciu działaj dalej w zasobniku", + "close_to_tray_description": "Nowa poczta i przypomnienia docierają też po zamknięciu okna.", + "start_at_login_label": "Uruchamiaj po zalogowaniu do komputera", + "start_at_login_description": "Aplikacja uruchamia się sama po zalogowaniu.", + "start_minimized_label": "Uruchamiaj w zasobniku", + "start_minimized_description": "Po zalogowaniu nie otwiera się okno. Otwórz je ikoną w zasobniku.", + "attention_label": "Migaj na pasku zadań przy nowej poczcie", + "attention_mac_label": "Podskakuj ikoną w Docku przy nowej poczcie", + "attention_description": "Tylko gdy aplikacja nie jest na wierzchu.", + "quiet_hours_label": "Godziny ciszy", + "quiet_hours_description": "W tym czasie bez powiadomień i dźwięków. Poczta nadal dociera.", + "quiet_hours_from": "Od", + "quiet_hours_to": "do", + "show_shortcut_label": "Pokazuj aplikację skrótem klawiszowym", + "show_shortcut_description": "{keys} przywołuje aplikację z każdej innej aplikacji.", + "show_shortcut_taken": "Skrót {keys} jest używany przez inną aplikację. Zamknij ją albo wyłącz i włącz tę opcję.", + "default_app_label": "Domyślna aplikacja poczty", + "default_app_description": "Otwieraj linki pocztowe i pliki .eml, .ics i .vcf w tej aplikacji.", + "default_app_is_default": "Ta aplikacja otwiera Twoje linki pocztowe.", + "default_app_button": "Wybierz domyślną aplikację…", + "new_mail": "Nowa poczta", + "no_subject": "(bez tematu)", + "action_delete": "Usuń", + "copy_as_file": "Kopiuj jako plik", + "copied": "Plik skopiowany. Możesz wkleić go do folderu.", + "copy_failed": "Nie udało się skopiować pliku.", + "reply_lost": "Nie udało się zachować wpisanej odpowiedzi. Otwórz wiadomość i odpowiedz w niej." + }, + "desktopReminders": { + "generic_title": "Przypomnienie", + "snooze": "Odłóż o {count} min", + "snooze_short": "{count} min", + "open": "Otwórz", + "join": "Dołącz", + "missed_title": "{count, plural, one {# pominięte przypomnienie} few {# pominięte przypomnienia} many {# pominiętych przypomnień} other {# pominiętego przypomnienia}}", + "missed_more": "i jeszcze {count}", + "missed_show": "Pokaż", + "missed_dialog_title": "Pominięte przypomnienia", + "missed_dialog_description": "Pojawiły się, gdy aplikacja była zamknięta, komputer był uśpiony lub powiadomienia były wstrzymane.", + "open_calendar": "Otwórz kalendarz", + "done": "Gotowe", + "join_host": "Dołącz ({host})", + "join_named": "Dołącz: {title}" + }, "desktop_policy": { "server_refused": "Twoja organizacja nie zezwala na ten serwer na tym urządzeniu.", "plugin_refused": "Twoja organizacja nie zezwala na tę wtyczkę na tym urządzeniu, więc nie działa. Jej ustawienia i dane zostają zachowane.", @@ -6669,5 +6872,30 @@ "plugins_off": "Twoja organizacja wyłączyła wtyczki na tym urządzeniu.", "plugins_allowlist": "Twoja organizacja zezwala na tym urządzeniu tylko na wybrane wtyczki.", "off": "Wyłączone" + }, + "desktopTelemetry": { + "section_title": "Dane o użyciu i raporty o awariach", + "section_description": "Oba są wyłączone, dopóki ich nie włączysz, a każdy ma własny przełącznik.", + "telemetry_label": "Wysyłaj dane o użyciu", + "telemetry_description": "Raz dziennie: losowy identyfikator, wersja aplikacji, wersja Node, system operacyjny, jak długo działa aplikacja i jak się łączy. Przy własnym serwerze poczty także włączone funkcje, przybliżona liczba kont oraz liczba wtyczek i motywów. Nigdy poczta, adresy ani nazwy serwerów.", + "crash_label": "Wysyłaj raporty o awariach", + "crash_description": "Błędy aplikacji są wysyłane z losowym identyfikatorem, nazwami plików z kodu samej aplikacji i krótkimi, oczyszczonymi komunikatami. Jeśli sama aplikacja ulegnie awarii, plik awarii zostaje na tym komputerze i opuszcza go tylko wtedy, gdy go wyślesz.", + "crash_memory": "Plik awarii to kopia części pamięci aplikacji z chwili awarii. Bulwark usuwa nazwy użytkowników, adresy i tokeny logowania, które znajdzie, ale plik awarii nadal może zawierać tekst Twojej poczty.", + "instance_note": "Na serwerze Bulwark jego administrator osobno decyduje, co strony mu zgłaszają.", + "forced_off": "Twoja organizacja to wyłączyła.", + "url_label": "Dokąd trafiają pliki awarii", + "url_description": "Adres https, który odbiera plik awarii. Bulwark nie ma własnego.", + "url_invalid": "Wpisz pełny adres https.", + "url_save": "Zapisz", + "files_label": "Pliki awarii na tym komputerze", + "files_description": "Bulwark zachowuje kilka najnowszych i usuwa starsze niż miesiąc.", + "files_empty": "Brak plików awarii.", + "file_size": "{size} KB", + "send": "Wyślij raport o awarii…", + "delete_all": "Usuń wszystkie", + "sent": "Raport o awarii wysłany.", + "send_no_consent": "Najpierw włącz raporty o awariach.", + "send_no_url": "Nie ustawiono adresu, więc nie ma dokąd tego wysłać. Wpisz go powyżej.", + "send_failed": "Nie udało się wysłać raportu o awarii." } } diff --git a/locales/pt/common.json b/locales/pt/common.json index 87cf78aed..0f67ac70c 100644 --- a/locales/pt/common.json +++ b/locales/pt/common.json @@ -5801,6 +5801,35 @@ "store_private": "As janelas privadas não podem guardar correio para uso offline.", "server_not_answering": "O servidor de correio não está a responder. Tente novamente daqui a pouco." }, + "offlineWipe": { + "note": "A sua organização removeu os dados desta conta deste dispositivo. Inicie sessão para começar de novo.", + "note_unsent": "A sua organização removeu os dados desta conta deste dispositivo. Mensagens não enviadas eliminadas: {count}.", + "settings_title": "Remover tudo deste dispositivo", + "settings_description": "Para quando oferecer este computador ou deixar de o usar. O seu correio no servidor mantém-se.", + "settings_button": "Remover tudo…", + "settings_wiping": "A remover…", + "confirm_title": "Remover tudo deste dispositivo?", + "confirm_message": "Isto elimina o que esta aplicação guarda neste dispositivo, para todas as contas aqui. O seu correio no servidor não é tocado.", + "confirm_mail": "Correio, calendários, contactos e ficheiros guardados aqui", + "confirm_unsent": "Mensagens não enviadas em espera aqui: {count}. Serão perdidas.", + "confirm_keys": "Chaves S/MIME e OpenPGP. Precisa da sua própria cópia de segurança para as voltar a usar.", + "confirm_plugins": "Dados que os plugins guardaram aqui", + "confirm_files": "Anexos abertos para edição e ficheiros à espera de serem anexados", + "confirm_accounts": "Todas as contas terminam sessão", + "confirm_button": "Remover tudo", + "note_unknown": "A sua organização removeu os dados desta conta deste dispositivo. Mensagens por enviar também podem ter sido eliminadas.", + "refused_waiting": "Mensagens por enviar à espera da nova palavra-passe: {count}. Ficam até {date}.", + "refused_waiting_unknown": "Podem existir mensagens por enviar à espera da nova palavra-passe. Ficam até {date}.", + "confirm_unsent_unknown": "Podem existir mensagens por enviar aqui. Serão perdidas.", + "confirm_templates": "Modelos de e-mail guardados neste dispositivo", + "session_waiting": "Mensagens por enviar à espera do próximo início de sessão: {count}. Ficam até {date}.", + "session_waiting_unknown": "Podem existir mensagens por enviar à espera do próximo início de sessão. Ficam até {date}.", + "needs_sign_in": "Requer início de sessão", + "switcher_waiting": "Mensagens por enviar: {count}. Eliminadas deste dispositivo em {date}.", + "switcher_kept": "O e-mail neste dispositivo será eliminado em {date}.", + "sibling_waiting": "A sessão de {name} foi terminada. Mensagens por enviar: {count}. Inicie sessão até {date} ou serão eliminadas deste dispositivo.", + "sibling_kept": "A sessão de {name} foi terminada. Inicie sessão até {date} ou o e-mail será eliminado deste dispositivo." + }, "offlineStorage": { "keep_description": "Mantém o seu correio, calendário, contactos e os ficheiros que escolher, cifrados neste dispositivo. Offline pode ler, sinalizar e mover e-mails, e o que escrever espera na caixa de saída. Terminar a sessão remove tudo.", "window_label": "Quanto tempo atrás manter", @@ -5882,6 +5911,38 @@ "banner_refused": "Rascunhos recusados pelo servidor: {count}", "banner_waiting": "Rascunhos a aguardar o servidor: {count}" }, + "offlineExport": { + "settings_label": "Exportar correio guardado", + "settings_description": "Guarde o correio deste dispositivo em ficheiros mbox ou .eml. Funciona sem ligação.", + "title": "Exportar correio guardado", + "description": "Guarda os originais que este dispositivo conserva. Os ficheiros .eml são cópias exatas. Um ficheiro mbox acrescenta as marcas que o seu formato exige e escreve o estado de lido e assinalado nos cabeçalhos de cada mensagem, em vez dos que tinha. O correio mais antigo do que o período escolhido não está incluído. Para guardar tudo do servidor, use “Exportar todos os e-mails”.", + "folders_label": "Pastas", + "all_folders": "Todas as pastas", + "folder_kept": "{kept} de {total} aqui", + "loading": "A ler o que está neste dispositivo…", + "load_failed": "Não foi possível ler o correio deste dispositivo.", + "nothing_kept": "Ainda não há correio guardado neste dispositivo.", + "kept": "Originais neste dispositivo: {kept} de {total} mensagens", + "missing_online": "A transferir do servidor: {count}", + "missing_offline": "Não podem ser exportadas sem ligação: {count}. Pode tentar de novo quando tiver ligação.", + "reason_attachments_off": "As mensagens originais só são guardadas quando “Manter anexos” está ativo.", + "reason_not_kept": "As mensagens originais são transferidas por último, e só enquanto houver espaço.", + "not_kept_attachments_off": "Sem original aqui porque este dispositivo não guarda anexos: {count}", + "not_kept_not_kept": "Ainda sem original neste dispositivo: {count}", + "retry": "Tentar de novo com ligação", + "retry_online": "Já tem ligação, por isso estas podem vir do servidor.", + "retry_offline": "Pode tentar de novo quando tiver ligação.", + "settings_button": "Exportar…", + "message_failed": "O servidor não entregou esta mensagem.", + "failed_generic": "A exportação parou devido a um erro. Tente de novo.", + "stopped_limit": "A exportação parou em {limit}, o máximo que este navegador consegue conter. Escolha menos pastas ou use o Chromium, o Firefox ou a aplicação de ambiente de trabalho.", + "over_limit": "Este navegador consegue conter no máximo {limit}, e esta escolha tem cerca de {size}. Escolha menos pastas ou use o Chromium, o Firefox ou a aplicação de ambiente de trabalho.", + "no_room": "Esta exportação precisa de cerca de {size}, e este navegador tem {free} disponíveis. Escolha menos pastas ou liberte espaço.", + "stopped_no_room": "O navegador ficou sem espaço para a exportação. Escolha menos pastas ou liberte espaço.", + "stopped_offline_off": "A exportação parou porque esta conta já não guarda correio neste dispositivo.", + "policy_unknown": "As regras da sua organização para esta conta ainda não são conhecidas, por isso a exportação fica desativada por agora.", + "leftover_file": "Não foi possível remover o ficheiro {name} do local onde o guardou. Está incompleto, pode apagá-lo." + }, "deep_link": { "message_not_found": "Esta mensagem não está mais disponível.", "thread_not_found": "Esta conversa não está mais disponível.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Esta mensagem foi movida para {folder}.", "window_not_ready": "A nova janela não abriu a tempo. O seu rascunho fica aqui." }, + "desktopUi": { + "settings": { + "title": "Janelas", + "double_click_label": "Abrir mensagens numa nova janela com duplo clique", + "double_click_description": "Um único clique continua a abrir a mensagem junto à lista.", + "restore_label": "Reabrir janelas ao iniciar", + "restore_description": "As janelas de mensagens e rascunhos abertas ao sair voltam a aparecer." + }, + "attachment": { + "open": "Abrir", + "save_as": "Guardar como…", + "copy": "Copiar", + "copy_failed": "Não foi possível copiar o ficheiro." + }, + "menu": { + "file": "Ficheiro", + "edit": "Editar", + "view": "Ver", + "message": "Mensagem", + "go": "Ir", + "window": "Janela", + "help": "Ajuda", + "new_window": "Nova janela", + "print": "Imprimir…", + "save_pdf": "Guardar como PDF…", + "switch_connection": "Mudar de ligação…", + "close": "Fechar", + "quit": "Sair", + "undo": "Anular", + "redo": "Refazer", + "cut": "Cortar", + "copy": "Copiar", + "paste": "Colar", + "select_all": "Selecionar tudo", + "search": "Pesquisar no correio", + "refresh": "Verificar novo correio", + "reading_pane": "Painel de leitura", + "pane_right": "À direita", + "pane_below": "Abaixo da lista", + "pane_off": "Desativado", + "zoom_in": "Ampliar", + "zoom_out": "Reduzir", + "zoom_reset": "Tamanho real", + "full_screen": "Ecrã inteiro", + "open_in_window": "Abrir numa nova janela", + "next_message": "Mensagem seguinte", + "previous_message": "Mensagem anterior", + "next_unread": "Próxima mensagem por ler", + "mail": "Correio", + "files": "Ficheiros", + "back": "Anterior", + "forward": "Seguinte", + "minimize": "Minimizar", + "next_window": "Janela seguinte", + "shortcuts": "Atalhos de teclado", + "docs": "Documentação", + "settings": "Definições…", + "about": "Acerca do Bulwark", + "from_plugins": "Mais dos plugins…", + "pick_gone": "Esse menu estava desatualizado. Abra-o de novo e tente outra vez.", + "bar_label": "Menu" + }, + "context": { + "add_to_dictionary": "Adicionar «{word}» ao dicionário", + "no_suggestions": "Sem sugestões", + "open_link": "Abrir ligação", + "copy_link": "Copiar ligação", + "copy_address": "Copiar endereço", + "save_image": "Guardar imagem…", + "copy_image": "Copiar imagem" + }, + "closing": { + "unsaved_title": "Não foi possível guardar um rascunho", + "unsaved_detail": "Se fechar agora, perde o que escreveu desde a última gravação.", + "close_anyway": "Fechar mesmo assim", + "unsent_title": "Há mensagens por enviar", + "unsent_one": "Uma mensagem aguarda envio. Será enviada na próxima vez que abrir o Bulwark.", + "unsent_many": "{count} mensagens aguardam envio. Serão enviadas na próxima vez que abrir o Bulwark.", + "quit": "Sair", + "leave_title": "Sair com alterações não guardadas?", + "leave_detail": "As alterações feitas nesta página ainda não foram guardadas.", + "leave": "Sair", + "stay": "Ficar" + }, + "spellcheck": { + "offer": "A verificação ortográfica em {language} precisa de um dicionário. O Bulwark pode transferi-lo da Google. O seu texto não é enviado.", + "download": "Transferir" + }, + "restore": { + "unavailable_title": "Este rascunho não pode ser aberto agora", + "unavailable_body": "Está seguro no servidor, em Rascunhos. Tente novamente quando a ligação voltar.", + "try_again": "Tentar novamente", + "close": "Fechar" + } + }, "desktop_sign_in": { "browser_button": "Entrar com o navegador", "browser_waiting": "Termine de entrar no navegador", @@ -6661,6 +6817,53 @@ "revoke": "Retirar", "revoked": "Permissão retirada" }, + "desktopOs": { + "section_title": "Aplicação de ambiente de trabalho", + "section_description": "Como a aplicação funciona com o seu computador.", + "close_to_tray_label": "Continuar na bandeja ao fechar", + "close_to_tray_description": "O correio novo e os lembretes continuam a chegar depois de fechar a janela.", + "start_at_login_label": "Iniciar ao entrar no computador", + "start_at_login_description": "A aplicação inicia sozinha quando entra.", + "start_minimized_label": "Iniciar na bandeja", + "start_minimized_description": "Não abre nenhuma janela ao entrar. Abra-a com o ícone da bandeja.", + "attention_label": "Piscar a barra de tarefas com correio novo", + "attention_mac_label": "Saltar o ícone da Dock com correio novo", + "attention_description": "Só quando a aplicação não está à frente.", + "quiet_hours_label": "Horas de silêncio", + "quiet_hours_description": "Sem notificações nem sons nestas horas. O correio continua a chegar.", + "quiet_hours_from": "De", + "quiet_hours_to": "até", + "show_shortcut_label": "Mostrar a aplicação com um atalho de teclado", + "show_shortcut_description": "{keys} traz a aplicação para a frente a partir de qualquer outra.", + "show_shortcut_taken": "Outra aplicação está a usar {keys}. Feche-a, ou desative e volte a ativar esta opção.", + "default_app_label": "Aplicação de correio predefinida", + "default_app_description": "Abrir ligações de correio e ficheiros .eml, .ics e .vcf com esta aplicação.", + "default_app_is_default": "Esta aplicação abre as suas ligações de correio.", + "default_app_button": "Escolher aplicação predefinida…", + "new_mail": "Correio novo", + "no_subject": "(sem assunto)", + "action_delete": "Eliminar", + "copy_as_file": "Copiar como ficheiro", + "copied": "Ficheiro copiado. Pode colá-lo numa pasta.", + "copy_failed": "Não foi possível copiar o ficheiro.", + "reply_lost": "Não foi possível guardar a resposta escrita. Abra a mensagem e responda a partir dela." + }, + "desktopReminders": { + "generic_title": "Lembrete", + "snooze": "Adiar {count} min", + "snooze_short": "{count} min", + "open": "Abrir", + "join": "Entrar", + "missed_title": "{count, plural, one {# lembrete perdido} other {# lembretes perdidos}}", + "missed_more": "e mais {count}", + "missed_show": "Mostrar", + "missed_dialog_title": "Lembretes perdidos", + "missed_dialog_description": "Venceram enquanto a aplicação estava fechada, o computador em suspensão ou as notificações em pausa.", + "open_calendar": "Abrir calendário", + "done": "Concluído", + "join_host": "Entrar ({host})", + "join_named": "Entrar: {title}" + }, "desktop_policy": { "server_refused": "A sua organização não permite este servidor neste dispositivo.", "plugin_refused": "A sua organização não permite este plugin neste dispositivo, por isso não é executado. As suas definições e dados são mantidos.", @@ -6669,5 +6872,30 @@ "plugins_off": "A sua organização desativou os plugins neste dispositivo.", "plugins_allowlist": "A sua organização só permite determinados plugins neste dispositivo.", "off": "Desativado" + }, + "desktopTelemetry": { + "section_title": "Dados de utilização e relatórios de falhas", + "section_description": "Ambos ficam desligados até os ligar, e cada um tem o seu próprio interruptor.", + "telemetry_label": "Enviar dados de utilização", + "telemetry_description": "Uma vez por dia: um ID aleatório, a versão da aplicação, a versão do Node, o seu sistema operativo, há quanto tempo a aplicação está a correr e como se liga. Com o seu próprio servidor de correio, também que funções estão ativas, um número aproximado de contas e quantos plugins e temas tem. Nunca mensagens, endereços ou nomes de servidor.", + "crash_label": "Enviar relatórios de falhas", + "crash_description": "Os erros da aplicação são enviados com um ID aleatório, nomes de ficheiros do próprio código da aplicação e mensagens curtas e limpas. Se a própria aplicação falhar, um ficheiro de falha fica neste computador e só sai se o enviar.", + "crash_memory": "Um ficheiro de falha é uma cópia de parte da memória da aplicação no momento da falha. O Bulwark remove os nomes de utilizador, endereços e tokens de início de sessão que encontra, mas um ficheiro de falha pode ainda conter o texto das suas mensagens.", + "instance_note": "Num servidor Bulwark, o seu administrador decide separadamente o que as páginas lhe comunicam.", + "forced_off": "A sua organização desligou esta opção.", + "url_label": "Destino dos ficheiros de falha", + "url_description": "O endereço https que recebe um ficheiro de falha. O Bulwark não inclui nenhum.", + "url_invalid": "Introduza um endereço https completo.", + "url_save": "Guardar", + "files_label": "Ficheiros de falha neste computador", + "files_description": "O Bulwark mantém os mais recentes e elimina os que têm mais de um mês.", + "files_empty": "Sem ficheiros de falha.", + "file_size": "{size} KB", + "send": "Enviar relatório de falha…", + "delete_all": "Eliminar tudo", + "sent": "Relatório de falha enviado.", + "send_no_consent": "Ligue primeiro os relatórios de falhas.", + "send_no_url": "Não há nenhum endereço definido, por isso não há para onde enviar. Introduza um acima.", + "send_failed": "Não foi possível enviar o relatório de falha." } } diff --git a/locales/ro/common.json b/locales/ro/common.json index 0582de0d2..e39d63efa 100644 --- a/locales/ro/common.json +++ b/locales/ro/common.json @@ -5801,6 +5801,35 @@ "store_private": "Ferestrele private nu pot păstra e-mailuri pentru utilizare offline.", "server_not_answering": "Serverul de e-mail nu răspunde. Încercați din nou imediat." }, + "offlineWipe": { + "note": "Organizația dvs. a eliminat datele acestui cont de pe acest dispozitiv. Conectați-vă pentru a începe din nou.", + "note_unsent": "Organizația dvs. a eliminat datele acestui cont de pe acest dispozitiv. Mesaje netrimise șterse: {count}.", + "settings_title": "Elimină tot de pe acest dispozitiv", + "settings_description": "Pentru când dați acest computer altcuiva sau nu îl mai folosiți. E-mailurile de pe server rămân.", + "settings_button": "Elimină tot…", + "settings_wiping": "Se elimină…", + "confirm_title": "Eliminați tot de pe acest dispozitiv?", + "confirm_message": "Se șterge ceea ce această aplicație păstrează pe acest dispozitiv, pentru toate conturile de aici. E-mailurile de pe server nu sunt atinse.", + "confirm_mail": "E-mailuri, calendare, contacte și fișiere păstrate aici", + "confirm_unsent": "Mesaje netrimise care așteaptă aici: {count}. Se vor pierde.", + "confirm_keys": "Chei S/MIME și OpenPGP. Pentru a le folosi din nou aveți nevoie de propria copie de rezervă.", + "confirm_plugins": "Date stocate aici de pluginuri", + "confirm_files": "Atașamente deschise pentru editare și fișiere care așteaptă să fie atașate", + "confirm_accounts": "Toate conturile sunt deconectate", + "confirm_button": "Elimină tot", + "note_unknown": "Organizația dvs. a eliminat datele acestui cont de pe acest dispozitiv. Este posibil să fi fost șterse și mesaje netrimise.", + "refused_waiting": "Mesaje netrimise care așteaptă parola nouă: {count}. Rămân până la {date}.", + "refused_waiting_unknown": "Este posibil ca mesaje netrimise să aștepte parola nouă. Rămân până la {date}.", + "confirm_unsent_unknown": "Este posibil să existe aici mesaje netrimise. Se vor pierde.", + "confirm_templates": "Șabloane de e-mail salvate pe acest dispozitiv", + "session_waiting": "Mesaje netrimise care așteaptă următoarea conectare: {count}. Rămân până la {date}.", + "session_waiting_unknown": "Este posibil ca mesaje netrimise să aștepte următoarea conectare. Rămân până la {date}.", + "needs_sign_in": "Necesită conectare", + "switcher_waiting": "Mesaje netrimise: {count}. Vor fi șterse de pe acest dispozitiv la {date}.", + "switcher_kept": "E-mailurile de pe acest dispozitiv vor fi șterse la {date}.", + "sibling_waiting": "{name} a fost deconectat. Mesaje netrimise: {count}. Conectați-vă până la {date}, altfel vor fi șterse de pe acest dispozitiv.", + "sibling_kept": "{name} a fost deconectat. Conectați-vă până la {date}, altfel e-mailurile vor fi șterse de pe acest dispozitiv." + }, "offlineStorage": { "keep_description": "Păstrează e-mailurile, calendarul, contactele și fișierele alese de dvs., criptate pe acest dispozitiv. Offline puteți citi, marca și muta e-mailuri, iar ce scrieți așteaptă în Mesaje de trimis. La deconectare se șterge totul.", "window_label": "Cât de departe în urmă se păstrează", @@ -5882,6 +5911,38 @@ "banner_refused": "Ciorne refuzate de server: {count}", "banner_waiting": "Ciorne care așteaptă serverul: {count}" }, + "offlineExport": { + "settings_label": "Exportă mesajele păstrate", + "settings_description": "Salvați mesajele de pe acest dispozitiv ca fișiere mbox sau .eml. Funcționează și offline.", + "title": "Exportă mesajele păstrate", + "description": "Salvează originalele păstrate pe acest dispozitiv. Fișierele .eml sunt copii exacte. Un fișier mbox adaugă marcajele cerute de format și scrie starea de citit și marcat în antetele fiecărui mesaj, în locul celor existente. Mesajele mai vechi decât perioada aleasă nu sunt incluse. Pentru a salva tot de pe server, folosiți „Exportă toate e-mailurile”.", + "folders_label": "Dosare", + "all_folders": "Toate dosarele", + "folder_kept": "{kept} din {total} aici", + "loading": "Se citesc datele de pe acest dispozitiv…", + "load_failed": "Mesajele de pe acest dispozitiv nu au putut fi citite.", + "nothing_kept": "Pe acest dispozitiv nu sunt încă mesaje păstrate.", + "kept": "Originale pe acest dispozitiv: {kept} din {total} mesaje", + "missing_online": "De descărcat de pe server: {count}", + "missing_offline": "Nu pot fi exportate offline: {count}. Puteți încerca din nou când sunteți online.", + "reason_attachments_off": "Mesajele originale sunt păstrate doar când „Păstrează atașamentele” este activat.", + "reason_not_kept": "Mesajele originale se descarcă ultimele și doar cât timp este loc.", + "not_kept_attachments_off": "Fără original aici, deoarece atașamentele nu sunt păstrate pe acest dispozitiv: {count}", + "not_kept_not_kept": "Încă fără original pe acest dispozitiv: {count}", + "retry": "Încearcă din nou online", + "retry_online": "Sunteți online acum, deci pot veni de pe server.", + "retry_offline": "Puteți încerca din nou când sunteți online.", + "settings_button": "Exportă…", + "message_failed": "Serverul nu a livrat acest mesaj.", + "failed_generic": "Exportul s-a oprit din cauza unei erori. Încercați din nou.", + "stopped_limit": "Exportul s-a oprit la {limit}, maximul pe care îl poate păstra acest browser. Alegeți mai puține dosare sau folosiți Chromium, Firefox ori aplicația desktop.", + "over_limit": "Acest browser poate păstra cel mult {limit}, iar această alegere are aproximativ {size}. Alegeți mai puține dosare sau folosiți Chromium, Firefox ori aplicația desktop.", + "no_room": "Acest export are nevoie de aproximativ {size}, iar acest browser mai are {free}. Alegeți mai puține dosare sau eliberați spațiu.", + "stopped_no_room": "Browserul a rămas fără spațiu pentru export. Alegeți mai puține dosare sau eliberați spațiu.", + "stopped_offline_off": "Exportul s-a oprit deoarece acest cont nu mai păstrează mesaje pe acest dispozitiv.", + "policy_unknown": "Regulile organizației dvs. pentru acest cont nu se cunosc încă, așa că exportul rămâne oprit deocamdată.", + "leftover_file": "Fișierul {name} nu a putut fi eliminat din locul unde l-ați salvat. Este incomplet, îl puteți șterge." + }, "deep_link": { "message_not_found": "Acest mesaj nu mai este disponibil.", "thread_not_found": "Această conversație nu mai este disponibilă.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Acest mesaj a fost mutat în {folder}.", "window_not_ready": "Fereastra nouă nu s-a deschis la timp. Ciorna rămâne aici." }, + "desktopUi": { + "settings": { + "title": "Ferestre", + "double_click_label": "Deschide mesajele într-o fereastră nouă la dublu clic", + "double_click_description": "Un singur clic deschide în continuare mesajul lângă listă.", + "restore_label": "Redeschide ferestrele la pornire", + "restore_description": "Ferestrele de mesaje și ciorne deschise la ieșire revin." + }, + "attachment": { + "open": "Deschide", + "save_as": "Salvează ca…", + "copy": "Copiază", + "copy_failed": "Fișierul nu a putut fi copiat." + }, + "menu": { + "file": "Fișier", + "edit": "Editare", + "view": "Vizualizare", + "message": "Mesaj", + "go": "Salt la", + "window": "Fereastră", + "help": "Ajutor", + "new_window": "Fereastră nouă", + "print": "Imprimare…", + "save_pdf": "Salvare ca PDF…", + "switch_connection": "Schimbare conexiune…", + "close": "Închidere", + "quit": "Ieșire", + "undo": "Anulare", + "redo": "Refacere", + "cut": "Decupare", + "copy": "Copiere", + "paste": "Lipire", + "select_all": "Selectare totală", + "search": "Căutare în e-mail", + "refresh": "Verificare e-mailuri noi", + "reading_pane": "Panou de citire", + "pane_right": "În dreapta", + "pane_below": "Sub listă", + "pane_off": "Dezactivat", + "zoom_in": "Mărire", + "zoom_out": "Micșorare", + "zoom_reset": "Dimensiune reală", + "full_screen": "Ecran complet", + "open_in_window": "Deschidere în fereastră nouă", + "next_message": "Mesajul următor", + "previous_message": "Mesajul anterior", + "next_unread": "Următorul mesaj necitit", + "mail": "E-mail", + "files": "Fișiere", + "back": "Înapoi", + "forward": "Înainte", + "minimize": "Minimizare", + "next_window": "Fereastra următoare", + "shortcuts": "Comenzi rapide de la tastatură", + "docs": "Documentație", + "settings": "Setări…", + "about": "Despre Bulwark", + "from_plugins": "Mai multe de la pluginuri…", + "pick_gone": "Meniul era depășit. Deschideți-l din nou și încercați încă o dată.", + "bar_label": "Meniu" + }, + "context": { + "add_to_dictionary": "Adăugare „{word}” în dicționar", + "no_suggestions": "Fără sugestii", + "open_link": "Deschidere link", + "copy_link": "Copiere link", + "copy_address": "Copiere adresă", + "save_image": "Salvare imagine…", + "copy_image": "Copiere imagine" + }, + "closing": { + "unsaved_title": "O ciornă nu a putut fi salvată", + "unsaved_detail": "Dacă închideți acum, ce ați scris de la ultima salvare se pierde.", + "close_anyway": "Închidere oricum", + "unsent_title": "Unele mesaje nu au fost trimise încă", + "unsent_one": "Un mesaj așteaptă să fie trimis. Pleacă la următoarea deschidere a Bulwark.", + "unsent_many": "{count} mesaje așteaptă să fie trimise. Pleacă la următoarea deschidere a Bulwark.", + "quit": "Ieșire", + "leave_title": "Părăsiți pagina cu modificări nesalvate?", + "leave_detail": "Modificările făcute pe această pagină nu au fost salvate încă.", + "leave": "Părăsire", + "stay": "Rămâneți" + }, + "spellcheck": { + "offer": "Verificarea ortografică pentru {language} are nevoie de un dicționar. Bulwark îl poate descărca de la Google. Textul dvs. nu este trimis.", + "download": "Descărcare" + }, + "restore": { + "unavailable_title": "Această ciornă nu poate fi deschisă acum", + "unavailable_body": "Este în siguranță pe server, în Ciorne. Încercați din nou când revine conexiunea.", + "try_again": "Încercați din nou", + "close": "Închidere" + } + }, "desktop_sign_in": { "browser_button": "Conectează-te cu browserul", "browser_waiting": "Finalizează conectarea în browser", @@ -6661,6 +6817,53 @@ "revoke": "Retrage", "revoked": "Permisiune retrasă" }, + "desktopOs": { + "section_title": "Aplicație desktop", + "section_description": "Cum funcționează aplicația cu computerul tău.", + "close_to_tray_label": "Rămâne în zona de notificări la închidere", + "close_to_tray_description": "E-mailurile noi și mementourile continuă să sosească după închiderea ferestrei.", + "start_at_login_label": "Pornește la conectarea în computer", + "start_at_login_description": "Aplicația pornește singură când te conectezi.", + "start_minimized_label": "Pornește în zona de notificări", + "start_minimized_description": "La conectare nu se deschide nicio fereastră. Deschide-o din pictograma din zona de notificări.", + "attention_label": "Clipește în bara de activități la e-mail nou", + "attention_mac_label": "Sare pictograma din Dock la e-mail nou", + "attention_description": "Doar când aplicația nu este în față.", + "quiet_hours_label": "Ore de liniște", + "quiet_hours_description": "Fără notificări sau sunete în aceste ore. E-mailurile sosesc în continuare.", + "quiet_hours_from": "De la", + "quiet_hours_to": "până la", + "show_shortcut_label": "Arată aplicația cu o comandă rapidă de la tastatură", + "show_shortcut_description": "{keys} aduce aplicația în față din orice altă aplicație.", + "show_shortcut_taken": "Altă aplicație folosește {keys}. Închide-o sau dezactivează și reactivează această opțiune.", + "default_app_label": "Aplicația de e-mail implicită", + "default_app_description": "Deschide linkurile de e-mail și fișierele .eml, .ics și .vcf cu această aplicație.", + "default_app_is_default": "Această aplicație îți deschide linkurile de e-mail.", + "default_app_button": "Alege aplicația implicită…", + "new_mail": "E-mail nou", + "no_subject": "(fără subiect)", + "action_delete": "Șterge", + "copy_as_file": "Copiază ca fișier", + "copied": "Fișier copiat. Îl poți lipi într-un dosar.", + "copy_failed": "Fișierul nu a putut fi copiat.", + "reply_lost": "Răspunsul scris nu a putut fi păstrat. Deschide mesajul și răspunde de acolo." + }, + "desktopReminders": { + "generic_title": "Memento", + "snooze": "Amână {count} min", + "snooze_short": "{count} min", + "open": "Deschide", + "join": "Participă", + "missed_title": "{count, plural, one {# memento ratat} few {# mementouri ratate} other {# de mementouri ratate}}", + "missed_more": "și încă {count}", + "missed_show": "Afișează", + "missed_dialog_title": "Mementouri ratate", + "missed_dialog_description": "Au venit la scadență cât timp aplicația era închisă, computerul în repaus sau notificările în pauză.", + "open_calendar": "Deschide calendarul", + "done": "Gata", + "join_host": "Participă ({host})", + "join_named": "Participă: {title}" + }, "desktop_policy": { "server_refused": "Organizația ta nu permite acest server pe acest dispozitiv.", "plugin_refused": "Organizația ta nu permite acest plugin pe acest dispozitiv, așa că nu rulează. Setările și datele sale sunt păstrate.", @@ -6669,5 +6872,30 @@ "plugins_off": "Organizația ta a dezactivat pluginurile pe acest dispozitiv.", "plugins_allowlist": "Organizația ta permite doar anumite pluginuri pe acest dispozitiv.", "off": "Dezactivat" + }, + "desktopTelemetry": { + "section_title": "Date de utilizare și rapoarte de blocare", + "section_description": "Ambele sunt oprite până le porniți și fiecare are propriul comutator.", + "telemetry_label": "Trimite date de utilizare", + "telemetry_description": "O dată pe zi: un ID aleatoriu, versiunea aplicației, versiunea Node, sistemul de operare, de cât timp rulează aplicația și cum se conectează. Cu propriul server de e-mail, și ce funcții sunt pornite, un număr aproximativ de conturi și câte pluginuri și teme aveți. Niciodată e-mailuri, adrese sau nume de servere.", + "crash_label": "Trimite rapoarte de blocare", + "crash_description": "Erorile din aplicație pleacă cu un ID aleatoriu, nume de fișiere din codul aplicației și mesaje scurte, curățate. Dacă aplicația însăși se blochează, un fișier de blocare rămâne pe acest computer și pleacă doar dacă îl trimiteți.", + "crash_memory": "Un fișier de blocare este o copie a unei părți din memoria aplicației din momentul blocării. Bulwark elimină numele de utilizator, adresele și tokenurile de autentificare pe care le găsește, dar un fișier de blocare poate conține totuși textul e-mailurilor dvs.", + "instance_note": "Pe un server Bulwark, administratorul acestuia decide separat ce îi raportează paginile.", + "forced_off": "Organizația dvs. a oprit această opțiune.", + "url_label": "Unde ajung fișierele de blocare", + "url_description": "Adresa https care primește un fișier de blocare. Bulwark nu vine cu una.", + "url_invalid": "Introduceți o adresă https completă.", + "url_save": "Salvează", + "files_label": "Fișiere de blocare pe acest computer", + "files_description": "Bulwark le păstrează pe cele mai noi și le șterge pe cele mai vechi de o lună.", + "files_empty": "Nu există fișiere de blocare.", + "file_size": "{size} KB", + "send": "Trimite raportul de blocare…", + "delete_all": "Șterge tot", + "sent": "Raport de blocare trimis.", + "send_no_consent": "Porniți mai întâi rapoartele de blocare.", + "send_no_url": "Nu este setată nicio adresă, deci nu există unde să fie trimis. Introduceți una mai sus.", + "send_failed": "Raportul de blocare nu a putut fi trimis." } } diff --git a/locales/ru/common.json b/locales/ru/common.json index 56210f33b..140777a2e 100644 --- a/locales/ru/common.json +++ b/locales/ru/common.json @@ -5801,6 +5801,35 @@ "store_private": "Приватные окна не могут хранить почту для работы офлайн.", "server_not_answering": "Почтовый сервер не отвечает. Повторите попытку через минуту." }, + "offlineWipe": { + "note": "Ваша организация удалила данные этой учётной записи с этого устройства. Войдите, чтобы начать заново.", + "note_unsent": "Ваша организация удалила данные этой учётной записи с этого устройства. Удалено неотправленных сообщений: {count}.", + "settings_title": "Удалить всё с этого устройства", + "settings_description": "На случай, если вы передаёте этот компьютер или больше им не пользуетесь. Ваша почта на сервере останется.", + "settings_button": "Удалить всё…", + "settings_wiping": "Удаление…", + "confirm_title": "Удалить всё с этого устройства?", + "confirm_message": "Будет удалено всё, что это приложение хранит на этом устройстве, для всех учётных записей здесь. Почта на сервере не будет затронута.", + "confirm_mail": "Почта, календари, контакты и файлы, хранящиеся здесь", + "confirm_unsent": "Неотправленных сообщений в ожидании: {count}. Они будут потеряны.", + "confirm_keys": "Ключи S/MIME и OpenPGP. Чтобы снова ими пользоваться, понадобится ваша собственная резервная копия.", + "confirm_plugins": "Данные, сохранённые здесь плагинами", + "confirm_files": "Вложения, открытые для редактирования, и файлы, ожидающие прикрепления", + "confirm_accounts": "Выполняется выход из всех учётных записей", + "confirm_button": "Удалить всё", + "note_unknown": "Ваша организация удалила данные этой учётной записи с этого устройства. Возможно, удалены и неотправленные сообщения.", + "refused_waiting": "Неотправленные сообщения ждут нового пароля: {count}. Они хранятся до {date}.", + "refused_waiting_unknown": "Возможно, неотправленные сообщения ждут нового пароля. Они хранятся до {date}.", + "confirm_unsent_unknown": "Здесь могут быть неотправленные сообщения. Они будут потеряны.", + "confirm_templates": "Шаблоны писем, сохранённые на этом устройстве", + "session_waiting": "Неотправленные сообщения ждут следующего входа: {count}. Они хранятся до {date}.", + "session_waiting_unknown": "Возможно, неотправленные сообщения ждут следующего входа. Они хранятся до {date}.", + "needs_sign_in": "Нужен вход", + "switcher_waiting": "Неотправленные сообщения: {count}. Будут удалены с этого устройства {date}.", + "switcher_kept": "Почта на этом устройстве будет удалена {date}.", + "sibling_waiting": "Выполнен выход из {name}. Неотправленные сообщения: {count}. Войдите до {date}, иначе они будут удалены с этого устройства.", + "sibling_kept": "Выполнен выход из {name}. Войдите до {date}, иначе почта будет удалена с этого устройства." + }, "offlineStorage": { "keep_description": "Хранит вашу почту, календарь, контакты и выбранные файлы в зашифрованном виде на этом устройстве. Без сети можно читать, помечать и перемещать письма, а написанное ждёт в исходящих. При выходе всё удаляется.", "window_label": "За какой период хранить", @@ -5882,6 +5911,38 @@ "banner_refused": "Черновики, отклонённые сервером: {count}", "banner_waiting": "Черновики, ожидающие сервер: {count}" }, + "offlineExport": { + "settings_label": "Экспорт сохранённой почты", + "settings_description": "Сохраните почту с этого устройства в файлы mbox или .eml. Работает и без сети.", + "title": "Экспорт сохранённой почты", + "description": "Сохраняет оригиналы, которые хранятся на этом устройстве. Файлы .eml — точные копии. Файл mbox добавляет отметки, которых требует его формат, и записывает состояние «прочитано» и «помечено» в заголовки каждого сообщения вместо прежних. Почты старше выбранного периода здесь нет. Чтобы сохранить всё с сервера, используйте «Экспортировать всю почту».", + "folders_label": "Папки", + "all_folders": "Все папки", + "folder_kept": "Здесь: {kept} из {total}", + "loading": "Чтение данных на этом устройстве…", + "load_failed": "Не удалось прочитать почту на этом устройстве.", + "nothing_kept": "На этом устройстве ещё нет сохранённой почты.", + "kept": "Оригиналы на этом устройстве: {kept} из {total}", + "missing_online": "Загрузить с сервера: {count}", + "missing_offline": "Нельзя экспортировать без сети: {count}. Повторите попытку, когда появится сеть.", + "reason_attachments_off": "Исходные сообщения хранятся, только если включено «Хранить вложения».", + "reason_not_kept": "Исходные сообщения загружаются в последнюю очередь и только пока есть место.", + "not_kept_attachments_off": "Нет оригинала, потому что на этом устройстве не хранятся вложения: {count}", + "not_kept_not_kept": "Пока нет оригинала на этом устройстве: {count}", + "retry": "Повторить в сети", + "retry_online": "Сеть есть, поэтому их можно получить с сервера.", + "retry_offline": "Повторите попытку, когда появится сеть.", + "settings_button": "Экспортировать…", + "message_failed": "Сервер не выдал это сообщение.", + "failed_generic": "Экспорт остановлен из-за ошибки. Повторите попытку.", + "stopped_limit": "Экспорт остановлен на {limit}: больше этот браузер удержать не может. Выберите меньше папок или используйте Chromium, Firefox либо приложение для компьютера.", + "over_limit": "Этот браузер может удержать не больше {limit}, а выбрано примерно {size}. Выберите меньше папок или используйте Chromium, Firefox либо приложение для компьютера.", + "no_room": "Для этого экспорта нужно примерно {size}, а этому браузеру доступно {free}. Выберите меньше папок или освободите место.", + "stopped_no_room": "Браузеру не хватило места для экспорта. Выберите меньше папок или освободите место.", + "stopped_offline_off": "Экспорт остановлен: эта учётная запись больше не хранит почту на этом устройстве.", + "policy_unknown": "Правила вашей организации для этой учётной записи пока неизвестны, поэтому экспорт пока выключен.", + "leftover_file": "Не удалось удалить файл {name} из места сохранения. Он неполный, его можно удалить." + }, "deep_link": { "message_not_found": "Это письмо больше недоступно.", "thread_not_found": "Эта переписка больше недоступна.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Это письмо перемещено в {folder}.", "window_not_ready": "Новое окно не открылось вовремя. Черновик остаётся здесь." }, + "desktopUi": { + "settings": { + "title": "Окна", + "double_click_label": "Открывать письма в новом окне двойным щелчком", + "double_click_description": "Одиночный щелчок по-прежнему открывает письмо рядом со списком.", + "restore_label": "Снова открывать окна при запуске", + "restore_description": "Окна писем и черновиков, открытые при выходе, вернутся." + }, + "attachment": { + "open": "Открыть", + "save_as": "Сохранить как…", + "copy": "Копировать", + "copy_failed": "Не удалось скопировать файл." + }, + "menu": { + "file": "Файл", + "edit": "Правка", + "view": "Вид", + "message": "Сообщение", + "go": "Переход", + "window": "Окно", + "help": "Справка", + "new_window": "Новое окно", + "print": "Печать…", + "save_pdf": "Сохранить как PDF…", + "switch_connection": "Сменить подключение…", + "close": "Закрыть", + "quit": "Выйти", + "undo": "Отменить", + "redo": "Повторить", + "cut": "Вырезать", + "copy": "Копировать", + "paste": "Вставить", + "select_all": "Выделить всё", + "search": "Поиск по почте", + "refresh": "Проверить новую почту", + "reading_pane": "Область чтения", + "pane_right": "Справа", + "pane_below": "Под списком", + "pane_off": "Выключена", + "zoom_in": "Увеличить", + "zoom_out": "Уменьшить", + "zoom_reset": "Реальный размер", + "full_screen": "Полноэкранный режим", + "open_in_window": "Открыть в новом окне", + "next_message": "Следующее сообщение", + "previous_message": "Предыдущее сообщение", + "next_unread": "Следующее непрочитанное сообщение", + "mail": "Почта", + "files": "Файлы", + "back": "Назад", + "forward": "Вперёд", + "minimize": "Свернуть", + "next_window": "Следующее окно", + "shortcuts": "Сочетания клавиш", + "docs": "Документация", + "settings": "Настройки…", + "about": "О программе Bulwark", + "from_plugins": "Ещё из плагинов…", + "pick_gone": "Это меню устарело. Откройте его снова и повторите попытку.", + "bar_label": "Меню" + }, + "context": { + "add_to_dictionary": "Добавить «{word}» в словарь", + "no_suggestions": "Нет вариантов", + "open_link": "Открыть ссылку", + "copy_link": "Копировать ссылку", + "copy_address": "Копировать адрес", + "save_image": "Сохранить изображение…", + "copy_image": "Копировать изображение" + }, + "closing": { + "unsaved_title": "Не удалось сохранить черновик", + "unsaved_detail": "Если закрыть сейчас, всё написанное после последнего сохранения будет потеряно.", + "close_anyway": "Всё равно закрыть", + "unsent_title": "Часть писем ещё не отправлена", + "unsent_one": "Одно сообщение ждёт отправки. Оно уйдёт при следующем запуске Bulwark.", + "unsent_many": "Сообщений, ожидающих отправки: {count}. Они уйдут при следующем запуске Bulwark.", + "quit": "Выйти", + "leave_title": "Уйти с несохранёнными изменениями?", + "leave_detail": "Изменения на этой странице ещё не сохранены.", + "leave": "Уйти", + "stay": "Остаться" + }, + "spellcheck": { + "offer": "Для проверки орфографии на языке «{language}» нужен словарь. Bulwark может скачать его у Google. Ваш текст не отправляется.", + "download": "Скачать" + }, + "restore": { + "unavailable_title": "Этот черновик сейчас нельзя открыть", + "unavailable_body": "Он в сохранности на сервере, в папке «Черновики». Повторите попытку, когда появится соединение.", + "try_again": "Повторить", + "close": "Закрыть" + } + }, "desktop_sign_in": { "browser_button": "Войти через браузер", "browser_waiting": "Завершите вход в браузере", @@ -6661,6 +6817,53 @@ "revoke": "Отозвать", "revoked": "Разрешение отозвано" }, + "desktopOs": { + "section_title": "Настольное приложение", + "section_description": "Как приложение работает с вашим компьютером.", + "close_to_tray_label": "При закрытии продолжать работу в трее", + "close_to_tray_description": "Новая почта и напоминания приходят и после закрытия окна.", + "start_at_login_label": "Запускать при входе в систему", + "start_at_login_description": "Приложение запускается само, когда вы входите.", + "start_minimized_label": "Запускать в трее", + "start_minimized_description": "При входе окно не открывается. Откройте его значком в трее.", + "attention_label": "Мигать на панели задач при новой почте", + "attention_mac_label": "Подпрыгивать значком в Dock при новой почте", + "attention_description": "Только когда приложение не на переднем плане.", + "quiet_hours_label": "Тихие часы", + "quiet_hours_description": "В это время нет уведомлений и звуков. Почта продолжает приходить.", + "quiet_hours_from": "С", + "quiet_hours_to": "до", + "show_shortcut_label": "Показывать приложение сочетанием клавиш", + "show_shortcut_description": "{keys} выводит приложение на передний план из любого другого.", + "show_shortcut_taken": "{keys} использует другое приложение. Закройте его или выключите и снова включите этот параметр.", + "default_app_label": "Почтовое приложение по умолчанию", + "default_app_description": "Открывать почтовые ссылки и файлы .eml, .ics и .vcf в этом приложении.", + "default_app_is_default": "Это приложение открывает ваши почтовые ссылки.", + "default_app_button": "Выбрать приложение по умолчанию…", + "new_mail": "Новая почта", + "no_subject": "(без темы)", + "action_delete": "Удалить", + "copy_as_file": "Копировать как файл", + "copied": "Файл скопирован. Его можно вставить в папку.", + "copy_failed": "Не удалось скопировать файл.", + "reply_lost": "Не удалось сохранить введённый ответ. Откройте письмо и ответьте из него." + }, + "desktopReminders": { + "generic_title": "Напоминание", + "snooze": "Отложить на {count} мин", + "snooze_short": "{count} мин", + "open": "Открыть", + "join": "Подключиться", + "missed_title": "{count, plural, one {# пропущенное напоминание} few {# пропущенных напоминания} many {# пропущенных напоминаний} other {# пропущенного напоминания}}", + "missed_more": "и ещё {count}", + "missed_show": "Показать", + "missed_dialog_title": "Пропущенные напоминания", + "missed_dialog_description": "Они сработали, пока приложение было закрыто, компьютер спал или уведомления были приостановлены.", + "open_calendar": "Открыть календарь", + "done": "Готово", + "join_host": "Подключиться ({host})", + "join_named": "Подключиться: {title}" + }, "desktop_policy": { "server_refused": "Ваша организация не разрешает этот сервер на этом устройстве.", "plugin_refused": "Ваша организация не разрешает этот плагин на этом устройстве, поэтому он не работает. Его настройки и данные сохраняются.", @@ -6669,5 +6872,30 @@ "plugins_off": "Ваша организация отключила плагины на этом устройстве.", "plugins_allowlist": "Ваша организация разрешает на этом устройстве только некоторые плагины.", "off": "Выкл." + }, + "desktopTelemetry": { + "section_title": "Данные об использовании и отчёты о сбоях", + "section_description": "Оба параметра выключены, пока вы их не включите, и у каждого свой переключатель.", + "telemetry_label": "Отправлять данные об использовании", + "telemetry_description": "Раз в день: случайный идентификатор, версия приложения, версия Node, ваша операционная система, как долго работает приложение и как оно подключается. При собственном почтовом сервере также включённые функции, примерное число учётных записей и количество плагинов и тем. Никогда письма, адреса или имена серверов.", + "crash_label": "Отправлять отчёты о сбоях", + "crash_description": "Ошибки в приложении отправляются со случайным идентификатором, именами файлов из кода самого приложения и короткими очищенными сообщениями. Если сбой происходит в самом приложении, файл сбоя остаётся на этом компьютере и покидает его, только если вы его отправите.", + "crash_memory": "Файл сбоя — это копия части памяти приложения в момент сбоя. Bulwark удаляет найденные имена пользователей, адреса и токены входа, но файл сбоя всё равно может содержать текст ваших писем.", + "instance_note": "На сервере Bulwark его администратор отдельно решает, что страницы сообщают серверу.", + "forced_off": "Ваша организация отключила это.", + "url_label": "Куда отправляются файлы сбоев", + "url_description": "Адрес https, который принимает файл сбоя. В Bulwark его нет.", + "url_invalid": "Введите полный адрес https.", + "url_save": "Сохранить", + "files_label": "Файлы сбоев на этом компьютере", + "files_description": "Bulwark хранит самые новые и удаляет те, что старше месяца.", + "files_empty": "Файлов сбоев нет.", + "file_size": "{size} КБ", + "send": "Отправить отчёт о сбое…", + "delete_all": "Удалить все", + "sent": "Отчёт о сбое отправлен.", + "send_no_consent": "Сначала включите отчёты о сбоях.", + "send_no_url": "Адрес не задан, поэтому отправлять некуда. Введите его выше.", + "send_failed": "Не удалось отправить отчёт о сбое." } } diff --git a/locales/sk/common.json b/locales/sk/common.json index 0ff59ef6c..bc275f666 100644 --- a/locales/sk/common.json +++ b/locales/sk/common.json @@ -5801,6 +5801,35 @@ "store_private": "Súkromné okná nemôžu uchovávať poštu na používanie offline.", "server_not_answering": "Poštový server neodpovedá. Skúste to o chvíľu znova." }, + "offlineWipe": { + "note": "Vaša organizácia odstránila údaje tohto účtu z tohto zariadenia. Prihláste sa a začnite znova.", + "note_unsent": "Vaša organizácia odstránila údaje tohto účtu z tohto zariadenia. Odstránené neodoslané správy: {count}.", + "settings_title": "Odstrániť všetko z tohto zariadenia", + "settings_description": "Pre prípad, že tento počítač odovzdáte ďalej alebo ho prestanete používať. Vaša pošta na serveri zostane.", + "settings_button": "Odstrániť všetko…", + "settings_wiping": "Odstraňuje sa…", + "confirm_title": "Odstrániť všetko z tohto zariadenia?", + "confirm_message": "Tým sa odstráni to, čo táto aplikácia uchováva v tomto zariadení, pre všetky tunajšie účty. Vašej pošty na serveri sa to nedotkne.", + "confirm_mail": "Pošta, kalendáre, kontakty a súbory uložené tu", + "confirm_unsent": "Neodoslané správy čakajúce tu: {count}. Stratia sa.", + "confirm_keys": "Kľúče S/MIME a OpenPGP. Na ich ďalšie použitie budete potrebovať vlastnú zálohu.", + "confirm_plugins": "Údaje, ktoré sem uložili doplnky", + "confirm_files": "Prílohy otvorené na úpravy a súbory čakajúce na priloženie", + "confirm_accounts": "Všetky účty sa odhlásia", + "confirm_button": "Odstrániť všetko", + "note_unknown": "Vaša organizácia odstránila údaje tohto účtu z tohto zariadenia. Možno boli odstránené aj neodoslané správy.", + "refused_waiting": "Neodoslané správy čakajúce na nové heslo: {count}. Zostanú do {date}.", + "refused_waiting_unknown": "Na nové heslo možno čakajú neodoslané správy. Zostanú do {date}.", + "confirm_unsent_unknown": "Možno tu čakajú neodoslané správy. Stratia sa.", + "confirm_templates": "Šablóny e-mailov uložené v tomto zariadení", + "session_waiting": "Neodoslané správy čakajúce na ďalšie prihlásenie: {count}. Zostanú do {date}.", + "session_waiting_unknown": "Na ďalšie prihlásenie možno čakajú neodoslané správy. Zostanú do {date}.", + "needs_sign_in": "Vyžaduje prihlásenie", + "switcher_waiting": "Neodoslané správy: {count}. Odstránia sa z tohto zariadenia {date}.", + "switcher_kept": "Pošta v tomto zariadení sa odstráni {date}.", + "sibling_waiting": "Účet {name} bol odhlásený. Neodoslané správy: {count}. Prihláste sa do {date}, inak sa z tohto zariadenia odstránia.", + "sibling_kept": "Účet {name} bol odhlásený. Prihláste sa do {date}, inak sa pošta z tohto zariadenia odstráni." + }, "offlineStorage": { "keep_description": "Uchováva vašu poštu, kalendár, kontakty a vybrané súbory zašifrované v tomto zariadení. Offline môžete poštu čítať, označovať a presúvať a to, čo napíšete, čaká na odoslanie. Odhlásenie všetko odstráni.", "window_label": "Ako dlho do minulosti uchovávať", @@ -5882,6 +5911,38 @@ "banner_refused": "Koncepty odmietnuté serverom: {count}", "banner_waiting": "Koncepty čakajúce na server: {count}" }, + "offlineExport": { + "settings_label": "Exportovať uloženú poštu", + "settings_description": "Uložte poštu z tohto zariadenia ako súbory mbox alebo .eml. Funguje to aj offline.", + "title": "Exportovať uloženú poštu", + "description": "Uloží originály, ktoré toto zariadenie uchováva. Súbory .eml sú presné kópie. Súbor mbox pridá značky, ktoré jeho formát vyžaduje, a zapíše stav prečítania a označenia do hlavičiek každej správy namiesto tých, ktoré mala. Pošta staršia ako zvolené obdobie v tom nie je. Ak chcete uložiť všetko zo servera, použite „Exportovať všetku poštu“.", + "folders_label": "Priečinky", + "all_folders": "Všetky priečinky", + "folder_kept": "{kept} z {total} tu", + "loading": "Čítanie údajov z tohto zariadenia…", + "load_failed": "Poštu na tomto zariadení sa nepodarilo prečítať.", + "nothing_kept": "Na tomto zariadení ešte nie je uložená žiadna pošta.", + "kept": "Originály na tomto zariadení: {kept} z {total} správ", + "missing_online": "Na stiahnutie zo servera: {count}", + "missing_offline": "Nedá sa exportovať offline: {count}. Môžete to skúsiť znova, keď budete online.", + "reason_attachments_off": "Pôvodné správy sa uchovávajú, len keď je zapnuté „Uchovávať prílohy“.", + "reason_not_kept": "Pôvodné správy sa sťahujú ako posledné a len vtedy, keď je na ne miesto.", + "not_kept_attachments_off": "Bez originálu, pretože toto zariadenie neuchováva prílohy: {count}", + "not_kept_not_kept": "Zatiaľ bez originálu na tomto zariadení: {count}", + "retry": "Skúsiť znova online", + "retry_online": "Ste online, takže môžu prísť zo servera.", + "retry_offline": "Môžete to skúsiť znova, keď budete online.", + "settings_button": "Exportovať…", + "message_failed": "Server túto správu nedodal.", + "failed_generic": "Export sa zastavil pre chybu. Skúste to znova.", + "stopped_limit": "Export sa zastavil na {limit}, čo je najviac, čo tento prehliadač pojme. Vyberte menej priečinkov alebo použite Chromium, Firefox či desktopovú aplikáciu.", + "over_limit": "Tento prehliadač pojme najviac {limit} a tento výber má asi {size}. Vyberte menej priečinkov alebo použite Chromium, Firefox či desktopovú aplikáciu.", + "no_room": "Tento export potrebuje asi {size} a tento prehliadač má k dispozícii {free}. Vyberte menej priečinkov alebo uvoľnite miesto.", + "stopped_no_room": "Prehliadaču došlo miesto na export. Vyberte menej priečinkov alebo uvoľnite miesto.", + "stopped_offline_off": "Export sa zastavil, pretože tento účet už na tomto zariadení poštu neuchováva.", + "policy_unknown": "Pravidlá vašej organizácie pre tento účet zatiaľ nie sú známe, preto export zatiaľ zostáva vypnutý.", + "leftover_file": "Súbor {name} sa nepodarilo odstrániť z miesta, kam ste ho uložili. Je neúplný, môžete ho vymazať." + }, "deep_link": { "message_not_found": "Táto správa už nie je dostupná.", "thread_not_found": "Táto konverzácia už nie je dostupná.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Táto správa bola presunutá do {folder}.", "window_not_ready": "Nové okno sa neotvorilo včas. Koncept zostáva tu." }, + "desktopUi": { + "settings": { + "title": "Okná", + "double_click_label": "Otvárať správy v novom okne dvojitým kliknutím", + "double_click_description": "Jedným kliknutím sa správa stále otvorí vedľa zoznamu.", + "restore_label": "Pri spustení znova otvoriť okná", + "restore_description": "Okná správ a konceptov otvorené pri ukončení sa vrátia." + }, + "attachment": { + "open": "Otvoriť", + "save_as": "Uložiť ako…", + "copy": "Kopírovať", + "copy_failed": "Súbor sa nepodarilo skopírovať." + }, + "menu": { + "file": "Súbor", + "edit": "Upraviť", + "view": "Zobrazenie", + "message": "Správa", + "go": "Prejsť", + "window": "Okno", + "help": "Pomocník", + "new_window": "Nové okno", + "print": "Tlačiť…", + "save_pdf": "Uložiť ako PDF…", + "switch_connection": "Zmeniť pripojenie…", + "close": "Zavrieť", + "quit": "Ukončiť", + "undo": "Späť", + "redo": "Znova", + "cut": "Vystrihnúť", + "copy": "Kopírovať", + "paste": "Prilepiť", + "select_all": "Vybrať všetko", + "search": "Hľadať v pošte", + "refresh": "Skontrolovať novú poštu", + "reading_pane": "Panel čítania", + "pane_right": "Vpravo", + "pane_below": "Pod zoznamom", + "pane_off": "Vypnuté", + "zoom_in": "Priblížiť", + "zoom_out": "Oddialiť", + "zoom_reset": "Skutočná veľkosť", + "full_screen": "Celá obrazovka", + "open_in_window": "Otvoriť v novom okne", + "next_message": "Ďalšia správa", + "previous_message": "Predchádzajúca správa", + "next_unread": "Ďalšia neprečítaná správa", + "mail": "Pošta", + "files": "Súbory", + "back": "Späť", + "forward": "Dopredu", + "minimize": "Minimalizovať", + "next_window": "Ďalšie okno", + "shortcuts": "Klávesové skratky", + "docs": "Dokumentácia", + "settings": "Nastavenia…", + "about": "O aplikácii Bulwark", + "from_plugins": "Viac z doplnkov…", + "pick_gone": "Táto ponuka bola zastaraná. Otvorte ju znova a skúste to ešte raz.", + "bar_label": "Ponuka" + }, + "context": { + "add_to_dictionary": "Pridať „{word}“ do slovníka", + "no_suggestions": "Žiadne návrhy", + "open_link": "Otvoriť odkaz", + "copy_link": "Kopírovať odkaz", + "copy_address": "Kopírovať adresu", + "save_image": "Uložiť obrázok…", + "copy_image": "Kopírovať obrázok" + }, + "closing": { + "unsaved_title": "Koncept sa nepodarilo uložiť", + "unsaved_detail": "Ak teraz zatvoríte okno, prídete o to, čo ste napísali od posledného uloženia.", + "close_anyway": "Napriek tomu zavrieť", + "unsent_title": "Niektorá pošta ešte nebola odoslaná", + "unsent_one": "Jedna správa čaká na odoslanie. Odíde pri ďalšom spustení Bulwark.", + "unsent_many": "Počet správ čakajúcich na odoslanie: {count}. Odídu pri ďalšom spustení Bulwark.", + "quit": "Ukončiť", + "leave_title": "Odísť s neuloženými zmenami?", + "leave_detail": "Zmeny na tejto stránke zatiaľ nie sú uložené.", + "leave": "Odísť", + "stay": "Zostať" + }, + "spellcheck": { + "offer": "Kontrola pravopisu pre jazyk {language} potrebuje slovník. Bulwark ho môže stiahnuť od spoločnosti Google. Váš text sa neodosiela.", + "download": "Stiahnuť" + }, + "restore": { + "unavailable_title": "Tento koncept sa teraz nedá otvoriť", + "unavailable_body": "Je v bezpečí na serveri v priečinku Koncepty. Skúste to znova, keď sa obnoví pripojenie.", + "try_again": "Skúsiť znova", + "close": "Zavrieť" + } + }, "desktop_sign_in": { "browser_button": "Prihlásiť sa v prehliadači", "browser_waiting": "Dokončite prihlásenie v prehliadači", @@ -6661,6 +6817,53 @@ "revoke": "Odvolať", "revoked": "Povolenie bolo odvolané" }, + "desktopOs": { + "section_title": "Počítačová aplikácia", + "section_description": "Ako aplikácia spolupracuje s vaším počítačom.", + "close_to_tray_label": "Po zatvorení bežať ďalej v oblasti oznámení", + "close_to_tray_description": "Nová pošta a pripomienky prichádzajú aj po zatvorení okna.", + "start_at_login_label": "Spustiť po prihlásení do počítača", + "start_at_login_description": "Aplikácia sa po prihlásení spustí sama.", + "start_minimized_label": "Spustiť v oblasti oznámení", + "start_minimized_description": "Po prihlásení sa neotvorí žiadne okno. Otvorte ju ikonou v oblasti oznámení.", + "attention_label": "Pri novej pošte blikať na paneli úloh", + "attention_mac_label": "Pri novej pošte poskakovať ikonou v Docku", + "attention_description": "Len keď aplikácia nie je v popredí.", + "quiet_hours_label": "Čas pokoja", + "quiet_hours_description": "V tomto čase žiadne oznámenia ani zvuky. Pošta prichádza ďalej.", + "quiet_hours_from": "Od", + "quiet_hours_to": "do", + "show_shortcut_label": "Zobraziť aplikáciu klávesovou skratkou", + "show_shortcut_description": "{keys} prenesie aplikáciu do popredia z akejkoľvek inej aplikácie.", + "show_shortcut_taken": "{keys} používa iná aplikácia. Zatvorte ju alebo túto možnosť vypnite a znova zapnite.", + "default_app_label": "Predvolená poštová aplikácia", + "default_app_description": "Otvárať poštové odkazy a súbory .eml, .ics a .vcf v tejto aplikácii.", + "default_app_is_default": "Táto aplikácia otvára vaše poštové odkazy.", + "default_app_button": "Vybrať predvolenú aplikáciu…", + "new_mail": "Nová pošta", + "no_subject": "(bez predmetu)", + "action_delete": "Odstrániť", + "copy_as_file": "Kopírovať ako súbor", + "copied": "Súbor skopírovaný. Môžete ho vložiť do priečinka.", + "copy_failed": "Súbor sa nepodarilo skopírovať.", + "reply_lost": "Napísanú odpoveď sa nepodarilo zachovať. Otvorte správu a odpovedzte v nej." + }, + "desktopReminders": { + "generic_title": "Pripomienka", + "snooze": "Odložiť o {count} min", + "snooze_short": "{count} min", + "open": "Otvoriť", + "join": "Pripojiť sa", + "missed_title": "{count, plural, one {# zmeškaná pripomienka} few {# zmeškané pripomienky} many {# zmeškanej pripomienky} other {# zmeškaných pripomienok}}", + "missed_more": "a ďalšie ({count})", + "missed_show": "Zobraziť", + "missed_dialog_title": "Zmeškané pripomienky", + "missed_dialog_description": "Nastali, keď bola aplikácia zatvorená, počítač v režime spánku alebo oznámenia pozastavené.", + "open_calendar": "Otvoriť kalendár", + "done": "Hotovo", + "join_host": "Pripojiť sa ({host})", + "join_named": "Pripojiť sa: {title}" + }, "desktop_policy": { "server_refused": "Vaša organizácia tento server na tomto zariadení nepovoľuje.", "plugin_refused": "Vaša organizácia tento plugin na tomto zariadení nepovoľuje, preto nebeží. Jeho nastavenia a údaje zostávajú zachované.", @@ -6669,5 +6872,30 @@ "plugins_off": "Vaša organizácia na tomto zariadení vypla pluginy.", "plugins_allowlist": "Vaša organizácia na tomto zariadení povoľuje len niektoré pluginy.", "off": "Vypnuté" + }, + "desktopTelemetry": { + "section_title": "Údaje o používaní a hlásenia o zlyhaniach", + "section_description": "Oboje je vypnuté, kým to nezapnete, a každé má vlastný prepínač.", + "telemetry_label": "Odosielať údaje o používaní", + "telemetry_description": "Raz denne: náhodné ID, verzia aplikácie, verzia Node, váš operačný systém, ako dlho aplikácia beží a ako sa pripája. Pri vlastnom poštovom serveri aj zapnuté funkcie, približný počet účtov a počet doplnkov a motívov. Nikdy pošta, adresy ani názvy serverov.", + "crash_label": "Odosielať hlásenia o zlyhaniach", + "crash_description": "Chyby v aplikácii sa odosielajú s náhodným ID, názvami súborov z kódu aplikácie a krátkymi, očistenými správami. Keď zlyhá samotná aplikácia, súbor o zlyhaní zostane v tomto počítači a odíde len vtedy, keď ho odošlete.", + "crash_memory": "Súbor o zlyhaní je kópia časti pamäte aplikácie v okamihu zlyhania. Bulwark odstráni používateľské mená, adresy a prihlasovacie tokeny, ktoré nájde, ale súbor o zlyhaní môže aj tak obsahovať text vašej pošty.", + "instance_note": "Na serveri Bulwark rozhoduje jeho správca samostatne o tom, čo mu stránky hlásia.", + "forced_off": "Vaša organizácia to vypla.", + "url_label": "Kam idú súbory o zlyhaní", + "url_description": "Adresa https, ktorá prijíma súbor o zlyhaní. Bulwark žiadnu nemá.", + "url_invalid": "Zadajte úplnú adresu https.", + "url_save": "Uložiť", + "files_label": "Súbory o zlyhaní v tomto počítači", + "files_description": "Bulwark ponechá najnovšie a odstráni tie staršie ako mesiac.", + "files_empty": "Žiadne súbory o zlyhaní.", + "file_size": "{size} KB", + "send": "Odoslať hlásenie o zlyhaní…", + "delete_all": "Odstrániť všetko", + "sent": "Hlásenie o zlyhaní odoslané.", + "send_no_consent": "Najprv zapnite hlásenia o zlyhaniach.", + "send_no_url": "Nie je nastavená žiadna adresa, takže to nie je kam odoslať. Zadajte ju vyššie.", + "send_failed": "Hlásenie o zlyhaní sa nepodarilo odoslať." } } diff --git a/locales/th/common.json b/locales/th/common.json index 02b19d46e..59682c569 100644 --- a/locales/th/common.json +++ b/locales/th/common.json @@ -2146,6 +2146,35 @@ "store_private": "หน้าต่างส่วนตัวเก็บอีเมลไว้ใช้แบบออฟไลน์ไม่ได้", "server_not_answering": "เซิร์ฟเวอร์อีเมลไม่ตอบสนอง โปรดลองอีกครั้งในอีกสักครู่" }, + "offlineWipe": { + "note": "องค์กรของคุณนำข้อมูลของบัญชีนี้ออกจากอุปกรณ์นี้แล้ว ลงชื่อเข้าใช้เพื่อเริ่มใหม่", + "note_unsent": "องค์กรของคุณนำข้อมูลของบัญชีนี้ออกจากอุปกรณ์นี้แล้ว ข้อความที่ยังไม่ส่งที่ถูกลบ: {count}", + "settings_title": "นำทุกอย่างออกจากอุปกรณ์นี้", + "settings_description": "สำหรับเมื่อคุณจะยกคอมพิวเตอร์เครื่องนี้ให้ผู้อื่นหรือเลิกใช้ อีเมลของคุณบนเซิร์ฟเวอร์ยังอยู่", + "settings_button": "นำทุกอย่างออก…", + "settings_wiping": "กำลังนำออก…", + "confirm_title": "นำทุกอย่างออกจากอุปกรณ์นี้หรือไม่", + "confirm_message": "การทำเช่นนี้จะลบสิ่งที่แอปนี้เก็บไว้ในอุปกรณ์นี้ สำหรับทุกบัญชีที่นี่ อีเมลของคุณบนเซิร์ฟเวอร์จะไม่ถูกแตะต้อง", + "confirm_mail": "อีเมล ปฏิทิน รายชื่อ และไฟล์ที่เก็บไว้ที่นี่", + "confirm_unsent": "ข้อความที่ยังไม่ส่งที่รออยู่ที่นี่: {count} ข้อความเหล่านี้จะสูญหาย", + "confirm_keys": "คีย์ S/MIME และ OpenPGP คุณต้องมีข้อมูลสำรองของคุณเองเพื่อใช้อีกครั้ง", + "confirm_plugins": "ข้อมูลที่ปลั๊กอินเก็บไว้ที่นี่", + "confirm_files": "ไฟล์แนบที่เปิดเพื่อแก้ไขและไฟล์ที่รอแนบ", + "confirm_accounts": "ทุกบัญชีจะออกจากระบบ", + "confirm_button": "นำทุกอย่างออก", + "note_unknown": "องค์กรของคุณได้ลบข้อมูลของบัญชีนี้ออกจากอุปกรณ์นี้แล้ว ข้อความที่ยังไม่ได้ส่งอาจถูกลบด้วย", + "refused_waiting": "ข้อความที่ยังไม่ได้ส่งซึ่งรอรหัสผ่านใหม่ของคุณ: {count} เก็บไว้ถึง {date}", + "refused_waiting_unknown": "อาจมีข้อความที่ยังไม่ได้ส่งรอรหัสผ่านใหม่ของคุณ เก็บไว้ถึง {date}", + "confirm_unsent_unknown": "อาจมีข้อความที่ยังไม่ได้ส่งรออยู่ที่นี่ ข้อความเหล่านั้นจะสูญหาย", + "confirm_templates": "เทมเพลตอีเมลที่บันทึกไว้ในอุปกรณ์นี้", + "session_waiting": "ข้อความที่ยังไม่ได้ส่งซึ่งรอการลงชื่อเข้าใช้ครั้งถัดไป: {count} เก็บไว้ถึง {date}", + "session_waiting_unknown": "อาจมีข้อความที่ยังไม่ได้ส่งรอการลงชื่อเข้าใช้ครั้งถัดไป เก็บไว้ถึง {date}", + "needs_sign_in": "ต้องลงชื่อเข้าใช้", + "switcher_waiting": "ข้อความที่ยังไม่ได้ส่ง: {count} จะถูกลบออกจากอุปกรณ์นี้ในวันที่ {date}", + "switcher_kept": "อีเมลในอุปกรณ์นี้จะถูกลบในวันที่ {date}", + "sibling_waiting": "{name} ถูกออกจากระบบแล้ว ข้อความที่ยังไม่ได้ส่ง: {count} โปรดลงชื่อเข้าใช้ภายใน {date} มิฉะนั้นจะถูกลบออกจากอุปกรณ์นี้", + "sibling_kept": "{name} ถูกออกจากระบบแล้ว โปรดลงชื่อเข้าใช้ภายใน {date} มิฉะนั้นอีเมลจะถูกลบออกจากอุปกรณ์นี้" + }, "offlineStorage": { "keep_description": "เก็บอีเมล ปฏิทิน รายชื่อติดต่อ และไฟล์ที่คุณเลือกไว้ในอุปกรณ์นี้แบบเข้ารหัส เมื่อออฟไลน์คุณอ่าน ติดธง และย้ายอีเมลได้ และสิ่งที่คุณเขียนจะรออยู่ในกล่องขาออก เมื่อออกจากระบบทุกอย่างจะถูกลบ", "window_label": "เก็บย้อนหลังนานแค่ไหน", @@ -2227,6 +2256,38 @@ "banner_refused": "ฉบับร่างที่เซิร์ฟเวอร์ปฏิเสธ: {count}", "banner_waiting": "ฉบับร่างที่รอเซิร์ฟเวอร์: {count}" }, + "offlineExport": { + "settings_label": "ส่งออกอีเมลที่เก็บไว้", + "settings_description": "บันทึกอีเมลในอุปกรณ์นี้เป็นไฟล์ mbox หรือ .eml ใช้งานแบบออฟไลน์ได้", + "title": "ส่งออกอีเมลที่เก็บไว้", + "description": "บันทึกต้นฉบับที่อุปกรณ์นี้เก็บไว้ ไฟล์ .eml เป็นสำเนาที่ตรงทุกประการ ส่วนไฟล์ mbox จะเพิ่มเครื่องหมายที่รูปแบบไฟล์ต้องการ และเขียนสถานะอ่านแล้วและติดธงลงในส่วนหัวของแต่ละข้อความแทนค่าเดิม อีเมลที่เก่ากว่าช่วงเวลาที่คุณเลือกจะไม่รวมอยู่ด้วย หากต้องการบันทึกทุกอย่างจากเซิร์ฟเวอร์ ให้ใช้ “ส่งออกอีเมลทั้งหมด”", + "folders_label": "โฟลเดอร์", + "all_folders": "ทุกโฟลเดอร์", + "folder_kept": "ที่นี่ {kept} จาก {total}", + "loading": "กำลังอ่านข้อมูลในอุปกรณ์นี้…", + "load_failed": "อ่านอีเมลในอุปกรณ์นี้ไม่ได้", + "nothing_kept": "ยังไม่มีอีเมลที่เก็บไว้ในอุปกรณ์นี้", + "kept": "ต้นฉบับในอุปกรณ์นี้: {kept} จาก {total} ข้อความ", + "missing_online": "ต้องดาวน์โหลดจากเซิร์ฟเวอร์: {count}", + "missing_offline": "ส่งออกขณะออฟไลน์ไม่ได้: {count} ลองอีกครั้งได้เมื่อออนไลน์", + "reason_attachments_off": "ข้อความต้นฉบับจะเก็บไว้เฉพาะเมื่อเปิด “เก็บไฟล์แนบ”", + "reason_not_kept": "ข้อความต้นฉบับจะดาวน์โหลดเป็นลำดับสุดท้าย และเฉพาะเมื่อมีพื้นที่", + "not_kept_attachments_off": "ไม่มีต้นฉบับเพราะอุปกรณ์นี้ไม่เก็บไฟล์แนบ: {count}", + "not_kept_not_kept": "ยังไม่มีต้นฉบับในอุปกรณ์นี้: {count}", + "retry": "ลองอีกครั้งแบบออนไลน์", + "retry_online": "ตอนนี้คุณออนไลน์แล้ว จึงดึงจากเซิร์ฟเวอร์ได้", + "retry_offline": "ลองอีกครั้งได้เมื่อออนไลน์", + "settings_button": "ส่งออก…", + "message_failed": "เซิร์ฟเวอร์ไม่ได้ส่งข้อความนี้มา", + "failed_generic": "การส่งออกหยุดเพราะเกิดข้อผิดพลาด โปรดลองอีกครั้ง", + "stopped_limit": "การส่งออกหยุดที่ {limit} ซึ่งเป็นขนาดสูงสุดที่เบราว์เซอร์นี้เก็บได้ เลือกโฟลเดอร์ให้น้อยลง หรือใช้ Chromium, Firefox หรือแอปเดสก์ท็อป", + "over_limit": "เบราว์เซอร์นี้เก็บได้สูงสุด {limit} แต่ที่เลือกไว้มีขนาดประมาณ {size} เลือกโฟลเดอร์ให้น้อยลง หรือใช้ Chromium, Firefox หรือแอปเดสก์ท็อป", + "no_room": "การส่งออกนี้ต้องใช้ประมาณ {size} แต่เบราว์เซอร์นี้เหลือ {free} เลือกโฟลเดอร์ให้น้อยลงหรือเพิ่มพื้นที่ว่าง", + "stopped_no_room": "เบราว์เซอร์มีพื้นที่ไม่พอสำหรับการส่งออก เลือกโฟลเดอร์ให้น้อยลงหรือเพิ่มพื้นที่ว่าง", + "stopped_offline_off": "การส่งออกหยุดเพราะบัญชีนี้ไม่ได้เก็บอีเมลไว้ในอุปกรณ์นี้แล้ว", + "policy_unknown": "ยังไม่ทราบกฎขององค์กรของคุณสำหรับบัญชีนี้ จึงปิดการส่งออกไว้ก่อน", + "leftover_file": "นำไฟล์ {name} ออกจากตำแหน่งที่คุณบันทึกไม่ได้ ไฟล์นี้ไม่สมบูรณ์ คุณจึงลบได้" + }, "plugin_pages": { "loading": "กำลังโหลดหน้าเว็บ...", "not_available_title": "หน้านี้ไม่พร้อมใช้งาน", @@ -6652,6 +6713,101 @@ "message_moved_to": "ข้อความนี้ถูกย้ายไปยัง {folder}", "window_not_ready": "หน้าต่างใหม่เปิดไม่ทัน แบบร่างของคุณยังอยู่ที่นี่" }, + "desktopUi": { + "settings": { + "title": "หน้าต่าง", + "double_click_label": "เปิดข้อความในหน้าต่างใหม่เมื่อดับเบิลคลิก", + "double_click_description": "คลิกครั้งเดียวยังคงเปิดข้อความข้างรายการ", + "restore_label": "เปิดหน้าต่างอีกครั้งเมื่อเริ่มต้น", + "restore_description": "หน้าต่างข้อความและฉบับร่างที่เปิดอยู่ตอนออกจะกลับมา" + }, + "attachment": { + "open": "เปิด", + "save_as": "บันทึกเป็น…", + "copy": "คัดลอก", + "copy_failed": "คัดลอกไฟล์ไม่ได้" + }, + "menu": { + "file": "ไฟล์", + "edit": "แก้ไข", + "view": "มุมมอง", + "message": "ข้อความ", + "go": "ไป", + "window": "หน้าต่าง", + "help": "ช่วยเหลือ", + "new_window": "หน้าต่างใหม่", + "print": "พิมพ์…", + "save_pdf": "บันทึกเป็น PDF…", + "switch_connection": "เปลี่ยนการเชื่อมต่อ…", + "close": "ปิด", + "quit": "ออก", + "undo": "เลิกทำ", + "redo": "ทำซ้ำ", + "cut": "ตัด", + "copy": "คัดลอก", + "paste": "วาง", + "select_all": "เลือกทั้งหมด", + "search": "ค้นหาอีเมล", + "refresh": "ตรวจสอบอีเมลใหม่", + "reading_pane": "บานหน้าต่างการอ่าน", + "pane_right": "ด้านขวา", + "pane_below": "ใต้รายการ", + "pane_off": "ปิด", + "zoom_in": "ขยาย", + "zoom_out": "ย่อ", + "zoom_reset": "ขนาดจริง", + "full_screen": "เต็มหน้าจอ", + "open_in_window": "เปิดในหน้าต่างใหม่", + "next_message": "ข้อความถัดไป", + "previous_message": "ข้อความก่อนหน้า", + "next_unread": "ข้อความที่ยังไม่ได้อ่านถัดไป", + "mail": "อีเมล", + "files": "ไฟล์", + "back": "ย้อนกลับ", + "forward": "ไปข้างหน้า", + "minimize": "ย่อหน้าต่าง", + "next_window": "หน้าต่างถัดไป", + "shortcuts": "แป้นพิมพ์ลัด", + "docs": "เอกสารประกอบ", + "settings": "การตั้งค่า…", + "about": "เกี่ยวกับ Bulwark", + "from_plugins": "เพิ่มเติมจากปลั๊กอิน…", + "pick_gone": "เมนูนี้เก่าแล้ว โปรดเปิดใหม่แล้วลองอีกครั้ง", + "bar_label": "เมนู" + }, + "context": { + "add_to_dictionary": "เพิ่ม “{word}” ในพจนานุกรม", + "no_suggestions": "ไม่มีคำแนะนำ", + "open_link": "เปิดลิงก์", + "copy_link": "คัดลอกลิงก์", + "copy_address": "คัดลอกที่อยู่", + "save_image": "บันทึกรูปภาพ…", + "copy_image": "คัดลอกรูปภาพ" + }, + "closing": { + "unsaved_title": "บันทึกฉบับร่างไม่ได้", + "unsaved_detail": "หากปิดตอนนี้ สิ่งที่คุณเขียนหลังจากบันทึกครั้งล่าสุดจะหายไป", + "close_anyway": "ปิดต่อไป", + "unsent_title": "มีอีเมลที่ยังไม่ได้ส่ง", + "unsent_one": "มี 1 ข้อความรอส่ง จะส่งออกเมื่อคุณเปิด Bulwark ครั้งถัดไป", + "unsent_many": "มี {count} ข้อความรอส่ง จะส่งออกเมื่อคุณเปิด Bulwark ครั้งถัดไป", + "quit": "ออก", + "leave_title": "ออกโดยไม่บันทึกการเปลี่ยนแปลงหรือไม่", + "leave_detail": "การเปลี่ยนแปลงของคุณในหน้านี้ยังไม่ได้บันทึก", + "leave": "ออก", + "stay": "อยู่ต่อ" + }, + "spellcheck": { + "offer": "การตรวจตัวสะกดสำหรับ{language}ต้องมีพจนานุกรม Bulwark ดาวน์โหลดจาก Google ได้ ข้อความของคุณจะไม่ถูกส่งไป", + "download": "ดาวน์โหลด" + }, + "restore": { + "unavailable_title": "ตอนนี้ยังเปิดฉบับร่างนี้ไม่ได้", + "unavailable_body": "ฉบับร่างปลอดภัยอยู่บนเซิร์ฟเวอร์ ในโฟลเดอร์ฉบับร่าง ลองอีกครั้งเมื่อเชื่อมต่อได้", + "try_again": "ลองอีกครั้ง", + "close": "ปิด" + } + }, "desktop_sign_in": { "browser_button": "ลงชื่อเข้าใช้ด้วยเบราว์เซอร์", "browser_waiting": "ลงชื่อเข้าใช้ให้เสร็จในเบราว์เซอร์", @@ -6669,6 +6825,53 @@ "revoke": "ถอน", "revoked": "ถอนการอนุญาตแล้ว" }, + "desktopOs": { + "section_title": "แอปเดสก์ท็อป", + "section_description": "วิธีที่แอปทำงานกับคอมพิวเตอร์ของคุณ", + "close_to_tray_label": "ทำงานต่อในถาดระบบเมื่อปิด", + "close_to_tray_description": "เมลใหม่และการแจ้งเตือนยังเข้ามาหลังปิดหน้าต่าง", + "start_at_login_label": "เริ่มเมื่อลงชื่อเข้าใช้คอมพิวเตอร์", + "start_at_login_description": "แอปเริ่มเองเมื่อคุณลงชื่อเข้าใช้", + "start_minimized_label": "เริ่มในถาดระบบ", + "start_minimized_description": "ไม่มีหน้าต่างเปิดเมื่อลงชื่อเข้าใช้ เปิดด้วยไอคอนในถาดระบบ", + "attention_label": "กะพริบแถบงานเมื่อมีเมลใหม่", + "attention_mac_label": "ให้ไอคอน Dock เด้งเมื่อมีเมลใหม่", + "attention_description": "เฉพาะเมื่อแอปไม่ได้อยู่ด้านหน้า", + "quiet_hours_label": "ช่วงเวลาเงียบ", + "quiet_hours_description": "ไม่มีการแจ้งเตือนและเสียงในช่วงนี้ เมลยังเข้ามาตามปกติ", + "quiet_hours_from": "จาก", + "quiet_hours_to": "ถึง", + "show_shortcut_label": "แสดงแอปด้วยแป้นพิมพ์ลัด", + "show_shortcut_description": "{keys} นำแอปขึ้นมาด้านหน้าจากแอปอื่นใดก็ได้", + "show_shortcut_taken": "แอปอื่นใช้ {keys} อยู่ ปิดแอปนั้น หรือปิดแล้วเปิดตัวเลือกนี้อีกครั้ง", + "default_app_label": "แอปเมลเริ่มต้น", + "default_app_description": "เปิดลิงก์เมลและไฟล์ .eml, .ics และ .vcf ด้วยแอปนี้", + "default_app_is_default": "แอปนี้เปิดลิงก์เมลของคุณ", + "default_app_button": "เลือกแอปเริ่มต้น…", + "new_mail": "เมลใหม่", + "no_subject": "(ไม่มีหัวเรื่อง)", + "action_delete": "ลบ", + "copy_as_file": "คัดลอกเป็นไฟล์", + "copied": "คัดลอกไฟล์แล้ว คุณวางลงในโฟลเดอร์ได้", + "copy_failed": "คัดลอกไฟล์ไม่ได้", + "reply_lost": "ไม่สามารถเก็บคำตอบที่พิมพ์ไว้ได้ เปิดข้อความแล้วตอบจากที่นั่น" + }, + "desktopReminders": { + "generic_title": "การแจ้งเตือน", + "snooze": "เลื่อน {count} นาที", + "snooze_short": "{count} นาที", + "open": "เปิด", + "join": "เข้าร่วม", + "missed_title": "{count, plural, other {การแจ้งเตือนที่พลาด # รายการ}}", + "missed_more": "และอีก {count} รายการ", + "missed_show": "แสดง", + "missed_dialog_title": "การแจ้งเตือนที่พลาด", + "missed_dialog_description": "ถึงเวลาแจ้งเตือนขณะที่แอปปิดอยู่ คอมพิวเตอร์อยู่ในโหมดพัก หรือหยุดการแจ้งเตือนชั่วคราว", + "open_calendar": "เปิดปฏิทิน", + "done": "เสร็จ", + "join_host": "เข้าร่วม ({host})", + "join_named": "เข้าร่วม: {title}" + }, "desktop_policy": { "server_refused": "องค์กรของคุณไม่อนุญาตให้ใช้เซิร์ฟเวอร์นี้บนอุปกรณ์นี้", "plugin_refused": "องค์กรของคุณไม่อนุญาตให้ใช้ปลั๊กอินนี้บนอุปกรณ์นี้ จึงไม่ทำงาน แต่การตั้งค่าและข้อมูลของปลั๊กอินยังคงอยู่", @@ -6677,5 +6880,30 @@ "plugins_off": "องค์กรของคุณปิดปลั๊กอินบนอุปกรณ์นี้", "plugins_allowlist": "องค์กรของคุณอนุญาตเฉพาะปลั๊กอินบางตัวบนอุปกรณ์นี้", "off": "ปิด" + }, + "desktopTelemetry": { + "section_title": "ข้อมูลการใช้งานและรายงานข้อขัดข้อง", + "section_description": "ทั้งสองอย่างปิดอยู่จนกว่าคุณจะเปิด และแต่ละอย่างมีสวิตช์ของตัวเอง", + "telemetry_label": "ส่งข้อมูลการใช้งาน", + "telemetry_description": "วันละครั้ง: ID แบบสุ่ม เวอร์ชันแอป เวอร์ชัน Node ระบบปฏิบัติการของคุณ ระยะเวลาที่แอปทำงาน และวิธีที่แอปเชื่อมต่อ หากใช้เซิร์ฟเวอร์อีเมลของคุณเอง จะส่งฟีเจอร์ที่เปิดอยู่ จำนวนบัญชีโดยประมาณ และจำนวนปลั๊กอินกับธีมด้วย ไม่ส่งอีเมล ที่อยู่ หรือชื่อเซิร์ฟเวอร์เด็ดขาด", + "crash_label": "ส่งรายงานข้อขัดข้อง", + "crash_description": "ข้อผิดพลาดในแอปจะถูกส่งพร้อม ID แบบสุ่ม ชื่อไฟล์จากโค้ดของแอปเอง และข้อความสั้นๆ ที่ทำความสะอาดแล้ว หากตัวแอปเองขัดข้อง ไฟล์ข้อขัดข้องจะอยู่บนคอมพิวเตอร์เครื่องนี้และออกไปเมื่อคุณส่งเท่านั้น", + "crash_memory": "ไฟล์ข้อขัดข้องคือสำเนาส่วนหนึ่งของหน่วยความจำแอปในขณะที่ขัดข้อง Bulwark จะลบชื่อผู้ใช้ ที่อยู่ และโทเค็นการลงชื่อเข้าใช้ที่พบ แต่ไฟล์ข้อขัดข้องอาจยังมีข้อความในอีเมลของคุณอยู่", + "instance_note": "บนเซิร์ฟเวอร์ Bulwark ผู้ดูแลเซิร์ฟเวอร์นั้นจะตัดสินใจแยกต่างหากว่าหน้าเว็บจะรายงานอะไรให้เซิร์ฟเวอร์", + "forced_off": "องค์กรของคุณปิดสิ่งนี้แล้ว", + "url_label": "ปลายทางของไฟล์ข้อขัดข้อง", + "url_description": "ที่อยู่ https ที่รับไฟล์ข้อขัดข้อง Bulwark ไม่มีที่อยู่ให้มาด้วย", + "url_invalid": "ป้อนที่อยู่ https แบบเต็ม", + "url_save": "บันทึก", + "files_label": "ไฟล์ข้อขัดข้องบนคอมพิวเตอร์เครื่องนี้", + "files_description": "Bulwark เก็บไฟล์ล่าสุดไว้และลบไฟล์ที่เก่ากว่าหนึ่งเดือน", + "files_empty": "ไม่มีไฟล์ข้อขัดข้อง", + "file_size": "{size} KB", + "send": "ส่งรายงานข้อขัดข้อง…", + "delete_all": "ลบทั้งหมด", + "sent": "ส่งรายงานข้อขัดข้องแล้ว", + "send_no_consent": "เปิดรายงานข้อขัดข้องก่อน", + "send_no_url": "ไม่ได้ตั้งที่อยู่ จึงไม่มีปลายทางให้ส่ง ป้อนที่อยู่ด้านบน", + "send_failed": "ไม่สามารถส่งรายงานข้อขัดข้องได้" } } diff --git a/locales/tr/common.json b/locales/tr/common.json index c78479426..9f87c9f80 100644 --- a/locales/tr/common.json +++ b/locales/tr/common.json @@ -5801,6 +5801,35 @@ "store_private": "Gizli pencereler e-postaları çevrimdışı kullanım için saklayamaz.", "server_not_answering": "E-posta sunucusu yanıt vermiyor. Birazdan yeniden deneyin." }, + "offlineWipe": { + "note": "Kuruluşunuz bu hesabın verilerini bu cihazdan kaldırdı. Yeniden başlamak için oturum açın.", + "note_unsent": "Kuruluşunuz bu hesabın verilerini bu cihazdan kaldırdı. Silinen gönderilmemiş iletiler: {count}.", + "settings_title": "Bu cihazdan her şeyi kaldır", + "settings_description": "Bu bilgisayarı başkasına verdiğinizde veya kullanmayı bıraktığınızda. Sunucudaki postalarınız kalır.", + "settings_button": "Her şeyi kaldır…", + "settings_wiping": "Kaldırılıyor…", + "confirm_title": "Bu cihazdan her şey kaldırılsın mı?", + "confirm_message": "Bu işlem, bu uygulamanın buradaki tüm hesaplar için bu cihazda tuttuklarını siler. Sunucudaki postalarınıza dokunulmaz.", + "confirm_mail": "Burada tutulan postalar, takvimler, kişiler ve dosyalar", + "confirm_unsent": "Burada bekleyen gönderilmemiş iletiler: {count}. Kaybolacaklar.", + "confirm_keys": "S/MIME ve OpenPGP anahtarları. Yeniden kullanmak için kendi yedeğiniz gerekir.", + "confirm_plugins": "Eklentilerin burada sakladığı veriler", + "confirm_files": "Düzenlemek için açılan ekler ve eklenmeyi bekleyen dosyalar", + "confirm_accounts": "Tüm hesapların oturumu kapatılır", + "confirm_button": "Her şeyi kaldır", + "note_unknown": "Kuruluşunuz bu hesabın verilerini bu cihazdan kaldırdı. Gönderilmemiş iletiler de silinmiş olabilir.", + "refused_waiting": "Yeni parolanızı bekleyen gönderilmemiş iletiler: {count}. {date} tarihine kadar kalır.", + "refused_waiting_unknown": "Gönderilmemiş iletiler yeni parolanızı bekliyor olabilir. {date} tarihine kadar kalır.", + "confirm_unsent_unknown": "Burada gönderilmemiş iletiler bekliyor olabilir. Kaybolacaklar.", + "confirm_templates": "Bu cihazda kayıtlı e-posta şablonları", + "session_waiting": "Bir sonraki oturum açmanızı bekleyen gönderilmemiş iletiler: {count}. {date} tarihine kadar kalır.", + "session_waiting_unknown": "Gönderilmemiş iletiler bir sonraki oturum açmanızı bekliyor olabilir. {date} tarihine kadar kalır.", + "needs_sign_in": "Oturum açılması gerekiyor", + "switcher_waiting": "Gönderilmemiş iletiler: {count}. {date} tarihinde bu cihazdan silinecek.", + "switcher_kept": "Bu cihazdaki e-postalar {date} tarihinde silinecek.", + "sibling_waiting": "{name} oturumu kapatıldı. Gönderilmemiş iletiler: {count}. {date} tarihine kadar oturum açın, yoksa bu cihazdan silinecekler.", + "sibling_kept": "{name} oturumu kapatıldı. {date} tarihine kadar oturum açın, yoksa e-postalar bu cihazdan silinecek." + }, "offlineStorage": { "keep_description": "E-postalarınızı, takviminizi, kişilerinizi ve seçtiğiniz dosyaları bu cihazda şifreli olarak tutar. Çevrimdışıyken e-postaları okuyabilir, işaretleyebilir ve taşıyabilirsiniz; yazdıklarınız giden kutusunda bekler. Oturumu kapatınca hepsi silinir.", "window_label": "Ne kadar geriye tutulsun", @@ -5882,6 +5911,38 @@ "banner_refused": "Sunucunun reddettiği taslaklar: {count}", "banner_waiting": "Sunucuyu bekleyen taslaklar: {count}" }, + "offlineExport": { + "settings_label": "Saklanan postayı dışa aktar", + "settings_description": "Bu cihazdaki postayı mbox veya .eml dosyası olarak kaydedin. Çevrimdışı da çalışır.", + "title": "Saklanan postayı dışa aktar", + "description": "Bu cihazın sakladığı orijinalleri kaydeder. .eml dosyaları birebir kopyalardır. mbox dosyası, biçiminin gerektirdiği işaretleri ekler ve okundu ile bayraklı durumunu her iletinin üst bilgilerine, var olanların yerine yazar. Seçtiğiniz süreden eski postalar buna dahil değildir. Sunucudaki her şeyi kaydetmek için “Tüm e-postaları dışa aktar” seçeneğini kullanın.", + "folders_label": "Klasörler", + "all_folders": "Tüm klasörler", + "folder_kept": "Burada: {kept} / {total}", + "loading": "Bu cihazdakiler okunuyor…", + "load_failed": "Bu cihazdaki posta okunamadı.", + "nothing_kept": "Bu cihazda henüz saklanan posta yok.", + "kept": "Bu cihazdaki orijinaller: {kept} / {total} ileti", + "missing_online": "Sunucudan indirilecek: {count}", + "missing_offline": "Çevrimdışıyken dışa aktarılamaz: {count}. Çevrimiçi olduğunuzda yeniden deneyebilirsiniz.", + "reason_attachments_off": "Orijinal iletiler yalnızca “Ekleri tut” açıkken saklanır.", + "reason_not_kept": "Orijinal iletiler en son indirilir, o da yalnızca yer varsa.", + "not_kept_attachments_off": "Bu cihazda ekler saklanmadığı için orijinal yok: {count}", + "not_kept_not_kept": "Bu cihazda henüz orijinal yok: {count}", + "retry": "Çevrimiçi yeniden dene", + "retry_online": "Artık çevrimiçisiniz, bunlar sunucudan gelebilir.", + "retry_offline": "Çevrimiçi olduğunuzda yeniden deneyebilirsiniz.", + "settings_button": "Dışa aktar…", + "message_failed": "Sunucu bu iletiyi vermedi.", + "failed_generic": "Dışa aktarma bir hata nedeniyle durdu. Yeniden deneyin.", + "stopped_limit": "Dışa aktarma {limit} boyutunda durdu; bu tarayıcı daha fazlasını tutamaz. Daha az klasör seçin veya Chromium, Firefox ya da masaüstü uygulamasını kullanın.", + "over_limit": "Bu tarayıcı en fazla {limit} tutabilir, bu seçim ise yaklaşık {size}. Daha az klasör seçin veya Chromium, Firefox ya da masaüstü uygulamasını kullanın.", + "no_room": "Bu dışa aktarma yaklaşık {size} gerektiriyor, bu tarayıcıda ise {free} kaldı. Daha az klasör seçin veya yer açın.", + "stopped_no_room": "Tarayıcıda dışa aktarma için yer kalmadı. Daha az klasör seçin veya yer açın.", + "stopped_offline_off": "Dışa aktarma durdu çünkü bu hesap artık bu cihazda posta saklamıyor.", + "policy_unknown": "Kuruluşunuzun bu hesap için kuralları henüz bilinmiyor, bu nedenle dışa aktarma şimdilik kapalı.", + "leftover_file": "{name} dosyası kaydettiğiniz yerden kaldırılamadı. Eksik olduğu için silebilirsiniz." + }, "deep_link": { "message_not_found": "Bu ileti artık kullanılamıyor.", "thread_not_found": "Bu sohbet artık kullanılamıyor.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Bu ileti {folder} klasörüne taşındı.", "window_not_ready": "Yeni pencere zamanında açılmadı. Taslağınız burada kalıyor." }, + "desktopUi": { + "settings": { + "title": "Pencereler", + "double_click_label": "İletileri çift tıklamayla yeni pencerede aç", + "double_click_description": "Tek tıklama iletiyi yine listenin yanında açar.", + "restore_label": "Başlangıçta pencereleri yeniden aç", + "restore_description": "Çıkarken açık olan ileti ve taslak pencereleri geri gelir." + }, + "attachment": { + "open": "Aç", + "save_as": "Farklı kaydet…", + "copy": "Kopyala", + "copy_failed": "Dosya kopyalanamadı." + }, + "menu": { + "file": "Dosya", + "edit": "Düzen", + "view": "Görünüm", + "message": "İleti", + "go": "Git", + "window": "Pencere", + "help": "Yardım", + "new_window": "Yeni Pencere", + "print": "Yazdır…", + "save_pdf": "PDF Olarak Kaydet…", + "switch_connection": "Bağlantıyı Değiştir…", + "close": "Kapat", + "quit": "Çık", + "undo": "Geri Al", + "redo": "Yinele", + "cut": "Kes", + "copy": "Kopyala", + "paste": "Yapıştır", + "select_all": "Tümünü Seç", + "search": "E-postalarda Ara", + "refresh": "Yeni E-postaları Denetle", + "reading_pane": "Okuma Bölmesi", + "pane_right": "Sağda", + "pane_below": "Listenin Altında", + "pane_off": "Kapalı", + "zoom_in": "Yakınlaştır", + "zoom_out": "Uzaklaştır", + "zoom_reset": "Gerçek Boyut", + "full_screen": "Tam Ekran", + "open_in_window": "Yeni Pencerede Aç", + "next_message": "Sonraki İleti", + "previous_message": "Önceki İleti", + "next_unread": "Sonraki Okunmamış İleti", + "mail": "E-posta", + "files": "Dosyalar", + "back": "Geri", + "forward": "İleri", + "minimize": "Küçült", + "next_window": "Sonraki Pencere", + "shortcuts": "Klavye Kısayolları", + "docs": "Belgeler", + "settings": "Ayarlar…", + "about": "Bulwark Hakkında", + "from_plugins": "Eklentilerden Daha Fazlası…", + "pick_gone": "Bu menü eskimişti. Yeniden açın ve bir kez daha deneyin.", + "bar_label": "Menü" + }, + "context": { + "add_to_dictionary": "“{word}” sözcüğünü sözlüğe ekle", + "no_suggestions": "Öneri yok", + "open_link": "Bağlantıyı Aç", + "copy_link": "Bağlantıyı Kopyala", + "copy_address": "Adresi Kopyala", + "save_image": "Resmi Kaydet…", + "copy_image": "Resmi Kopyala" + }, + "closing": { + "unsaved_title": "Bir taslak kaydedilemedi", + "unsaved_detail": "Şimdi kapatırsanız, son kayıttan beri yazdıklarınız kaybolur.", + "close_anyway": "Yine de kapat", + "unsent_title": "Bazı e-postalar henüz gönderilmedi", + "unsent_one": "Bir ileti gönderilmeyi bekliyor. Bulwark’ı bir sonraki açışınızda gönderilir.", + "unsent_many": "{count} ileti gönderilmeyi bekliyor. Bulwark’ı bir sonraki açışınızda gönderilir.", + "quit": "Çık", + "leave_title": "Kaydedilmemiş değişikliklerle ayrılınsın mı?", + "leave_detail": "Bu sayfada yaptığınız değişiklikler henüz kaydedilmedi.", + "leave": "Ayrıl", + "stay": "Kal" + }, + "spellcheck": { + "offer": "{language} yazım denetimi için bir sözlük gerekir. Bulwark bunu Google’dan indirebilir. Metniniz gönderilmez.", + "download": "İndir" + }, + "restore": { + "unavailable_title": "Bu taslak şu anda açılamıyor", + "unavailable_body": "Sunucuda, Taslaklar klasöründe güvende. Bağlantı geri geldiğinde yeniden deneyin.", + "try_again": "Yeniden dene", + "close": "Kapat" + } + }, "desktop_sign_in": { "browser_button": "Tarayıcıyla oturum aç", "browser_waiting": "Oturum açmayı tarayıcınızda tamamlayın", @@ -6661,6 +6817,53 @@ "revoke": "Geri al", "revoked": "İzin geri alındı" }, + "desktopOs": { + "section_title": "Masaüstü uygulaması", + "section_description": "Uygulamanın bilgisayarınızla nasıl çalıştığı.", + "close_to_tray_label": "Kapatınca sistem tepsisinde çalışmaya devam et", + "close_to_tray_description": "Pencereyi kapattıktan sonra da yeni postalar ve anımsatıcılar gelmeye devam eder.", + "start_at_login_label": "Bilgisayarda oturum açınca başlat", + "start_at_login_description": "Oturum açtığınızda uygulama kendiliğinden başlar.", + "start_minimized_label": "Sistem tepsisinde başlat", + "start_minimized_description": "Oturum açarken pencere açılmaz. Sistem tepsisindeki simgeyle açın.", + "attention_label": "Yeni postada görev çubuğunu yanıp söndür", + "attention_mac_label": "Yeni postada Dock simgesini zıplat", + "attention_description": "Yalnızca uygulama önde değilken.", + "quiet_hours_label": "Sessiz saatler", + "quiet_hours_description": "Bu saatlerde bildirim ve ses yok. Postalar gelmeye devam eder.", + "quiet_hours_from": "Başlangıç", + "quiet_hours_to": "bitiş", + "show_shortcut_label": "Uygulamayı klavye kısayoluyla göster", + "show_shortcut_description": "{keys} uygulamayı başka herhangi bir uygulamadan öne getirir.", + "show_shortcut_taken": "{keys} başka bir uygulama tarafından kullanılıyor. O uygulamayı kapatın ya da bunu kapatıp yeniden açın.", + "default_app_label": "Varsayılan posta uygulaması", + "default_app_description": "Posta bağlantılarını ve .eml, .ics, .vcf dosyalarını bu uygulamayla aç.", + "default_app_is_default": "Posta bağlantılarınızı bu uygulama açıyor.", + "default_app_button": "Varsayılan uygulamayı seç…", + "new_mail": "Yeni posta", + "no_subject": "(konu yok)", + "action_delete": "Sil", + "copy_as_file": "Dosya olarak kopyala", + "copied": "Dosya kopyalandı. Bir klasöre yapıştırabilirsiniz.", + "copy_failed": "Dosya kopyalanamadı.", + "reply_lost": "Yazdığınız yanıt korunamadı. İletiyi açıp oradan yanıtlayın." + }, + "desktopReminders": { + "generic_title": "Anımsatıcı", + "snooze": "{count} dk ertele", + "snooze_short": "{count} dk", + "open": "Aç", + "join": "Katıl", + "missed_title": "{count, plural, one {Kaçırılan # anımsatıcı} other {Kaçırılan # anımsatıcı}}", + "missed_more": "ve {count} tane daha", + "missed_show": "Göster", + "missed_dialog_title": "Kaçırılan anımsatıcılar", + "missed_dialog_description": "Uygulama kapalıyken, bilgisayar uykudayken veya bildirimler duraklatılmışken zamanı geldi.", + "open_calendar": "Takvimi aç", + "done": "Bitti", + "join_host": "Katıl ({host})", + "join_named": "Katıl: {title}" + }, "desktop_policy": { "server_refused": "Kuruluşunuz bu cihazda bu sunucuya izin vermiyor.", "plugin_refused": "Kuruluşunuz bu cihazda bu eklentiye izin vermiyor, bu yüzden çalışmıyor. Ayarları ve verileri korunur.", @@ -6669,5 +6872,30 @@ "plugins_off": "Kuruluşunuz bu cihazda eklentileri kapattı.", "plugins_allowlist": "Kuruluşunuz bu cihazda yalnızca belirli eklentilere izin veriyor.", "off": "Kapalı" + }, + "desktopTelemetry": { + "section_title": "Kullanım bilgileri ve kilitlenme raporları", + "section_description": "İkisi de siz açana kadar kapalıdır ve her birinin kendi anahtarı vardır.", + "telemetry_label": "Kullanım bilgilerini gönder", + "telemetry_description": "Günde bir kez: rastgele bir kimlik, uygulama sürümü, Node sürümü, işletim sisteminiz, uygulamanın ne kadar süredir çalıştığı ve nasıl bağlandığı. Kendi posta sunucunuzda ayrıca hangi özelliklerin açık olduğu, yaklaşık hesap sayısı ve kaç eklenti ile temanız olduğu. Asla e-posta, adres veya sunucu adı gönderilmez.", + "crash_label": "Kilitlenme raporlarını gönder", + "crash_description": "Uygulamadaki hatalar rastgele bir kimlik, uygulamanın kendi kodundaki dosya adları ve kısa, temizlenmiş iletilerle gönderilir. Uygulamanın kendisi kilitlenirse bir kilitlenme dosyası bu bilgisayarda kalır ve yalnızca siz gönderirseniz çıkar.", + "crash_memory": "Kilitlenme dosyası, kilitlenme anında uygulama belleğinin bir bölümünün kopyasıdır. Bulwark bulduğu kullanıcı adlarını, adresleri ve oturum açma belirteçlerini kaldırır ancak kilitlenme dosyası yine de e-postalarınızın metnini içerebilir.", + "instance_note": "Bir Bulwark sunucusunda, sayfaların ona ne bildireceğine yöneticisi ayrıca karar verir.", + "forced_off": "Kuruluşunuz bunu kapattı.", + "url_label": "Kilitlenme dosyalarının gideceği yer", + "url_description": "Kilitlenme dosyasını alan https adresi. Bulwark bir adresle gelmez.", + "url_invalid": "Tam bir https adresi girin.", + "url_save": "Kaydet", + "files_label": "Bu bilgisayardaki kilitlenme dosyaları", + "files_description": "Bulwark en yenileri saklar ve bir aydan eski olanları siler.", + "files_empty": "Kilitlenme dosyası yok.", + "file_size": "{size} KB", + "send": "Kilitlenme raporunu gönder…", + "delete_all": "Tümünü sil", + "sent": "Kilitlenme raporu gönderildi.", + "send_no_consent": "Önce kilitlenme raporlarını açın.", + "send_no_url": "Adres ayarlanmadı, bu yüzden gönderilecek yer yok. Yukarıya bir adres girin.", + "send_failed": "Kilitlenme raporu gönderilemedi." } } diff --git a/locales/uk/common.json b/locales/uk/common.json index 7ef9e7b83..4d1c083bd 100644 --- a/locales/uk/common.json +++ b/locales/uk/common.json @@ -5801,6 +5801,35 @@ "store_private": "Приватні вікна не можуть зберігати пошту для роботи офлайн.", "server_not_answering": "Поштовий сервер не відповідає. Спробуйте ще раз за хвилину." }, + "offlineWipe": { + "note": "Ваша організація видалила дані цього облікового запису з цього пристрою. Увійдіть, щоб почати знову.", + "note_unsent": "Ваша організація видалила дані цього облікового запису з цього пристрою. Видалено ненадісланих повідомлень: {count}.", + "settings_title": "Видалити все з цього пристрою", + "settings_description": "На випадок, якщо ви передаєте цей комп'ютер або більше ним не користуєтеся. Ваша пошта на сервері залишиться.", + "settings_button": "Видалити все…", + "settings_wiping": "Видалення…", + "confirm_title": "Видалити все з цього пристрою?", + "confirm_message": "Буде видалено все, що цей застосунок зберігає на цьому пристрої, для всіх облікових записів тут. Пошту на сервері це не зачепить.", + "confirm_mail": "Пошта, календарі, контакти та файли, що зберігаються тут", + "confirm_unsent": "Ненадісланих повідомлень в очікуванні: {count}. Вони будуть втрачені.", + "confirm_keys": "Ключі S/MIME та OpenPGP. Щоб знову ними користуватися, потрібна ваша власна резервна копія.", + "confirm_plugins": "Дані, збережені тут плагінами", + "confirm_files": "Вкладення, відкриті для редагування, і файли, що очікують прикріплення", + "confirm_accounts": "Вихід з усіх облікових записів", + "confirm_button": "Видалити все", + "note_unknown": "Ваша організація видалила дані цього облікового запису з цього пристрою. Можливо, видалено й ненадіслані повідомлення.", + "refused_waiting": "Ненадіслані повідомлення чекають на новий пароль: {count}. Вони зберігаються до {date}.", + "refused_waiting_unknown": "Можливо, ненадіслані повідомлення чекають на новий пароль. Вони зберігаються до {date}.", + "confirm_unsent_unknown": "Тут можуть бути ненадіслані повідомлення. Їх буде втрачено.", + "confirm_templates": "Шаблони листів, збережені на цьому пристрої", + "session_waiting": "Ненадіслані повідомлення чекають на наступний вхід: {count}. Вони зберігаються до {date}.", + "session_waiting_unknown": "Можливо, ненадіслані повідомлення чекають на наступний вхід. Вони зберігаються до {date}.", + "needs_sign_in": "Потрібен вхід", + "switcher_waiting": "Ненадіслані повідомлення: {count}. Буде видалено з цього пристрою {date}.", + "switcher_kept": "Пошту на цьому пристрої буде видалено {date}.", + "sibling_waiting": "Виконано вихід із {name}. Ненадіслані повідомлення: {count}. Увійдіть до {date}, інакше їх буде видалено з цього пристрою.", + "sibling_kept": "Виконано вихід із {name}. Увійдіть до {date}, інакше пошту буде видалено з цього пристрою." + }, "offlineStorage": { "keep_description": "Зберігає вашу пошту, календар, контакти та вибрані файли в зашифрованому вигляді на цьому пристрої. Без мережі можна читати, позначати й переміщати листи, а написане чекає у вихідних. Під час виходу все видаляється.", "window_label": "За який період зберігати", @@ -5882,6 +5911,38 @@ "banner_refused": "Чернетки, відхилені сервером: {count}", "banner_waiting": "Чернетки, що чекають на сервер: {count}" }, + "offlineExport": { + "settings_label": "Експорт збереженої пошти", + "settings_description": "Збережіть пошту з цього пристрою у файли mbox або .eml. Працює і без мережі.", + "title": "Експорт збереженої пошти", + "description": "Зберігає оригінали, які є на цьому пристрої. Файли .eml — точні копії. Файл mbox додає позначки, яких вимагає його формат, і записує стан «прочитано» й «позначено» в заголовки кожного повідомлення замість попередніх. Пошти, старшої за вибраний період, тут немає. Щоб зберегти все із сервера, скористайтеся «Експортувати всю пошту».", + "folders_label": "Папки", + "all_folders": "Усі папки", + "folder_kept": "Тут: {kept} із {total}", + "loading": "Читання даних на цьому пристрої…", + "load_failed": "Не вдалося прочитати пошту на цьому пристрої.", + "nothing_kept": "На цьому пристрої ще немає збереженої пошти.", + "kept": "Оригінали на цьому пристрої: {kept} із {total}", + "missing_online": "Завантажити із сервера: {count}", + "missing_offline": "Не можна експортувати без мережі: {count}. Спробуйте ще раз, коли з'явиться мережа.", + "reason_attachments_off": "Початкові повідомлення зберігаються, лише якщо ввімкнено «Зберігати вкладення».", + "reason_not_kept": "Початкові повідомлення завантажуються останніми й лише поки є місце.", + "not_kept_attachments_off": "Немає оригіналу, бо на цьому пристрої не зберігаються вкладення: {count}", + "not_kept_not_kept": "Поки немає оригіналу на цьому пристрої: {count}", + "retry": "Повторити в мережі", + "retry_online": "Мережа є, тож їх можна отримати із сервера.", + "retry_offline": "Спробуйте ще раз, коли з'явиться мережа.", + "settings_button": "Експортувати…", + "message_failed": "Сервер не видав це повідомлення.", + "failed_generic": "Експорт зупинено через помилку. Спробуйте ще раз.", + "stopped_limit": "Експорт зупинено на {limit}: більше цей браузер утримати не може. Виберіть менше папок або скористайтеся Chromium, Firefox чи застосунком для комп'ютера.", + "over_limit": "Цей браузер може утримати щонайбільше {limit}, а вибрано приблизно {size}. Виберіть менше папок або скористайтеся Chromium, Firefox чи застосунком для комп'ютера.", + "no_room": "Для цього експорту потрібно приблизно {size}, а цьому браузеру доступно {free}. Виберіть менше папок або звільніть місце.", + "stopped_no_room": "Браузеру забракло місця для експорту. Виберіть менше папок або звільніть місце.", + "stopped_offline_off": "Експорт зупинено: цей обліковий запис більше не зберігає пошту на цьому пристрої.", + "policy_unknown": "Правила вашої організації для цього облікового запису поки невідомі, тому експорт поки вимкнено.", + "leftover_file": "Не вдалося вилучити файл {name} з місця збереження. Він неповний, його можна видалити." + }, "deep_link": { "message_not_found": "Цей лист більше недоступний.", "thread_not_found": "Ця розмова більше недоступна.", @@ -6644,6 +6705,101 @@ "message_moved_to": "Цього листа переміщено в {folder}.", "window_not_ready": "Нове вікно не відкрилося вчасно. Чернетка залишається тут." }, + "desktopUi": { + "settings": { + "title": "Вікна", + "double_click_label": "Відкривати листи в новому вікні подвійним клацанням", + "double_click_description": "Одне клацання, як і раніше, відкриває лист поруч зі списком.", + "restore_label": "Знову відкривати вікна під час запуску", + "restore_description": "Вікна листів і чернеток, відкриті під час виходу, повернуться." + }, + "attachment": { + "open": "Відкрити", + "save_as": "Зберегти як…", + "copy": "Копіювати", + "copy_failed": "Не вдалося скопіювати файл." + }, + "menu": { + "file": "Файл", + "edit": "Редагування", + "view": "Вигляд", + "message": "Повідомлення", + "go": "Перехід", + "window": "Вікно", + "help": "Довідка", + "new_window": "Нове вікно", + "print": "Друк…", + "save_pdf": "Зберегти як PDF…", + "switch_connection": "Змінити підключення…", + "close": "Закрити", + "quit": "Вийти", + "undo": "Скасувати", + "redo": "Повторити", + "cut": "Вирізати", + "copy": "Копіювати", + "paste": "Вставити", + "select_all": "Вибрати все", + "search": "Пошук у пошті", + "refresh": "Перевірити нову пошту", + "reading_pane": "Область читання", + "pane_right": "Праворуч", + "pane_below": "Під списком", + "pane_off": "Вимкнено", + "zoom_in": "Збільшити", + "zoom_out": "Зменшити", + "zoom_reset": "Реальний розмір", + "full_screen": "На весь екран", + "open_in_window": "Відкрити в новому вікні", + "next_message": "Наступне повідомлення", + "previous_message": "Попереднє повідомлення", + "next_unread": "Наступне непрочитане повідомлення", + "mail": "Пошта", + "files": "Файли", + "back": "Назад", + "forward": "Вперед", + "minimize": "Згорнути", + "next_window": "Наступне вікно", + "shortcuts": "Комбінації клавіш", + "docs": "Документація", + "settings": "Налаштування…", + "about": "Про Bulwark", + "from_plugins": "Більше від плагінів…", + "pick_gone": "Це меню застаріло. Відкрийте його знову й спробуйте ще раз.", + "bar_label": "Меню" + }, + "context": { + "add_to_dictionary": "Додати «{word}» до словника", + "no_suggestions": "Немає пропозицій", + "open_link": "Відкрити посилання", + "copy_link": "Копіювати посилання", + "copy_address": "Копіювати адресу", + "save_image": "Зберегти зображення…", + "copy_image": "Копіювати зображення" + }, + "closing": { + "unsaved_title": "Не вдалося зберегти чернетку", + "unsaved_detail": "Якщо закрити зараз, усе написане після останнього збереження буде втрачено.", + "close_anyway": "Закрити все одно", + "unsent_title": "Частину листів ще не надіслано", + "unsent_one": "Одне повідомлення чекає на надсилання. Воно піде під час наступного запуску Bulwark.", + "unsent_many": "Повідомлень, що чекають на надсилання: {count}. Вони підуть під час наступного запуску Bulwark.", + "quit": "Вийти", + "leave_title": "Піти з незбереженими змінами?", + "leave_detail": "Зміни на цій сторінці ще не збережено.", + "leave": "Піти", + "stay": "Залишитися" + }, + "spellcheck": { + "offer": "Для перевірки правопису мовою «{language}» потрібен словник. Bulwark може завантажити його від Google. Ваш текст не надсилається.", + "download": "Завантажити" + }, + "restore": { + "unavailable_title": "Цю чернетку зараз не можна відкрити", + "unavailable_body": "Вона в безпеці на сервері, у теці «Чернетки». Спробуйте ще раз, коли з’явиться з’єднання.", + "try_again": "Спробувати ще раз", + "close": "Закрити" + } + }, "desktop_sign_in": { "browser_button": "Увійти через браузер", "browser_waiting": "Завершіть вхід у браузері", @@ -6661,6 +6817,53 @@ "revoke": "Відкликати", "revoked": "Дозвіл відкликано" }, + "desktopOs": { + "section_title": "Настільний застосунок", + "section_description": "Як застосунок працює з вашим комп’ютером.", + "close_to_tray_label": "Під час закриття працювати далі в треї", + "close_to_tray_description": "Нова пошта й нагадування надходять і після закриття вікна.", + "start_at_login_label": "Запускати під час входу в систему", + "start_at_login_description": "Застосунок запускається сам, коли ви входите.", + "start_minimized_label": "Запускати в треї", + "start_minimized_description": "Під час входу вікно не відкривається. Відкрийте його значком у треї.", + "attention_label": "Блимати на панелі завдань за нової пошти", + "attention_mac_label": "Підстрибувати значком у Dock за нової пошти", + "attention_description": "Лише коли застосунок не на передньому плані.", + "quiet_hours_label": "Тихі години", + "quiet_hours_description": "У цей час немає сповіщень і звуків. Пошта надходить далі.", + "quiet_hours_from": "З", + "quiet_hours_to": "до", + "show_shortcut_label": "Показувати застосунок сполученням клавіш", + "show_shortcut_description": "{keys} виводить застосунок на передній план із будь-якого іншого.", + "show_shortcut_taken": "{keys} використовує інший застосунок. Закрийте його або вимкніть і знову увімкніть цей параметр.", + "default_app_label": "Поштовий застосунок за замовчуванням", + "default_app_description": "Відкривати поштові посилання та файли .eml, .ics і .vcf у цьому застосунку.", + "default_app_is_default": "Цей застосунок відкриває ваші поштові посилання.", + "default_app_button": "Вибрати застосунок за замовчуванням…", + "new_mail": "Нова пошта", + "no_subject": "(без теми)", + "action_delete": "Видалити", + "copy_as_file": "Копіювати як файл", + "copied": "Файл скопійовано. Його можна вставити в папку.", + "copy_failed": "Не вдалося скопіювати файл.", + "reply_lost": "Не вдалося зберегти введену відповідь. Відкрийте лист і дайте відповідь у ньому." + }, + "desktopReminders": { + "generic_title": "Нагадування", + "snooze": "Відкласти на {count} хв", + "snooze_short": "{count} хв", + "open": "Відкрити", + "join": "Приєднатися", + "missed_title": "{count, plural, one {# пропущене нагадування} few {# пропущені нагадування} many {# пропущених нагадувань} other {# пропущеного нагадування}}", + "missed_more": "і ще {count}", + "missed_show": "Показати", + "missed_dialog_title": "Пропущені нагадування", + "missed_dialog_description": "Вони спрацювали, коли застосунок було закрито, комп'ютер спав або сповіщення були призупинені.", + "open_calendar": "Відкрити календар", + "done": "Готово", + "join_host": "Приєднатися ({host})", + "join_named": "Приєднатися: {title}" + }, "desktop_policy": { "server_refused": "Ваша організація не дозволяє цей сервер на цьому пристрої.", "plugin_refused": "Ваша організація не дозволяє цей плагін на цьому пристрої, тому він не працює. Його налаштування та дані зберігаються.", @@ -6669,5 +6872,30 @@ "plugins_off": "Ваша організація вимкнула плагіни на цьому пристрої.", "plugins_allowlist": "Ваша організація дозволяє на цьому пристрої лише деякі плагіни.", "off": "Вимк." + }, + "desktopTelemetry": { + "section_title": "Дані про використання та звіти про збої", + "section_description": "Обидва вимкнені, доки ви їх не ввімкнете, і кожен має власний перемикач.", + "telemetry_label": "Надсилати дані про використання", + "telemetry_description": "Раз на день: випадковий ідентифікатор, версія застосунку, версія Node, ваша операційна система, як довго працює застосунок і як він підключається. З власним поштовим сервером також увімкнені функції, приблизна кількість облікових записів і кількість плагінів і тем. Ніколи листи, адреси чи назви серверів.", + "crash_label": "Надсилати звіти про збої", + "crash_description": "Помилки в застосунку надсилаються з випадковим ідентифікатором, назвами файлів із коду самого застосунку та короткими очищеними повідомленнями. Якщо збій стається в самому застосунку, файл збою залишається на цьому комп'ютері й покидає його, лише якщо ви його надішлете.", + "crash_memory": "Файл збою — це копія частини пам'яті застосунку в момент збою. Bulwark вилучає знайдені імена користувачів, адреси й токени входу, але файл збою все одно може містити текст ваших листів.", + "instance_note": "На сервері Bulwark його адміністратор окремо вирішує, що сторінки йому повідомляють.", + "forced_off": "Ваша організація вимкнула це.", + "url_label": "Куди надходять файли збоїв", + "url_description": "Адреса https, яка приймає файл збою. У Bulwark її немає.", + "url_invalid": "Введіть повну адресу https.", + "url_save": "Зберегти", + "files_label": "Файли збоїв на цьому комп'ютері", + "files_description": "Bulwark зберігає найновіші та видаляє ті, що старші за місяць.", + "files_empty": "Файлів збоїв немає.", + "file_size": "{size} КБ", + "send": "Надіслати звіт про збій…", + "delete_all": "Видалити всі", + "sent": "Звіт про збій надіслано.", + "send_no_consent": "Спочатку ввімкніть звіти про збої.", + "send_no_url": "Адресу не задано, тому надсилати нікуди. Введіть її вище.", + "send_failed": "Не вдалося надіслати звіт про збій." } } diff --git a/locales/vi/common.json b/locales/vi/common.json index 688c4da37..b19fd05db 100644 --- a/locales/vi/common.json +++ b/locales/vi/common.json @@ -5813,6 +5813,35 @@ "store_private": "Cửa sổ riêng tư không thể giữ thư để dùng ngoại tuyến.", "server_not_answering": "Máy chủ thư không phản hồi. Hãy thử lại sau giây lát." }, + "offlineWipe": { + "note": "Tổ chức của bạn đã xóa dữ liệu của tài khoản này khỏi thiết bị này. Hãy đăng nhập để bắt đầu lại.", + "note_unsent": "Tổ chức của bạn đã xóa dữ liệu của tài khoản này khỏi thiết bị này. Số thư chưa gửi đã xóa: {count}.", + "settings_title": "Xóa mọi thứ khỏi thiết bị này", + "settings_description": "Dành cho khi bạn tặng máy tính này hoặc không dùng nữa. Thư của bạn trên máy chủ vẫn còn.", + "settings_button": "Xóa mọi thứ…", + "settings_wiping": "Đang xóa…", + "confirm_title": "Xóa mọi thứ khỏi thiết bị này?", + "confirm_message": "Thao tác này xóa những gì ứng dụng này lưu trên thiết bị này, cho mọi tài khoản ở đây. Thư của bạn trên máy chủ không bị ảnh hưởng.", + "confirm_mail": "Thư, lịch, danh bạ và tệp được lưu ở đây", + "confirm_unsent": "Số thư chưa gửi đang chờ ở đây: {count}. Chúng sẽ bị mất.", + "confirm_keys": "Khóa S/MIME và OpenPGP. Bạn cần bản sao lưu của riêng mình để dùng lại.", + "confirm_plugins": "Dữ liệu mà các tiện ích đã lưu ở đây", + "confirm_files": "Tệp đính kèm mở để chỉnh sửa và tệp đang chờ đính kèm", + "confirm_accounts": "Tất cả tài khoản sẽ đăng xuất", + "confirm_button": "Xóa mọi thứ", + "note_unknown": "Tổ chức của bạn đã xóa dữ liệu của tài khoản này khỏi thiết bị này. Các thư chưa gửi cũng có thể đã bị xóa.", + "refused_waiting": "Thư chưa gửi đang chờ mật khẩu mới của bạn: {count}. Được giữ đến {date}.", + "refused_waiting_unknown": "Có thể có thư chưa gửi đang chờ mật khẩu mới của bạn. Được giữ đến {date}.", + "confirm_unsent_unknown": "Có thể có thư chưa gửi đang chờ ở đây. Chúng sẽ bị mất.", + "confirm_templates": "Mẫu email đã lưu trên thiết bị này", + "session_waiting": "Thư chưa gửi đang chờ lần đăng nhập tiếp theo: {count}. Được giữ đến {date}.", + "session_waiting_unknown": "Có thể có thư chưa gửi đang chờ lần đăng nhập tiếp theo. Được giữ đến {date}.", + "needs_sign_in": "Cần đăng nhập", + "switcher_waiting": "Thư chưa gửi: {count}. Sẽ bị xóa khỏi thiết bị này vào {date}.", + "switcher_kept": "Email trên thiết bị này sẽ bị xóa vào {date}.", + "sibling_waiting": "{name} đã bị đăng xuất. Thư chưa gửi: {count}. Hãy đăng nhập trước {date}, nếu không chúng sẽ bị xóa khỏi thiết bị này.", + "sibling_kept": "{name} đã bị đăng xuất. Hãy đăng nhập trước {date}, nếu không email sẽ bị xóa khỏi thiết bị này." + }, "offlineStorage": { "keep_description": "Giữ thư, lịch, danh bạ và các tệp bạn chọn, được mã hóa trên thiết bị này. Khi ngoại tuyến bạn có thể đọc, gắn cờ và di chuyển thư, còn thư bạn viết sẽ chờ trong Hộp thư đi. Khi đăng xuất, tất cả sẽ bị xóa.", "window_label": "Giữ lại bao lâu", @@ -5894,6 +5923,38 @@ "banner_refused": "Bản nháp bị máy chủ từ chối: {count}", "banner_waiting": "Bản nháp đang chờ máy chủ: {count}" }, + "offlineExport": { + "settings_label": "Xuất thư đã lưu", + "settings_description": "Lưu thư trên thiết bị này thành tệp mbox hoặc .eml. Hoạt động cả khi ngoại tuyến.", + "title": "Xuất thư đã lưu", + "description": "Lưu các bản gốc mà thiết bị này giữ. Tệp .eml là bản sao chính xác. Tệp mbox thêm các dấu mà định dạng của nó cần và ghi trạng thái đã đọc và gắn cờ vào tiêu đề của mỗi thư, thay cho giá trị cũ. Thư cũ hơn khoảng thời gian bạn chọn không có trong đó. Để lưu mọi thứ trên máy chủ, hãy dùng “Xuất toàn bộ thư”.", + "folders_label": "Thư mục", + "all_folders": "Tất cả thư mục", + "folder_kept": "Ở đây {kept}/{total}", + "loading": "Đang đọc dữ liệu trên thiết bị này…", + "load_failed": "Không đọc được thư trên thiết bị này.", + "nothing_kept": "Chưa có thư nào được lưu trên thiết bị này.", + "kept": "Bản gốc trên thiết bị này: {kept}/{total} thư", + "missing_online": "Cần tải từ máy chủ: {count}", + "missing_offline": "Không xuất được khi ngoại tuyến: {count}. Bạn có thể thử lại khi trực tuyến.", + "reason_attachments_off": "Thư gốc chỉ được giữ khi “Giữ tệp đính kèm” đang bật.", + "reason_not_kept": "Thư gốc được tải sau cùng và chỉ khi còn chỗ.", + "not_kept_attachments_off": "Không có bản gốc vì thiết bị này không giữ tệp đính kèm: {count}", + "not_kept_not_kept": "Chưa có bản gốc trên thiết bị này: {count}", + "retry": "Thử lại khi trực tuyến", + "retry_online": "Bạn đang trực tuyến nên có thể lấy từ máy chủ.", + "retry_offline": "Bạn có thể thử lại khi trực tuyến.", + "settings_button": "Xuất…", + "message_failed": "Máy chủ không trả về thư này.", + "failed_generic": "Việc xuất đã dừng do lỗi. Hãy thử lại.", + "stopped_limit": "Việc xuất đã dừng ở {limit}, mức tối đa trình duyệt này có thể giữ. Hãy chọn ít thư mục hơn, hoặc dùng Chromium, Firefox hay ứng dụng máy tính.", + "over_limit": "Trình duyệt này giữ được tối đa {limit}, còn lựa chọn này khoảng {size}. Hãy chọn ít thư mục hơn, hoặc dùng Chromium, Firefox hay ứng dụng máy tính.", + "no_room": "Lần xuất này cần khoảng {size}, còn trình duyệt này còn {free}. Hãy chọn ít thư mục hơn hoặc giải phóng dung lượng.", + "stopped_no_room": "Trình duyệt đã hết chỗ cho việc xuất. Hãy chọn ít thư mục hơn hoặc giải phóng dung lượng.", + "stopped_offline_off": "Việc xuất đã dừng vì tài khoản này không còn giữ thư trên thiết bị này.", + "policy_unknown": "Chưa biết quy tắc của tổ chức bạn cho tài khoản này, nên việc xuất tạm thời tắt.", + "leftover_file": "Không thể xóa tệp {name} khỏi nơi bạn đã lưu. Tệp chưa hoàn chỉnh, bạn có thể xóa nó." + }, "deep_link": { "message_not_found": "Thư này không còn nữa.", "thread_not_found": "Cuộc trò chuyện này không còn tồn tại nữa.", @@ -6656,6 +6717,101 @@ "message_moved_to": "Thư này đã được chuyển đến {folder}.", "window_not_ready": "Cửa sổ mới không mở kịp. Bản nháp của bạn vẫn ở đây." }, + "desktopUi": { + "settings": { + "title": "Cửa sổ", + "double_click_label": "Mở thư trong cửa sổ mới khi nhấp đúp", + "double_click_description": "Nhấp một lần vẫn mở thư bên cạnh danh sách.", + "restore_label": "Mở lại cửa sổ khi khởi động", + "restore_description": "Các cửa sổ thư và bản nháp đang mở khi thoát sẽ trở lại." + }, + "attachment": { + "open": "Mở", + "save_as": "Lưu thành…", + "copy": "Sao chép", + "copy_failed": "Không thể sao chép tệp." + }, + "menu": { + "file": "Tệp", + "edit": "Chỉnh sửa", + "view": "Xem", + "message": "Thư", + "go": "Đi tới", + "window": "Cửa sổ", + "help": "Trợ giúp", + "new_window": "Cửa sổ mới", + "print": "In…", + "save_pdf": "Lưu dưới dạng PDF…", + "switch_connection": "Đổi kết nối…", + "close": "Đóng", + "quit": "Thoát", + "undo": "Hoàn tác", + "redo": "Làm lại", + "cut": "Cắt", + "copy": "Sao chép", + "paste": "Dán", + "select_all": "Chọn tất cả", + "search": "Tìm trong thư", + "refresh": "Kiểm tra thư mới", + "reading_pane": "Ô đọc thư", + "pane_right": "Bên phải", + "pane_below": "Bên dưới danh sách", + "pane_off": "Tắt", + "zoom_in": "Phóng to", + "zoom_out": "Thu nhỏ", + "zoom_reset": "Kích thước thực", + "full_screen": "Toàn màn hình", + "open_in_window": "Mở trong cửa sổ mới", + "next_message": "Thư tiếp theo", + "previous_message": "Thư trước", + "next_unread": "Thư chưa đọc tiếp theo", + "mail": "Thư", + "files": "Tệp", + "back": "Quay lại", + "forward": "Tiến tới", + "minimize": "Thu nhỏ cửa sổ", + "next_window": "Cửa sổ tiếp theo", + "shortcuts": "Phím tắt", + "docs": "Tài liệu", + "settings": "Cài đặt…", + "about": "Giới thiệu về Bulwark", + "from_plugins": "Thêm từ các plugin…", + "pick_gone": "Menu này đã cũ. Hãy mở lại và thử một lần nữa.", + "bar_label": "Trình đơn" + }, + "context": { + "add_to_dictionary": "Thêm “{word}” vào từ điển", + "no_suggestions": "Không có gợi ý", + "open_link": "Mở liên kết", + "copy_link": "Sao chép liên kết", + "copy_address": "Sao chép địa chỉ", + "save_image": "Lưu hình ảnh…", + "copy_image": "Sao chép hình ảnh" + }, + "closing": { + "unsaved_title": "Không thể lưu một bản nháp", + "unsaved_detail": "Nếu bạn đóng bây giờ, nội dung bạn đã viết kể từ lần lưu gần nhất sẽ bị mất.", + "close_anyway": "Vẫn đóng", + "unsent_title": "Một số thư chưa được gửi", + "unsent_one": "Có 1 thư đang chờ gửi. Thư sẽ được gửi vào lần tới bạn mở Bulwark.", + "unsent_many": "Có {count} thư đang chờ gửi. Các thư sẽ được gửi vào lần tới bạn mở Bulwark.", + "quit": "Thoát", + "leave_title": "Rời đi khi còn thay đổi chưa lưu?", + "leave_detail": "Các thay đổi của bạn trên trang này chưa được lưu.", + "leave": "Rời đi", + "stay": "Ở lại" + }, + "spellcheck": { + "offer": "Kiểm tra chính tả cho {language} cần một từ điển. Bulwark có thể tải từ Google. Văn bản của bạn không bị gửi đi.", + "download": "Tải xuống" + }, + "restore": { + "unavailable_title": "Hiện không thể mở bản nháp này", + "unavailable_body": "Bản nháp vẫn an toàn trên máy chủ, trong mục Thư nháp. Hãy thử lại khi có kết nối.", + "try_again": "Thử lại", + "close": "Đóng" + } + }, "desktop_sign_in": { "browser_button": "Đăng nhập bằng trình duyệt", "browser_waiting": "Hoàn tất đăng nhập trong trình duyệt", @@ -6673,6 +6829,53 @@ "revoke": "Thu hồi", "revoked": "Đã thu hồi quyền" }, + "desktopOs": { + "section_title": "Ứng dụng máy tính", + "section_description": "Cách ứng dụng hoạt động với máy tính của bạn.", + "close_to_tray_label": "Tiếp tục chạy ở khay hệ thống khi đóng", + "close_to_tray_description": "Thư mới và lời nhắc vẫn đến sau khi bạn đóng cửa sổ.", + "start_at_login_label": "Khởi động khi đăng nhập vào máy tính", + "start_at_login_description": "Ứng dụng tự khởi động khi bạn đăng nhập.", + "start_minimized_label": "Khởi động ở khay hệ thống", + "start_minimized_description": "Không có cửa sổ nào mở khi đăng nhập. Mở bằng biểu tượng ở khay hệ thống.", + "attention_label": "Nhấp nháy thanh tác vụ khi có thư mới", + "attention_mac_label": "Làm biểu tượng Dock nảy khi có thư mới", + "attention_description": "Chỉ khi ứng dụng không ở phía trước.", + "quiet_hours_label": "Giờ yên tĩnh", + "quiet_hours_description": "Không có thông báo hay âm thanh vào giờ này. Thư vẫn đến.", + "quiet_hours_from": "Từ", + "quiet_hours_to": "đến", + "show_shortcut_label": "Hiện ứng dụng bằng phím tắt", + "show_shortcut_description": "{keys} đưa ứng dụng lên trước từ bất kỳ ứng dụng nào khác.", + "show_shortcut_taken": "Ứng dụng khác đang dùng {keys}. Hãy đóng ứng dụng đó, hoặc tắt rồi bật lại tùy chọn này.", + "default_app_label": "Ứng dụng thư mặc định", + "default_app_description": "Mở liên kết thư và tệp .eml, .ics, .vcf bằng ứng dụng này.", + "default_app_is_default": "Ứng dụng này mở các liên kết thư của bạn.", + "default_app_button": "Chọn ứng dụng mặc định…", + "new_mail": "Thư mới", + "no_subject": "(không có chủ đề)", + "action_delete": "Xóa", + "copy_as_file": "Sao chép dưới dạng tệp", + "copied": "Đã sao chép tệp. Bạn có thể dán vào một thư mục.", + "copy_failed": "Không thể sao chép tệp.", + "reply_lost": "Không thể giữ câu trả lời bạn đã nhập. Hãy mở thư và trả lời ở đó." + }, + "desktopReminders": { + "generic_title": "Lời nhắc", + "snooze": "Báo lại sau {count} phút", + "snooze_short": "{count} phút", + "open": "Mở", + "join": "Tham gia", + "missed_title": "{count, plural, other {# lời nhắc đã bỏ lỡ}}", + "missed_more": "và {count} lời nhắc khác", + "missed_show": "Hiển thị", + "missed_dialog_title": "Lời nhắc đã bỏ lỡ", + "missed_dialog_description": "Những lời nhắc này đến hạn khi ứng dụng đóng, máy tính ngủ hoặc thông báo bị tạm dừng.", + "open_calendar": "Mở lịch", + "done": "Xong", + "join_host": "Tham gia ({host})", + "join_named": "Tham gia: {title}" + }, "desktop_policy": { "server_refused": "Tổ chức của bạn không cho phép máy chủ này trên thiết bị này.", "plugin_refused": "Tổ chức của bạn không cho phép tiện ích này trên thiết bị này nên tiện ích không chạy. Cài đặt và dữ liệu của tiện ích vẫn được giữ lại.", @@ -6681,5 +6884,30 @@ "plugins_off": "Tổ chức của bạn đã tắt tiện ích trên thiết bị này.", "plugins_allowlist": "Tổ chức của bạn chỉ cho phép một số tiện ích trên thiết bị này.", "off": "Tắt" + }, + "desktopTelemetry": { + "section_title": "Thông tin sử dụng và báo cáo sự cố", + "section_description": "Cả hai đều tắt cho đến khi bạn bật, và mỗi mục có công tắc riêng.", + "telemetry_label": "Gửi thông tin sử dụng", + "telemetry_description": "Mỗi ngày một lần: một ID ngẫu nhiên, phiên bản ứng dụng, phiên bản Node, hệ điều hành của bạn, ứng dụng đã chạy bao lâu và cách nó kết nối. Với máy chủ thư riêng, còn có các tính năng đang bật, số tài khoản ước tính và số tiện ích cùng chủ đề bạn có. Không bao giờ gửi thư, địa chỉ hay tên máy chủ.", + "crash_label": "Gửi báo cáo sự cố", + "crash_description": "Lỗi trong ứng dụng được gửi kèm một ID ngẫu nhiên, tên tệp từ mã của chính ứng dụng và thông báo ngắn đã được làm sạch. Nếu chính ứng dụng gặp sự cố, một tệp sự cố sẽ ở lại trên máy tính này và chỉ rời đi khi bạn gửi.", + "crash_memory": "Tệp sự cố là bản sao một phần bộ nhớ của ứng dụng khi gặp sự cố. Bulwark xóa tên người dùng, địa chỉ và mã đăng nhập mà nó tìm thấy, nhưng tệp sự cố vẫn có thể chứa nội dung thư của bạn.", + "instance_note": "Trên máy chủ Bulwark, quản trị viên của máy chủ đó quyết định riêng những gì các trang báo cáo về.", + "forced_off": "Tổ chức của bạn đã tắt mục này.", + "url_label": "Nơi nhận tệp sự cố", + "url_description": "Địa chỉ https nhận tệp sự cố. Bulwark không có sẵn địa chỉ nào.", + "url_invalid": "Nhập địa chỉ https đầy đủ.", + "url_save": "Lưu", + "files_label": "Tệp sự cố trên máy tính này", + "files_description": "Bulwark giữ các tệp mới nhất và xóa các tệp cũ hơn một tháng.", + "files_empty": "Không có tệp sự cố.", + "file_size": "{size} KB", + "send": "Gửi báo cáo sự cố…", + "delete_all": "Xóa tất cả", + "sent": "Đã gửi báo cáo sự cố.", + "send_no_consent": "Hãy bật báo cáo sự cố trước.", + "send_no_url": "Chưa đặt địa chỉ nên không có nơi để gửi. Hãy nhập một địa chỉ ở trên.", + "send_failed": "Không thể gửi báo cáo sự cố." } } diff --git a/locales/zh-TW/common.json b/locales/zh-TW/common.json index 113466e9f..df2f49414 100644 --- a/locales/zh-TW/common.json +++ b/locales/zh-TW/common.json @@ -5801,6 +5801,35 @@ "store_private": "私密視窗無法保留供離線使用的郵件。", "server_not_answering": "郵件伺服器沒有回應。請稍後再試。" }, + "offlineWipe": { + "note": "您的組織已從此裝置移除此帳號的資料。請登入以重新開始。", + "note_unsent": "您的組織已從此裝置移除此帳號的資料。已刪除的未傳送郵件:{count} 封。", + "settings_title": "從此裝置移除所有內容", + "settings_description": "用於將這台電腦送人或不再使用時。伺服器上的郵件會保留。", + "settings_button": "移除所有內容…", + "settings_wiping": "正在移除…", + "confirm_title": "要從此裝置移除所有內容嗎?", + "confirm_message": "這會刪除此應用程式為這裡所有帳號儲存在此裝置上的內容。伺服器上的郵件不受影響。", + "confirm_mail": "儲存在這裡的郵件、行事曆、聯絡人和檔案", + "confirm_unsent": "在這裡等待的未傳送郵件:{count} 封。它們將遺失。", + "confirm_keys": "S/MIME 和 OpenPGP 金鑰。要再次使用,需要您自己的備份。", + "confirm_plugins": "外掛程式儲存在這裡的資料", + "confirm_files": "為編輯而開啟的附件和等待附加的檔案", + "confirm_accounts": "所有帳號都將登出", + "confirm_button": "移除所有內容", + "note_unknown": "您的組織已從此裝置移除此帳戶的資料。未傳送的郵件可能也已被刪除。", + "refused_waiting": "等待新密碼的未傳送郵件：{count} 封。保留至 {date}。", + "refused_waiting_unknown": "可能有未傳送的郵件正在等待新密碼。保留至 {date}。", + "confirm_unsent_unknown": "這裡可能有未傳送的郵件。它們將會遺失。", + "confirm_templates": "儲存在此裝置上的郵件範本", + "session_waiting": "等待下次登入的未傳送郵件：{count} 封。保留至 {date}。", + "session_waiting_unknown": "可能有未傳送的郵件正在等待下次登入。保留至 {date}。", + "needs_sign_in": "需要登入", + "switcher_waiting": "未傳送郵件：{count} 封。將於 {date} 從此裝置刪除。", + "switcher_kept": "此裝置上的郵件將於 {date} 刪除。", + "sibling_waiting": "{name} 已登出。未傳送郵件：{count} 封。請在 {date} 前登入，否則將從此裝置刪除。", + "sibling_kept": "{name} 已登出。請在 {date} 前登入，否則郵件將從此裝置刪除。" + }, "offlineStorage": { "keep_description": "在此裝置上加密保留你的郵件、行事曆、聯絡人和你選擇的檔案。離線時可以閱讀、標記和移動郵件，寫好的郵件會在寄件匣中等待。登出時會全部刪除。", "window_label": "保留多久以內的內容", @@ -5882,6 +5911,38 @@ "banner_refused": "伺服器拒絕的草稿：{count}", "banner_waiting": "等待伺服器的草稿：{count}" }, + "offlineExport": { + "settings_label": "匯出已保存的郵件", + "settings_description": "將此裝置上的郵件儲存為 mbox 或 .eml 檔案。離線時也可使用。", + "title": "匯出已保存的郵件", + "description": "儲存此裝置保留的原件。.eml 檔案是完全相同的副本。mbox 檔案會加上其格式需要的標記,並把已讀和標幟狀態寫入每封郵件的標頭,取代原有內容。早於所選期間的郵件不包含在內。要儲存伺服器上的全部內容,請使用「匯出所有郵件」。", + "folders_label": "資料夾", + "all_folders": "所有資料夾", + "folder_kept": "此處 {kept} / {total}", + "loading": "正在讀取此裝置上的內容…", + "load_failed": "無法讀取此裝置上的郵件。", + "nothing_kept": "此裝置上尚未保存郵件。", + "kept": "此裝置上的原件:{kept} / {total} 封郵件", + "missing_online": "要從伺服器下載:{count}", + "missing_offline": "離線時無法匯出:{count}。連線後可以重試。", + "reason_attachments_off": "只有開啟「保留附件」時才會保留原始郵件。", + "reason_not_kept": "原始郵件最後下載,且僅在有空間時下載。", + "not_kept_attachments_off": "此裝置不保留附件,因此沒有原件:{count}", + "not_kept_not_kept": "此裝置上尚無原件:{count}", + "retry": "連線後重試", + "retry_online": "現在已連線,可以從伺服器取得。", + "retry_offline": "連線後可以重試。", + "settings_button": "匯出…", + "message_failed": "伺服器沒有提供這封郵件。", + "failed_generic": "匯出因錯誤而停止。請重試。", + "stopped_limit": "匯出在 {limit} 處停止,這是此瀏覽器能容納的上限。請選擇較少的資料夾,或使用 Chromium、Firefox 或桌面應用程式。", + "over_limit": "此瀏覽器最多能容納 {limit},而此選擇約為 {size}。請選擇較少的資料夾,或使用 Chromium、Firefox 或桌面應用程式。", + "no_room": "此次匯出約需 {size},而此瀏覽器還剩 {free}。請選擇較少的資料夾或釋放空間。", + "stopped_no_room": "瀏覽器沒有足夠空間完成匯出。請選擇較少的資料夾或釋放空間。", + "stopped_offline_off": "匯出已停止,因為此帳號不再於此裝置上保留郵件。", + "policy_unknown": "尚不清楚貴組織對此帳號的規則,因此匯出暫時關閉。", + "leftover_file": "無法從儲存位置移除檔案 {name}。它不完整,您可以將其刪除。" + }, "deep_link": { "message_not_found": "已無法使用此郵件。", "thread_not_found": "已無法使用此對話串。", @@ -6644,6 +6705,101 @@ "message_moved_to": "這封郵件已移到 {folder}。", "window_not_ready": "新視窗未能及時開啟。你的草稿仍保留在這裡。" }, + "desktopUi": { + "settings": { + "title": "視窗", + "double_click_label": "按兩下時在新視窗中開啟郵件", + "double_click_description": "按一下仍會在清單旁開啟郵件。", + "restore_label": "啟動時重新開啟視窗", + "restore_description": "結束時開啟的郵件和草稿視窗會恢復。" + }, + "attachment": { + "open": "開啟", + "save_as": "另存新檔…", + "copy": "複製", + "copy_failed": "無法複製檔案。" + }, + "menu": { + "file": "檔案", + "edit": "編輯", + "view": "檢視", + "message": "郵件", + "go": "前往", + "window": "視窗", + "help": "說明", + "new_window": "新增視窗", + "print": "列印…", + "save_pdf": "儲存為 PDF…", + "switch_connection": "變更連線…", + "close": "關閉", + "quit": "結束", + "undo": "還原", + "redo": "重做", + "cut": "剪下", + "copy": "拷貝", + "paste": "貼上", + "select_all": "全選", + "search": "搜尋郵件", + "refresh": "檢查新郵件", + "reading_pane": "閱讀窗格", + "pane_right": "在右側", + "pane_below": "在清單下方", + "pane_off": "關閉", + "zoom_in": "放大", + "zoom_out": "縮小", + "zoom_reset": "實際大小", + "full_screen": "全螢幕", + "open_in_window": "在新視窗中開啟", + "next_message": "下一封郵件", + "previous_message": "上一封郵件", + "next_unread": "下一封未讀郵件", + "mail": "郵件", + "files": "檔案", + "back": "返回", + "forward": "下一頁", + "minimize": "最小化", + "next_window": "下一個視窗", + "shortcuts": "鍵盤快速鍵", + "docs": "說明文件", + "settings": "設定…", + "about": "關於 Bulwark", + "from_plugins": "更多外掛程式選項…", + "pick_gone": "此選單已過期。請重新開啟後再試一次。", + "bar_label": "選單" + }, + "context": { + "add_to_dictionary": "將「{word}」加入字典", + "no_suggestions": "沒有建議", + "open_link": "開啟連結", + "copy_link": "拷貝連結", + "copy_address": "拷貝位址", + "save_image": "儲存圖片…", + "copy_image": "拷貝圖片" + }, + "closing": { + "unsaved_title": "草稿無法儲存", + "unsaved_detail": "如果現在關閉，自上次儲存以來所寫的內容將會遺失。", + "close_anyway": "仍要關閉", + "unsent_title": "有郵件尚未寄出", + "unsent_one": "有 1 封郵件正在等待寄出，將在您下次開啟 Bulwark 時寄出。", + "unsent_many": "有 {count} 封郵件正在等待寄出，將在您下次開啟 Bulwark 時寄出。", + "quit": "結束", + "leave_title": "有未儲存的變更，確定要離開嗎？", + "leave_detail": "您在此頁面所做的變更尚未儲存。", + "leave": "離開", + "stay": "留下" + }, + "spellcheck": { + "offer": "{language}拼字檢查需要字典。Bulwark 可以從 Google 下載。您的文字不會被傳送。", + "download": "下載" + }, + "restore": { + "unavailable_title": "目前無法開啟此草稿", + "unavailable_body": "草稿安全地保存在伺服器的「草稿」中。連線恢復後請再試一次。", + "try_again": "重試", + "close": "關閉" + } + }, "desktop_sign_in": { "browser_button": "使用瀏覽器登入", "browser_waiting": "請在瀏覽器中完成登入", @@ -6661,6 +6817,53 @@ "revoke": "收回", "revoked": "已收回許可" }, + "desktopOs": { + "section_title": "桌面應用程式", + "section_description": "應用程式如何與您的電腦配合。", + "close_to_tray_label": "關閉時繼續在系統匣中執行", + "close_to_tray_description": "關閉視窗後，新郵件和提醒仍會送達。", + "start_at_login_label": "登入電腦時啟動", + "start_at_login_description": "您登入時應用程式會自動啟動。", + "start_minimized_label": "在系統匣中啟動", + "start_minimized_description": "登入時不開啟視窗。請透過系統匣圖示開啟。", + "attention_label": "有新郵件時閃爍工作列", + "attention_mac_label": "有新郵件時讓 Dock 圖示跳動", + "attention_description": "僅在應用程式不在前景時。", + "quiet_hours_label": "勿擾時段", + "quiet_hours_description": "此時段沒有通知和聲音。郵件仍會送達。", + "quiet_hours_from": "從", + "quiet_hours_to": "到", + "show_shortcut_label": "使用鍵盤快速鍵顯示應用程式", + "show_shortcut_description": "{keys} 可從任何其他應用程式將此應用程式帶到前景。", + "show_shortcut_taken": "其他應用程式正在使用 {keys}。請關閉該應用程式，或關閉此選項後再開啟。", + "default_app_label": "預設郵件應用程式", + "default_app_description": "使用此應用程式開啟郵件連結以及 .eml、.ics 和 .vcf 檔案。", + "default_app_is_default": "此應用程式會開啟您的郵件連結。", + "default_app_button": "選擇預設應用程式…", + "new_mail": "新郵件", + "no_subject": "（無主旨）", + "action_delete": "刪除", + "copy_as_file": "複製為檔案", + "copied": "檔案已複製。您可以將其貼到資料夾中。", + "copy_failed": "無法複製檔案。", + "reply_lost": "無法保留您輸入的回覆。請開啟郵件並在其中回覆。" + }, + "desktopReminders": { + "generic_title": "提醒", + "snooze": "{count} 分鐘後再提醒", + "snooze_short": "{count} 分鐘", + "open": "開啟", + "join": "加入", + "missed_title": "{count, plural, other {# 則錯過的提醒}}", + "missed_more": "還有 {count} 則", + "missed_show": "顯示", + "missed_dialog_title": "錯過的提醒", + "missed_dialog_description": "這些提醒在應用程式關閉、電腦睡眠或通知暫停時到期。", + "open_calendar": "開啟日曆", + "done": "完成", + "join_host": "加入 ({host})", + "join_named": "加入: {title}" + }, "desktop_policy": { "server_refused": "您的組織不允許在此裝置上使用此伺服器。", "plugin_refused": "您的組織不允許在此裝置上使用此外掛程式，因此不會執行。其設定和資料會保留。", @@ -6669,5 +6872,30 @@ "plugins_off": "您的組織已在此裝置上關閉外掛程式。", "plugins_allowlist": "您的組織在此裝置上只允許使用部分外掛程式。", "off": "關閉" + }, + "desktopTelemetry": { + "section_title": "使用資訊與當機報告", + "section_description": "兩者在您開啟前都維持關閉，且各有獨立的開關。", + "telemetry_label": "傳送使用資訊", + "telemetry_description": "每天一次：一個隨機 ID、應用程式版本、Node 版本、您的作業系統、應用程式已執行多久以及連線方式。使用自己的郵件伺服器時，還包括已開啟的功能、大致的帳號數量以及外掛和主題的數量。絕不傳送郵件、地址或伺服器名稱。", + "crash_label": "傳送當機報告", + "crash_description": "應用程式中的錯誤會連同一個隨機 ID、應用程式本身程式碼的檔案名稱和經過清理的簡短訊息一起傳送。如果應用程式本身當機，當機檔案會留在這台電腦上，只有您傳送時才會離開。", + "crash_memory": "當機檔案是當機時應用程式部分記憶體的副本。Bulwark 會移除它找到的使用者名稱、地址和登入權杖，但當機檔案仍可能包含您郵件的文字。", + "instance_note": "在 Bulwark 伺服器上，頁面向伺服器回報哪些內容由該伺服器的管理員另行決定。", + "forced_off": "您的組織已關閉此功能。", + "url_label": "當機檔案的去向", + "url_description": "接收當機檔案的 https 地址。Bulwark 沒有預設地址。", + "url_invalid": "請輸入完整的 https 地址。", + "url_save": "儲存", + "files_label": "這台電腦上的當機檔案", + "files_description": "Bulwark 保留最新的檔案，並刪除超過一個月的檔案。", + "files_empty": "沒有當機檔案。", + "file_size": "{size} KB", + "send": "傳送當機報告…", + "delete_all": "全部刪除", + "sent": "當機報告已傳送。", + "send_no_consent": "請先開啟當機報告。", + "send_no_url": "未設定地址，因此無處傳送。請在上方輸入一個。", + "send_failed": "無法傳送當機報告。" } } diff --git a/locales/zh/common.json b/locales/zh/common.json index 2d8f9b0d3..ebac4f2b5 100644 --- a/locales/zh/common.json +++ b/locales/zh/common.json @@ -5801,6 +5801,35 @@ "store_private": "隐私窗口无法保留供离线使用的邮件。", "server_not_answering": "邮件服务器没有响应。请稍后再试。" }, + "offlineWipe": { + "note": "您的组织已从此设备移除此帐户的数据。请登录以重新开始。", + "note_unsent": "您的组织已从此设备移除此帐户的数据。已删除的未发送邮件:{count} 封。", + "settings_title": "从此设备移除所有内容", + "settings_description": "用于将这台电脑送人或不再使用时。服务器上的邮件会保留。", + "settings_button": "移除所有内容…", + "settings_wiping": "正在移除…", + "confirm_title": "要从此设备移除所有内容吗?", + "confirm_message": "这会删除此应用为这里所有帐户保存在此设备上的内容。服务器上的邮件不受影响。", + "confirm_mail": "保存在这里的邮件、日历、联系人和文件", + "confirm_unsent": "在这里等待的未发送邮件:{count} 封。它们将丢失。", + "confirm_keys": "S/MIME 和 OpenPGP 密钥。要再次使用,需要您自己的备份。", + "confirm_plugins": "插件保存在这里的数据", + "confirm_files": "为编辑而打开的附件和等待添加的文件", + "confirm_accounts": "所有帐户都将退出登录", + "confirm_button": "移除所有内容", + "note_unknown": "您的组织已从此设备中删除此账户的数据。未发送的邮件可能也已被删除。", + "refused_waiting": "等待新密码的未发送邮件：{count} 封。保留至 {date}。", + "refused_waiting_unknown": "可能有未发送的邮件在等待新密码。保留至 {date}。", + "confirm_unsent_unknown": "这里可能有未发送的邮件。它们将会丢失。", + "confirm_templates": "保存在此设备上的邮件模板", + "session_waiting": "等待下次登录的未发送邮件：{count} 封。保留至 {date}。", + "session_waiting_unknown": "可能有未发送的邮件在等待下次登录。保留至 {date}。", + "needs_sign_in": "需要登录", + "switcher_waiting": "未发送邮件：{count} 封。将于 {date} 从此设备删除。", + "switcher_kept": "此设备上的邮件将于 {date} 删除。", + "sibling_waiting": "{name} 已退出登录。未发送邮件：{count} 封。请在 {date} 前登录，否则将从此设备删除。", + "sibling_kept": "{name} 已退出登录。请在 {date} 前登录，否则邮件将从此设备删除。" + }, "offlineStorage": { "keep_description": "在此设备上加密保留你的邮件、日历、联系人和你选择的文件。离线时可以阅读、标记和移动邮件，写好的邮件会在发件箱中等待。退出登录时会全部删除。", "window_label": "保留多久以内的内容", @@ -5882,6 +5911,38 @@ "banner_refused": "服务器拒绝的草稿：{count}", "banner_waiting": "等待服务器的草稿：{count}" }, + "offlineExport": { + "settings_label": "导出已保存的邮件", + "settings_description": "将此设备上的邮件保存为 mbox 或 .eml 文件。离线时也可使用。", + "title": "导出已保存的邮件", + "description": "保存此设备保留的原件。.eml 文件是完全相同的副本。mbox 文件会加上其格式需要的标记,并把已读和标记状态写入每封邮件的邮件头,替换原有内容。早于所选时间范围的邮件不包含在内。要保存服务器上的全部内容,请使用“导出所有邮件”。", + "folders_label": "文件夹", + "all_folders": "所有文件夹", + "folder_kept": "此处 {kept} / {total}", + "loading": "正在读取此设备上的内容…", + "load_failed": "无法读取此设备上的邮件。", + "nothing_kept": "此设备上还没有保存邮件。", + "kept": "此设备上的原件:{kept} / {total} 封邮件", + "missing_online": "要从服务器下载:{count}", + "missing_offline": "离线时无法导出:{count}。联网后可以重试。", + "reason_attachments_off": "只有开启“保留附件”时才会保留原始邮件。", + "reason_not_kept": "原始邮件最后下载,且仅在有空间时下载。", + "not_kept_attachments_off": "此设备不保留附件,因此没有原件:{count}", + "not_kept_not_kept": "此设备上还没有原件:{count}", + "retry": "联网后重试", + "retry_online": "现在已联网,可以从服务器获取。", + "retry_offline": "联网后可以重试。", + "settings_button": "导出…", + "message_failed": "服务器没有提供这封邮件。", + "failed_generic": "导出因错误而停止。请重试。", + "stopped_limit": "导出在 {limit} 处停止,这是此浏览器能容纳的上限。请选择较少的文件夹,或使用 Chromium、Firefox 或桌面应用。", + "over_limit": "此浏览器最多能容纳 {limit},而此选择约为 {size}。请选择较少的文件夹,或使用 Chromium、Firefox 或桌面应用。", + "no_room": "此次导出约需 {size},而此浏览器还剩 {free}。请选择较少的文件夹或释放空间。", + "stopped_no_room": "浏览器没有足够空间完成导出。请选择较少的文件夹或释放空间。", + "stopped_offline_off": "导出已停止,因为此账户不再在此设备上保留邮件。", + "policy_unknown": "尚不清楚贵组织对此账户的规则,因此导出暂时关闭。", + "leftover_file": "无法从保存位置移除文件 {name}。它不完整,您可以将其删除。" + }, "deep_link": { "message_not_found": "此邮件已不可用。", "thread_not_found": "此会话已不可用。", @@ -6644,6 +6705,101 @@ "message_moved_to": "这封邮件已移动到 {folder}。", "window_not_ready": "新窗口未能及时打开。你的草稿仍保留在这里。" }, + "desktopUi": { + "settings": { + "title": "窗口", + "double_click_label": "双击时在新窗口中打开邮件", + "double_click_description": "单击仍会在列表旁打开邮件。", + "restore_label": "启动时重新打开窗口", + "restore_description": "退出时打开的邮件和草稿窗口会恢复。" + }, + "attachment": { + "open": "打开", + "save_as": "另存为…", + "copy": "复制", + "copy_failed": "无法复制文件。" + }, + "menu": { + "file": "文件", + "edit": "编辑", + "view": "视图", + "message": "邮件", + "go": "前往", + "window": "窗口", + "help": "帮助", + "new_window": "新建窗口", + "print": "打印…", + "save_pdf": "另存为 PDF…", + "switch_connection": "更改连接…", + "close": "关闭", + "quit": "退出", + "undo": "撤销", + "redo": "重做", + "cut": "剪切", + "copy": "复制", + "paste": "粘贴", + "select_all": "全选", + "search": "搜索邮件", + "refresh": "检查新邮件", + "reading_pane": "阅读窗格", + "pane_right": "在右侧", + "pane_below": "在列表下方", + "pane_off": "关闭", + "zoom_in": "放大", + "zoom_out": "缩小", + "zoom_reset": "实际大小", + "full_screen": "全屏", + "open_in_window": "在新窗口中打开", + "next_message": "下一封邮件", + "previous_message": "上一封邮件", + "next_unread": "下一封未读邮件", + "mail": "邮件", + "files": "文件", + "back": "后退", + "forward": "前进", + "minimize": "最小化", + "next_window": "下一个窗口", + "shortcuts": "键盘快捷键", + "docs": "文档", + "settings": "设置…", + "about": "关于 Bulwark", + "from_plugins": "更多插件选项…", + "pick_gone": "该菜单已过期。请重新打开后再试一次。", + "bar_label": "菜单" + }, + "context": { + "add_to_dictionary": "将“{word}”添加到词典", + "no_suggestions": "无建议", + "open_link": "打开链接", + "copy_link": "复制链接", + "copy_address": "复制地址", + "save_image": "保存图片…", + "copy_image": "复制图片" + }, + "closing": { + "unsaved_title": "草稿无法保存", + "unsaved_detail": "如果现在关闭，自上次保存以来所写的内容将会丢失。", + "close_anyway": "仍然关闭", + "unsent_title": "有邮件尚未发送", + "unsent_one": "有 1 封邮件正在等待发送，将在您下次打开 Bulwark 时发出。", + "unsent_many": "有 {count} 封邮件正在等待发送，将在您下次打开 Bulwark 时发出。", + "quit": "退出", + "leave_title": "有未保存的更改，确定离开吗？", + "leave_detail": "您在此页面所做的更改尚未保存。", + "leave": "离开", + "stay": "留下" + }, + "spellcheck": { + "offer": "{language}拼写检查需要词典。Bulwark 可以从 Google 下载。您的文字不会被发送。", + "download": "下载" + }, + "restore": { + "unavailable_title": "目前无法打开此草稿", + "unavailable_body": "草稿安全地保存在服务器的“草稿”中。连接恢复后请重试。", + "try_again": "重试", + "close": "关闭" + } + }, "desktop_sign_in": { "browser_button": "使用浏览器登录", "browser_waiting": "请在浏览器中完成登录", @@ -6661,6 +6817,53 @@ "revoke": "收回", "revoked": "已收回许可" }, + "desktopOs": { + "section_title": "桌面应用", + "section_description": "应用如何与你的电脑配合。", + "close_to_tray_label": "关闭时继续在托盘中运行", + "close_to_tray_description": "关闭窗口后，新邮件和提醒仍会到达。", + "start_at_login_label": "登录电脑时启动", + "start_at_login_description": "你登录时应用会自动启动。", + "start_minimized_label": "在托盘中启动", + "start_minimized_description": "登录时不打开窗口。请通过托盘图标打开。", + "attention_label": "有新邮件时闪烁任务栏", + "attention_mac_label": "有新邮件时让 Dock 图标跳动", + "attention_description": "仅在应用不在前台时。", + "quiet_hours_label": "免打扰时段", + "quiet_hours_description": "此时段没有通知和声音。邮件仍会到达。", + "quiet_hours_from": "从", + "quiet_hours_to": "到", + "show_shortcut_label": "使用键盘快捷键显示应用", + "show_shortcut_description": "{keys} 可从任何其他应用把此应用带到前台。", + "show_shortcut_taken": "其他应用正在使用 {keys}。请关闭该应用，或关闭此选项后重新打开。", + "default_app_label": "默认邮件应用", + "default_app_description": "用此应用打开邮件链接以及 .eml、.ics 和 .vcf 文件。", + "default_app_is_default": "此应用会打开你的邮件链接。", + "default_app_button": "选择默认应用…", + "new_mail": "新邮件", + "no_subject": "（无主题）", + "action_delete": "删除", + "copy_as_file": "复制为文件", + "copied": "文件已复制。你可以将其粘贴到文件夹中。", + "copy_failed": "无法复制文件。", + "reply_lost": "无法保留你输入的回复。请打开邮件并在其中回复。" + }, + "desktopReminders": { + "generic_title": "提醒", + "snooze": "{count} 分钟后再提醒", + "snooze_short": "{count} 分钟", + "open": "打开", + "join": "加入", + "missed_title": "{count, plural, other {# 条错过的提醒}}", + "missed_more": "还有 {count} 条", + "missed_show": "显示", + "missed_dialog_title": "错过的提醒", + "missed_dialog_description": "这些提醒在应用关闭、电脑睡眠或通知暂停时到期。", + "open_calendar": "打开日历", + "done": "完成", + "join_host": "加入 ({host})", + "join_named": "加入: {title}" + }, "desktop_policy": { "server_refused": "您的组织不允许在此设备上使用此服务器。", "plugin_refused": "您的组织不允许在此设备上使用此插件，因此它不会运行。其设置和数据会保留。", @@ -6669,5 +6872,30 @@ "plugins_off": "您的组织已在此设备上关闭插件。", "plugins_allowlist": "您的组织在此设备上只允许使用部分插件。", "off": "关闭" + }, + "desktopTelemetry": { + "section_title": "使用信息和崩溃报告", + "section_description": "两者在您开启之前都处于关闭状态，并且各有独立的开关。", + "telemetry_label": "发送使用信息", + "telemetry_description": "每天一次：一个随机 ID、应用版本、Node 版本、您的操作系统、应用已运行多久以及连接方式。使用自己的邮件服务器时，还包括已开启的功能、大致的帐户数量以及插件和主题的数量。绝不发送邮件、地址或服务器名称。", + "crash_label": "发送崩溃报告", + "crash_description": "应用中的错误会连同一个随机 ID、应用自身代码的文件名和经过清理的简短消息一起发送。如果应用本身崩溃，崩溃文件会留在这台电脑上，只有您发送时才会离开。", + "crash_memory": "崩溃文件是崩溃时应用部分内存的副本。Bulwark 会删除它找到的用户名、地址和登录令牌，但崩溃文件仍可能包含您邮件的文本。", + "instance_note": "在 Bulwark 服务器上，页面向服务器报告哪些内容由该服务器的管理员另行决定。", + "forced_off": "您的组织已关闭此功能。", + "url_label": "崩溃文件的去向", + "url_description": "接收崩溃文件的 https 地址。Bulwark 没有预设地址。", + "url_invalid": "请输入完整的 https 地址。", + "url_save": "保存", + "files_label": "这台电脑上的崩溃文件", + "files_description": "Bulwark 保留最新的文件，并删除超过一个月的文件。", + "files_empty": "没有崩溃文件。", + "file_size": "{size} KB", + "send": "发送崩溃报告…", + "delete_all": "全部删除", + "sent": "崩溃报告已发送。", + "send_no_consent": "请先开启崩溃报告。", + "send_no_url": "未设置地址，因此无处发送。请在上方输入一个。", + "send_failed": "无法发送崩溃报告。" } } diff --git a/public/sw.js b/public/sw.js index 22e4174ba..e72d7163e 100644 --- a/public/sw.js +++ b/public/sw.js @@ -1096,6 +1096,10 @@ function getReusableClientScore(state) { function buildClickUrl(data, reply) { if (!data) return `${BASE_PATH}/`; + if (data.kind === "calendar-reminder") { + // The page's address, with its language. Only ever a path on this origin. + return typeof data.url === "string" && /^\/(?!\/)/.test(data.url) ? data.url : `${BASE_PATH}/calendar`; + } const params = new URLSearchParams(); if (Number.isInteger(data.slot)) params.set("slot", String(data.slot)); if (typeof data.accountId === "string" && data.accountId) params.set("owner", data.accountId); diff --git a/scripts/lite/lib.mjs b/scripts/lite/lib.mjs index 9396192d3..088f3533a 100644 --- a/scripts/lite/lib.mjs +++ b/scripts/lite/lib.mjs @@ -100,6 +100,8 @@ export const LITE_API_STRING_ALLOWLIST = [ "/api/plugin-secrets", // stores/settings-store.ts - settingsSyncEnabled is pinned off. "/api/settings", + // lib/devices/client.ts - offline mode and its wipes aren't in Lite (no OfflineHost, IS_LITE guards in the auth store). + "/api/devices", // Stalwart's own account discovery (lib/auth/lite-oauth.ts), not a route of this app. "/api/discover", // OAuth / SSO / pairing - Lite discovers and redeems codes in the browser diff --git a/stores/__tests__/auth-store-device-wipe.test.ts b/stores/__tests__/auth-store-device-wipe.test.ts new file mode 100644 index 000000000..52c036b00 --- /dev/null +++ b/stores/__tests__/auth-store-device-wipe.test.ts @@ -0,0 +1,395 @@ +import 'fake-indexeddb/auto'; +import { beforeEach, describe, expect, it, vi } from 'vitest'; + +// Where the auth store meets wipes: the check at a start comes before any local +// data, a refused login fires the hook on every path and only ever hides the data, +// and the organisation's session limit isn't a refusal at all. + +const clients = vi.hoisted(() => ({ + connect: (async () => {}) as (client: unknown) => Promise<void>, + made: [] as Array<{ refused?: (ms: number) => void }>, +})); + +vi.mock('@/lib/jmap/client', () => { + class JMAPClient { + refused?: (ms: number) => void; + constructor(public serverUrl: string, public username: string) { clients.made.push(this); } + static withBearer(serverUrl: string, _token: string, username: string) { return new JMAPClient(serverUrl, username); } + static fromOfflineSession(serverUrl: string, username: string) { return new JMAPClient(serverUrl, username); } + async connect() { await clients.connect(this); } + getAuthHeader() { return 'Basic x'; } + onConnectionChange() {} + onRateLimit() {} + onCredentialsRefused(callback: (ms: number) => void) { this.refused = callback; } + getRateLimitRemainingMs() { return 0; } + disconnect() {} + getUsername() { return this.username; } + async getIdentities() { return []; } + supportsContacts() { return false; } + supportsPrincipals() { return false; } + supportsVacationResponse() { return false; } + supportsCalendars() { return false; } + supportsSieve() { return false; } + getSharedAccounts() { return []; } + getAccountInfo() { return undefined; } + } + class RateLimitError extends Error {} + class RequestTimeoutError extends Error {} + return { JMAPClient, RateLimitError, RequestTimeoutError, generateMessageId: () => '<x@y>' }; +}); + +const order = vi.hoisted(() => [] as string[]); +const gate = vi.hoisted(() => ({ run: (async () => {}) as () => Promise<void> })); +vi.mock('@/lib/offline/device-wipe', () => ({ + runDeviceGate: async () => { order.push('gate'); await gate.run(); order.push('gate done'); }, +})); +vi.mock('@/lib/offline/offline-mode', () => ({ + registerOfflineHooks: () => {}, + offlineSessionFor: async () => { order.push('local copy'); return {}; }, + markStartedOffline: () => {}, +})); + +const heard = vi.hoisted(() => [] as string[]); +const certain = vi.hoisted(() => [] as boolean[]); +const kinds = vi.hoisted(() => [] as string[]); +vi.mock('@/lib/offline/credentials-rejected', () => ({ + noteCredentialsRejected: (account: string, sure = true, kind = 'refused') => { heard.push(account); certain.push(sure); kinds.push(kind); }, + onCredentialsRejected: () => () => {}, +})); + +import { readRefusedLogins, CREDENTIALS_REFUSED_CONFIRM_MS, markWipePending, clearWipePending } from '@/lib/devices/wipe-state'; + +// Fresh for each test: a sign-out leaves slots closing in the module for a while. +let isEvicted: typeof import('@/lib/offline/state').isEvicted; +let useOfflineStore: typeof import('@/lib/offline/state').useOfflineStore; +let useAccountStore: typeof import('@/stores/account-store').useAccountStore; +let useAuthStore: typeof import('@/stores/auth-store').useAuthStore; + +const ALICE = 'alice@mail.example.test'; +const BOB = 'bob@mail.example.test'; + +function account(id: string, slot: number, authMode: 'basic' | 'oauth') { + return { + id, label: id, serverUrl: 'https://mail.example.test', username: id.split('@mail')[0], authMode, rememberMe: true, + displayName: id, email: id, lastLoginAt: 1, isConnected: false, hasError: false, isDefault: slot === 0, cookieSlot: slot, avatarColor: '#000', + }; +} + +/** How accounts leave: 'explicit' is what takes their data with it. */ +async function removalReasons(): Promise<string[]> { + const { onAccountRemoved } = await import('@/stores/account-store'); + const reasons: string[] = []; + onAccountRemoved((_id, reason) => { reasons.push(reason); }); + return reasons; +} + +type Answer = (url: string, method: string) => Response | null; +let answer: Answer; +const json = (status: number, body: unknown) => new Response(JSON.stringify(body), { status, headers: { 'Content-Type': 'application/json' } }); + +beforeEach(async () => { + vi.resetModules(); + ({ useOfflineStore, isEvicted } = await import('@/lib/offline/state')); + ({ useAccountStore } = await import('@/stores/account-store')); + ({ useAuthStore } = await import('@/stores/auth-store')); + const nav = await import('@/lib/browser-navigation'); + localStorage.clear(); + sessionStorage.clear(); + order.length = 0; + heard.length = 0; + certain.length = 0; + kinds.length = 0; + clients.made.length = 0; + clients.connect = async () => {}; + gate.run = async () => {}; + answer = () => null; + vi.spyOn(nav, 'replaceWindowLocation').mockImplementation(() => {}); + vi.stubGlobal('fetch', vi.fn(async (input: unknown, init?: { method?: string }) => { + const url = String(input); + const given = answer(url, init?.method ?? 'GET'); + if (given) return given; + if (url.includes('/api/auth/session') && init?.method === 'PUT') return json(200, { serverUrl: 'https://mail.example.test', username: 'alice', password: 'p' }); + if (url.includes('/api/auth/token') && init?.method === 'PUT') return json(200, { access_token: 't', expires_in: 3600 }); + return json(200, {}); + })); + useOfflineStore.setState({ enabled: [] }); + useAuthStore.setState({ isAuthenticated: false, activeAccountId: null, client: null }); + useAccountStore.setState({ accounts: [], activeAccountId: null, defaultAccountId: null } as never); +}, 60_000); + +describe('a start', () => { + beforeEach(() => { + useAccountStore.setState({ accounts: [account(ALICE, 0, 'basic')], activeAccountId: ALICE, defaultAccountId: ALICE } as never); + useAuthStore.setState({ activeAccountId: ALICE }); + }); + + it('with mail kept here checks for a wipe before it reads the local copy', async () => { + useOfflineStore.setState({ enabled: [ALICE] }); + await useAuthStore.getState().checkAuth(); + expect(order.slice(0, 3)).toEqual(['gate', 'gate done', 'local copy']); + }); + + it('with no mail here and nothing waiting doesn\'t load any of it', async () => { + await useAuthStore.getState().checkAuth(); + expect(order).toEqual([]); + }); + + it('with a wipe cut short looks too, with offline switched off by then', async () => { + markWipePending(ALICE, 'admin'); + await useAuthStore.getState().checkAuth(); + clearWipePending(ALICE); + expect(order).toContain('gate'); + }); + + it('in the desktop app on an instance looks too', async () => { + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', mode: 'instance' }; + await useAuthStore.getState().checkAuth(); + delete (window as { bulwarkDesktop?: unknown }).bulwarkDesktop; + expect(order).toContain('gate'); + }); + + it('shows nothing of an account the check removed, and stops when none is left', async () => { + useOfflineStore.setState({ enabled: [ALICE] }); + gate.run = async () => { + useAccountStore.setState({ accounts: [], activeAccountId: null } as never); + }; + await useAuthStore.getState().checkAuth(); + expect(order).not.toContain('local copy'); + expect(useAuthStore.getState().isAuthenticated).toBe(false); + expect(useAuthStore.getState().isLoading).toBe(false); + expect(clients.made).toEqual([]); + }); + + it('goes on when the check itself breaks', async () => { + useOfflineStore.setState({ enabled: [ALICE] }); + gate.run = async () => { throw new Error('no'); }; + await useAuthStore.getState().checkAuth(); + expect(order).toContain('local copy'); + }); +}); + +describe('a login the server ended, at a start', () => { + beforeEach(() => { + useAccountStore.setState({ accounts: [account(ALICE, 0, 'oauth')], activeAccountId: ALICE, defaultAccountId: ALICE } as never); + useAuthStore.setState({ activeAccountId: ALICE }); + }); + + it('invalid_grant fires the hook, for certain, and only hides the data', async () => { + const reasons = await removalReasons(); + useOfflineStore.setState({ enabled: [ALICE] }); + answer = (url, method) => (url.includes('/api/auth/token') && method === 'PUT' ? json(401, { error: 'invalid_grant' }) : null); + await useAuthStore.getState().checkAuth(); + // With mail kept here the real connect goes on behind the local copy. + await vi.waitFor(() => expect(heard).toEqual([ALICE])); + await vi.waitFor(() => expect(reasons).toEqual(['evicted'])); + expect(certain).toEqual([true]); + expect(isEvicted(ALICE)).toBe(true); + expect(useOfflineStore.getState().enabled).toEqual([ALICE]); + expect(Object.keys(readRefusedLogins())).toEqual([ALICE]); + }); + + it.each([ + ['a password login', 'basic', '/api/auth/session'], + ['an OAuth login', 'oauth', '/api/auth/token'], + ])('the session limit goes the same way, as what it is, for %s: nothing about the password', async (_name, mode, route) => { + useOfflineStore.setState({ enabled: [ALICE] }); + useAccountStore.setState({ accounts: [account(ALICE, 0, mode as 'basic' | 'oauth')] } as never); + answer = (url, method) => (url.includes(route) && method === 'PUT' ? json(401, { error: 'session_expired', maxHours: 8 }) : null); + await useAuthStore.getState().checkAuth(); + await vi.waitFor(() => expect(useAccountStore.getState().getAccountById(ALICE)).toBeUndefined()); + expect(heard).toEqual([ALICE]); + expect(kinds).toEqual(['session']); + expect(readRefusedLogins()[ALICE]).toMatchObject({ kind: 'session', certain: true }); + expect(isEvicted(ALICE)).toBe(true); + expect(useOfflineStore.getState().enabled).toEqual([ALICE]); + }); + + it.each([ + ['a refusal other than invalid_grant', () => json(401, { error: 'Refresh failed' })], + ['a 401 it can\'t read', () => new Response('nope', { status: 401 })], + ['a 500', () => json(500, {})], + ['a 503', () => json(503, {})], + ])('%s doesn\'t', async (_name, make) => { + answer = (url, method) => (url.includes('/api/auth/token') && method === 'PUT' ? make() : null); + await useAuthStore.getState().checkAuth(); + expect(heard).toEqual([]); + }); + + it('a missing session cookie doesn\'t', async () => { + useAccountStore.setState({ accounts: [account(ALICE, 0, 'basic')] } as never); + answer = (url, method) => (url.includes('/api/auth/session') && method === 'PUT' ? json(401, { error: 'No session' }) : null); + await useAuthStore.getState().checkAuth(); + expect(heard).toEqual([]); + expect(readRefusedLogins()).toEqual({}); + }); +}); + +describe('a login the server ended, at a switch', () => { + beforeEach(() => { + useAccountStore.setState({ accounts: [account(ALICE, 0, 'oauth'), account(BOB, 1, 'oauth')], activeAccountId: ALICE, defaultAccountId: ALICE } as never); + useAuthStore.setState({ activeAccountId: ALICE, isAuthenticated: true }); + }); + + it('invalid_grant fires the hook and hides the account, keeping its data', async () => { + const reasons = await removalReasons(); + useOfflineStore.setState({ enabled: [ALICE, BOB] }); + answer = (url, method) => (url.includes('/api/auth/token') && method === 'PUT' ? json(401, { error: 'invalid_grant' }) : null); + await useAuthStore.getState().switchAccount(BOB); + expect(heard).toEqual([BOB]); + expect(reasons).toEqual(['evicted']); + expect(useAccountStore.getState().getAccountById(BOB)).toBeUndefined(); + expect(isEvicted(BOB)).toBe(true); + expect(useOfflineStore.getState().enabled).toContain(BOB); + }); + + it('the session limit fires it as what it is, and only drops the account', async () => { + useOfflineStore.setState({ enabled: [ALICE, BOB] }); + answer = (url, method) => (url.includes('/api/auth/token') && method === 'PUT' ? json(401, { error: 'session_expired', maxHours: 8 }) : null); + await useAuthStore.getState().switchAccount(BOB); + expect(heard).toEqual([BOB]); + expect(kinds).toEqual(['session']); + expect(isEvicted(BOB)).toBe(true); + expect(useOfflineStore.getState().enabled).toContain(BOB); + }); + + it('another refusal doesn\'t', async () => { + answer = (url, method) => (url.includes('/api/auth/token') && method === 'PUT' ? json(401, { error: 'Refresh failed' }) : null); + await useAuthStore.getState().switchAccount(BOB); + expect(heard).toEqual([]); + }); +}); + +describe('a refusal with another account signed in', () => { + beforeEach(() => { + useAccountStore.setState({ accounts: [account(ALICE, 0, 'oauth'), account(BOB, 1, 'oauth')], activeAccountId: ALICE, defaultAccountId: ALICE } as never); + useAuthStore.setState({ activeAccountId: ALICE, isAuthenticated: true }); + }); + + it('writes down who was there, so the note reaches them and nobody later', async () => { + useOfflineStore.setState({ enabled: [ALICE, BOB] }); + answer = (url, method) => (url.includes('/api/auth/token') && method === 'PUT' ? json(401, { error: 'invalid_grant' }) : null); + await useAuthStore.getState().refreshAccessToken({ accountId: BOB }); + expect(readRefusedLogins()[BOB]).toMatchObject({ seenBy: [ALICE], label: BOB, username: 'bob' }); + }); +}); + +describe('a login with no "Remember me", when the browser closed', () => { + it('still takes its data with it: that was the choice on a shared computer', async () => { + const reasons = await removalReasons(); + useAccountStore.setState({ accounts: [{ ...account(ALICE, 0, 'basic'), rememberMe: false }], activeAccountId: ALICE, defaultAccountId: ALICE } as never); + useAuthStore.setState({ activeAccountId: ALICE }); + useOfflineStore.setState({ enabled: [ALICE] }); + await useAuthStore.getState().checkAuth(); + await vi.waitFor(() => expect(reasons).toEqual(['explicit'])); + expect(readRefusedLogins()).toEqual({}); + expect(heard).toEqual([]); + }); +}); + +describe('a password the server keeps refusing', () => { + beforeEach(() => { + useAccountStore.setState({ accounts: [account(ALICE, 0, 'basic')], activeAccountId: ALICE, defaultAccountId: ALICE } as never); + useAuthStore.setState({ activeAccountId: ALICE }); + useOfflineStore.setState({ enabled: [ALICE] }); + }); + + it('at a start: signed out and hidden, not for certain, since one answer hasn\'t lasted', async () => { + useOfflineStore.setState({ enabled: [ALICE] }); + clients.connect = async (client) => { + (client as { refused?: (ms: number) => void }).refused?.(0); + throw new Error('Invalid username or password'); + }; + await useAuthStore.getState().checkAuth(); + await vi.waitFor(() => expect(heard).toEqual([ALICE])); + expect(Object.keys(readRefusedLogins())).toEqual([ALICE]); + expect(certain).toEqual([false]); + expect(useAccountStore.getState().accounts).toEqual([]); + expect(isEvicted(ALICE)).toBe(true); + }); + + describe('that recovered', () => { + /** Gone from this page and back, with a session cookie that ran out: nothing says anything about the password. */ + async function backWithAFailingServer(): Promise<void> { + useAuthStore.getState().removeAccount(BOB, 'wiped'); + useAccountStore.setState((state) => ({ accounts: [...state.accounts, account(BOB, 1, 'basic')] }) as never); + answer = (url, method) => (url.includes('/api/auth/session') && method === 'PUT' ? json(401, { error: 'No session' }) : null); + await useAuthStore.getState().switchAccount(BOB); + // Got as far as the failure that would read the mark. + expect(useAccountStore.getState().getAccountById(BOB)).toBeUndefined(); + } + + beforeEach(() => { + useOfflineStore.setState({ enabled: [] }); + useAccountStore.setState({ accounts: [account(ALICE, 0, 'basic'), account(BOB, 1, 'basic')] } as never); + }); + + it('during the connect: a later failure isn\'t read as a refusal', async () => { + clients.connect = async (client) => { + (client as { refused?: (ms: number) => void }).refused?.(0); + }; + await useAuthStore.getState().checkAuth(); + await vi.waitFor(() => expect(clients.made.length).toBeGreaterThanOrEqual(2)); + await vi.waitFor(() => expect(useAuthStore.getState().getClientForAccount(BOB)).toBeTruthy()); + await backWithAFailingServer(); + expect(heard).toEqual([]); + }); + + it('while running: a short refusal leaves no mark either', async () => { + await useAuthStore.getState().checkAuth(); + await vi.waitFor(() => expect(useAuthStore.getState().getClientForAccount(BOB)).toBeTruthy()); + (useAuthStore.getState().getClientForAccount(BOB) as unknown as { refused: (ms: number) => void }).refused(0); + await backWithAFailingServer(); + expect(heard).toEqual([]); + }); + }); + + it('a refusal at a start in a page with no offline kept records no wait', async () => { + useOfflineStore.setState({ enabled: [] }); + clients.connect = async (client) => { + (client as { refused?: (ms: number) => void }).refused?.(0); + throw new Error('Invalid username or password'); + }; + await useAuthStore.getState().checkAuth(); + expect(readRefusedLogins()).toEqual({}); + expect(heard).toEqual([ALICE]); + }); + + it('at a start, with a server that only failed: no wait', async () => { + useOfflineStore.setState({ enabled: [] }); + clients.connect = async () => { throw new Error('Failed to get session: 500'); }; + await useAuthStore.getState().checkAuth(); + expect(readRefusedLogins()).toEqual({}); + expect(heard).toEqual([]); + }); + + describe('while running', () => { + async function running(): Promise<{ refused: (ms: number) => void }> { + useOfflineStore.setState({ enabled: [] }); + await useAuthStore.getState().checkAuth(); + await vi.waitFor(() => expect(useAuthStore.getState().client).not.toBeNull()); + const client = useAuthStore.getState().client as unknown as { refused: (ms: number) => void }; + return client; + } + + it('one answer changes nothing', async () => { + const client = await running(); + client.refused(0); + client.refused(CREDENTIALS_REFUSED_CONFIRM_MS - 1); + await new Promise((resolve) => setTimeout(resolve, 20)); + expect(useAccountStore.getState().getAccountById(ALICE)).toBeDefined(); + expect(readRefusedLogins()).toEqual({}); + }); + + it('lasting a minute signs out at once and hides the data, for certain', async () => { + const client = await running(); + useOfflineStore.setState({ enabled: [ALICE] }); + client.refused(CREDENTIALS_REFUSED_CONFIRM_MS); + await vi.waitFor(() => expect(useAccountStore.getState().getAccountById(ALICE)).toBeUndefined()); + expect(Object.keys(readRefusedLogins())).toEqual([ALICE]); + expect(heard).toEqual([ALICE]); + expect(certain).toEqual([true]); + expect(isEvicted(ALICE)).toBe(true); + expect(sessionStorage.getItem('session_expired')).toBe('true'); + }); + }); +}); diff --git a/stores/__tests__/auth-store-keep-local.test.ts b/stores/__tests__/auth-store-keep-local.test.ts index 99ba77f90..a22650c61 100644 --- a/stores/__tests__/auth-store-keep-local.test.ts +++ b/stores/__tests__/auth-store-keep-local.test.ts @@ -99,20 +99,22 @@ describe('an automatic sign-out of the active account', () => { expectKept(); }); - it('wipes on a real invalid_grant, and names the lost mail', async () => { + it('keeps the data on a real invalid_grant: a password changed elsewhere gets it back with the new one', async () => { tokenAnswers(() => answer(401, { error: 'invalid_grant' })); offline.startOfflineMode(); await refresh(); - await vi.waitFor(() => expect(purge.files).toBeGreaterThan(0)); - expect(localStorage.getItem(state.OFFLINE_ACCOUNTS_KEY)).toBeNull(); - expect(lost.consumeLost()).toEqual(['Unsent']); + await vi.waitFor(() => expect(useAccountStore.getState().getAccountById(ALICE)).toBeUndefined()); + expectKept(); + expect(lost.consumeLost()).toEqual([]); }); - it('wipes at the organisation\'s session limit', async () => { + it('keeps the data at the organisation\'s session limit: that says nothing about the password', async () => { const { SESSION_TOO_OLD } = await import('@/lib/session-policy/constants'); tokenAnswers(() => answer(401, { error: SESSION_TOO_OLD, maxHours: 8 })); + offline.startOfflineMode(); await refresh(); - await vi.waitFor(() => expect(purge.files).toBeGreaterThan(0)); + await vi.waitFor(() => expect(useAccountStore.getState().getAccountById(ALICE)).toBeUndefined()); + expectKept(); }); }); @@ -134,11 +136,12 @@ describe('a background account', () => { expect(store.removed).toEqual([]); }); - it('wipes on a real invalid_grant', async () => { + it('keeps its data on a real invalid_grant too', async () => { tokenAnswers(() => answer(401, { error: 'invalid_grant' })); await token(); - await vi.waitFor(() => expect(store.removed).toEqual([BOB])); - expect(state.isEvicted(BOB)).toBe(false); + await vi.waitFor(() => expect(useAccountStore.getState().getAccountById(BOB)).toBeUndefined()); + expect(state.isEvicted(BOB)).toBe(true); + expect(store.removed).toEqual([]); }); }); diff --git a/stores/__tests__/auth-store-logout-hooks.test.ts b/stores/__tests__/auth-store-logout-hooks.test.ts index 5deaf2b14..663d0d575 100644 --- a/stores/__tests__/auth-store-logout-hooks.test.ts +++ b/stores/__tests__/auth-store-logout-hooks.test.ts @@ -33,6 +33,46 @@ describe('sign-out with plugins', () => { expect(after).toHaveBeenCalledWith({ accountId: 'all' }); }); + describe('crash files, which can hold the mail of whoever was signed in', () => { + afterEach(() => { delete (window as { bulwarkDesktop?: unknown }).bulwarkDesktop; }); + const withBridge = (deleteCrashes?: () => Promise<void>) => { + (window as { bulwarkDesktop?: unknown }).bulwarkDesktop = { version: 1, platform: 'win32', privacy: { deleteCrashes } }; + }; + + it('go at sign-out', async () => { + const deleteCrashes = vi.fn().mockResolvedValue(undefined); + withBridge(deleteCrashes); + await useAuthStore.getState().logout(); + expect(deleteCrashes).toHaveBeenCalledTimes(1); + }); + + it('go when all accounts sign out', async () => { + const deleteCrashes = vi.fn().mockResolvedValue(undefined); + withBridge(deleteCrashes); + await useAuthStore.getState().logoutAll(); + expect(deleteCrashes).toHaveBeenCalled(); + }); + + it('go when switching to another account, and not before', () => { + const deleteCrashes = vi.fn().mockResolvedValue(undefined); + withBridge(deleteCrashes); + useAuthStore.setState({ isAuthenticated: true, activeAccountId: 'a1' }); + expect(deleteCrashes).not.toHaveBeenCalled(); + useAuthStore.setState({ activeAccountId: 'a2' }); + expect(deleteCrashes).toHaveBeenCalledTimes(1); + }); + + it('signing out works all the same on a shell without the call, or one that fails', async () => { + withBridge(undefined); + await useAuthStore.getState().logout(); + expect(useAuthStore.getState().isAuthenticated).toBe(false); + useAuthStore.setState({ isAuthenticated: true }); + withBridge(vi.fn().mockRejectedValue(new Error('gone'))); + await useAuthStore.getState().logout(); + expect(useAuthStore.getState().isAuthenticated).toBe(false); + }); + }); + describe('keys in the OS store', () => { afterEach(() => { delete (window as { bulwarkDesktop?: unknown }).bulwarkDesktop; }); const withBridge = (clearGrants?: () => Promise<void>) => { diff --git a/stores/account-store.ts b/stores/account-store.ts index 836dada92..714f365d6 100644 --- a/stores/account-store.ts +++ b/stores/account-store.ts @@ -5,9 +5,9 @@ import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; import { forgetDesktopServer } from '@/lib/desktop/bridge'; import { generateAccountId, generateAvatarColor, getMaxAccounts } from '@/lib/account-utils'; import { authHooks } from '@/lib/plugin-hooks'; -import { clearEvicted, markEvicted } from '@/lib/offline/state'; +import { clearEvicted, dropEvictedOwner, isEvicted, markEvicted, rememberEvictedOwner } from '@/lib/offline/state'; -export type AccountRemovalReason = 'explicit' | 'evicted'; +export type AccountRemovalReason = 'explicit' | 'evicted' | 'wiped'; const removalListeners = new Set<(accountId: string, reason: AccountRemovalReason) => void>(); @@ -124,6 +124,7 @@ export const useAccountStore = create<AccountState>()( const id = generateAccountId(entry.username, entry.serverUrl); clearEvicted(id); + dropEvictedOwner(id); if (state.accounts.some((a) => a.id === id)) { // Already exists - update mutable fields and return existing id set((s) => ({ @@ -177,7 +178,10 @@ export const useAccountStore = create<AccountState>()( removeAccount: (accountId, reason = 'explicit') => { if (!get().accounts.some((a) => a.id === accountId)) return; const leaving = get().accounts.find((a) => a.id === accountId); - if (reason === 'evicted') markEvicted(accountId); + if (reason === 'evicted') { + markEvicted(accountId); + if (IS_DESKTOP_BUILD && leaving && isEvicted(accountId)) rememberEvictedOwner(accountId, leaving); + } for (const listener of [...removalListeners]) listener(accountId, reason); set((s) => { const remaining = s.accounts.filter((a) => a.id !== accountId); diff --git a/stores/auth-store.ts b/stores/auth-store.ts index 3fbeee486..7a3ad15a5 100644 --- a/stores/auth-store.ts +++ b/stores/auth-store.ts @@ -18,7 +18,7 @@ import { generateAccountId, MAX_ACCOUNT_SLOTS } from '@/lib/account-utils'; import { replaceWindowLocation, getPathPrefix, getLocaleFromPath, apiFetch } from '@/lib/browser-navigation'; import { IS_DESKTOP_BUILD } from '@/lib/desktop/flag'; import { getDesktopBridge } from '@/lib/desktop/bridge'; -import { clearKeystoreGrants } from '@/lib/desktop/keystore-grants'; +import { clearDesktopCrashFiles, clearKeystoreGrants } from '@/lib/desktop/keystore-grants'; import { DESKTOP_CLIENT_ID_KEY } from '@/lib/desktop/browser-sign-in'; import { isEmbedded, notifyParent } from '@/lib/iframe-bridge'; import { snapshotAccount, restoreAccount, clearAllStores, evictAccount, evictAll, forgetAccountRows } from '@/lib/account-state-manager'; @@ -39,8 +39,9 @@ import { IS_LITE, IS_LITE_STALWART } from '@/lib/lite'; import { withTokenLock } from '@/lib/auth/token-lock'; import { requestWindowSession, type SharedAccountSession } from '@/lib/popout/channel'; import { closePopoutWindow, isPopoutWindow, mainWindowStorage } from '@/lib/popout/window-role'; -import { noteCredentialsRejected } from '@/lib/offline/credentials-rejected'; -import { readEvicted, useOfflineStore } from '@/lib/offline/state'; +import { noteCredentialsRejected, type ForcedSignOutKind } from '@/lib/offline/credentials-rejected'; +import { CREDENTIALS_REFUSED_CONFIRM_MS, markLoginRefused, wipeWorkWaiting } from '@/lib/devices/wipe-state'; +import { markEvicted, readEvicted, useOfflineStore } from '@/lib/offline/state'; import { toAsciiEmail } from '@/lib/idn'; import { flushComposers } from '@/lib/compose-flush-registry'; import { sortIdentities } from '@/lib/identity-order'; @@ -175,6 +176,8 @@ export interface LogoutOptions { * hidden, for the next sign-in or 30 days. */ keepLocalData?: boolean; + /** It's the organisation's idle or session limit that ended it: with `keepLocalData`, what lib/offline/device-wipe.ts is told. */ + sessionLimit?: boolean; } const ERROR_PATTERNS: Array<{ key: string; matches: string[] }> = [ @@ -793,12 +796,82 @@ export function pickEndSessionSlot(accounts: AccountEntry[], activeAccountId: st return target ? target.cookieSlot : null; } +/** Accounts the server refused during a connect that hasn't reported back yet. */ +const refusedAtConnect = new Set<string>(); +const endingRefused = new Set<string>(); + +/** A client that's connected: what the server said on the way there is over. */ +function holdClient(accountId: string, client: JMAPClient): void { + clients.set(accountId, client); + refusedAtConnect.delete(accountId); +} + +/** + * This login ended with nobody asking: the server refused it, or the organisation's + * idle or session limit ran out. The data hides from here on. It waits for the next + * sign-in, or goes after 30 days, or now if the organisation asks for that + * (lib/devices/wipe-state.ts, lib/offline/device-wipe.ts). The usual cause is a + * password changed on another device: nothing goes by itself, unsent mail included. + * `certain`: not one bad answer at a connect. + */ +function noteRefusedLogin(accountId: string, certain: boolean, kind: ForcedSignOutKind = 'refused'): void { + if (useOfflineStore.getState().enabled.includes(accountId)) { + const { accounts } = useAccountStore.getState(); + const account = accounts.find((entry) => entry.id === accountId); + markLoginRefused(accountId, { + certain, + kind, + seenBy: accounts.filter((entry) => entry.id !== accountId).map((entry) => entry.id), + label: account?.email || account?.username, + username: account?.username, + }); + markEvicted(accountId); + } + noteCredentialsRejected(accountId, certain, kind); +} + +/** + * The server kept refusing this login, after a fresh try each time: it signs out + * at once. It has no parsed refusal like `invalid_grant` to go by, and this is the + * only word a password login ever gets. + */ +async function endRefusedLogin(accountId: string, get: () => AuthState): Promise<void> { + const account = useAccountStore.getState().getAccountById(accountId); + if (!account || endingRefused.has(accountId)) return; + endingRefused.add(accountId); + try { + if (get().activeAccountId !== accountId) { + noteRefusedLogin(accountId, true); + get().removeAccount(accountId, 'evicted'); + return; + } + await saveDraftsBeforeExpiry(account.cookieSlot ?? 0); + noteRefusedLogin(accountId, true); + notifyParent('sso:session-expired'); + markSessionExpired(); + await get().logout({ endProviderSession: false, keepLocalData: true }); + } finally { + endingRefused.delete(accountId); + } +} + function bindClientStatusHandlers( client: IJMAPClient, set: (state: Partial<AuthState>) => void, get: () => AuthState, accountId?: string, ): void { + client.onCredentialsRefused?.((refusedForMs) => { + // A pop-out is on another window's session. Lite keeps no data to wait. + if (!accountId || IS_LITE || isPopoutWindow()) return; + // Still connecting: the restore that started this decides, when it fails. + if (clients.get(accountId) !== client) { + refusedAtConnect.add(accountId); + return; + } + if (refusedForMs >= CREDENTIALS_REFUSED_CONFIRM_MS) void endRefusedLogin(accountId, get); + }); + client.onConnectionChange((connected) => { if (!accountId || get().activeAccountId === accountId) { set({ connectionLost: !connected }); @@ -1253,16 +1326,19 @@ function recordPermanentRefreshFailure(status: number, accountId?: string): bool } /** - * Whether a refused renewal ends the login for real, which wipes the account's - * local data: the server said invalid_grant, or the organisation's session limit - * was reached. Anything else, including a body we can't read, keeps the data. + * What a refused renewal says about the login: the server refused it + * (invalid_grant), or the organisation's session limit was reached, which says + * nothing about the password. Both sign out and hide the data (noteRefusedLogin). + * Anything else keeps it the same way with no word to anyone, including a body + * we can't read. */ -async function loginReallyOver(res: Response): Promise<boolean> { +async function forcedSignOutOf(res: Response): Promise<ForcedSignOutKind | null> { try { const { error } = await res.clone().json() as { error?: unknown }; - return error === 'invalid_grant' || error === SESSION_TOO_OLD; + if (error === 'invalid_grant') return 'refused'; + return error === SESSION_TOO_OLD ? 'session' : null; } catch { - return false; + return null; } } @@ -1705,7 +1781,7 @@ export const useAuthStore = create<AuthState>()( initializeFeatureStores(client); // Store client in multi-account map - clients.set(accountId, client); + holdClient(accountId, client); bindClientStatusHandlers(client, set, get, accountId); accountStore.addAccount({ @@ -1846,7 +1922,7 @@ export const useAuthStore = create<AuthState>()( const { identities, primaryIdentity } = loadIdentities(rawIdentities, username); initializeFeatureStores(client); - clients.set(accountId, client); + holdClient(accountId, client); bindClientStatusHandlers(client, set, get, accountId); accountStore.addAccount({ @@ -1955,7 +2031,7 @@ export const useAuthStore = create<AuthState>()( }); // The registry is typed for the real client; the unified views only // use the IJMAPClient surface, which the demo client implements. - clients.set(id, demoClient as unknown as JMAPClient); + holdClient(id, demoClient as unknown as JMAPClient); return id; }; const demoAccountId = register(client, 'Meridian Labs', true); @@ -2062,7 +2138,7 @@ export const useAuthStore = create<AuthState>()( clearAllStores(); } - clients.set(accountId, client); + holdClient(accountId, client); bindClientStatusHandlers(client, set, get, accountId); accountStore.addAccount({ @@ -2211,7 +2287,7 @@ export const useAuthStore = create<AuthState>()( clearAllStores(); } - clients.set(accountId, client); + holdClient(accountId, client); bindClientStatusHandlers(client, set, get, accountId); accountStore.addAccount({ @@ -2335,17 +2411,18 @@ export const useAuthStore = create<AuthState>()( // maintenance windows and offline spells. if (res.status === 401) { resetRefreshBackoff(accountId ?? undefined); - const over = await loginReallyOver(res); - if (over && accountId) noteCredentialsRejected(accountId); + const forced = await forcedSignOutOf(res); // Only this login's refresh token was refused. if (accountId && !isActive) { - get().removeAccount(accountId, over ? 'explicit' : 'evicted'); + if (forced) noteRefusedLogin(accountId, true, forced); + get().removeAccount(accountId, 'evicted'); return null; } await saveDraftsBeforeExpiry(slot); + if (forced && accountId) noteRefusedLogin(accountId, true, forced); notifyParent('sso:session-expired'); markSessionExpired(); - get().logout({ endProviderSession: false, keepLocalData: !over }); + get().logout({ endProviderSession: false, keepLocalData: true }); return null; } // A Bulwark-side failure (500/502) that keeps repeating will not @@ -2465,6 +2542,7 @@ export const useAuthStore = create<AuthState>()( useSettingsStore.getState().disableSync(); clearKeystoreGrants(); + clearDesktopCrashFiles(); void authHooks.onAfterLogout.emit({ accountId: accountId ?? 'all', }); @@ -2605,7 +2683,12 @@ export const useAuthStore = create<AuthState>()( logoutAll: async (options) => { if (options?.endProviderSession !== false && !(await passSignOutGates('all'))) return; - await beforeLogoutHooks('all'); + const keepLocalData = options?.keepLocalData === true; + // Before anything goes, while the accounts are still there to be named. + if (options?.sessionLimit) { + for (const account of useAccountStore.getState().accounts) noteRefusedLogin(account.id, true, 'session'); + } + await beforeLogoutHooks('all', { keepLocalStore: keepLocalData }); const accountStore = useAccountStore.getState(); const allAccounts = [...accountStore.accounts]; @@ -2632,14 +2715,15 @@ export const useAuthStore = create<AuthState>()( // Credentials are cleared before the page state - see logout(). const endSessionUrl = await cleanup; - performFullLogout(set); + performFullLogout(set, { keepLocalStore: keepLocalData }); // Clear all accounts from registry for (const account of allAccounts) { - accountStore.removeAccount(account.id); + accountStore.removeAccount(account.id, keepLocalData ? 'evicted' : 'explicit'); } clearKeystoreGrants(); + clearDesktopCrashFiles(); void authHooks.onAfterLogout.emit({ accountId: 'all' }); @@ -2675,6 +2759,7 @@ export const useAuthStore = create<AuthState>()( let targetClient = clients.get(accountId); const wasConnected = !!targetClient; let targetRestoreRateLimited = false; + let targetForced: ForcedSignOutKind | null = null; if (!targetClient) { // Null out the client immediately so the page doesn't fire data-loading @@ -2691,12 +2776,13 @@ export const useAuthStore = create<AuthState>()( try { if (targetAccount.authMode === 'oauth') { const res = await fetchSlotAccessToken(targetAccount.cookieSlot, { remember: targetAccount.rememberMe }); + if (!res.ok && res.status === 401) targetForced = await forcedSignOutOf(res); if (res.ok) { const { access_token, expires_in } = await res.json(); targetClient = JMAPClient.withBearer(targetAccount.serverUrl, access_token, targetAccount.username, () => get().refreshAccessToken({ accountId })); bindClientStatusHandlers(targetClient, set, get, accountId); await targetClient.connect(); - clients.set(accountId, targetClient); + holdClient(accountId, targetClient); scheduleRefresh(expires_in, () => get().refreshAccessToken({ accountId }), accountId); await syncStalwartAuthContext( targetAccount.serverUrl, @@ -2707,12 +2793,13 @@ export const useAuthStore = create<AuthState>()( } } else if (targetAccount.rememberMe) { const res = await fetchSlotSession(targetAccount.cookieSlot); + if (!res.ok && res.status === 401) targetForced = await forcedSignOutOf(res); if (res.ok) { const session: RememberedSession = await res.json(); targetClient = clientForSession(session); bindClientStatusHandlers(targetClient, set, get, accountId); await targetClient.connect(); - clients.set(accountId, targetClient); + holdClient(accountId, targetClient); await syncStalwartAuthContext(session.serverUrl, session.username, targetClient.getAuthHeader(), targetAccount.cookieSlot); } } @@ -2758,6 +2845,9 @@ export const useAuthStore = create<AuthState>()( } // Cannot restore - remove the stale account and redirect to login + if (targetForced) noteRefusedLogin(accountId, true, targetForced); + else if (refusedAtConnect.has(accountId)) noteRefusedLogin(accountId, false); + refusedAtConnect.delete(accountId); evictAccount(accountId); accountStore.removeAccount(accountId, 'evicted'); void clearSlotCredentials(targetAccount.cookieSlot, targetAccount.authMode === 'oauth'); @@ -2951,6 +3041,17 @@ export const useAuthStore = create<AuthState>()( await import('@/lib/offline/offline-mode').then((offline) => offline.registerOfflineHooks()).catch(() => {}); } + // A wipe comes before anything from this device is shown: one a closed + // window cut short, and what the instance has to say, briefly. + if (!IS_LITE && (useOfflineStore.getState().enabled.length > 0 || getDesktopBridge()?.mode === 'instance' || wipeWorkWaiting())) { + await import('@/lib/offline/device-wipe').then((wipe) => wipe.runDeviceGate()).catch(() => {}); + accounts = useAccountStore.getState().accounts; + if (accounts.length === 0) { + set({ isLoading: false, isAuthenticated: false, client: null, activeAccountId: null }); + return; + } + } + // Determine which account to activate first const defaultAccount = accountStore.getDefaultAccount(); const usable = (id: string | null | undefined) => (id && accounts.some((account) => account.id === id) ? id : null); @@ -2995,7 +3096,7 @@ export const useAuthStore = create<AuthState>()( bindClientStatusHandlers(client, set, get, account.id); const contextSync = syncStalwartAuthContext(account.serverUrl, account.username, client.getAuthHeader(), account.cookieSlot); await client.connect(); - clients.set(account.id, client); + holdClient(account.id, client); scheduleRefresh(expires_in, () => get().refreshAccessToken({ accountId: account.id }), account.id); await contextSync; accountStore.updateAccount(account.id, { isConnected: true, hasError: false }); @@ -3006,7 +3107,7 @@ export const useAuthStore = create<AuthState>()( // Repeated 500/502 (see recordPermanentRefreshFailure) falls // through here and evicts the account like a rejection. (#972) if (res.status >= 500) notifySignInAgain(); - throw Object.assign(new Error(`Token refresh failed: ${res.status}`), { loginOver: await loginReallyOver(res) }); + throw Object.assign(new Error(`Token refresh failed: ${res.status}`), { forced: await forcedSignOutOf(res) }); } } else { const res = await fetchSlotSession(account.cookieSlot); @@ -3016,7 +3117,7 @@ export const useAuthStore = create<AuthState>()( bindClientStatusHandlers(client, set, get, account.id); const contextSync = syncStalwartAuthContext(session.serverUrl, session.username, client.getAuthHeader(), account.cookieSlot); await client.connect(); - clients.set(account.id, client); + holdClient(account.id, client); await contextSync; accountStore.updateAccount(account.id, { isConnected: true, @@ -3027,7 +3128,7 @@ export const useAuthStore = create<AuthState>()( } else if (res.status >= 500 || res.status === 429) { throw new TransientAuthError('Session restore failed', res.status); } else { - throw new Error(`Session cookie missing: ${res.status}`); + throw Object.assign(new Error(`Session cookie missing: ${res.status}`), { forced: await forcedSignOutOf(res) }); } } } catch (err) { @@ -3050,7 +3151,7 @@ export const useAuthStore = create<AuthState>()( // only; a reload once the server is back signs in as usual. const offlineClient = await startOfflineClient(account.id, account.serverUrl, account.username); if (offlineClient) { - clients.set(account.id, offlineClient); + holdClient(account.id, offlineClient); accountStore.updateAccount(account.id, { isConnected: true, hasError: false }); return; } @@ -3064,9 +3165,13 @@ export const useAuthStore = create<AuthState>()( // Remove unrestorable accounts so the user is prompted to log in // again rather than seeing a stale error entry forever. Its // refresh token goes with it: nothing would use or revoke it. Its - // local data waits, unless the server really ended the login. + // local data waits. + const { forced } = err as { forced?: ForcedSignOutKind | null }; + if (forced) noteRefusedLogin(account.id, true, forced); + else if (refusedAtConnect.has(account.id)) noteRefusedLogin(account.id, false); + refusedAtConnect.delete(account.id); evictAccount(account.id); - accountStore.removeAccount(account.id, (err as { loginOver?: boolean }).loginOver ? 'explicit' : 'evicted'); + accountStore.removeAccount(account.id, 'evicted'); void clearSlotCredentials(account.cookieSlot, account.authMode === 'oauth'); } }; @@ -3083,7 +3188,7 @@ export const useAuthStore = create<AuthState>()( ? await startLocalCopyClient(targetEntry.id, targetEntry.serverUrl, targetEntry.username) : null; if (localCopy && targetEntry) { - clients.set(targetEntry.id, localCopy); + holdClient(targetEntry.id, localCopy); accountStore.updateAccount(targetEntry.id, { isConnected: true, hasError: false }); } else if (targetEntry) { await restoreAccount(targetEntry); @@ -3101,7 +3206,7 @@ export const useAuthStore = create<AuthState>()( const real = clients.get(entry.id); if (!real) { if (useAccountStore.getState().getAccountById(entry.id)) { - clients.set(entry.id, local); + holdClient(entry.id, local); // A 5xx or a rate limit, with the server up otherwise. The app stays // on the local copy, and says so, and leaves it when the server answers. void import('@/lib/offline/offline-mode').then((offline) => offline.markStartedOffline()).catch(() => {}); @@ -3283,7 +3388,7 @@ export const useAuthStore = create<AuthState>()( await client.connect(); const accountId = generateAccountId(state.username || '', state.serverUrl); - clients.set(accountId, client); + holdClient(accountId, client); bindClientStatusHandlers(client, set, get, accountId); // Migrate to account registry @@ -3351,7 +3456,7 @@ export const useAuthStore = create<AuthState>()( await client.connect(); const accountId = generateAccountId(username, serverUrl); - clients.set(accountId, client); + holdClient(accountId, client); bindClientStatusHandlers(client, set, get, accountId); // Migrate to account registry @@ -3462,7 +3567,7 @@ export const useAuthStore = create<AuthState>()( rememberMe || IS_LITE ? persistSession(cookieSlot, { serverUrl, username, password }) : null, syncStalwartAuthContext(serverUrl, username, client.getAuthHeader(), cookieSlot), ]); - clients.set(accountId, client); + holdClient(accountId, client); bindClientStatusHandlers(client, set, get, accountId); accountStore.updateAccount(accountId, { awaitingSignIn: false, isConnected: true, hasError: false, errorMessage: undefined, @@ -3537,14 +3642,14 @@ export const useAuthStore = create<AuthState>()( if (!client) return null; bindClientStatusHandlers(client, set, get, accountId); await client.connect(); - clients.set(accountId, client); + holdClient(accountId, client); accountStore.updateAccount(accountId, { isConnected: true, hasError: false }); return client; } catch (error) { debug.error(`A pop-out could not use account ${accountId}:`, error); if (!isTransientAuthError(error)) return null; const offlineClient = await startOfflineClient(accountId, account.serverUrl, account.username); - if (offlineClient) clients.set(accountId, offlineClient); + if (offlineClient) holdClient(accountId, offlineClient); return offlineClient; } }; @@ -3757,6 +3862,7 @@ useAuthStore.subscribe((state, prev) => { if (ready && !wasReady) void authHooks.onAuthReady.emit({ accountId: state.activeAccountId }); if (state.activeAccountId && prev.activeAccountId && state.activeAccountId !== prev.activeAccountId) { clearKeystoreGrants(); + clearDesktopCrashFiles(); void authHooks.onAccountSwitch.emit({ accountId: state.activeAccountId, previousAccountId: prev.activeAccountId }); } }); diff --git a/stores/calendar-notification-store.ts b/stores/calendar-notification-store.ts index da0a266ea..8e7d41983 100644 --- a/stores/calendar-notification-store.ts +++ b/stores/calendar-notification-store.ts @@ -1,5 +1,6 @@ import { create } from 'zustand'; import { persist } from 'zustand/middleware'; +import { clearClaims } from '@/lib/calendar-reminders/claims'; const RETENTION_THRESHOLD_MS = 24 * 60 * 60 * 1000; @@ -37,6 +38,7 @@ export const useCalendarNotificationStore = create<CalendarNotificationStore>()( clearAll: () => { set({ acknowledgedAlerts: {} }); + clearClaims(); }, }), { diff --git a/stores/mail-transfer-store.ts b/stores/mail-transfer-store.ts index e5ca8c792..79978fe50 100644 --- a/stores/mail-transfer-store.ts +++ b/stores/mail-transfer-store.ts @@ -22,7 +22,13 @@ export interface ExportRequest { mailboxId?: string; } -export type TransferRequest = ImportRequest | ExportRequest; +/** Mail kept on this device, of a signed-in account, not only the active one. */ +export interface LocalExportRequest { + kind: "local-export"; + account: string; +} + +export type TransferRequest = ImportRequest | ExportRequest | LocalExportRequest; interface JobBase { controller: AbortController; @@ -72,6 +78,7 @@ export const useMailTransferStore = create<MailTransferState>()((set, get) => ({ // The device policy "No export" of the active account (Organisation > // Devices): the dialog doesn't open and the app says why. Import stays. if (request.kind === "export" && !downloadAllowed("export", null)) return false; + if (request.kind === "local-export" && !downloadAllowed("export", request.account)) return false; if (isJobActive(get().job)) { set({ visible: true }); return false; @@ -103,6 +110,11 @@ export function openMailImport(request: Omit<ImportRequest, "kind"> = {}): void useMailTransferStore.getState().open({ kind: "import", ...request }); } +/** Opens the export of what an account keeps on this device. */ +export function openLocalExport(account: string): void { + useMailTransferStore.getState().open({ kind: "local-export", account }); +} + /** Opens the export dialog for a folder, or for the whole account. */ export function openMailExport(request: Omit<ExportRequest, "kind"> = {}): void { useMailTransferStore.getState().open({ kind: "export", ...request });
{error}
+ {search ? 'No device matches that search.' : 'No device has registered yet.'} +
+ {group.user} + {group.server} +
What a device keeps: mail in every folder from the window the person picks (30 days, 90 days, a year or everything), with calendar, contacts and files, encrypted on the device. That protects against someone copying its files, not against someone using the unlocked browser or app. The limits above can only lower what people pick: where several scopes apply, the lowest value counts, so a scope can't raise what another one lowered. The app holds itself to - them when it fetches the policy; the server can't check what is on a device. Every sign-out, the automatic one - after inactivity included, deletes everything. With several accounts signed in, each account follows its own settings. + them when it fetches the policy; the server can't check what is on a device. A sign-out someone asks for deletes everything. + One that nobody asked for hides it, as the switch above says. With several accounts signed in, each account follows its own settings. Bulwark Lite reads the same policy but has no offline mode.{' '} How offline mode works diff --git a/components/boot-skeleton/admin-skeleton.tsx b/components/boot-skeleton/admin-skeleton.tsx index 16bc29d97..0db2ff49b 100644 --- a/components/boot-skeleton/admin-skeleton.tsx +++ b/components/boot-skeleton/admin-skeleton.tsx @@ -227,6 +227,9 @@ export function AdminSkeleton({ label, page, backLabel, searchLabel, labels, cla
{alert.title || tAlert("alert_title")}
+ {format.format(new Date(alert.startMs ?? alert.fireTimeMs))} + {alert.calendarName ? ` · ${alert.calendarName}` : ""} +
{t("detail.no_contact_selected")}