Open locked accounts handed to you, beside your own mail

When the server hands a locked account to the reader (urn:inbuxa:jmap
delegation), the account popover offers it. Only mail follows the switch;
the reader's own settings, push and notifications stay theirs. A red bar,
a red wordmark with a padlock and the tab title say which account is in
view. Read delegates can't change anything, organize delegates can't
delete, and writing needs send-as. A delegation taken away drops back to
the reader's own mail.

14 new strings in all nine catalogs, unreviewed (inbuxa AL-7, AL-8).

web/src/views/mail/MailView.tsx

@@ -16,6 +16,7 @@ import { LabelPicker } from "./LabelPicker";
 import type { Id } from "@/jmap/types";
 import { confirmDialog } from "@/ui/dialog";
 import { toast } from "@/ui/toast";
+import { viewingDelegation } from "@/store/session";
 import { isUnknownMailbox } from "@/lib/mailbox/mailboxRoute";
 import { scheduledMailboxIdFrom, useScheduled } from "@/store/scheduled";
 import { plural, t as translate, tNode } from "@/lib/i18n";
@@ -284,15 +285,36 @@ export function MailView({ mailboxId, threadId, search }: { mailboxId?: string;
     [threadId, currentRowIndex, settings.autoAdvance, ids, rowThreadId, openThread, setFocusId],
   );
 
+  /*
+   * inbuxa AL-6: in a locked account handed to the reader, what their level
+   * doesn't allow says so instead of trying. Read changes nothing; organize
+   * moves and flags but never deletes, so Trash and Junk are out of reach.
+   */
+  const refused = (destroys: boolean): boolean => {
+    const delegation = viewingDelegation();
+    if (!delegation) return false;
+    if (delegation.access === "read") {
+      toast.show(translate("This account was handed to you to read. Nothing in it can be changed."));
+      return true;
+    }
+    if (destroys && delegation.access === "organize") {
+      toast.show(translate("You can file and move mail in this account, but not delete it."));
+      return true;
+    }
+    return false;
+  };
+
   const actions = useMemo(
     () => ({
       archive: async (rows?: Id[]) => {
+        if (refused(false)) return;
         const t = await targetIds(rows);
         if (!t.length) return;
         await useMail.getState().archive(t);
         afterAction(true);
       },
       trash: async (rows?: Id[]) => {
+        if (refused(true)) return;
         const t = await targetIds(rows);
         if (!t.length) return;
         const mail = useMail.getState();
@@ -315,6 +337,7 @@ export function MailView({ mailboxId, threadId, search }: { mailboxId?: string;
         afterAction(true);
       },
       spam: async (rows?: Id[]) => {
+        if (refused(true)) return;
         const t = await targetIds(rows);
         if (!t.length) return;
         const mail = useMail.getState();
@@ -324,23 +347,28 @@ export function MailView({ mailboxId, threadId, search }: { mailboxId?: string;
         afterAction(true);
       },
       read: async (read: boolean, rows?: Id[]) => {
+        if (refused(false)) return;
         const t = await targetIds(rows);
         if (t.length) await useMail.getState().markRead(t, read);
         useMail.getState().clearSelection();
       },
       star: async (on: boolean, rows?: Id[]) => {
+        if (refused(false)) return;
         const t = await targetIds(rows);
         if (t.length) await useMail.getState().star(t, on);
       },
       move: async (rows?: Id[]) => {
+        if (refused(false)) return;
         const t = await targetIds(rows);
         if (t.length) setMovePicker({ ids: t });
       },
       label: async (rows: Id[] | undefined, anchor: { x: number; y: number }) => {
+        if (refused(false)) return;
         const t = await targetIds(rows);
         if (t.length) setLabelPicker({ ids: t, anchor });
       },
       moveTo: async (ids: Id[], mailboxId: Id) => {
+        if (refused(false)) return;
         await useMail.getState().move(ids, mailboxId);
         afterAction(true);
       },

web/src/views/mail/MessageView.tsx

@@ -35,7 +35,7 @@ import type { ListActions } from "./MessageList";
 import { InviteCard } from "./InviteCard";
 import { VCardCard } from "./VCardCard";
 import { AddressList, useAddressMenu } from "./AddressMenu";
-import { useSession } from "@/store/session";
+import { useSession, useViewingDelegation } from "@/store/session";
 import { useScheduled } from "@/store/scheduled";
 import { formatScheduleTime } from "@/lib/schedule";
 import { mdnDecision, refusalText } from "@/lib/mdn";
@@ -134,6 +134,8 @@ export const MessageView = memo(function MessageView({ email: e, expanded, wasUn
   const imageProxy = useSession((s) => s.session?.ihasmail?.imageProxy ?? true);
   const scheduled = useScheduled((s) => s.pending[e.id]);
   const receipt = useMemo(() => mdnDecision(e), [e]);
+  // inbuxa AL-4: a locked account sends no read receipts, not even by a delegate
+  const lockedInView = useViewingDelegation() !== null;
   const [receiptDone, setReceiptDone] = useState<"sending" | "dismissed" | null>(null);
   const cancelScheduled = useScheduled((s) => s.cancel);
 
@@ -384,7 +386,7 @@ export const MessageView = memo(function MessageView({ email: e, expanded, wasUn
               {receiptRequested && <><dt>{translate("Receipt")}</dt><dd>{receipt.offer ? translate("Requested, to {address}. Never sent automatically.", { address: receipt.to!.email }) : translate(refusalText(receipt.refusal!))}</dd></>}
             </dl>
           )}
-          {receipt.offer && settings.readReceiptPolicy !== "never" && receiptDone !== "dismissed" && (
+          {receipt.offer && settings.readReceiptPolicy !== "never" && receiptDone !== "dismissed" && !lockedInView && (
             <div className="receipt-banner" style={{ margin: "0 16px 8px" }}>
               <CheckCheck size={16} />
               <span className="grow">

web/src/views/mail/ThreadView.tsx

@@ -1,4 +1,5 @@
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
+import { useViewingDelegation } from "@/store/session";
 import { AlertOctagon, Archive, ArrowLeft, ChevronDown, ChevronUp, FolderInput, Forward, Mail, MailOpen, MailPlus, MoreVertical, Printer, Reply, ReplyAll, ShieldCheck, Star, Tag, Trash2, Download , Paperclip} from "lucide-react";
 import { useMail } from "@/store/mail";
 import { visibleMessages } from "@/lib/openMessage";
@@ -131,8 +132,11 @@ export function ThreadView({ threadId, mailboxId, onBack, actions, onNavigate, h
   );
 
   // Mark as read after delay
+  // inbuxa AL-6: never in a locked account handed over to read: reading it
+  // changes nothing there, not even $seen
+  const readOnly = useViewingDelegation()?.access === "read";
   useEffect(() => {
-    if (!messages.length) return;
+    if (!messages.length || readOnly) return;
     const unread = messages.filter((e) => !e.keywords.$seen && isExpanded(e)).map((e) => e.id);
     if (!unread.length || settings.markReadDelay < 0) return;
     if (markTimer.current) window.clearTimeout(markTimer.current);
@@ -141,7 +145,7 @@ export function ThreadView({ threadId, mailboxId, onBack, actions, onNavigate, h
       if (markTimer.current) window.clearTimeout(markTimer.current);
     };
     // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [messages.map((m) => m.id + (m.keywords.$seen ? "1" : "0")).join(","), settings.markReadDelay]);
+  }, [messages.map((m) => m.id + (m.keywords.$seen ? "1" : "0")).join(","), settings.markReadDelay, readOnly]);
 
   /*
    * Open on the first unread message rather than the newest one (#87).