Jacob ZeitzandClaude Opus 5.5 372fc9ec71 feat: let plugins update and remove the tags they added ...

keywords.add now records the plugin on each definition it adds
(addedBy). keywords.update changes the label, colour or visibility of
those definitions, never their id; keywords.remove deletes them, as
Settings > Tags does, and leaves the keywords on messages alone. Both
need settings:write and skip every other definition, so a plugin cannot
rename or delete the user's own tags or another plugin's.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

2026-10-24 08:54:23 +02:00

..

fixtures

fix(tasks): send an all-day task's due and start as a LocalDateTime

2026-10-16 17:30:39 +02:00

helpers

test: add characterisation tests for untested integration seams

2026-06-19 23:52:42 +02:00

account-archive-client.test.ts

fix: remember restored sign-ins only when the restoring account is remembered

2026-10-18 14:39:59 +02:00

account-archive-route.test.ts

feat: optional encrypted backup of the account list

2026-10-09 10:54:38 +02:00

account-archive.test.ts

feat: optionally keep mailbox passwords in the account list backup

2026-10-16 05:46:46 +02:00

account-inbox-unread.test.ts

feat: add Mountain View, an optional alternative layout

2026-10-05 10:36:20 +02:00

account-ordering.test.ts

feat(accounts): pin default account on top + drag-to-reorder switcher

2026-07-04 14:51:46 +02:00

account-state-manager.test.ts

fix: scope batch selection to the owning account

2026-09-19 08:59:21 +02:00

account-utils-http2.test.ts

fix: detect HTTP/2 from the initial navigation timing so accounts aren't capped at five

2026-09-10 10:14:25 +02:00

admin-auth-stalwart-access.test.ts

fix: ignore admin status from a server the admin never configured (GHSA-j867-89p4-v8hm)

2026-09-26 14:20:36 +02:00

admin-rate-limit.test.ts

fix: cap admin sign-in attempts across all clients (GHSA-7pj2-232x-6698)

2026-09-26 15:07:09 +02:00

admin-session-cookie-secure.test.ts

fix: let COOKIE_SECURE decide the admin cookie's Secure flag #1063

2026-09-30 14:21:46 +02:00

api-routes-same-origin.test.ts

fix: reject cross-origin writes to the JMAP passthrough and other cookie-authed routes (GHSA-9mvj-98f5-9q6g)

2026-09-26 14:08:44 +02:00

app-commands.test.tsx

feat: add a command palette on Ctrl+K where plugins can add their own commands

2026-10-14 05:10:10 +02:00

app-frame-origins.test.ts

fix: keep sibling subdomains from widening the sidebar-app frame-src

2026-09-26 16:27:03 +02:00

attachment-visibility.test.ts

fix: hide body-embedded cid parts declared as octet-stream from the attachment list

2026-09-10 10:45:45 +02:00

auth-crypto.test.ts

fix: bind a purpose into encrypted payloads (GHSA-cqqx-mjcf-mh55)

2026-09-17 20:16:51 +02:00

auth-login-routes-budget.test.ts

fix: budget failed sign-ins per client and forward the client address to the mail server

2026-10-19 00:43:00 +02:00

auth-routes-credential-check.test.ts

fix: key synced settings on the account a token login resolves to, not on a bare claimed name

2026-10-19 00:45:11 +02:00

auth-routes-same-origin.test.ts

fix: link the mobile app from every account with a sign-in of its own

2026-09-27 04:16:18 +02:00

auth-verify-route.test.ts

fix: limit wrong passwords tried through the login pre-check

2026-09-26 16:36:58 +02:00

base-path.test.ts

fix: strip build-time basePath from router.push redirects after login #390

2026-06-12 00:23:00 +02:00

bidi.test.ts

fix: show attachment names without directional override characters

2026-10-19 01:32:30 +02:00

birthday-calendar.test.ts

test: add characterisation tests for untested integration seams

2026-06-19 23:52:42 +02:00

branding-asset.test.ts

fix: pin resolved IP for stored custom JMAP endpoints and branding URLs

2026-08-26 23:02:19 +02:00

builtin-themes.test.ts

feat: add "Flat fields" theme

2026-09-19 13:01:07 +02:00

bundle-integrity.test.ts

fix(): refill missing managed bundles from the server #636

2026-09-07 16:52:20 +02:00

bundle-signing.test.ts

fix(): refill missing managed bundles from the server #636

2026-09-07 16:52:20 +02:00

caldav-discover-route.test.ts

fix: bound how many CalDAV probes one discovery request can make

2026-10-19 01:32:29 +02:00

calendar-agenda-route.test.ts

fix: show shared and group calendars in the Calendar Agenda

2026-10-06 06:24:17 +02:00

calendar-alerts.test.ts

feat: start new events on the calendar's default reminders #1209

2026-10-13 15:56:10 +02:00

calendar-collection-dav.test.ts

fix: pin supported-calendar-component-set on created calendars #760

2026-08-25 19:16:20 +02:00

calendar-component-detection.test.ts

fix(calendar): hide tasks-only calendars from the event calendar UI

2026-08-16 21:18:57 +02:00

calendar-display-range.test.ts

feat: limit the day and week views to working hours and days #1164

2026-10-02 22:56:16 +02:00

calendar-duplicate.test.ts

fix: keep the meeting link when duplicating an event #1170

2026-10-05 23:09:48 +02:00

calendar-editability.test.ts

fix: rsvp controls

2026-09-03 22:12:15 -07:00

calendar-event-normalization.test.ts

fix: show zero-length events ending at their start instead of midnight #837

2026-10-17 19:17:50 +02:00

calendar-invitation.test.ts

fix: only count an SPF or DKIM pass aligned with the From domain as sender verification

2026-10-19 01:15:05 +02:00

calendar-participants.test.ts

Merge pull request #748 from lucletoffe/fix/calendar-blank-cn-and-description

2026-09-30 14:21:20 +02:00

calendar-scroll-window.test.ts

feat: setting to turn off free scrolling in the calendar

2026-09-09 18:27:01 +02:00

calendar-sort.test.ts

feat(calendar): order calendars by sortOrder and let users reorder them

2026-10-15 22:31:07 +02:00

calendar-subscription-sync.test.ts

fix: keep synced calendar subscriptions from stale devices and past deletions #1064

2026-10-15 23:54:37 +02:00

calendar-tasks.test.ts

feat: show tasks with due dates in the calendar month view #1107

2026-09-26 20:47:13 +02:00

calendar-utils.test.ts

fix: show invitation times in your time zone #1252

2026-10-17 19:17:49 +02:00

clear-cached-data.test.ts

fix: route multi-account email lookups and invitation parsing by source account #847

2026-08-25 18:50:50 +02:00

color-transform.test.ts

fix: recolour mails for dark mode instead of inverting them

2026-10-11 18:43:04 +02:00

config-route.test.ts

feat: remember every sign-in unless the admin shows the remember me box

2026-10-13 13:13:56 +02:00

config-validation.test.ts

fix: recover from transient application configuration failures

2026-09-27 15:41:21 +08:00

connector-registry.test.ts

feat: rework the admin panel around a settings-style sidebar and one URL per page

2026-10-20 15:16:05 +02:00

contact-wire.test.ts

fix: save contacts with calendar links and cleared fields correctly

2026-09-22 20:37:16 +02:00

csp-frame-origins.test.ts

feat: composer-sidebar slot + plugin-declared frame-src origins

2026-04-25 18:40:54 +02:00

deep-link-handoff.test.ts

feat: open global search hits through the owning login on every surface #847

2026-09-01 20:55:13 +02:00

deep-links.test.ts

feat: let settings links name a section and add a jump row to each page

2026-10-19 18:14:01 +02:00

dev-jmap-mock.test.ts

perf: load conversation sizes with the folder page instead of in a second request

2026-10-15 00:14:57 +02:00

domain-branding.test.ts

fix: use callable .get to detect Headers in pickRequestHost

2026-07-09 13:51:12 +02:00

download-filename.test.ts

fix: never loop forever when deduping drag-out .eml names #1039

2026-09-17 21:42:16 +02:00

email-action-toast.test.ts

fix: stop reporting mail actions as done when a plugin stopped them

2026-10-14 19:44:54 +02:00

email-body-selection.test.ts

fix: take a re-opened draft's body from its body parts only

2026-10-11 18:04:26 +00:00

email-composer-utils.test.ts

fix: stop sending a contact group whose member is not an address #795

2026-10-17 19:17:52 +02:00

email-dark-mode.test.ts

test: darken cells coloured with bgcolor in dark mode #693

2026-10-17 19:17:57 +02:00

email-date.test.ts

fix: parse calendar invitations in directly viewed shared folders against the folder owner #867

2026-08-25 19:36:04 +02:00

email-fit-width.test.ts

fix: wrap text in fixed-width tables to the screen on iOS #1020

2026-09-23 19:41:44 +02:00

email-full-bleed.test.ts

fix: keep a crafted style attribute or read-receipt header from freezing the message view

2026-10-19 00:54:24 +02:00

email-headers.test.ts

fix: only count an SPF or DKIM pass aligned with the From domain as sender verification

2026-10-19 01:15:05 +02:00

email-link-targets.integration.test.ts

fix: treat image-map links like anchors so they cannot keep the opener

2026-09-26 14:53:40 +02:00

email-prefetch.test.ts

perf: start loading a message when the mouse is pressed on it

2026-10-15 01:17:39 +02:00

email-sanitization.test.ts

fix: drop remote images from plugin-authored HTML so a plugin cannot beacon past its allowed origins

2026-10-19 01:15:04 +02:00

email-threading.test.ts

fix: set In-Reply-To and References on replies #234

2026-04-30 01:25:04 +02:00

eml-import.test.ts

fix: show the mail's own date in the list and keep it on .eml import #891

2026-10-17 19:17:58 +02:00

event-end-follows-start.test.ts

feat(calendar): move the end with the start, keeping the event's length

2026-08-13 21:24:09 +02:00

event-links.test.ts

fix(calendar): keep app-scheme meeting links and match service labels exactly

2026-09-24 10:00:01 +02:00

extension-package.test.ts

refactor: describe every plugin hook in one catalogue

2026-10-14 03:14:29 +02:00

favicon-badge.test.ts

feat: redesign the unread favicon badge as a compact keyline badge

2026-08-20 16:49:31 +02:00

favicon-route-inflight.test.ts

fix: cap concurrent upstream favicon fetches

2026-10-19 01:32:29 +02:00

favicon-route-refresh.test.ts

feat: refresh sender icons that changed on the sender's website #960

2026-10-17 19:18:18 +02:00

favicon-route-types.test.ts

fix: serve sender favicons only as inert raster images

2026-09-26 16:24:11 +02:00

fetch-ical-route.test.ts

fix: stop reading a calendar feed at the size cap instead of buffering it whole

2026-10-19 01:15:04 +02:00

file-name-rules.test.ts

fix: handle the file names and types Stalwart refuses

2026-09-22 20:54:01 +02:00

file-preview.test.ts

fix: preview HTML attachments as sanitised text in a locked frame instead of a same-origin blob document

2026-10-19 00:58:31 +02:00

filenode-name.test.ts

fix: decode percent-encoded FileNode names from WebDAV-created nodes #869

2026-08-25 18:47:22 +02:00

folder-counts.test.ts

feat: set the counter per folder, e.g. keep the Drafts count with totals off #982

2026-10-17 19:18:16 +02:00

font-sans.test.ts

fix: use the theme's sans font for the whole app #1278

2026-10-18 13:46:47 +02:00

format-date-cache.test.ts

perf: reuse date formatters in the message list

2026-10-15 00:41:08 +02:00

format-file-size.test.ts

fix: round file sizes to what people read, like 67 KB or 2.1 MB

2026-10-11 16:53:49 +02:00

format-relative-ago.test.ts

fix: tell today's mail by the time zone setting in the sender line #1259

2026-10-18 14:39:58 +02:00

forward-as-attachment.test.ts

feat: add batch forward-as-attachment for selected emails

2026-10-15 14:50:31 +08:00

health-route.test.ts

fix: enhance health check functionality with detailed memory diagnostics and stable liveness probe

2026-03-19 18:50:59 +01:00

host-theme.test.ts

fix: lay out plugin slots right-to-left in Arabic, Hebrew and Persian and use the app font size

2026-10-14 02:24:45 +02:00

html-to-text.test.ts

feat: turn @mentions into chips with a hover card

2026-10-18 17:52:11 +02:00

idn.test.ts

fix: sign in and show addresses on internationalized domains #1100

2026-09-24 21:15:22 +02:00

impersonation-jwt.test.ts

feat: expose PWA, app identity, and extension directory keys in JSON config #312

2026-05-21 23:35:58 +02:00

impersonation-master-config.test.ts

fix: read impersonation secrets from *_FILE when the variable is empty #897

2026-09-30 14:23:09 +02:00

impersonation-replay-store.test.ts

fix: refuse a used impersonation link after a restart or on another replica

2026-09-26 16:34:58 +02:00

impersonation-session.test.ts

fix: refuse a used impersonation link after a restart or on another replica

2026-09-26 16:34:58 +02:00

instance-details-gates.test.ts

feat: hide the version from the connector probe when the login page hides it #896

2026-10-17 19:18:21 +02:00

instance-details.test.ts

fix: stop handing instance details to visitors who are not signed in

2026-09-26 17:03:24 +02:00

ios-input-zoom.test.ts

fix: iOS Safari zooms the viewport on every input focus #838

2026-08-16 23:02:27 +02:00

ios-viewport-heal.test.ts

fix: restore the full screen height when the iOS app resumes #1226

2026-10-13 14:53:23 +02:00

jitsi-plugin.test.ts

feat: implemented plugin configuration UI and calendar event action slot

2026-03-30 21:12:05 +02:00

jmap-all-calendars-failures.test.ts

fix: keep calendars visible after a failed calendar fetch

2026-09-29 23:59:03 +02:00

jmap-archive-results.test.ts

fix: route bulk archive by owning account

2026-10-15 14:20:25 +03:00

jmap-calendar-access.test.ts

fix: only offer contacts, filters, calendars and files for shared accounts that support them #1239

2026-10-15 14:22:54 +02:00

jmap-calendar-batch-failures.test.ts

fix: report calendar clear failures instead of counting zero #434

2026-09-07 22:34:47 +02:00

jmap-calendar-capability.test.ts

fix: check the specific capability a request declares, not a broader one

2026-08-12 17:34:20 +03:00

jmap-calendar-default-alerts.test.ts

feat: add helpers for calendar default alerts and email alert rows #1209

2026-10-13 15:56:09 +02:00

jmap-calendar-query-range.test.ts

fix: query calendar ranges in the right time zone and past the limits

2026-09-22 20:42:07 +02:00

jmap-calendar-scheduling.test.ts

fix: offer to save an event when the server refuses its invitations

2026-09-22 21:25:20 +02:00

jmap-calendar-synthetic-ids.test.ts

feat: let attendees answer a single occurrence of a recurring event #1086

2026-09-23 13:06:41 +02:00

jmap-calendar-task-progress.test.ts

fix: normalize calendar task progress states

2026-09-08 23:19:24 +09:00

jmap-calendar-tasks.test.ts

fix(tasks): send an all-day task's due and start as a LocalDateTime

2026-10-16 17:30:39 +02:00

jmap-client-extensions.test.ts

perf: list search results without waiting for the highlighted excerpts

2026-10-14 23:51:17 +02:00

jmap-client-poll-batching.test.ts

fix: split the state poll to fit the server's call limit

2026-09-26 15:39:48 +02:00

jmap-client-resilience.test.ts

test: expect session URLs hosted on another origin to be kept

2026-10-01 00:36:00 +02:00

jmap-contact-client.test.ts

feat: allow setting an address book as default (#924)

2026-08-29 17:15:50 +02:00

jmap-contacts-capability.test.ts

fix: check the specific capability a request declares, not a broader one

2026-08-12 17:34:20 +03:00

jmap-create-calendar-caldav.test.ts

fix: pin supported-calendar-component-set on created calendars #760

2026-08-25 19:16:20 +02:00

jmap-cross-account-move.test.ts

fix: keep a copied message's original date in the other account #1150

2026-10-02 10:35:09 +02:00

jmap-delayed-send-limit.test.ts

fix: cap scheduled send at the 7 days Stalwart actually accepts

2026-09-22 20:31:53 +02:00

jmap-draft-lifecycle.test.ts

fix: remove the unsent copy from Drafts when a send fails

2026-10-11 19:09:11 +02:00

jmap-email-set-failures.test.ts

fix: surface Email/set failures on delete and move #956

2026-09-07 22:34:47 +02:00

jmap-empty-mailbox.test.ts

fix: move mail to trash when emptying an ordinary folder

2026-09-29 20:35:09 +02:00

jmap-file-capability.test.ts

fix: hide Files when account lacks filenode capability #563

2026-07-07 23:59:19 +02:00

jmap-file-share.test.ts

fix: check the specific capability a request declares, not a broader one

2026-08-12 17:34:20 +03:00

jmap-filenode-client.test.ts

fix: list every file when the account exceeds maxObjectsInGet #1069

2026-09-22 00:17:44 +02:00

jmap-filenode-writes.test.ts

fix: share files on Stalwart versions before 0.16.6

2026-09-22 20:49:44 +02:00

jmap-first-touch-ordering.test.ts

feat: use Stalwart synthetic ids for recurring occurrences #140

2026-08-29 11:03:48 +02:00

jmap-identity-client.test.ts

fix: leave blank signatures out when creating an identity #1240

2026-10-15 14:18:06 +02:00

jmap-imip-message-id.test.ts

fix: set the sender's Message-ID on calendar invitations and replies

2026-10-13 16:32:25 +02:00

jmap-keyword-account.test.ts

fix: flip $junk/$notjunk keywords on spam and not-spam #850

2026-08-25 19:36:52 +02:00

jmap-keyword-discovery.test.ts

refactor: generalize JMAP keyword capability

2026-08-12 22:47:00 +08:00

jmap-keyword-pointer.test.ts

fix(jmap): escape the JSON Pointer in keyword patches, and migrate a keyword honestly

2026-08-18 08:15:22 +05:00

jmap-list-order.test.ts

fix: sort the message list by date sent when that order is picked #1219

2026-10-12 07:22:00 +02:00

jmap-list-thread-counts.test.ts

perf: load conversation sizes with the folder page instead of in a second request

2026-10-15 00:14:57 +02:00

jmap-mailbox-account.test.ts

fix: subscribe newly created mailboxes #951

2026-09-07 22:34:47 +02:00

jmap-mark-read-paging.test.ts

fix: mark every unread message read and report refused spam moves

2026-09-22 21:00:10 +02:00

jmap-message-priority.test.ts

feat: set message priority in the composer #970

2026-10-17 19:18:23 +02:00

jmap-method-errors.test.ts

fix: show why the server refused a sent message instead of a dangling reference error

2026-10-02 22:02:50 +02:00

jmap-passthrough.test.ts

feat: migrate Stalwart management API to JMAP x: methods (0.16)

2026-04-21 17:29:23 +02:00

jmap-principals-paging.test.ts

feat: browse the company directory in contacts and the composer #1253

2026-10-16 20:46:27 +02:00

jmap-recipient-mailboxes.test.ts

fix: split "Name <addr>" recipients into the JMAP name and email fields #672

2026-08-06 19:19:18 +02:00

jmap-request-limits.test.ts

fix: leave trash and spam out of tag views and their counts #1156

2026-10-02 23:15:26 +02:00

jmap-send-envelope.test.ts

fix: use the from override as envelope sender where the server allows it #1009

2026-09-23 19:58:26 +02:00

jmap-send-rejected-recipients.test.ts

fix: remove the unsent copy from Drafts when a send fails

2026-10-11 19:09:11 +02:00

jmap-send-threading.test.ts

fix: cancel the original scheduled send before creating its replacement on reschedule #1308

2026-10-21 19:42:56 +02:00

jmap-session-redirect-401.test.ts

fix: retry the JMAP session fetch when a redirect drops the auth header #892

2026-09-07 22:34:47 +02:00

jmap-shared-account-capabilities.test.ts

fix: only offer contacts, filters, calendars and files for shared accounts that support them #1239

2026-10-15 14:22:54 +02:00

jmap-tasks-only-calendars.test.ts

fix: check every calendar for events within the server's request limits #1065

2026-10-15 23:54:36 +02:00

jmap-truncated-body.test.ts

test: type the fetch mock in the large HTML body test

2026-10-15 06:15:57 +02:00

jmap-update-mailboxes.test.ts

feat: move several folders at once from the folder settings #1173

2026-10-06 15:49:53 +02:00

keyboard.test.ts

fix: detect typing inside the QuotedHtml shadow island via composedPath #654

2026-07-21 23:26:51 +02:00

keyword-discovery.test.ts

feat: detect and import unrecognized JMAP keywords as tags #658

2026-08-06 18:44:14 +02:00

keyword-format.test.ts

feat: Add nesting of tags in a tree

2026-07-29 17:18:38 +02:00

keyword-nesting.test.ts

feat: allow hidden tags, either permanent or when there are no unread messages

2026-07-29 17:18:42 +02:00

layout-link-preview.test.ts

feat: add "Flat fields" theme

2026-09-19 13:01:07 +02:00

layout-theme-color.test.ts

feat: add "Flat fields" theme

2026-09-19 13:01:07 +02:00

list-attachments.test.ts

fix: keep message list from jumping while attachment chips load

2026-09-26 20:24:23 +02:00

lite-config.test.ts

feat: remember every sign-in unless the admin shows the remember me box

2026-10-13 13:13:56 +02:00

lite-link-segments.test.ts

feat: add Bulwark Lite static export build

2026-09-17 23:54:33 +02:00

lite-mounted-href.test.ts

feat: add Bulwark Lite build for Stalwart Applications

2026-09-19 00:53:53 +02:00

lite-oauth.test.ts

feat: add OpenID Connect login to the Stalwart Lite bundle

2026-09-21 23:45:08 +02:00

lite-scripts.test.ts

fix: show pdf attachment previews in safari #1301

2026-10-20 21:08:01 +02:00

lite-stalwart-runtime.test.ts

feat: add Bulwark Lite build for Stalwart Applications

2026-09-19 00:53:53 +02:00

lite-static-params.test.ts

feat: add Bulwark Lite static export build

2026-09-17 23:54:33 +02:00

lite-tokens.test.ts

fix: reuse cached access token on lite session restore #552

2026-09-29 21:25:02 +02:00

mailbox-deep-nesting.test.ts

fix: folders containing a system folder name disappear from the sidebar #771

2026-08-16 22:11:26 +02:00

mailbox-label.test.ts

fix: localize special-folder names by JMAP role #404

2026-06-24 19:32:13 +02:00

mailbox-path.test.ts

fix: use canonical INBOX in Sieve filter paths #313

2026-05-22 11:51:25 +02:00

mailto.test.ts

feat: email a contact or group via the in-app composer

2026-06-19 12:29:43 +02:00

mark-as-read-delay.test.ts

fix: follow markAsReadDelay when expanding a conversation or opening a Pro folder row

2026-10-17 21:01:34 +02:00

mdn-header-injection.test.ts

fix: strip CR/LF from read-receipt header values (GHSA-w38p-hpqv-g89c)

2026-09-17 20:55:39 +02:00

mdn.test.ts

test: add characterisation tests for untested integration seams

2026-06-19 23:52:42 +02:00

message-list-order.test.ts

fix: keep an opened mail in place in unread-first lists until another is opened

2026-09-29 20:28:39 +02:00

message-list-tabs-store.test.ts

feat: add message-list category tabs

2026-07-22 17:22:20 +02:00

mobile-handoff.test.ts

fix: hand a mobile sign-in to the app when the browser was already signed in

2026-10-22 08:02:08 +02:00

move-targets.test.ts

fix: offer the shared account's folders first when moving its mail #1149

2026-10-02 23:04:28 +02:00

native-select-options.test.ts

fix: keep the group labels of native option lists readable in dark themes

2026-10-01 17:31:59 +02:00

next-config-cors.test.ts

fix: allow sandbox chunk loading with CORS #922

2026-09-09 01:29:25 +09:00

next-unread-email.test.ts

feat: jump to the next unread message with n #514

2026-10-17 19:18:20 +02:00

notification-mutes.test.ts

feat: mute notifications for single folders or whole accounts #1169

2026-10-15 21:50:08 +02:00

oauth-discovery-base.test.ts

fix(oauth): normalize the discovery base so a session JMAP_SERVER_URL refreshes (#971)

2026-09-08 19:17:18 +00:00

oauth-discovery-validator.test.ts

fix: accept oauth endpoints on the configured issuer's own host #1028

2026-09-23 19:26:07 +02:00

oauth-discovery.test.ts

fix: stop OAuth discovery from reading a well-known document off another host

2026-10-19 01:32:24 +02:00

oauth-issuer-precedence.test.ts

feat: end the provider session through a configured logout URL #1279

2026-10-18 13:46:48 +02:00

oauth-metadata-route.test.ts

fix: discover OIDC metadata server-side to avoid CORS failures #382

2026-06-02 00:15:50 +02:00

oauth-pkce.test.ts

feat(auth): add RP-initiated logout and OAuth unit tests

2026-02-26 00:08:57 +01:00

oauth-token-exchange.test.ts

fix: refresh TOTP-minted tokens with the default client id when no OAuth client is configured #873

2026-08-20 13:59:57 +02:00

oauth-token-route.test.ts

feat: end the provider session through a configured logout URL #1279

2026-10-18 13:46:48 +02:00

og-image-route.test.ts

fix: don't export OG_WIDTH/OG_HEIGHT from the og-image route

2026-08-17 00:18:59 +02:00

pair-attempts.test.ts

fix: limit pairing password attempts per mail account and per day

2026-09-27 04:49:03 +02:00

pair-bundle.test.ts

fix: link the mobile app from every account with a sign-in of its own

2026-09-27 04:16:18 +02:00

pair-create-route.test.ts

fix: say up front when the mobile app cannot use an http mail server

2026-09-27 04:53:49 +02:00

pair-oauth-discovery-scopes.test.ts

fix: link the mobile app from every account with a sign-in of its own

2026-09-27 04:16:18 +02:00

pair-reauth-proof.test.ts

fix: link the mobile app from every account with a sign-in of its own

2026-09-27 04:16:18 +02:00

pair-reauth-sso-complete.test.ts

fix: refuse a pairing re-auth the identity provider did not make fresh

2026-09-27 04:49:54 +02:00

pair-redeem-status-route.test.ts

fix: link the mobile app from every account with a sign-in of its own

2026-09-27 04:16:18 +02:00

pair-sso-start-reauth.test.ts

fix: link the mobile app from every account with a sign-in of its own

2026-09-27 04:16:18 +02:00

pair-store.test.ts

fix: clean up after pairings a phone never completes

2026-09-27 04:51:30 +02:00

pair-token-route.test.ts

fix: re-check a paired phone's token endpoint against the current config

2026-09-27 04:50:38 +02:00

plugin-actions-proxy-api.test.ts

feat: let a plugin open, close and toggle the panel its slot sits in

2026-10-20 17:21:13 +02:00

plugin-after-send.test.ts

feat: tell plugins when the server accepted a sent or scheduled message, but not an undone one

2026-10-14 03:58:58 +02:00

plugin-api-gates.test.ts

feat: let plugins update and remove the tags they added

2026-10-24 08:54:23 +02:00

plugin-bundle-fetch.test.ts

fix: sign plugin bundles when they are installed and require the signature for privileged plugins

2026-10-14 02:05:47 +02:00

plugin-compose-gate.test.ts

feat: let plugins stop or prefill the composer and mailto links, and tell them when it opens, closes and saves a draft

2026-10-14 03:50:55 +02:00

plugin-floating-dropdown-host.test.ts

fix: check plugin dropdown messages before the host draws them

2026-10-18 14:39:59 +02:00

plugin-frame-touch-height.test.ts

fix: make plugin sidebar rows as tall as folder rows on phones

2026-10-14 18:49:56 +02:00

plugin-hook-catalog.test.ts

test: require a call site for every plugin hook

2026-10-14 04:06:37 +02:00

plugin-hook-permissions.test.ts

fix: show plugins the message that was already open when they start

2026-10-14 18:49:22 +02:00

plugin-hook-result.test.ts

fix: give plugins plain message data, let them add only real messages to search results and skip a draft save

2026-10-14 04:05:43 +02:00

plugin-hooks.test.ts

fix: keep a plugin's passphrase dialog open while the user types #1302

2026-10-20 21:01:02 +02:00

plugin-host-api-app-info.test.ts

feat: let plugins search the settings and read the user's preferences

2026-10-20 20:27:08 +02:00

plugin-host-api-limits.test.ts

fix: give plugins settings that change after they started, let their frames copy to the clipboard and tell them the user's time zone

2026-10-14 09:01:03 +02:00

plugin-host-bridge-origin.test.ts

fix: stop talking to a plugin frame once it has navigated to another document

2026-10-19 01:32:27 +02:00

plugin-host-calendar-tasks.test.ts

feat: let plugins create repeating events under a stable id of their own

2026-10-14 06:29:15 +02:00

plugin-host-compose-drafts.test.ts

feat: let plugins open a reply to the open message with text to start from

2026-10-14 11:37:51 +02:00

plugin-host-composer.test.ts

fix: keep lists, quotes and headings in the HTML plugins put into a message

2026-10-14 13:20:21 +02:00

plugin-host-dialog.test.ts

feat: let a plugin ask a question on top of its own dialog

2026-10-14 06:47:53 +02:00

plugin-host-mail-bytes.test.ts

feat: let untrusted plugins save attachments and message sources of a given message

2026-10-14 04:16:31 +02:00

plugin-host-mail-move.test.ts

feat: let plugins move messages between folders and archive them

2026-10-14 06:31:07 +02:00

plugin-host-mail-read.test.ts

feat: let plugins search mail with api.email.search

2026-10-20 18:16:29 +02:00

plugin-host-notifications.test.ts

feat: let plugin notifications carry a link to the plugin's own server

2026-10-14 10:58:19 +02:00

plugin-host-settings-apis.test.ts

fix: let identity hooks stop a plugin's change, send notification clicks to plugins that show notifications, and mark reading mail as high risk

2026-10-14 04:37:24 +02:00

plugin-http-fetch.test.ts

fix: keep plugin network access to the origins in its manifest

2026-10-14 01:27:02 +02:00

plugin-http-post-denied-paths.test.ts

test: use a sidecar path instead of the now-denied translate route in the plugin POST test

2026-10-19 01:44:29 +02:00

plugin-i18n.test.ts

fix: lay out plugin slots right-to-left in Arabic, Hebrew and Persian and use the app font size

2026-10-14 02:24:45 +02:00

plugin-known-credentials.test.ts

fix: only connect and proxy plugin credentials that a plugin known to the server declares

2026-10-19 01:07:50 +02:00

plugin-loader.test.ts

fix: repair pre-existing failing vitest suite

2026-06-19 23:53:20 +02:00

plugin-permission-coverage.test.ts

Merge branch 'feat/plugin-host-apis' into feat/plugin-system-audit

2026-10-14 04:34:14 +02:00

plugin-permission-text.test.ts

feat: add Estonian (et) locale

2026-10-16 18:19:29 +03:00

plugin-post-denylist.test.ts

fix: keep plugin POSTs off the plugin proxy, secrets, agenda, ical and translate routes

2026-10-19 01:04:45 +02:00

plugin-projection.test.ts

feat: list a message's attachments in the view plugins get

2026-10-14 06:21:17 +02:00

plugin-sandbox-loader.test.ts

fix: start each plugin once, so its hooks don't fire twice

2026-10-14 08:22:55 +02:00

plugin-sandbox-route-gate.test.ts

fix: let plugin frames use forms without letting them post anywhere

2026-10-14 06:19:12 +02:00

plugin-sandbox-runtime-host-gate.test.ts

fix: bind the plugin sandbox to its framing window (GHSA-96cx-gx36-3g79)

2026-09-17 20:31:39 +02:00

plugin-sandbox-runtime-slot-props.test.ts

fix: keep a plugin slot's callbacks working when its props change while it loads #1266

2026-10-18 13:46:47 +02:00

plugin-search-run.test.ts

feat: let plugins run a message-list search with a JMAP filter #1024

2026-10-11 19:39:58 +02:00

plugin-secret-proxy.test.ts

fix: only connect and proxy plugin credentials that a plugin known to the server declares

2026-10-19 01:07:50 +02:00

plugin-settings.test.ts

fix: give plugins their default settings and apply setting changes without a reload

2026-10-14 02:21:45 +02:00

plugin-shortcuts.test.ts

fix: keep plugin shortcuts behind ui:keyboard and off the keys the app and browser use

2026-10-14 02:19:10 +02:00

plugin-slot-catalog.test.ts

Merge branch 'slots/nav' into feat/plugin-system-audit

2026-10-14 05:30:34 +02:00

plugin-slot-props.test.ts

fix: give slot plugins the message, event or contact only with the matching read permission

2026-10-14 01:31:30 +02:00

plugin-slot.test.tsx

chore: remove unused exports and the dead plugin error boundary

2026-10-13 13:36:51 +02:00

plugin-storage-blocked.test.ts

fix: fail fast when the plugin storage database is blocked #840

2026-09-07 22:34:47 +02:00

plugin-storage-scope.test.ts

fix: keep plugin storage per account and delete it on sign-out

2026-09-26 16:47:29 +02:00

plugin-storage.test.ts

feat: add plugin/theme harness and admin dashboard

2026-03-25 00:44:03 +01:00

plugin-store.test.ts

fix: give plugins settings that change after they started, let their frames copy to the clipboard and tell them the user's time zone

2026-10-14 09:01:03 +02:00

plugin-thread-expand.test.ts

feat: tell plugins when a message body is on screen or a conversation unfolds, and let them rewrite links

2026-10-14 03:39:13 +02:00

plugin-types.test.ts

feat(plugins): add new contact-cryptokeys UI slot

2026-07-24 18:10:37 +02:00

plugin-ui-kit.test.tsx

feat(plugins): add Combobox component to UI kit with host floating dropdown portal

2026-10-16 10:08:27 +02:00

plugin-upload-progress.test.ts

feat: real byte progress for attachment uploads, stock and plugin-offloaded

2026-08-23 19:44:56 +06:00

plugin-validator.test.ts

feat: add Theme API v2 with token compiler, skin slot

2026-04-28 15:39:13 +02:00

pointer-cursor.test.ts

fix: show the pointer cursor on buttons and other controls

2026-10-06 21:31:11 +02:00

preview-leading-css.test.ts

fix: drop plain-text emphasis markers from message previews #1260

2026-10-18 16:23:54 +02:00

protocol-handlers.test.ts

Feature/protocol handlers

2026-05-12 20:49:05 +02:00

proxy-forwarded-headers.test.ts

fix: keep basePath when normalizing Chinese Accept-Language

2026-08-29 12:35:38 +02:00

proxy-security-headers.test.ts

fix: show pdf attachment previews in safari #1301

2026-10-20 21:08:01 +02:00

push-bindings.test.ts

perf(push): reconcile push bindings instead of rebuilding them

2026-09-30 19:03:34 +02:00

push-preferences.test.ts

fix: stop the push preference mirror from throwing in sandboxed plugin frames

2026-10-20 12:23:55 +02:00

push-preview-route.test.ts

fix: preview the named message when the inbox lookups beside it fail #1041

2026-10-02 10:32:22 +02:00

push-relays.test.ts

feat: pick push relay from admin-defined list instead of a URL field

2026-08-16 23:04:22 +02:00

quota.test.ts

fix: count storage quota against softLimit when the server sets one #1242

2026-10-15 14:31:09 +02:00

quote-collapse.test.ts

feat: collapse quoted reply text behind a "..." toggle #480

2026-07-22 19:17:23 +02:00

quote-header.test.ts

fix: HTML-escape sender/subject in reply/forward quote header (#482)

2026-06-25 00:25:28 +02:00

recipient-mentions.test.ts

feat: turn @mentions into chips with a hover card

2026-10-18 17:52:11 +02:00

recurrence-dst-gap.test.ts

fix: keep daily recurring events going past a DST gap

2026-09-26 15:45:59 +02:00

recurrence-expansion.test.ts

fix: keep single-occurrence edits on that occurrence and keep its details

2026-09-23 13:40:01 +02:00

recurrence-instances.test.ts

fix: keep single-occurrence edits on that occurrence and keep its details

2026-09-23 13:40:01 +02:00

recurrence-rule.test.ts

fix(calendar): drop default SKIP=OMIT from recurrence rules (DAVx5 sync)

2026-08-25 21:13:34 +02:00

reply-identity.test.ts

feat: choose exact-address or same-domain matching for reply from received address #1000

2026-09-09 19:27:08 +02:00

reply-recipients.test.ts

fix: reply to a message from another connected account goes to that account

2026-10-17 20:31:25 +02:00

request-protocol.test.ts

fix: derive the admin cookie's Secure flag from the request

2026-09-19 11:19:35 +02:00

rfc5322-mailbox.test.ts

fix: split "Name <addr>" recipients into the JMAP name and email fields #672

2026-08-06 19:19:18 +02:00

schedule-presets.test.ts

feat: offer one-click times in the Schedule send dialog

2026-10-11 20:03:42 +02:00

scheduled-send-label.test.ts

fix: show the scheduled time rounded to the minute and with its date

2026-10-11 19:50:40 +02:00

search-scope-folders.test.ts

feat: show the folder hierarchy in the search folder dropdown

2026-09-29 20:15:14 +02:00

search-snippet.test.ts

perf: list search results without waiting for the highlighted excerpts

2026-10-14 23:51:17 +02:00

search-suggestions.test.ts

feat: search suggestions with recent searches and contact autocomplete #845

2026-08-25 20:09:18 +02:00

search-utils.test.ts

fix: send mail search terms as typed instead of with a fake prefix wildcard

2026-09-22 21:04:18 +02:00

server-fetch.test.ts

fix: give every upstream mail server request a deadline

2026-10-19 01:32:28 +02:00

session-cookie.test.ts

test: add characterisation tests for untested integration seams

2026-06-19 23:52:42 +02:00

session-secret-generate.test.ts

feat: generate a session secret on first start when none is configured

2026-10-13 13:17:34 +02:00

settings-route-account-key.test.ts

fix: cap the size of a synced settings blob

2026-10-19 01:15:04 +02:00

settings-route-template-merge.test.ts

fix: keep synced calendar subscriptions from stale devices and past deletions #1064

2026-10-15 23:54:37 +02:00

settings-search.test.ts

refactor: fold download naming into reading as an advanced section

2026-10-19 17:59:30 +02:00

setup-url-token.test.ts

fix: keep the setup token out of access logs, referers and history

2026-09-26 16:32:38 +02:00

shared-calendar-colors.test.ts

Feature: per-viewer colors for shared calendars (#345)

2026-05-31 15:52:27 +02:00

sidebar-apps.test.ts

refactor: migrate icon set from Lucide to Tabler Icons

2026-09-19 13:32:41 +02:00

sieve-generator.test.ts

feat: Enhance external rule handling in Sieve parser and store #201

2026-04-16 17:22:52 +02:00

sign-out-cleanup.test.ts

fix: clear the accounts' leftovers when everyone signs out

2026-09-26 16:55:34 +02:00

signature-append.test.ts

fix: sync identity stores and append signatures to outgoing emails (#15)

2026-03-15 16:07:45 +01:00

signature-utils.test.ts

fix: show one signature separator and keep its trailing space

2026-10-11 19:41:48 +02:00

sso-complete-route.test.ts

fix: stop a sixth sso account from overwriting the first account's sign-in

2026-09-30 19:31:03 +02:00

sso-start-route.test.ts

fix: re-authenticate against the account's own server when linking the mobile app

2026-09-23 18:35:15 +02:00

stalwart-jmap-api.test.ts

fix: preserve POST across redirects in Stalwart JMAP passthrough #627

2026-07-16 22:51:07 +02:00

stalwart-jmap-route.test.ts

feat: add a server-side switch for the Stalwart JMAP passthrough #904

2026-09-07 22:34:47 +02:00

stalwart-principal.test.ts

fix: let non-admin users see their name and change a TOTP password

2026-09-22 20:28:01 +02:00

standalone-display.test.ts

fix: preview attachments in the installed app instead of opening a blank window #865

2026-10-17 19:17:55 +02:00

sub-addressing.test.ts

feat: allow custom sub-addressing delimiter character #239

2026-05-01 01:48:39 +02:00

subject-prefix.test.ts

fix: keep the fresh-compose tab title clear of the selected email subject

2026-08-18 15:48:05 +02:00

sw-push-quiet-window.test.ts

fix: keep push notifications silent when the notification sound is off #1289

2026-10-19 18:40:06 +02:00

sw-push-subscription-change.test.ts

fix: do not offer push onboarding while the resync is restoring the subscription #1321

2026-10-22 23:15:32 +02:00

tab-title.test.ts

feat: let operators keep the message subject out of the tab title

2026-10-07 08:26:51 +03:00

telemetry-endpoint-guard.test.ts

fix: close IPv6 transition-address and redirect bypasses in endpoint guard

2026-08-25 20:50:35 +02:00

telemetry-fetch-target.test.ts

fix: check telemetry targets at connect time and fail closed

2026-09-26 15:15:23 +02:00

template-sync.test.ts

fix: include email templates in cross-device settings sync #825

2026-08-16 02:09:38 +02:00

template-utils.test.ts

feat: add numeric date, day, month and year template placeholders #1284

2026-10-19 18:41:44 +02:00

theme-color-meta.test.ts

fix: sync PWA title bar colour with the active theme #671

2026-08-06 18:23:21 +02:00

theme-compiler.test.ts

feat: add Theme API v2 with token compiler, skin slot

2026-04-28 15:39:13 +02:00

theme-loader.test.ts

fix: close theme CSS sanitizer bypasses and enforce :root/.dark selectors

2026-09-26 14:36:02 +02:00

theme-store-hooks.test.ts

feat: tell plugins when the colour scheme or theme changes

2026-10-14 03:24:00 +02:00

theme-store-sync.test.ts

fix: install Theme API v2 themes and their skins from the admin page and the marketplace

2026-10-14 01:47:58 +02:00

thread-routing.test.ts

fix: open right conversations in shared mailbox #814

2026-08-16 02:19:04 +02:00

thread-utils.test.ts

fix: keep an opened mail in place in unread-first lists until another is opened

2026-09-29 20:28:39 +02:00

timezone.test.ts

feat: draw Mountain View's message rows like Gmail's

2026-10-12 01:01:09 +02:00

tnef.test.ts

chore: write nul separators as \0 so git diffs these files as text

2026-09-30 19:34:37 +02:00

toolbar-overflow.test.ts

perf: measure the message toolbar and body height with fewer layout passes

2026-10-15 00:41:07 +02:00

totp-issuer.test.ts

fix: keep Stalwart as the authenticator entry name on unbranded installs #1177

2026-10-06 23:29:42 +02:00

totp-token-exchange-detail.test.ts

fix: stop sending the webmail's OAuth client secret to user-chosen mail servers

2026-09-27 04:12:47 +02:00

translate-route.test.ts

fix: require a session for the translate API #903

2026-09-07 22:34:47 +02:00

translations.test.ts

fix: stop translating the composer as a music composer and the certificate subject as an email subject

2026-10-14 19:19:51 +02:00

unified-accounts-grew.test.ts

fix(mail): unified mailbox missed accounts that had not connected yet

2026-09-02 22:15:50 +02:00

unified-load-progress.test.ts

feat(unified): say how many accounts the unified mailbox holds while logins reconnect

2026-10-01 04:38:04 +02:00

unified-mailbox-cross.test.ts

fix: leave the all mailbox out of the cross views #1241

2026-10-15 14:25:32 +02:00

unified-mailbox-dedupe.test.ts

fix: keep shared folders from other servers when they reuse an account id #1108

2026-10-18 14:58:53 +02:00

unified-mailbox-search-accounts.test.ts

perf: list search results without waiting for the highlighted excerpts

2026-10-14 23:51:17 +02:00

unified-mailbox-tags.test.ts

fix: leave trash and spam out of tag views and their counts #1156

2026-10-02 23:15:26 +02:00

unified-mailbox.test.ts

fix: stop unified-mailbox from mutating client-returned email objects

2026-06-25 00:25:00 +02:00

unified-paging-positions.test.ts

fix: page each account of a merged list from its own position

2026-09-26 15:43:32 +02:00

upload-progress.test.ts

feat: real byte progress for attachment uploads, stock and plugin-offloaded

2026-08-23 19:44:56 +06:00

url-guard-connect-pin.test.ts

fix: pin resolved IP at connect time to block DNS-rebinding SSRF (GHSA-24w9-8r42-8jwm)

2026-08-26 22:11:06 +02:00

url-guard.test.ts

fix: block loopback, CGNAT and IPv6 transition ranges in the SSRF guard

2026-09-26 14:00:01 +02:00

validation.test.ts

fix: show what a mailto unsubscribe sends and limit it to one recipient

2026-09-26 14:41:14 +02:00

vcard.test.ts

fix: set name.full on all contact write paths so vCards carry mandatory FN #430

2026-08-31 23:53:24 +02:00

verification-code.test.ts

fix: keep a crafted mail body or subject from stalling the reader in the verification code search

2026-10-19 00:54:24 +02:00

verification-failure.test.ts

fix: explain why calendar subscriptions fail with not authenticated #1073

2026-09-23 18:31:27 +02:00

verify-jmap-auth.test.ts

fix: pin resolved IP at connect time to block DNS-rebinding SSRF (GHSA-24w9-8r42-8jwm)

2026-08-26 22:11:06 +02:00

verify-jmap-identity.test.ts

fix: key synced settings on the account a bearer token belongs to

2026-09-26 14:59:55 +02:00

version-check-upgrade.test.ts

fix: invalidate persisted update status after an upgrade

2026-08-29 12:46:39 +02:00

version-compare.test.ts

fix: warn + block install when app version is below plugin's minAppVersion

2026-05-16 18:11:52 +02:00

web-push.test.ts

fix: do not offer push onboarding while the resync is restoring the subscription #1321

2026-10-22 23:15:32 +02:00

webdav-route.test.ts

fix: pin supported-calendar-component-set on created calendars #760

2026-08-25 19:16:20 +02:00

wopi-attachment-routes.test.ts

fix: open read-only documents in ONLYOFFICE without the -103 warning #1187

2026-10-08 14:32:39 +02:00

wopi-reverse-proxy.test.ts

fix: open the WOPI editor behind a reverse proxy with split addresses #1130

2026-10-04 22:16:29 +02:00

wopi-shared-file-routes.test.ts

fix: open read-only documents in ONLYOFFICE without the -103 warning #1187

2026-10-08 14:32:39 +02:00

wopi-token-not-a-session.test.ts

feat: open office attachments in mail read-only in the document editor #1047

2026-09-23 19:01:47 +02:00

wopi.test.ts

fix: open read-only documents in ONLYOFFICE without the -103 warning #1187

2026-10-08 14:32:39 +02:00