jcoffey-dev daa486f7e7 Journaling: search, read and export over JMAP, and the chain check ...

Phase 4 of the journaling spec.

- inbuxa:JournalEntry/query and /get (sysJournalSearch): filter by time,
  sender, recipient, either, direction, subject words, Message-ID and
  journal, newest first; the whole report only when asked for.
- inbuxa:JournalExport/set (sysJournalExport): a reason is required; a
  ZIP of the matching reports with manifest.csv, exceptions.csv and
  manifest.sha256, up to 10,000 reports and 1 GB.
- inbuxa:JournalVerification/set (sysJournalGet): chains and reports
  rechecked.
- Every search, listing, read, export and check is written to the audit
  log before anything is returned, with existing actions only.
- Catalog entries for the three objects; spec as-built notes.

journal_tests: administrators can't search; a Compliance Officer searches,
lists, reads a report, exports (reason required) and checks the chain;
the officer can't change journals; each of those is in the audit log.

2026-09-28 21:45:09 -07:00

..

account_lock.rs

Writing delegates may add at the top of a locked account's Files

2026-09-27 18:04:24 -07:00

ai_calibration.rs

Calibration test: pass the new stream argument to request::body

2026-09-26 16:25:30 -07:00

ai_explain.rs

Explain a setting that was never saved, from its defaults

2026-09-26 01:09:46 -07:00

ai.rs

Explain this: the local model reads delivery failures, verdicts, logs and settings

2026-09-26 00:52:51 -07:00

antispam.rs

Import upstream v0.16.22, stripped

2026-09-18 10:21:56 -07:00

audit.rs

Audit log: a permanent, tamper-evident record of admin actions

2026-09-27 13:40:12 -07:00

authentication.rs

Import upstream v0.16.22, stripped

2026-09-18 10:21:56 -07:00

authorization.rs

Audit log: a permanent, tamper-evident record of admin actions

2026-09-27 13:40:12 -07:00

auto_reload.rs

Settings writes: wait for a burst to settle before reloading

2026-09-24 21:15:44 -07:00

branding.rs

Write the brand in lowercase where people see it

2026-09-22 20:08:10 -07:00

compliance.rs

New installs start with the hashed-address blocklist off, and DNSBL zones read right

2026-09-28 10:21:15 -07:00

crypto.rs

Import upstream v0.16.22, stripped

2026-09-18 10:21:56 -07:00

delivery.rs

Merge upstream v0.16.23

2026-09-22 16:57:06 -07:00

directory.rs

Import upstream v0.16.22, stripped

2026-09-18 10:21:56 -07:00

journal.rs

Journaling: search, read and export over JMAP, and the chain check

2026-09-28 21:45:09 -07:00

legal_hold.rs

List what a hold export can't read instead of skipping it (LH-12)

2026-09-27 22:15:05 -07:00

mail_rules.rs

Mail rules: group and tenant ids in their JMAP form

2026-09-28 19:30:28 -07:00

masked_email.rs

Write the brand in lowercase where people see it

2026-09-22 20:08:10 -07:00

mod.rs

Security to-do list: accepted items, kept on the server

2026-09-28 21:22:43 -07:00

monitoring.rs

Trace search: index event type and queue id as integers

2026-09-24 07:29:08 -07:00

oidc.rs

Mark the files this fork changed (AGPL section 5(a))

2026-09-19 23:48:35 -07:00

purge.rs

Import upstream v0.16.22, stripped

2026-09-18 10:21:56 -07:00

quota.rs

Import upstream v0.16.22, stripped

2026-09-18 10:21:56 -07:00

reload.rs

Settings reload: no DNS at build time, don't refuse over old failures

2026-09-24 12:11:41 -07:00

security_acceptances.rs

Security to-do list: accepted items, kept on the server

2026-09-28 21:22:43 -07:00

security.rs

Keep rotated log files for a set number of days

2026-09-28 08:23:36 -07:00

task.rs

Merge upstream v0.16.24

2026-09-28 06:30:20 -07:00

tenant.rs

Write the brand in lowercase where people see it

2026-09-22 20:08:10 -07:00

tracer_reload.rs

Tracers whose settings change start over on reload

2026-09-24 20:52:46 -07:00

undelete.rs

Write the brand in lowercase where people see it

2026-09-22 20:08:10 -07:00