]+src=["']?https?:|url\(\s*["']?https?:/i.test(html || '');
// ---- unread badge and Home card
async function mailPoll() {
if (!(allowed('mail') && cfg.mail)) return;
try { const s = await jfetch('/api/mail/status'); mail.st = s; const n = s.connected && s.unread ? s.unread : 0; if (n !== mailUnread) { mailUnread = n; renderNav(); } } catch {}
}
async function renderMailCard(el) {
if (!el) return;
try {
const s = mail.st || await jfetch('/api/mail/status'); mail.st = s;
if (!s.connected || !document.body.contains(el)) return;
const r = await jfetch('/api/mail/messages?folder=inbox'); if (!document.body.contains(el)) return;
const top = r.items.filter(m => !m.read).slice(0, 3);
el.innerHTML = `Mail${s.unread ? ' · ' + s.unread + ' unread' : ''} `;
} catch {}
}
function mailSettings() {
const box = $('#mailst'); if (!box) return;
jfetch('/api/mail/status').then(s => {
if (!$('#mailst')) return;
box.innerHTML = s.connected
? `Outlook.com ${esc(s.address || 'Connected')} Disconnect
`
: `Outlook.com ${s.expired ? 'Microsoft signed you out. ' : ''}Not connected Connect Could not check
'; });
}
// ---- the tab
async function viewMail(args = []) {
const v = $('#view');
if (!cfg.mail) { v.innerHTML = 'Mail Mail is not set up on this server. An admin can switch it on (see the README, Mail).
Mail
Read and send mail from your Outlook.com account right here. You sign in on Microsoft's own page; NE Hub never sees your password and only keeps a sign-in token on your server (encrypted).
${st.expired ? '
Microsoft signed you out of mail. Connect again to continue.
' : ''}
${icon('mail')}Connect Outlook.com
Personal Outlook.com, Hotmail and Live accounts only.
${fl.map(f => `${esc(f.name)}${f.unread ? ' (' + f.unread + ')' : ''} `).join('')}
${icon('refresh')} ${icon('edit')}New
`;
$('#mfsel').onchange = e => { mail.q = ''; location.hash = '#/mail/f/' + encodeURIComponent(e.target.value); };
$('#mnew').onclick = () => mailCompose();
$('#mrf').onclick = () => { mailLoadList(true); jfetch('/api/mail/folders').then(f => { mail.folders = f; mailPoll(); }).catch(() => {}); };
let t; $('#mq').oninput = e => { clearTimeout(t); t = setTimeout(() => { mail.q = e.target.value.trim(); mailLoadList(true); }, 400); };
}
async function mailLoadList(reset) {
if (reset) { mail.items = []; mail.next = 0; mail.more = false; }
const rows = $('#mrows'); if (rows && reset) rows.innerHTML = 'Loading…
';
try {
const r = await jfetch(`/api/mail/messages?folder=${encodeURIComponent(mail.folder)}&skip=${mail.next}${mail.q ? '&q=' + encodeURIComponent(mail.q) : ''}`);
if (!$('#mrows')) return;
mail.items = mail.items.concat(r.items); mail.more = r.more; mail.next = r.next;
mailDrawList();
} catch (e) { const el = $('#mrows'); if (el) el.innerHTML = `${esc(e.message)}
`; if (/Connect again/.test(e.message)) { mail.st = null; setTimeout(route, 1200); } }
}
function mailDrawList() {
const rows = $('#mrows'); if (!rows) return;
const sel = (location.hash.match(/^#\/mail\/m\/([^/]+)/) || [])[1];
rows.innerHTML = mail.items.length ? mail.items.map(m => `
${esc(mailFrom(m.from))} ${esc(m.subject)} ${esc(m.preview)} ${esc(mailWhen(m.date))} ${m.flagged ? icon('check') : ''}${m.attach ? icon('clip') : ''} `).join('') : `${mail.q ? 'Nothing matches.' : 'No messages here.'}
`;
const more = $('#mmore'); more.innerHTML = mail.more ? 'Load more
' : '';
if ($('#mmb')) $('#mmb').onclick = () => mailLoadList(false);
}
async function mailOpen(id) {
const rd = $('#mread'); if (rd) rd.innerHTML = 'Opening…
';
mail.images = false;
try {
const m = await jfetch('/api/mail/message?id=' + encodeURIComponent(id));
if (!(location.hash.startsWith('#/mail/m/'))) return;
mail.msg = m; mailDrawReader(); mailDrawList();
if (!m.read) { // opening a message marks it read
jfetch('/api/mail/update', { method: 'POST', body: JSON.stringify({ id, read: true }) }).then(() => {
const it = mail.items.find(x => x.id === id); if (it) it.read = true; m.read = true; mailDrawList();
mailUnread = Math.max(0, mailUnread - 1); renderNav(); jfetch('/api/mail/folders').then(f => { mail.folders = f; }).catch(() => {});
}).catch(() => {});
}
} catch (e) { if ($('#mread')) $('#mread').innerHTML = `${esc(e.message)}
`; }
}
function mailDrawReader() {
const rd = $('#mread'); if (!rd) return;
const m = mail.msg;
if (!m) { rd.innerHTML = 'Choose a message to read it.
'; return; }
const addr = l => l.map(a => esc(a.name ? `${a.name} <${a.address}>` : a.address)).join(', ');
const remote = mailHasRemote(m.html) && !mail.images;
rd.innerHTML = `${icon('back')}${esc(mailFolderName(mail.folder))}
${esc(m.subject)}
${esc(mailFrom(m.from))} ${esc(m.from.address)}
To ${addr(m.to) || 'me'}${m.cc.length ? ' · Cc ' + addr(m.cc) : ''} · ${esc(new Date(m.date).toLocaleString([], { dateStyle: 'medium', timeStyle: 'short' }))}
Reply Reply all Forward
Archive Mark unread ${m.flagged ? 'Unflag' : 'Flag'} Delete
${m.attachments.length ? `
` : ''}
${remote ? '
Pictures are hidden to protect your privacy. Show pictures
' : ''}