Linus Rath 9b61b79d5c fix: sign only CMS signed attributes through api.keystore, and ask a user about a managed plugin's keystore ...

The shell now takes a message's signed attributes where it took a digest,
so a page can't get a login or TLS digest signed. A quiet option lets a
plugin answer from what's allowed, for anything the user didn't ask for.

An admin's install no longer covers the certificates on someone's own
computer: a managed plugin gets `keystore` when that person says yes, also
when an update adds it, and it's forgotten once everyone has signed out.

Changed test assertions: the fixture plugin needs a grant now, as managed
alone is no longer enough, and the bridge gets an options argument.

2026-11-04 03:23:45 +01:00

..

__tests__

Merge branch 'fix/ui-bug-hunt'

2026-11-03 19:44:46 +01:00

assistant

fix: load the assistant's calendar and settings calls on first use so plugin views don't load the calendar store

2026-11-03 01:54:32 +01:00

ui-kit

fix: wrap a long address in a plugin's info bar instead of cutting it at the pane's edge

2026-11-03 09:33:10 +01:00

account-kind.ts

fix: give plugins the directory only with their own permission, and only confirmed team mailboxes

2026-10-28 08:16:52 +01:00

actions.ts

feat: underline spelling and grammar issues from checker plugins #1397

2026-11-01 19:39:37 +01:00

api-timeouts.ts

fix: load the attachment readers only when needed and read two files at a time at most

2026-11-02 23:37:34 +01:00

bundle-fetch.ts

fix: sign plugin bundles when they are installed and require the signature for privileged plugins

2026-10-14 02:05:47 +02:00

bundle-integrity.ts

fix(): refill missing managed bundles from the server #636

2026-09-07 16:52:20 +02:00

bundle-signing.ts

fix(): refill missing managed bundles from the server #636

2026-09-07 16:52:20 +02:00

calendar-navigation.ts

feat(plugins): the calendar's task view drawn by a plugin

2026-11-01 20:07:18 +01:00

checkers.ts

feat: underline spelling and grammar issues from checker plugins #1397

2026-11-01 19:39:37 +01:00

composer-edit.ts

feat: let plugins edit the message being written from composer buttons and menus

2026-10-14 11:35:00 +02:00

composer-registry.ts

feat: let plugins find, read, attach, save and create files in Files

2026-11-03 00:17:46 +01:00

connect-dialog.ts

feat: let plugin notifications carry a link to the plugin's own server

2026-10-14 10:58:19 +02:00

consent.ts

feat: let users install their own plugins, with admin review of the actual code

2026-10-14 02:03:26 +02:00

day-labels.ts

feat: let plugins add buttons, calendar day labels and pages, and use connected accounts from the sandbox

2026-10-14 04:31:43 +02:00

dialog-anchor.ts

feat(plugins): a plugin dialog as a popover at the clicked control

2026-11-01 20:07:12 +01:00

forward-approvals.ts

feat: let plugins forward a message with its attachments after the user allows the address once

2026-10-29 23:27:15 +01:00

frame-escape.ts

fix: let a plugin keep Escape for itself from its own window listener

2026-11-03 14:58:03 +01:00

hook-payload.ts

feat: give send-check plugins the authored text, external recipients and attachment types

2026-11-01 08:16:39 +01:00

host-api-account.ts

fix: give plugins the directory only with their own permission, and only confirmed team mailboxes

2026-10-28 08:16:52 +01:00

host-api-app.ts

fix: let plugins read the signature auto-insert toggles they may change

2026-11-03 02:46:51 +01:00

host-api-calendar.ts

fix: save an edited HTML event description as plain text and keep notes in its format

2026-11-02 22:52:04 +01:00

host-api-checker.ts

fix: keep proofreading text from plugins that shouldn't get it, and work it by keyboard #1397

2026-11-02 20:26:21 +01:00

host-api-compose.ts

fix: harden the app lock: forget in an order that can't leave a sign-in without a PIN, hear wipes and clear subjects while locked, and refuse obvious PINs

2026-11-03 17:08:02 +01:00

host-api-composer.ts

refactor: keep composer snapshot comments in English #1443

2026-11-01 18:15:13 +01:00

host-api-forward.ts

fix: hold sends until required send checks have started, and check what really goes out

2026-11-01 10:02:58 +01:00

host-api-input.ts

fix: check the name, type and size of blobs plugins upload, and the email id of email.setKeyword and email.removeKeyword

2026-10-14 10:00:03 +02:00

host-api-keystore.ts

fix: sign only CMS signed attributes through api.keystore, and ask a user about a managed plugin's keystore

2026-11-04 03:23:45 +01:00

host-api-mail.ts

feat: let plugins count a conversation's messages, and read only the newest 50

2026-11-03 00:38:07 +01:00

host-api-notify.ts

feat: keep plugin notifications off the desktop while do not disturb is on

2026-10-29 17:53:48 +01:00

host-api-print.ts

feat: let admins turn off downloads, export, printing and the install prompt, and add a watermark

2026-11-01 08:52:34 +01:00

host-api-settings.ts

fix: give plugins no personal templates when the admin hid them

2026-10-28 07:34:23 +01:00

host-api-toasts.ts

refactor: keep the toast limits named and comments in English #1442

2026-11-01 18:12:42 +01:00

host-api.ts

feat: let privileged plugins sign and decrypt with the OS certificate store in the desktop app

2026-11-03 09:58:48 +01:00

host-bridge.ts

Merge branch 'fix/ui-bug-hunt'

2026-11-03 19:44:46 +01:00

host-dialog.ts

feat: let privileged plugins sign and decrypt with the OS certificate store in the desktop app

2026-11-03 09:58:48 +01:00

host-features.ts

fix: render an encrypted message once per opening, and let its plugin keep external content off

2026-11-03 13:24:10 +01:00

host-theme.ts

perf: load plugin frames as a plain page instead of a Next app

2026-10-25 02:01:47 +01:00

known-plugins.ts

fix: keep the composer's proofreading off the plugin store, and safe with a stand-in editor #1397

2026-11-02 21:08:35 +01:00

list-filters.ts

fix: give plugins the directory only with their own permission, and only confirmed team mailboxes

2026-10-28 08:16:52 +01:00

loader.ts

Merge branch 'fix/ui-bug-hunt'

2026-11-03 19:44:46 +01:00

open-email.ts

fix: harden the app lock: forget in an order that can't leave a sign-in without a PIN, hear wipes and clear subjects while locked, and refuse obvious PINs

2026-11-03 17:08:02 +01:00

open-task.ts

feat(plugins): the calendar's task view drawn by a plugin

2026-11-01 20:07:18 +01:00

page-navigation.ts

fix: harden the app lock: forget in an order that can't leave a sign-in without a PIN, hear wipes and clear subjects while locked, and refuse obvious PINs

2026-11-03 17:08:02 +01:00

pages.ts

feat: let plugins add buttons, calendar day labels and pages, and use connected accounts from the sandbox

2026-10-14 04:31:43 +02:00

panel-requests.ts

Merge main into feat/assistant-everywhere

2026-11-03 01:35:57 +01:00

permission-text.ts

fix: sign only CMS signed attributes through api.keystore, and ask a user about a managed plugin's keystore

2026-11-04 03:23:45 +01:00

permissions.ts

fix: sign only CMS signed attributes through api.keystore, and ask a user about a managed plugin's keystore

2026-11-04 03:23:45 +01:00

plugin-i18n.ts

perf: send plugin frames only the translations of the current language

2026-10-25 02:26:17 +02:00

protocol.ts

fix: close a plugin dialog on Escape while the focus is in one of its fields

2026-11-03 08:53:45 +01:00

proxy-client.ts

feat: tell plugins whether the admin has set up their accounts and keys

2026-10-14 08:24:28 +02:00

registry.ts

feat: let a plugin panel start folded until the user or the plugin opens it

2026-10-20 17:21:13 +02:00

row-badges.ts

fix: show plugin badges on message rows drawn before the plugin started

2026-10-30 00:23:11 +01:00

runtime.tsx

fix: sign only CMS signed attributes through api.keystore, and ask a user about a managed plugin's keystore

2026-11-04 03:23:45 +01:00

sandbox-document.ts

perf: load React DOM and the UI kit only in plugin frames that draw

2026-10-25 02:56:14 +01:00

sandbox-entry.ts

perf: load plugin frames as a plain page instead of a Next app

2026-10-25 02:01:47 +01:00

section-titles.ts

feat: let a plugin title its sidebar section

2026-10-14 11:47:25 +02:00

shortcuts.ts

fix: show the side panel only where the plugin does, and keep it steady

2026-11-02 23:54:53 +01:00

side-panels.ts

feat(plugins): a side panel beside the mail for plugins

2026-11-01 20:07:03 +01:00

slot-layout.ts

Merge main into feat/assistant-everywhere

2026-11-03 01:35:57 +01:00

slot-renderer.ts

perf: load React DOM and the UI kit only in plugin frames that draw

2026-10-25 02:56:14 +01:00

storage-scope.ts

feat: let plugins forward a message with its attachments after the user allows the address once

2026-10-29 23:27:15 +01:00

tier.ts

fix: sign plugin bundles when they are installed and require the signature for privileged plugins

2026-10-14 02:05:47 +02:00