v1.9.0 - Fullscreen Email & Pro Split-Screen, Mobile Swipe Actions, and Configurable List Ordering

[rathlinus]

1.9.0 (2026-08-25)

Thank you for your donations:

• You? Become a sponsor!

One-time

• Anonymous
• @elsbrock
• @getpankajyadav

Monthly

• @felixzieger
• @pr0ton11
• @zeddD1abl0
• @fpauser
• @proxforge
• @spss20
• @elgringoYan
• @pauladams8
• @djpriest
• @umakers
• @zplizzi
• @jeremiah
• @Theoretisch1337
• @svandive
• @HiltMundell

Features

• Mail: Fullscreen email view in the standard interface
• Mail: Drag a mail onto a new browser tab to open it fullscreen
• Mail: Configurable message-list ordering ([Feature]: Configurable message-list ordering (multi-level sort, e.g. unread first) #718)
• Mail: Search suggestions with recent searches and contact autocomplete ([Feature]: search suggestions / contact autocomplete in search bar #845)
• Mail: Render plain-text emails in the app font by default, with a monospace option ([Feature]: set default font for text emails #830)
• Mail: Pull-to-refresh indicator while dragging the list down ([Feature]: iOS PWA, show refresh spinner/prompt when pulling down #826)
• Mail: Redesigned unread favicon badge — a compact keyline badge
• Mobile: Swipe message rows left or right for quick actions — archive, delete, toggle read, toggle star, or spam, configurable per direction, RTL-aware
• Pro: Reworked split-screen shell with per-pane tab strips, drag & drop between panes, and pane-scoped overlays
• Pro: Folder tabs via drag & drop
• Pro: The address bar follows the focused tab, and deep links are delivered live to already-mounted surfaces
• Composer: Real byte progress for attachment uploads, stock and plugin-offloaded; cancel now aborts the transfer itself
• Calendar: Moving an event's start moves the end with it, keeping the event's length
• Contacts: Trusted Senders address book enabled by default on contacts-capable accounts
• Settings: Custom time zone setting that overrides browser detection ([Feature]: Custom Timezone Setting per User #755)
• Login: Server dropdown on the OAuth-only login screen ([Bug]: Multi-Server with OAuth Only dosen't work #799)
• Push: New-mail notifications grouped per account with a "+N more messages" line instead of one notification per message
• Push: Per-device revoke for push subscriptions ([Bug]: Disabling/re-enabling push re-uses the existing server subscription — permission changes and stale device registrations never propagate #841)
• Admin: Configurable Stalwart admin access to the dashboard ([Bug]: Stalwart admin users granted admin access to Bulwark #870)
• Admin: Push relay picked from an admin-defined list instead of a free URL field
• Branding: OpenGraph/Twitter link previews with a generated card image
• Performance: Halved time-to-mail-list — lazy locale catalogs, code-split viewer and composer, shorter auth waterfall, boot snapshot
• i18n: Mongolian translation
• Plugins: jmap.uploadBlob
• Plugins: onBeforeComposeOpenToReply and sibling hooks let a plugin edit an email before it populates the composer for reply or forward
• Plugins: getPublicKeyFromWKD
• Plugins: Privileged plugins can fetch a byte range of a blob
• Plugins: progressFileId on api.http.post so an offloaded upload reports byte progress to the composer chip
• Plugins: isActive on AccountResponse
• Plugins: Label settings and label reordering exposed to extensions
• Plugins: JMAP keyword helpers and gateway keywords exposed to extensions
• Plugins: Mailbox refresh hook
• Dev: AddressBook/set in the dev mock JMAP server

Changes

• Plugins: The PRF getOrCreate flow is split into separate get and create steps for better authenticator compatibility (fix(plugins) : refactor PRF workflow into two for better compatibility #851)
• Dependencies: Next 16.3.3, pdfjs-dist 6.2.108, DOMPurify 3.4.14 (npm audit)

Fixes

• Send: Route scheduled sends to the account that owns the submission — mail scheduled from a shared address can now be listed, cancelled, and rescheduled instead of going out silently (fix: route scheduled sends to the account that owns the submission #874)
• Send: Split recipient lists whose angle brackets never close without dropping recipients
• Send: generateMessageId crashed on insecure origins (crypto.randomUUID undefined), failing the send after the draft save
• Composer: Keep attachments when re-opening a draft, also in the Pro draft tab, and destroy old draft versions only after a successful create or send ([Bug]: Re-opening a draft drops its attachments — next save/send silently strips them from the server copy (data loss) #849)
• Composer: Keep the signature in saved drafts and embed it into re-opened drafts ([Bug]: Re-opened drafts silently lose the signature — compose-mode assumption in signatureAlreadyInBody #848)
• Composer: Double-click unlocks the embedded signature for editing
• Composer: Keep already written text when applying a template ([Bug]: Mail template usage on new mail replaces already written text #540)
• Composer: Preselect the shared folder's identity for new messages
• Composer: Namespace all accounts consistently in the Pro composer identity list
• Composer: Opening a mailto: link runs the unsaved-draft dialog instead of replacing the draft outright
• Composer: Keep the fresh-compose tab title clear of the selected email subject
• Composer: Clear the viewer when sending destroys the displayed draft
• Reply: Honour an external Reply-To even on a self-sent message
• Mail: Flip $junk/$notjunk keywords on spam and not-spam ([Bug]: “Not spam” moves the message but leaves its JMAP $junk keyword set #850)
• Mail: Remove keywords with null rather than false in Email/set, per RFC 8620
• Mail: Escape the JSON Pointer in keyword patches so nested tags like work/clients patch the right keyword
• Mail: Route keyword writes — tags, pins, flags — to the selected shared account so they persist
• Mail: Route shared-folder management to the owner account, scoped to one server
• Mail: Open the right conversations in a shared mailbox ([Bug]: Conversation view opens an unrelated email from another account in shared mailbox #814)
• Mail: Route multi-account email lookups and invitation parsing by source account ([Bug]: Multi-account email lookups are keyed by bare email id — colliding JMAP ids across accounts render the wrong mail in the viewer #847), and parse invitations in directly viewed shared folders against the folder owner ([Bug]: Calendar invitation banner parses against the active account — invitations in any other account fail with "invitation could not be read" #867)
• Mail: Folders containing a system folder name no longer disappear from the sidebar ([Bug]: folders containing strings like "inbox" or "archive" disappear from the sidebar #771)
• Mail: Folder drag & drop can move folders into other parents ([Bug]: Drag & drop causes folders to disappear or become incorrectly reordered #855)
• Mail: Keep the folder tree when a refresh burst hits maxConcurrentRequests ([Bug]: Dragging an email to another folder intermittently clears the sidebar folder tree #780)
• Mail: Stop All-Mail and cross-account views emptying on delete, star, or mark-read ([Bug]: Unified / All Mail list empties after actions — fetchEmails sends virtual __cross_* IDs as inMailbox #791)
• Mail: Keep just-read or unstarred mail in the open Unread/Starred view
• Mail: Search folder filter defaults to all folders and persists ([Bug]: Advanced Search "Ordner" filter defaults to current folder instead of "All folders", resets every time #788)
• Mail: Fixed-width read/unread toolbar button so buttons don't jump when a message opens ([Bug]: buttons at top of email (archive, delete, move, tag) jump around when an email is opened #864)
• Mail: Transparent hover-action background on tagged rows
• Mail: Enforce the external media preference on plugin-rendered bodies ([Bug]: User's preference for external media loading doesn't get enforced when plugins hook into render pipeline #797)
• Mail: Apply the data: URI allowlist to media tags and srcset candidates too
• Mail: Make label reordering atomic
• Mail: Pass PDF bytes to pdf.js instead of fetching the blob: URL that CSP connect-src blocks (pdf.js preview can never load: CSP connect-src lacks blob: #871)
• Mail: Include email templates in cross-device settings sync ([Bug]: templates are not synced between devices #825)
• Mail: Toast store crashed on insecure origins, breaking every post-action acknowledgement
• Mobile: Reach the tag and move submenus in the more-actions menu ([Bug]: Accessibility regression - no longer possible to trigger sub menus in the more actions menu #779)
• Mobile: iOS Safari no longer zooms the viewport on every input focus ([Bug]: iOS Safari auto-zooms on every input focus — no font-size setting reaches the 16px threshold #838)
• Calendar: Click and double-click create events at the clicked slot instead of near the current time
• Calendar: Save and Cancel are available when an event is created, and the toolbar no longer overflows in edit mode
• Calendar: Edit a single recurring occurrence via a one-shot override patch
• Calendar: Hide tasks-only calendars from the event calendar
• Calendar: Exclude subscription and read-only calendars from event creation ([Bug]: iCal subscriptions are not marked as read-only #762)
• Calendar: Rights-first event editability, including alias organizers
• Calendar: Pin supported-calendar-component-set on created calendars ([Bug]: created calendars don't have a supported-calendar-component-set #760)
• Calendar: Gate first-touch calendar and contacts requests to stop duplicate default calendars ([Bug]: Duplicated personal calendar #907)
• Calendar/Contacts: Namespace all accounts consistently on switch, so multi-account address-book aggregation and calendar selection survive an account switch
• Contacts: Import vCard dates as RFC 9553 PartialDate and map common X- extensions ([Bug]: Contact vcf-import - Wrong import order of "N" (structured name) #224)
• Files: Decode percent-encoded FileNode names from WebDAV-created nodes ([Bug]: File browser displays raw percent-encoded filenames instead of decoding href segments #869)
• Files: Reset the account-scoped Files drive on every account switch
• Accounts: Refresh the account display name from the Stalwart principal on login, restore, and switch ([Bug]: Display name not updated when underlying Stalwart user is changed #900)
• Auth: Reuse the cached access token on session restore ([Bug]: OAuth session destroyed on page reload with IdPs that restrict early refresh-token use #552)
• Auth: Refresh TOTP-minted tokens with the default client id when no OAuth client is configured ([Bug]: "Remember me" fails when using TOTP #873)
• Auth: Store the session cookie for relative JMAP server URLs
• Security: Close IPv6 transition-address and redirect bypasses in the endpoint guard
• Security: Add embedded custom app origins to CSP frame-src ([Bug]: Custom Apps "Embedded" mode does not add app URL to CSP frame-src #787)
• Security: Per-account isolation for encryption at rest
• JMAP: Cap live SSE streams per tab and keep exactly one stream per client, so many logins can't starve JMAP requests ([Bug]: Sending emails does not work properly in iOS web app context #702)
• JMAP: Check the specific capability a request declares (principals:owner), not a broader one
• JMAP: Resolve relative session URLs without corrupting URI templates
• Settings: Merge per-account maps on server load, fixing the compose identity switch
• Settings: Leaving the Pro interface returns to the surface in use and keeps the settings scroll position
• UI: Position portalled popovers before first paint to stop the layout flash on open
• Push: Recreate the push subscription on re-register ([Bug]: Disabling/re-enabling push re-uses the existing server subscription — permission changes and stale device registrations never propagate #841)
• i18n: Key parity across all 24 locales, Catalan and Mongolian registered in the client provider, and scoped translation hooks instead of relative namespace paths
• Docs: Lengthen the example SESSION_SECRET so it meets the minimum length

---

This discussion was created from the release v1.9.0 - Fullscreen Email & Pro Split-Screen, Mobile Swipe Actions, and Configurable List Ordering.