Apply installation policy changes once each, per account

The last third of #207, and the only part that remembers anything. An admin turns a setting on for people who are already here -- which a default cannot do, since a default only seeds an account that has none -- and readers may still turn it back off afterwards, which enforcement does not allow. The difference between the two is entirely in the remembering. Each change carries its own version, and an account stores the ones it has had in its own settings file. Ids rather than a high-water mark, so a change dated earlier than one already applied is not silently skipped -- the reporter's analogy is a schema migration, and this is that shape. Per account rather than per device, because ihasmail's settings are not browser-local: they live in a file in the reader's own JMAP Files, with the browser holding a cache. Signing in on a phone does not apply everything a second time. A change reaches somebody who had already decided otherwise. That is intended and confirmed on the issue: the point is to reach everybody who is already here. It is applied once, and their next decision sticks. One `update` for however many are pending, since each would otherwise push a settings file of its own. Enforced values still win, being applied after. A change whose settings this build does not have at all is dropped rather than recorded, or it would never run on the ihasmail that does have them. The reader is told. A setting moving under somebody without a word is the part of this worth being uneasy about, so the count is toasted with a way into Settings. README gains the Docker half the user asked for: a mounted policy file, the same thing as environment variables for a deployment with no volume, a compose fragment, and the fact that a policy is read once at startup so editing it means a restart. Closes #207.
2026-09-02 11:00:48 -07:00
parent 6821d6a93f
commit c31a653a04
15 changed files with 327 additions and 25 deletions
@@ -1079,6 +1079,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "Hier ist nichts ungelesen",
  },
  plurals: {
+    "Your administrator changed {n} settings": { one: "Ihre Administration hat {n} Einstellung geändert", other: "Ihre Administration hat {n} Einstellungen geändert" },
    "Already here: {n} contacts, nothing imported": { one: "Bereits vorhanden: {n} Kontakt, nichts importiert", other: "Bereits vorhanden: {n} Kontakte, nichts importiert" },
    "All {n} are already in your contacts": { one: "Bereits in Ihren Kontakten", other: "Alle {n} sind bereits in Ihren Kontakten" },
    "Exported {n} events": { one: "{n} Termin exportiert", other: "{n} Termine exportiert" },
@@ -1052,6 +1052,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "Aquí no hay nada sin leer",
  },
  plurals: {
+    "Your administrator changed {n} settings": { one: "Tu administración cambió {n} ajuste", other: "Tu administración cambió {n} ajustes" },
    "Already here: {n} contacts, nothing imported": { one: "Ya estaba aquí: {n} contacto, no se importó nada", other: "Ya estaban aquí: {n} contactos, no se importó nada" },
    "All {n} are already in your contacts": { one: "Ya está en tus contactos", other: "Los {n} ya están en tus contactos" },
    "Exported {n} events": { one: "{n} evento exportado", other: "{n} eventos exportados" },
@@ -1057,6 +1057,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "Rien de non lu ici",
  },
  plurals: {
+    "Your administrator changed {n} settings": { one: "Votre administration a modifié {n} paramètre", other: "Votre administration a modifié {n} paramètres" },
    "Already here: {n} contacts, nothing imported": { one: "Déjà présent : {n} contact, rien d’importé", other: "Déjà présents : {n} contacts, rien d’importé" },
    "All {n} are already in your contacts": { one: "Déjà dans vos contacts", other: "Les {n} sont déjà dans vos contacts" },
    "Exported {n} events": { one: "{n} événement exporté", other: "{n} événements exportés" },
@@ -1060,6 +1060,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "ここに未読はありません",
  },
  plurals: {
+    "Your administrator changed {n} settings": { other: "管理者が {n} 件の設定を変更しました" },
    "Already here: {n} contacts, nothing imported": { other: "すでに存在: {n} 件、インポートなし" },
    "All {n} are already in your contacts": { other: "{n} 件はすでに連絡先にあります" },
    "Exported {n} events": { other: "{n} 件の予定をエクスポートしました" },
@@ -1048,6 +1048,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "Hier is niets ongelezen",
  },
  plurals: {
+    "Your administrator changed {n} settings": { one: "Uw beheerder heeft {n} instelling gewijzigd", other: "Uw beheerder heeft {n} instellingen gewijzigd" },
    "Already here: {n} contacts, nothing imported": { one: "Al aanwezig: {n} contact, niets geïmporteerd", other: "Al aanwezig: {n} contacten, niets geïmporteerd" },
    "All {n} are already in your contacts": { one: "Staat al in uw contacten", other: "Alle {n} staan al in uw contacten" },
    "Exported {n} events": { one: "{n} afspraak geëxporteerd", other: "{n} afspraken geëxporteerd" },
@@ -1055,6 +1055,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "Não há nada não lido aqui",
  },
  plurals: {
+    "Your administrator changed {n} settings": { one: "Sua administração alterou {n} configuração", other: "Sua administração alterou {n} configurações" },
    "Already here: {n} contacts, nothing imported": { one: "Já estava aqui: {n} contato, nada importado", other: "Já estavam aqui: {n} contatos, nada importado" },
    "All {n} are already in your contacts": { one: "Já está nos seus contatos", other: "Todos os {n} já estão nos seus contatos" },
    "Exported {n} events": { one: "{n} evento exportado", other: "{n} eventos exportados" },
@@ -1054,6 +1054,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "Здесь нет непрочитанного",
  },
  plurals: {
+    "Your administrator changed {n} settings": { one: "Администратор изменил {n} настройку", few: "Администратор изменил {n} настройки", many: "Администратор изменил {n} настроек", other: "Администратор изменил {n} настройки" },
    "Already here: {n} contacts, nothing imported": { one: "Уже есть: {n} контакт, ничего не импортировано", few: "Уже есть: {n} контакта, ничего не импортировано", many: "Уже есть: {n} контактов, ничего не импортировано", other: "Уже есть: {n} контакта, ничего не импортировано" },
    "All {n} are already in your contacts": { one: "Уже в ваших контактах", few: "Все {n} уже в ваших контактах", many: "Все {n} уже в ваших контактах", other: "Все {n} уже в ваших контактах" },
    "Exported {n} events": { one: "Экспортировано {n} событие", few: "Экспортировано {n} события", many: "Экспортировано {n} событий", other: "Экспортировано {n} события" },
@@ -1048,6 +1048,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "Тут немає непрочитаного",
  },
  plurals: {
+    "Your administrator changed {n} settings": { one: "Адміністратор змінив {n} налаштування", few: "Адміністратор змінив {n} налаштування", many: "Адміністратор змінив {n} налаштувань", other: "Адміністратор змінив {n} налаштування" },
    "Already here: {n} contacts, nothing imported": { one: "Уже є: {n} контакт, нічого не імпортовано", few: "Уже є: {n} контакти, нічого не імпортовано", many: "Уже є: {n} контактів, нічого не імпортовано", other: "Уже є: {n} контакти, нічого не імпортовано" },
    "All {n} are already in your contacts": { one: "Уже у ваших контактах", few: "Усі {n} уже у ваших контактах", many: "Усі {n} уже у ваших контактах", other: "Усі {n} уже у ваших контактах" },
    "Exported {n} events": { one: "Експортовано {n} подію", few: "Експортовано {n} події", many: "Експортовано {n} подій", other: "Експортовано {n} події" },
@@ -1059,6 +1059,7 @@ export const catalog: Catalog = {
    "Nothing unread here": "这里没有未读邮件",
  },
  plurals: {
+    "Your administrator changed {n} settings": { other: "管理员更改了 {n} 项设置" },
    "Already here: {n} contacts, nothing imported": { other: "已存在 {n} 个，未导入" },
    "All {n} are already in your contacts": { other: "这 {n} 个已在您的联系人中" },
    "Exported {n} events": { other: "已导出 {n} 个日程" },