refactor: centralize mail state feature checks

* feat: add user send mail client

* fix: align user mail navigation

* fix: shorten address credential action

* test: cover user mail ownership boundaries

* fix: address user mail review feedback

* fix: disambiguate user mail e2e heading

* fix: minimize shared sent box changes

* refactor: isolate user send mail page

* refactor: reuse bound address lookup

* fix: clarify user sent box naming

* refactor: decouple user send API from roles

* fix: align user send mail behavior

* fix: align user send role and rate limits

* test: isolate user send rate limits

* test: initialize rate limit worker database

* refactor: simplify user send rate limit

* refactor: inline user send rate limit path

* refactor: simplify user send limiter key

* refactor: keep existing rate limit behavior

* style: simplify user send rate limit condition

* style: group user send rate limit condition

* fix: bind user role token to account

* fix: keep user sender selection available

.agents/skills

@@ -0,0 +1 @@
+../.claude/skills

.claude/skills/cf-temp-mail-agent-mail

@@ -0,0 +1 @@
+../../skills/cf-temp-mail-agent-mail

.claude/skills/cf-temp-mail-release-notify/.gitignore

@@ -0,0 +1,3 @@
+config.json
+__pycache__/
+*.py[cod]

.claude/skills/cf-temp-mail-release-notify/SKILL.md

@@ -0,0 +1,30 @@
+---
+name: cf-temp-mail-release-notify
+description: Announce a cloudflare_temp_email GitHub release to the project's Telegram channel topic. Use when the user asks to notify/announce/broadcast a release to Telegram, push release notes to the channel, or send a release to the topic after running cf-temp-mail-release. Posts bilingual (中文 + English) changelog excerpts plus the release URL.
+---
+
+# Release Notify Workflow
+
+Post an existing GitHub release's notes to the project's Telegram channel topic.
+
+## Prerequisites
+
+- `config.json` exists in this skill directory with `token`, `chat_id`, `message_thread_id` (gitignored, never commit).
+- `gh` CLI authenticated.
+- `uv` installed (`brew install uv` / `curl -LsSf https://astral.sh/uv/install.sh | sh`). Script uses PEP 723 inline metadata; `uv` auto-installs deps.
+
+## Steps
+
+1. **Resolve tag**: If the user didn't give one, use the latest release: `gh release list --limit 1 --json tagName --jq '.[0].tagName'`.
+2. **Run the script**:
+   ```bash
+   uv run scripts/send_release_to_telegram.py vX.Y.Z
+   ```
+   The script fetches the release via `gh`, splits the body into zh/en sections, strips PR collapsibles and the cache-clearing link, truncates to fit Telegram's 4096-char limit, and posts to the configured `chat_id` + `message_thread_id`.
+3. **Verify**: The script prints `ok: message_id=<id>` on success. Report the message id.
+
+## Notes
+
+- Message uses `parse_mode: MarkdownV2`; all content is escaped (via `md_escape`) to avoid parse errors on reserved chars `_ * [ ] ( ) ~ \` > # + - = | { } . !`.
+- Only the zh/en changelog sections are posted. PRs list and the cache-clearing discussion link are stripped to keep the message concise.
+- For very long release bodies, zh and en are each truncated to ~half of the 3500-char body budget.

.claude/skills/cf-temp-mail-release-notify/config.example.json

@@ -0,0 +1,5 @@
+{
+  "token": "<telegram bot token>",
+  "chat_id": "@cloudflare_temp_email",
+  "message_thread_id": 82
+}

.claude/skills/cf-temp-mail-release-notify/scripts/send_release_to_telegram.py

@@ -0,0 +1,221 @@
+#!/usr/bin/env -S uv run --script
+# /// script
+# requires-python = ">=3.10"
+# dependencies = ["httpx>=0.27"]
+# ///
+"""Send a cloudflare_temp_email release announcement to a Telegram channel topic.
+
+Usage:
+    uv run scripts/send_release_to_telegram.py <tag>
+
+Reads skill config from ../config.json (relative to this script):
+    {
+      "token": "...",
+      "chat_id": "@channel_or_-100...",
+      "message_thread_id": 82
+    }
+"""
+
+from __future__ import annotations
+
+import json
+import re
+import subprocess
+import sys
+from pathlib import Path
+
+import httpx
+
+TG_API = "https://api.telegram.org"
+TG_HARD_LIMIT = 4096
+BODY_BUDGET = 3500  # leave room for header + footer
+EN_MARKER_RE = re.compile(r"<details>\s*<summary>English</summary>", re.IGNORECASE)
+MDV2_ESCAPE_RE = re.compile(r"([_*\[\]()~`>#+\-=|{}.!\\])")
+MDV2_CODE_ESCAPE_RE = re.compile(r"([`\\])")
+MD_INLINE_RE = re.compile(r"\*\*(.+?)\*\*|`([^`]+)`")
+MD_HEADING_RE = re.compile(r"^(#{1,6})\s+(.*)$")
+
+
+def die(msg: str) -> None:
+    print(f"error: {msg}", file=sys.stderr)
+    sys.exit(1)
+
+
+def md_escape(text: str) -> str:
+    """Escape all MarkdownV2 reserved characters."""
+    return MDV2_ESCAPE_RE.sub(r"\\\1", text)
+
+
+def md_render(text: str) -> str:
+    """Convert source Markdown (changelog) to Telegram MarkdownV2.
+
+    Handles:
+      - `### Heading`     -> bold line
+      - `**bold**`        -> `*bold*`
+      - `` `code` ``      -> `` `code` `` (only ` and \\ escaped inside)
+      - everything else:   literal text with MDV2 specials escaped
+    """
+    out: list[str] = []
+    for raw in text.splitlines():
+        m = MD_HEADING_RE.match(raw)
+        if m:
+            out.append(f"*{md_escape(m.group(2).strip())}*")
+            continue
+        segments: list[str] = []
+        last = 0
+        for im in MD_INLINE_RE.finditer(raw):
+            segments.append(md_escape(raw[last:im.start()]))
+            if im.group(1) is not None:
+                segments.append(f"*{md_escape(im.group(1))}*")
+            else:
+                segments.append(f"`{MDV2_CODE_ESCAPE_RE.sub(r'\\\\\1', im.group(2))}`")
+            last = im.end()
+        segments.append(md_escape(raw[last:]))
+        out.append("".join(segments))
+    return "\n".join(out)
+
+
+def load_config() -> dict:
+    cfg_path = Path(__file__).resolve().parent.parent / "config.json"
+    if not cfg_path.exists():
+        die(f"config missing: {cfg_path}")
+    try:
+        cfg = json.loads(cfg_path.read_text())
+    except json.JSONDecodeError as e:
+        die(f"config.json is not valid JSON: {e}")
+    for k in ("token", "chat_id", "message_thread_id"):
+        if k not in cfg:
+            die(f"config.json missing key: {k}")
+    return cfg
+
+
+def fetch_release(tag: str) -> dict:
+    out = subprocess.run(
+        ["gh", "release", "view", tag, "--json", "tagName,name,body,url"],
+        capture_output=True, text=True, check=False,
+    )
+    if out.returncode != 0:
+        die(f"gh release view failed: {out.stderr.strip()}")
+    return json.loads(out.stdout)
+
+
+def extract_sections(body: str) -> tuple[str, str]:
+    m = EN_MARKER_RE.search(body)
+    if not m:
+        return body.strip(), ""
+    zh = body[: m.start()]
+    rest = body[m.end():]
+    close = rest.find("</details>")
+    if close < 0:
+        die("malformed release body: missing </details> after English marker")
+    en = rest[:close]
+    return zh.strip(), en.strip()
+
+
+def strip_noise(text: str) -> str:
+    """Drop PR collapsibles, cache-clearing link, and Full Changelog line."""
+    lines = text.splitlines()
+    out: list[str] = []
+    depth = 0
+    for line in lines:
+        stripped = line.strip()
+        if stripped.startswith("<details>"):
+            depth += 1
+            continue
+        if stripped.startswith("</details>"):
+            depth = max(0, depth - 1)
+            continue
+        if depth > 0:
+            continue
+        if "discussions/487" in stripped:
+            continue
+        if stripped.startswith("**Full Changelog**"):
+            continue
+        out.append(line)
+    result: list[str] = []
+    blanks = 0
+    for line in out:
+        if not line.strip():
+            blanks += 1
+            if blanks <= 1:
+                result.append(line)
+        else:
+            blanks = 0
+            result.append(line)
+    return "\n".join(result).strip()
+
+
+def truncate(text: str, limit: int) -> str:
+    if len(text) <= limit:
+        return text
+    return text[: limit - 3].rstrip() + "..."
+
+
+def _budget(zh: str, en: str, total: int) -> tuple[int, int]:
+    """Split budget between zh and en based on actual length. Short side keeps full, long side absorbs the rest."""
+    if not en:
+        return total, 0
+    if len(zh) + len(en) <= total:
+        return len(zh), len(en)
+    half = total // 2
+    if len(zh) <= half:
+        return len(zh), total - len(zh)
+    if len(en) <= half:
+        return total - len(en), len(en)
+    return half, total - half
+
+
+def build_message(tag: str, name: str, url: str, body: str) -> str:
+    zh, en = extract_sections(body)
+    zh = strip_noise(zh)
+    en = strip_noise(en)
+
+    zh_limit, en_limit = _budget(zh, en, BODY_BUDGET)
+    zh = truncate(zh, zh_limit)
+    en = truncate(en, en_limit) if en else ""
+
+    title = md_escape(name or tag)
+    header = f"🚀 *{title} 已发布 / Released*"
+    parts = [header, "", md_render(zh)]
+    if en:
+        parts.extend(["", "__English__", "", md_render(en)])
+    parts.extend(["", f"🔗 {md_escape(url)}"])
+    return "\n".join(parts)
+
+
+def send(cfg: dict, text: str) -> None:
+    payload = {
+        "chat_id": cfg["chat_id"],
+        "message_thread_id": cfg["message_thread_id"],
+        "text": text,
+        "parse_mode": "MarkdownV2",
+        "disable_web_page_preview": False,
+    }
+    try:
+        resp = httpx.post(
+            f"{TG_API}/bot{cfg['token']}/sendMessage",
+            json=payload,
+            timeout=30,
+        )
+    except httpx.HTTPError as e:
+        die(f"Telegram network error: {e}")
+    try:
+        data = resp.json()
+    except ValueError:
+        die(f"Telegram API returned non-JSON ({resp.status_code}): {resp.text[:200]!r}")
+    if resp.status_code != 200 or not data.get("ok"):
+        die(f"Telegram API rejected ({resp.status_code}): {data}")
+    print(f"ok: message_id={data['result'].get('message_id')}")
+
+
+def main() -> None:
+    if len(sys.argv) != 2:
+        die("usage: send_release_to_telegram.py <tag>")
+    cfg = load_config()
+    rel = fetch_release(sys.argv[1])
+    text = build_message(rel["tagName"], rel.get("name", ""), rel["url"], rel.get("body", ""))
+    send(cfg, text)
+
+
+if __name__ == "__main__":
+    main()

.claude/skills/cf-temp-mail-release/SKILL.md

@@ -0,0 +1,28 @@
+---
+name: cf-temp-mail-release
+description: Create a GitHub release for cloudflare_temp_email project. Use when the user asks to create a release, publish a version, tag a release, or make a new release. Reads CHANGELOG.md for release content, collects merged PRs via `gh` CLI, and creates a properly formatted GitHub release.
+---
+
+# Release Workflow
+
+## Steps
+
+1. **Read version**: Get current version from `worker/package.json` (`"version"` field) and the latest release tag via `gh release list --limit 1`.
+2. **Read CHANGELOG**: Read `CHANGELOG.md` for the current version section (e.g. `## v1.4.0(main)`). Verify content matches `CHANGELOG_EN.md`. If entries are missing from either file, notify the user.
+3. **Collect PRs**: Get the last release tag timestamp, then filter merged PRs by time:
+   ```bash
+   TAG="$(gh release list --limit 1 --json tagName --jq '.[0].tagName')"
+   SINCE="$(git show -s --format=%cI "$TAG")"
+   gh pr list --state merged --search "is:pr is:merged merged:>$SINCE base:main" --json number,title,author --limit 200
+   ```
+   Sort by PR number ascending.
+4. **Compose release body**: Follow the template in [references/release-template.md](references/release-template.md). Key rules:
+   - Write release body in **bilingual format**: Chinese sections first (from `CHANGELOG.md`), then wrap the English sections (from `CHANGELOG_EN.md`) in `<details><summary>English</summary>...</details>`.
+   - Copy changelog sections verbatim from both files. Omit empty sections.
+   - Wrap PRs list in `<details><summary>PRs</summary>...</details>`.
+   - Always include the cache-clearing discussion link.
+   - End with `**Full Changelog**` comparison link.
+5. **Create release**:
+   - Write body to a temp file (e.g. `/tmp/release-notes.md`)
+   - Run: `gh release create vX.Y.Z --title "vX.Y.Z" --notes-file /tmp/release-notes.md --target main`
+6. **Verify**: Confirm the release URL and ask the user to review.

.claude/skills/cf-temp-mail-release/references/release-template.md

@@ -0,0 +1,42 @@
+# Release Notes Template
+
+Release notes body 使用以下格式，内容从 CHANGELOG.md 的对应版本段落提取：
+
+```markdown
+## What's Changed
+
+### Features
+
+- feat: |模块| 描述
+
+### Bug Fixes
+
+- fix: |模块| 描述
+
+### Testing
+
+- test: |模块| 描述
+
+### Improvements
+
+- style/refactor/perf/docs: |模块| 描述
+
+### [更新或者部署网页不生效请如图勾选清理缓存](https://github.com/dreamhunter2333/cloudflare_temp_email/discussions/487)
+
+<details>
+<summary>PRs</summary>
+
+* PR title by @author in https://github.com/dreamhunter2333/cloudflare_temp_email/pull/NUMBER
+
+</details>
+
+**Full Changelog**: https://github.com/dreamhunter2333/cloudflare_temp_email/compare/vOLD...vNEW
+```
+
+## Notes
+
+- Sections without entries should be omitted
+- PRs section uses `<details>` to collapse by default
+- PRs are sorted by PR number ascending
+- The cache clearing discussion link is always included
+- Release title and tag use format `vX.Y.Z`

.claude/skills/cf-temp-mail-upgrade-dependencies/SKILL.md

@@ -0,0 +1,46 @@
+---
+name: cf-temp-mail-upgrade-dependencies
+description: Upgrade npm dependencies across all sub-packages of the project. Use when the user asks to upgrade/update dependencies, bump deps, refresh lockfiles, or update wrangler. Runs pnpm upgrades on frontend/, worker/, pages/, and vitepress-docs/, plus npm upgrades on e2e/.
+---
+
+# Upgrade Dependencies
+
+Upgrade npm dependencies for the cloudflare_temp_email sub-packages.
+
+## How to run
+
+Execute the project-root script:
+
+```bash
+bash scripts/update-dependencies.sh
+```
+
+The script runs the following in order:
+
+| Directory | Commands |
+|-----------|----------|
+| `frontend/` | `pnpm up` + `pnpm add -D wrangler@latest` |
+| `worker/` | `pnpm up` + `pnpm add -D wrangler@latest` |
+| `pages/` | `pnpm up` + `pnpm add -D wrangler@latest` |
+| `vitepress-docs/` | `pnpm up --latest` + `pnpm add -D wrangler@latest` |
+| `e2e/` | `npx --yes npm-check-updates@23.0.0 --upgrade` + `npm install` + Playwright image validation |
+
+Note: `vitepress-docs/` and `e2e/` upgrade to the latest versions and may cross semver ranges; other packages upgrade within ranges only. `e2e/` uses npm because it has a `package-lock.json`.
+
+## Post-upgrade checklist
+
+1. Inspect `git diff` on `package.json`, `pnpm-lock.yaml`, and `package-lock.json` files for reasonable changes.
+2. Verify builds in each sub-package:
+   - `cd frontend && pnpm build`
+   - `cd worker && pnpm build && pnpm lint`
+   - `cd vitepress-docs && pnpm build`
+   - `cd e2e && npm test`
+3. If Playwright changed, keep `e2e/Dockerfile.e2e` on the matching Playwright image version.
+4. If wrangler had a major version bump, check `worker/wrangler.toml` for any required syntax changes.
+5. Commit with Conventional Commits format, e.g. `chore: upgrade dependencies`.
+
+## Do NOT
+
+- Do not manually `pnpm add` each package instead of running the script.
+- Do not run `pnpm deploy` locally — deployments go through GitHub Actions.
+- Do not update CHANGELOG for routine dep bumps unless the user explicitly requests it.

.claude/skills/cf-temp-mail-version-upgrade/SKILL.md

@@ -0,0 +1,65 @@
+---
+name: cf-temp-mail-version-upgrade
+description: Upgrade the project version number. Use when the user asks to bump the version, upgrade the version, or prepare a new release version. Supports major, minor, and patch upgrades.
+---
+
+# Version Upgrade
+
+Upgrade the version number of the cloudflare_temp_email project.
+
+## Files to modify
+
+1. `frontend/package.json` — `version` field
+2. `worker/package.json` — `version` field
+3. `worker/src/constants.ts` — `VERSION` constant (format: `VERSION: 'v' + '1.4.0'`)
+4. `pages/package.json` — `version` field
+5. `vitepress-docs/package.json` — `version` field
+6. `CHANGELOG.md` — add new version placeholder
+7. `CHANGELOG_EN.md` — add new version placeholder (English)
+
+## Upgrade workflow
+
+1. Read `frontend/package.json` to get the current version.
+2. Compute the new version based on the upgrade type:
+   - major: 1.3.0 → 2.0.0
+   - minor: 1.3.0 → 1.4.0
+   - patch: 1.3.0 → 1.3.1
+3. Update the `version` field in every `package.json` listed above.
+4. Update the `VERSION` constant in `worker/src/constants.ts`.
+5. Insert a new version placeholder at the top of `CHANGELOG.md`.
+6. Insert a new version placeholder at the top of `CHANGELOG_EN.md`.
+7. Rename the previous version heading in both changelogs from `## v{OLD_VERSION}(main)` to `## v{OLD_VERSION}` so only the new active development version keeps `(main)`.
+
+## CHANGELOG format
+
+In `CHANGELOG.md`, insert before the existing `## v{OLD_VERSION}(main)` line (i.e. right after the closing `</p>` of the language-switch link):
+
+```markdown
+## v{VERSION}(main)
+
+### Features
+
+### Bug Fixes
+
+### Improvements
+
+```
+
+After inserting the new placeholder, update the old heading:
+
+```diff
+-## v{OLD_VERSION}(main)
++## v{OLD_VERSION}
+```
+
+`CHANGELOG_EN.md` uses the same format and must receive the same old-heading update.
+
+## Commit message format
+
+```
+feat: upgrade version to v{VERSION}
+
+- Update version number to {VERSION} in all package.json files
+- Add v{VERSION} placeholder in CHANGELOG.md
+- Move (main) marker from v{OLD_VERSION} to v{VERSION}
+```

.claude/skills/version-upgrade/SKILL.md

@@ -1,54 +0,0 @@
----
-name: version-upgrade
-description: 升级项目版本号。当用户要求升级版本、更新版本号、发布新版本时使用此 skill。支持 major（主版本）、minor（次版本）、patch（补丁版本）三种升级方式。
----
-
-# Version Upgrade
-
-升级 cloudflare_temp_email 项目版本号。
-
-## 需要修改的文件
-
-1. `frontend/package.json` - version 字段
-2. `worker/package.json` - version 字段
-3. `worker/src/constants.ts` - VERSION 常量（格式：`VERSION: 'v' + '1.4.0'`）
-4. `pages/package.json` - version 字段
-5. `vitepress-docs/package.json` - version 字段
-6. `CHANGELOG.md` - 添加新版本占位符
-7. `CHANGELOG_EN.md` - 添加新版本占位符（英文）
-
-## 版本升级流程
-
-1. 读取 `frontend/package.json` 获取当前版本号
-2. 根据升级类型计算新版本号：
-   - major: 1.3.0 → 2.0.0
-   - minor: 1.3.0 → 1.4.0
-   - patch: 1.3.0 → 1.3.1
-3. 更新所有 package.json 文件中的 version 字段
-4. 在 CHANGELOG.md 顶部添加新版本占位符
-5. 在 CHANGELOG_EN.md 顶部添加新版本占位符
-
-## CHANGELOG 格式
-
-中文 (CHANGELOG.md) - 在 `## v{OLD_VERSION}(main)` 之前插入：
-```markdown
-## v{VERSION}(main)
-
-### Features
-
-### Bug Fixes
-
-### Improvements
-
-```
-
-英文 (CHANGELOG_EN.md) - 同样格式。
-
-## 提交信息格式
-
-```
-feat: upgrade version to v{VERSION}
-
-- Update version number to {VERSION} in all package.json files
-- Add v{VERSION} placeholder in CHANGELOG.md
-```

.github/config/mail-parser-wasm-worker.patch

@@ -1,16 +1,14 @@
 diff --git a/worker/src/common.ts b/worker/src/common.ts
-index bd9bcc9..e7e2748 100644
+index 9b758f0..e2150b5 100644
 --- a/worker/src/common.ts
 +++ b/worker/src/common.ts
-@@ -273,23 +273,23 @@ export const commonParseMail = async (parsedEmailContext: ParsedEmailContext): P
+@@ -469,29 +469,29 @@ export const commonParseMail = async (parsedEmailContext: ParsedEmailContext): P
      }
      const raw_mail = parsedEmailContext.rawEmail;
-     // TODO: WASM parse email
+     // NOTE: WASM parse email
 -    // try {
 -    //     const { parse_message_wrapper } = await import('mail-parser-wasm-worker');
-+    try {
-+        const { parse_message_wrapper } = await import('mail-parser-wasm-worker');
- 
+-
 -    //     const parsedEmail = parse_message_wrapper(raw_mail);
 -    //     parsedEmailContext.parsedEmail = {
 -    //         sender: parsedEmail.sender || "",
@@ -20,11 +18,20 @@ index bd9bcc9..e7e2748 100644
 -    //             (header) => ({ key: header.key, value: header.value })
 -    //         ) || [],
 -    //         html: parsedEmail.body_html || "",
+-    //         attachments: (parsedEmail.attachments || []).map(att => ({
+-    //             filename: att.filename || "attachment",
+-    //             mimeType: att.content_type || "application/octet-stream",
+-    //             content: att.content,
+-    //             disposition: "attachment",
+-    //         })),
 -    //     };
 -    //     return parsedEmailContext.parsedEmail;
 -    // } catch (e) {
 -    //     console.error("Failed use mail-parser-wasm-worker to parse email", e);
 -    // }
++    try {
++        const { parse_message_wrapper } = await import('mail-parser-wasm-worker');
++
 +        const parsedEmail = parse_message_wrapper(raw_mail);
 +        parsedEmailContext.parsedEmail = {
 +            sender: parsedEmail.sender || "",
@@ -34,6 +41,12 @@ index bd9bcc9..e7e2748 100644
 +                (header) => ({ key: header.key, value: header.value })
 +            ) || [],
 +            html: parsedEmail.body_html || "",
++            attachments: (parsedEmail.attachments || []).map(att => ({
++                filename: att.filename || "attachment",
++                mimeType: att.content_type || "application/octet-stream",
++                content: att.content,
++                disposition: "attachment",
++            })),
 +        };
 +        return parsedEmailContext.parsedEmail;
 +    } catch (e) {

.github/workflows/backend_deploy.yaml

@@ -16,24 +16,25 @@ jobs:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         id: pnpm-install
         with:
-          version: 8
+          version: 10
           run_install: false
 
       - name: Deploy Backend for ${{ github.ref_name }}
         run: |
           export use_worker_assets=${{ secrets.USE_WORKER_ASSETS }}
           export use_worker_assets_with_telegram=${{ secrets.USE_WORKER_ASSETS_WITH_TELEGRAM }}
+          
           if [ -n "$use_worker_assets" ]; then
             cd frontend/
             pnpm install --no-frozen-lockfile
@@ -49,8 +50,11 @@ jobs:
 
           export debug_mode=${{ secrets.DEBUG_MODE }}
           export use_mail_wasm_parser=${{ secrets.BACKEND_USE_MAIL_WASM_PARSER }}
+          
           cd worker/
-          echo '${{ secrets.BACKEND_TOML }}' > wrangler.toml
+          # ✅ 修复核心：使用环境变量写入，避免 Shell 解析特殊字符
+          printf '%s\n' "$WRANGLER_TOML_CONTENT" > wrangler.toml
+          
           pnpm install --no-frozen-lockfile
 
           if [ -n "$use_mail_wasm_parser" ]; then
@@ -63,14 +67,17 @@ jobs:
           if [ "$debug_mode" = "true" ]; then
             pnpm run deploy
           else
-            output=$(pnpm run deploy 2>&1)
-            if [ $? -ne 0 ]; then
-                code=$?
-                echo "Command failed with exit code $code"
-                exit $code
+            if pnpm run deploy >/dev/null 2>&1; then
+              echo "Deploy succeeded"
+            else
+              code=$?
+              echo "Command failed with exit code $code"
+              exit "$code"
             fi
           fi
           echo "Deployed for tag ${{ github.ref_name }}"
         env:
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          # ✅ 将 secret 映射到环境变量中
+          WRANGLER_TOML_CONTENT: ${{ secrets.BACKEND_TOML }}

.github/workflows/docs_deploy.yml

@@ -1,64 +1,56 @@
 name: Deploy Docs
 
 on:
-  push:
-    paths:
-      - "vitepress-docs/**"
-    tags:
-      - "*"
+  workflow_run:
+    workflows: ["Tag Build CI"]
+    types:
+      - completed
   workflow_dispatch:
 
 jobs:
   deploy:
     runs-on: ubuntu-latest
+    if: >
+      github.event_name == 'workflow_dispatch' ||
+      (github.event.workflow_run.conclusion == 'success' &&
+       startsWith(github.event.workflow_run.head_branch, 'v'))
     permissions:
       contents: write
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
         with:
           fetch-depth: 0
+          ref: ${{ github.event.workflow_run.head_sha || github.ref }}
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         id: pnpm-install
         with:
-          version: 8
+          version: 10
           run_install: false
 
-      - name: check github release done
-        run: |
-          for ((attempt=1; attempt<=10; attempt++)); do
-              if wget -q --spider "https://github.com/dreamhunter2333/cloudflare_temp_email/releases/latest/download/frontend.zip"; then
-                  echo "frontend.zip found."
-                  break
-              else
-                  if [ $attempt -eq 10 ]; then
-                      echo "Exceeded maximum retries. frontend.zip not found."
-                  else
-                      echo "frontend.zip not found. Retrying in 30 seconds..."
-                      sleep 30
-                  fi
-              fi
-          done
-
-      - name: Deploy Docs for ${{github.ref_name}}
-        run: |
-          cd vitepress-docs/
-          wget https://github.com/dreamhunter2333/cloudflare_temp_email/releases/latest/download/frontend.zip  -O docs/public/ui_install/frontend.zip
-          pnpm install --no-frozen-lockfile
-          if [[ ${{github.ref}} == refs/tags/* ]]; then
-            export TAG_NAME=${{github.ref_name}}
-          else
-            export TAG_NAME=$(git describe --tags --abbrev=0)
-          fi
-          echo "Deploying docs for tag $TAG_NAME"
-          pnpm run deploy
+      - name: Deploy Docs
         env:
           CLOUDFLARE_ACCOUNT_ID: ${{ secrets.CLOUDFLARE_ACCOUNT_ID }}
           CLOUDFLARE_API_TOKEN: ${{ secrets.CLOUDFLARE_API_TOKEN }}
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
+          WORKFLOW_RUN_HEAD_BRANCH: ${{ github.event.workflow_run.head_branch }}
+        run: |
+          cd vitepress-docs/
+          wget https://github.com/dreamhunter2333/cloudflare_temp_email/releases/latest/download/frontend.zip -O docs/public/ui_install/frontend.zip
+          pnpm install --no-frozen-lockfile
+          if TAG_NAME=$(gh release view --json tagName --jq '.tagName' 2>/dev/null); then
+            echo "Using release tag $TAG_NAME"
+          else
+            TAG_NAME="${WORKFLOW_RUN_HEAD_BRANCH:-${GITHUB_REF_NAME:-main}}"
+            echo "No GitHub release found for this repo; fallback TAG_NAME=$TAG_NAME"
+          fi
+          echo "Deploying docs for tag $TAG_NAME"
+          export TAG_NAME
+          pnpm run deploy

.github/workflows/e2e.yml

@@ -10,7 +10,7 @@ jobs:
     runs-on: ubuntu-latest
     timeout-minutes: 10
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Run E2E tests
         run: |
@@ -19,7 +19,7 @@ jobs:
 
       - name: Upload test results
         if: always()
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v6
         with:
           name: playwright-report
           path: |

.github/workflows/frontend_deploy.yaml

@@ -14,17 +14,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 8
+          version: 10
           run_install: false
 
       - name: Deploy Frontend for ${{ github.ref_name }}
@@ -51,17 +51,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 8
+          version: 10
           run_install: false
 
       - name: Deploy Telegram Frontend for ${{ github.ref_name }}

.github/workflows/frontend_pagefunction_deploy.yaml

@@ -32,17 +32,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 8
+          version: 10
           run_install: false
 
       - name: Deploy Frontend for ${{ github.ref_name }}

.github/workflows/pr_agent.yml

@@ -21,7 +21,7 @@ jobs:
           PR_REVIEWER.REQUIRE_TESTS_REVIEW: "false"
           OPENAI_KEY: ${{ secrets.OPENAI_KEY }}
           OPENAI_API_BASE: ${{ secrets.OPENAI_API_BASE }}
-          CONFIG.MODEL: "gpt-4o"
-          CONFIG.MODEL_TURBO: "gpt-4o"
+          CONFIG.MODEL: "gpt-5.4-nano"
+          CONFIG.MODEL_TURBO: "gpt-5.4-nano"
           OPENAI.API_BASE: ${{ secrets.OPENAI_API_BASE }}
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/smtp_proxy_server.yml

@@ -21,26 +21,26 @@ jobs:
       contents: read
       packages: write
     steps:
-      - uses: actions/checkout@v4
+      - uses: actions/checkout@v6
 
       - name: Log in to the Container registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ${{ env.REGISTRY }}
           username: ${{ github.actor }}
           password: ${{ secrets.GITHUB_TOKEN }}
 
       - name: Set up QEMU
-        uses: docker/setup-qemu-action@v3
+        uses: docker/setup-qemu-action@v4
 
       - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@v3
+        uses: docker/setup-buildx-action@v4
 
       - name: Set lowercase repository name
         run: echo "REPO_LOWER=${GITHUB_REPOSITORY,,}" >> $GITHUB_ENV
 
       - name: Build and push Docker images
-        uses: docker/build-push-action@v5
+        uses: docker/build-push-action@v7
         with:
           context: ./smtp_proxy_server
           file: ./smtp_proxy_server/dockerfile

.github/workflows/sync.yaml

@@ -12,14 +12,7 @@ jobs:
     if: ${{ github.event.repository.fork }}
 
     steps:
-      - uses: actions/checkout@v4
-
       - name: Sync upstream changes
-        id: sync
-        uses: aormsby/Fork-Sync-With-Upstream-action@v3.4
-        with:
-          upstream_sync_repo: dreamhunter2333/cloudflare_temp_email
-          upstream_sync_branch: main
-          target_sync_branch: main
-          target_repo_token: ${{ secrets.GITHUB_TOKEN }} # automatically generated, no need to set
-          test_mode: false
+        run: gh repo sync ${{ github.repository }} --source dreamhunter2333/cloudflare_temp_email --branch main
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.github/workflows/tag_build.yml

@@ -10,17 +10,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 8
+          version: 10
           run_install: false
 
       - name: Build Frontend
@@ -30,7 +30,7 @@ jobs:
         run: cd frontend/dist/ && zip -r frontend.zip * && mv frontend.zip ../
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: frontend
           path: frontend/frontend.zip
@@ -39,17 +39,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 8
+          version: 10
           run_install: false
 
       - name: Build Telegram Frontend
@@ -59,7 +59,7 @@ jobs:
         run: cd frontend/dist/ && zip -r telegram-frontend.zip * && mv telegram-frontend.zip ../
 
       - name: Upload artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: telegram-frontend
           path: frontend/telegram-frontend.zip
@@ -68,17 +68,17 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Checkout
-        uses: actions/checkout@v4
+        uses: actions/checkout@v6
 
       - name: Install Node.js
-        uses: actions/setup-node@v4
+        uses: actions/setup-node@v6
         with:
-          node-version: 20
+          node-version: 24
 
-      - uses: pnpm/action-setup@v3
+      - uses: pnpm/action-setup@v5
         name: Install pnpm
         with:
-          version: 8
+          version: 10
           run_install: false
 
       - name: cp wrangler.toml
@@ -101,13 +101,13 @@ jobs:
           zip -r worker-with-wasm-mail-parser.zip dist/worker.js dist/*.wasm
 
       - name: Upload worker.js
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: worker-js
           path: worker/worker.js
 
       - name: Upload wasm worker
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: worker-wasm
           path: worker/worker-with-wasm-mail-parser.zip
@@ -118,16 +118,21 @@ jobs:
     permissions:
       contents: write
     steps:
+      - name: Checkout
+        uses: actions/checkout@v6
+
       - name: Download all artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           path: artifacts
 
-      - name: Upload to Release
-        uses: softprops/action-gh-release@v2
-        with:
-          files: |
-            artifacts/frontend/frontend.zip
-            artifacts/telegram-frontend/telegram-frontend.zip
-            artifacts/worker-js/worker.js
-            artifacts/worker-wasm/worker-with-wasm-mail-parser.zip
+      - name: Upload Assets to Release
+        run: |
+          gh release upload "${{ github.ref_name }}" \
+            artifacts/frontend/frontend.zip \
+            artifacts/telegram-frontend/telegram-frontend.zip \
+            artifacts/worker-js/worker.js \
+            artifacts/worker-wasm/worker-with-wasm-mail-parser.zip \
+            --clobber
+        env:
+          GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -142,3 +142,6 @@ pnpm-lock.yaml
 e2e/test-results/
 e2e/playwright-report/
 e2e/.e2e-pids
+
+# SMTP/IMAP proxy persisted IMAP flags (local dev / bare-metal runs)
+smtp_proxy_server/data/

AGENTS.md

@@ -0,0 +1 @@
+CLAUDE.md

CHANGELOG.md

@@ -2,11 +2,215 @@
 # CHANGE LOG
 
 <p align="center">
-  <a href="CHANGELOG.md">🇨🇳 中文</a> |
-  <a href="CHANGELOG_EN.md">🇺🇸 English</a>
+  <a href="CHANGELOG.md">中文</a> |
+  <a href="CHANGELOG_EN.md">English</a>
 </p>
 
-## v1.4.0(main)
+## v1.12.0(main)
+
+### Features
+
+- feat: |邮件状态| 新增可选邮件状态功能，新邮件支持已读/未读、打开自动已读、手动切换状态、本页全部已读及按状态筛选；后端统一返回系统状态枚举与自定义分组，前端直接使用返回值显示和移动邮件
+- feat: |Admin| 数据库页面新增 D1 存储容量展示，支持选择并保存 Free 或 Workers Paid 套餐，对比当前数据库大小和容量上限
+- feat: |用户系统| 用户中心新增发送邮件、与收件箱一致的可按绑定地址过滤的发件箱，以及地址管理凭证弹框；提供使用用户 JWT 的地址设置、发信权限申请、发信及发件箱 API
+
+### Bug Fixes
+
+- fix: |Admin| 修复切换一级标签页时二级标签页偶发无选中项、内容不显示及指示条偏移的问题
+- fix: |发信页面| 统一邮箱与名称字段顺序，并修复空正文输入框的光标与占位文字错位
+- fix: |用户发信| 用户地址发信接口支持角色无限额度
+
+### Improvements
+
+- feat: |发信页面| 优化用户和 Admin 发信页面的信息层级与响应式布局，增加正文格式工具栏、草稿状态、底部发送操作区及隔离的 HTML 预览
+
+### Testing
+
+- fix: |E2E| 覆盖新邮件默认未读、地址隔离、标记已读及非法状态操作校验
+- test: |E2E| 覆盖 D1 数据库大小响应、配置键隔离，以及数据库页面套餐选择的持久化与刷新恢复
+- fix: |E2E| 覆盖发信页面草稿编辑、正文格式切换及 HTML 预览
+- fix: |E2E| 覆盖用户 JWT 发信接口的地址归属、额度扣减、实际投递和发件箱操作，以及用户中心查看地址凭证、切换发件地址和按地址过滤发件箱的完整流程
+
+## v1.11.0
+
+### Features
+
+- feat: |Frontend| 在随机子域名允许范围内新增普通、随机和自定义子域名模式选择（issue #1108）
+
+### Bug Fixes
+
+- fix: |Frontend| 将邮箱主页的账户设置、删除账户等表述更正为邮箱地址操作，并明确发信权限与额度按当前邮箱地址独立管理
+
+### Improvements
+
+- docs: |发送邮件| 补充用户账号、邮箱地址和发信权限的概念区别及按当前地址申请权限的操作说明
+
+- fix: |Worker| 地址活跃时间保活增加 1 天写入窗口，用户设置和邮箱访问不再重复更新近期活跃地址，降低 D1 写入量（issue #1103）
+
+- feat: |用户系统| 用户绑定地址列表改用服务端分页，并仅在第一页查询总数；用户邮件列表改用 JOIN、删除改用 `EXISTS` 在数据库侧校验地址归属，避免为大用户加载全部绑定地址（issue #1103）
+
+- feat: |Worker| 邮件、发件箱及按创建/活跃时间清理地址时改为分批处理，默认每次最多 3000 条并支持通过 `CLEANUP_BATCH_SIZE` 调整（上限 5000），减少单次扫描和删除量（issue #1103）
+
+### Testing
+
+- fix: |E2E| 新增近期地址活跃时间不会被用户设置接口重复写入的回归测试
+- fix: |E2E| 新增清理批次上限、后续批次继续执行、保留未过期数据及地址关联数据清理测试
+
+## v1.10.0
+
+### Features
+
+- feat: |Admin| 新增 `GET /admin/mails/:id` 接口，支持管理员按邮件 ID 跨邮箱读取单封邮件，并兼容 gzip 压缩存储（issue #1096）
+- feat: |Frontend| 邮箱新增「邮箱全宽列表视图」开关（在外观设置中控制），开启后默认全宽列表展示邮件标题与正文预览，点击单封邮件再展开为双栏，再次点击同一封邮件可回到列表视图；多选模式下点击邮件会同步切换勾选状态与右侧预览，并禁用同邮件点击收回列表，展开时双栏左侧列表宽度仍遵循「邮箱双栏视图左侧列表宽度占比」配置；默认关闭，保留原有双栏行为
+- feat: |Frontend| 邮箱全宽列表视图新增「正文预览行数」配置（在外观设置中控制），可设置邮件正文预览的最大行数，默认 2 行，0 表示关闭预览
+- feat: |Frontend| 外观设置新增「自动加载邮件正文中的外部图片」开关，关闭后邮件预览（含全屏视图）会先经 DOMPurify 消毒，并以白名单策略处理所有可能发起请求的位置：仅保留可证明为本地的引用（`cid:`、`data:image/`、`blob:` 与站内相对路径），其余一律阻断；`base`、`meta`、`script`、`link`、`iframe`、`object`、`embed`、`noscript` 等会自行取用资源或改变解析基准的元素在此模式下移除，`<style>` 保留但其中 `url()`、`image-set()`、`@import` 的远端引用会被替换。正文上方显示已阻断资源数量的提示条，可一键按封加载；默认保持开启，行为与此前一致（issue #1073）
+
+### Bug Fixes
+
+- fix: |Frontend| 关闭邮件外部图片自动加载时保留 `<a>` 与 `<area>` 的外部导航链接，并阻断通过 CSS 转义函数名或 at-rule 绕过远程资源过滤的情况
+- fix: |Frontend| 使用共享 DOMPurify 净化逻辑处理关于页面与启动通知中的 HTML 公告，避免 `ANNOUNCEMENT` 中的可执行标签或事件属性造成 XSS
+- fix: |Worker| 按邮件认证规范修复垃圾邮件检测：SPF、DKIM、DMARC 的 `none` 及 SPF/DKIM `neutral` 按认证方法不存在处理，并忽略未注册结果和不支持的方法版本；`JUNK_MAIL_FORCE_PASS_LIST` 仍要求明确返回受支持的 `pass`
+- fix: |Admin| 管理后台删除邮箱地址时，先删除该地址的邮件、发件记录、自动回复等关联数据，最后再删除地址本身；此前地址行先被删除导致按地址名匹配的子查询查不到数据，邮件等记录被遗留在数据库中
+- fix: |AI 提取| 强化提示词，要求 AI 保持邮件原始链接域名，避免小模型改写验证链接域名导致错误跳转（issue #1072）
+- fix: |AI 提取| HTML-only 邮件在发送给 Workers AI 前会先压缩为可读文本，避免样式模板过长导致验证码位于 4000 字截断之后而无法识别
+- fix: |Frontend| 移动端 Header 增加页头内边距，避免标题、菜单按钮与屏幕边缘过近
+- fix: |IMAP 代理| 修复 IMAP `STORE` 无法真正标记邮件已读的问题：邮件不再硬编码为 `\Seen`，且 `SimpleMailbox` 的 flags 变更现持久化到本地 SQLite（新增 `imap_flag_db_path` 配置），使已读/未读状态可在客户端断线重连（如 Thunderbird 轮询）后保留，而非每次新建连接即丢失（issue #1074）
+- fix: |IMAP 代理| 修复 `SEARCH UNSEEN` 返回全部邮件的问题：`SimpleMailbox.search()` 现按持久化的 flags 计算 `SEEN`/`UNSEEN`/`FLAGGED`/`DELETED`/`ANSWERED`/`DRAFT` 及其否定形式，多个条件按 AND 组合；无法识别的检索条件仍沿用原有行为返回全部邮件
+- fix: |IMAP 代理| 修复取信不会自动标记已读的问题：`BODY[...]`、`RFC822`、`RFC822.TEXT` 取信现按 RFC 3501 自动置 `\Seen`，而 `BODY.PEEK[...]`、`RFC822.HEADER` 及仅取元数据（如 `FLAGS`）不会
+
+### Testing
+
+- test: |Worker| 新增 junk_mail_policy 回归测试（issue #1084）：覆盖 SPF/DKIM/DMARC 的 `none`/`neutral` 按认证方法不存在处理、明确 `fail` 仍被拒收，以及 `JUNK_MAIL_FORCE_PASS_LIST` 仅接受明确 `pass`
+
+### Improvements
+
+- docs: |README| 新增完整日文 README，并在中文和英文 README 中添加日文导航链接
+- feat: |Frontend| 「邮箱双栏视图左侧列表宽度占比」最小值由 0.25 放宽至 0，左侧列表可完全折叠使正文近乎全屏，刻度增加 0 点；收件箱与发件箱的双栏拆分同步生效，并优化外观设置文案以明确该比例控制左侧邮件列表宽度
+
+## v1.9.0
+
+### Features
+
+- feat: |AI 识别| 未配置 Workers AI 绑定时，自动回退到内置正则提取验证码（支持中英日韩，并排除年份与 `YYYYMMDD` 日期误判），让无 Workers AI 的自部署用户也能在 Telegram 推送与 Webhook 中拿到验证码
+- feat: |Telegram| Telegram 新邮件推送与 `/mails` 历史邮件查看支持展示 AI 提取结果，包含验证码、验证链接、服务链接、订阅链接等关键信息
+- feat: |Webhook| 邮件 Webhook 模板支持填充 AI 提取结果占位符，包括 `aiExtractType`、`aiExtractResult`、`aiExtractResultText`
+- feat: |Frontend| 新增 `DISABLE_SHOW_GITHUB_FOR_USER` 配置，可仅对普通用户隐藏 Header 的 GitHub/版本入口，admin 仍可见（issue #1041）
+- feat: |Frontend| 将邮箱地址凭证弹窗升级为“地址凭证与连接方式”，复用普通用户与 admin 创建邮箱结果弹窗；支持通过 `ENABLE_AGENT_EMAIL_INFO` 展示 AI Agent 接入信息，并通过 `SMTP_IMAP_PROXY_CONFIG` 展示 SMTP/IMAP 客户端连接信息
+- docs: |随机子域名| 在前端“启用随机子域名”提示与 `subdomain` / `worker-vars` 文档（中英）中明确说明：要让 `name@<随机>.abc.com` 真正收到邮件，必须在基础域名 DNS 中为 `*` 子域添加通配 MX 记录，Email Routing 子域不继承父域配置（issue #1035）
+
+### Bug Fixes
+
+- fix: |Admin| 管理员重置邮箱地址密码时改为前端 SHA-256 后提交，后端只接受并存储哈希值，避免该接口继续接收明文密码
+- fix: |Address| 管理员邮箱地址列表与用户绑定地址列表不再返回已存储的地址密码哈希值，避免列表接口暴露敏感字段
+- fix: |Address| 统一规范化配置域名、收件地址域名与前缀的空白和大小写，覆盖 `DOMAINS`、`DEFAULT_DOMAINS`、`USER_ROLES.domains`、随机子域名、转发规则、SMTP 与 `SEND_MAIL` 域名匹配，保留转发规则空域名 catch-all 行为，并明确空 `DEFAULT_DOMAINS` / 角色域名回退到 `DOMAINS` 的行为，避免大小写配置或入站收件域名导致创建、收件、转发或发信失败（issue #926）
+- fix: |AI 提取| 将 AI 邮件识别默认 Workers AI 模型切换为支持 JSON Mode 且未弃用的 `@cf/meta/llama-3.1-8b-instruct-fast`，并在文档中补充 `@cf/zai-org/glm-4.7-flash` 结构化输出兼容性提示（issue #1029）
+- fix: |CI| 将 GitHub Actions 与 e2e Docker 镜像统一升级到 Node.js 24，适配 Wrangler 4.90.0 的运行时要求
+- fix: |Frontend| 修复 iOS Safari 点击输入框时因移动端表单控件字号过小导致页面自动放大的问题
+
+### Improvements
+
+## v1.8.0
+
+### Features
+
+- feat: |Frontend| 前端新增 6 国语言支持（`zh` / `en` / `es` / `pt-BR` / `ja` / `de`），默认语言保持为 `zh`；无 locale 前缀路由（如 `/`、`/user`）默认使用中文渲染，同时会记录浏览器语言作为语言偏好。用户手动切换后会持久化语言偏好，并保持当前页面路径、查询参数与 canonical locale URL 一致
+- feat: |API| 新增服务端解析邮件接口 `/api/parsed_mails` 与 `/api/parsed_mail/:id`，直接返回 `sender` / `subject` / `text` / `html` / `attachments` 元信息（复用 `commonParseMail`），AI agent 侧不再需要引入 MIME 解析器
+- feat: |Skill| 新增仓库内置只读 skill `cf-temp-mail-agent-mail`（`skills/cf-temp-mail-agent-mail/`），让 OpenClaw / Codex / Cursor 等 AI agent 凭用户提供的 Address JWT + API 地址读取邮箱、轮询验证码，绕开创建邮箱时的 Turnstile 人机验证；可通过 `npx degit dreamhunter2333/cloudflare_temp_email/skills/cf-temp-mail-agent-mail` 安装
+- docs: |文档| 新增"AI Agent 使用邮箱"文档（`guide/feature/agent-email`），说明 `parsed_mail` API 用法，并在 parsed API 不可用时给出对齐前端的 `mail-parser-wasm` + `postal-mime` 本地解析回退方案
+- docs: |文档| 在 `quick-start` / `worker-vars` / `email-routing` 三个入口文档（中英文）显式补充"域名是部署前提条件"提示，强调需先在 Cloudflare 启用 Email Routing 并下发邮件 DNS 记录、Worker 部署后再绑定 Catch-all，子域名需单独启用，避免用户在没有可用域名时直接开始部署却收不到邮件（issue #1004）
+- docs: |部署排障| 优化近期 issue 暴露的 UI 部署与升级排障文档：补充 `nodejs_compat`、D1 绑定名必须为 `DB`、`/open_api/settings` 校验、后端 API 地址填写、Cloudflare 安全挑战导致 `Network Error`、D1 容量上限与 Cron Trigger 自动清理、GitHub OAuth 公开邮箱、admin 管理口令与用户账号区别、随机二级域名 API 需传 `enableRandomSubdomain` 等说明；同时将帮助/FAQ 菜单移动到核心配置之后，提升可见性
+- docs: |文档| 补充重新创建旧邮箱提示地址已存在时的处理方式，并完善 GitHub Actions 自动更新配合 Page Functions 转发后端请求的 workflow 说明（issues #947 #654）
+- docs: |OAuth2| 补充 GitHub 私密邮箱登录配置，说明可使用 `https://api.github.com/user/emails`、JSONPath 邮箱字段和 `user:email` scope 获取主邮箱（issue #655）
+
+### Bug Fixes
+
+- fix: |Frontend| 收窄地址管理相关弹窗宽度，并让地址表格在弹窗内部横向滚动，避免多地址场景撑宽弹窗
+- fix: |Frontend| 修复 `/open_api/settings` 未返回 `domains` 数组时前端设置初始化直接调用 `map()` 报 `undefined` 错误的问题，统一按空数组兜底处理
+- fix: |Frontend| 修复前端在 `jwt` / `auth` / `adminAuth` 等 localStorage 凭据为空字符串、字面量 `"undefined"` 或包含换行/控制符时，请求构造的 `Authorization` 等头部抛出 `Invalid character in header content` 导致前端所有接口报错的问题（issue #1000）。新增 `safeHeaderValue` / `safeBearerHeader` 工具，对全部认证头做 RFC 7230 校验，不安全的值直接跳过该头部，让 worker 走标准 401 而不是请求级崩溃
+- fix: |Frontend| 修复多语言菜单在移动端顶部显示语言与版本按钮导致 Header 横向拥挤或溢出的问题，移动端仅保留菜单按钮并将语言/版本入口放入抽屉
+
+### Improvements
+
+- refactor: |Worker| 拆分 `mails_api/index.ts` 与 `admin_api/index.ts`，入口只负责挂路由，业务拆到各自的 `*_api.ts` 文件（`mails_crud.ts` / `new_address.ts` / `parsed_mail_api.ts` / `address_api.ts` / `address_sender_api.ts` / `sendbox_api.ts` / `statistics_api.ts` / `account_settings_api.ts`），保持路径与行为不变
+
+## v1.7.0
+
+### Breaking Changes
+
+- breaking: |发信| `SEND_MAIL` 的语义已从“仅用于 `verifiedAddressList` 命中的兼容发信路径”调整为“常规兜底发信通道”。如果实例已绑定 `SEND_MAIL` 且未配置 Resend/SMTP，升级后未命中 `verifiedAddressList` 的收件人也会直接通过 Cloudflare binding 发出，发信行为与成本路径会发生变化
+
+### Features
+
+- feat: |发信| 推荐使用 Cloudflare `send_email` binding 作为默认发信通道，已 onboard Email Routing 的域名未配置 Resend/SMTP 时自动走 binding 发至任意地址（Workers Paid 每月含 3000 封，超出 $0.35/1000 封）；历史 `verifiedAddressList` / Resend / SMTP 配置完全兼容（#964）
+
+### Bug Fixes
+
+- fix: |发送邮件| 当 `DEFAULT_SEND_BALANCE > 0` 时，首次访问发信设置或调用发信接口会为缺少 `address_sender` 记录的地址自动初始化默认额度（`ON CONFLICT DO NOTHING`），用户不再需要先手动申请发信权限；已存在的记录（包括管理员禁用或手动设置的行）一律保持原样，runtime 不会覆盖（#925 #985）
+- fix: |用户侧收件箱| 修复 `ENABLE_USER_DELETE_EMAIL` 关闭时用户中心仍显示删除按钮且仍可通过 `/user_api/mails/:id` 删除邮件的问题（#978）
+- fix: |Address| 创建邮箱时统一将配置的前缀转为小写，避免生成包含大写前缀的地址；历史数据需用户自行迁移为小写（#930）
+
+### Improvements
+
+## v1.6.0
+
+### Features
+
+- feat: |Admin| IP 黑名单设置新增 **IP 白名单（严格模式）**：启用后仅允许匹配白名单的 IP 访问受限流保护的 API（创建邮箱、发送邮件、外部发送邮件、用户注册、验证码校验），其他所有 IP 一律拒绝（#920）
+- feat: |Address| 支持最大地址数量设置为 `0` 表示无限制（#968）
+
+### Bug Fixes
+
+- fix: |Admin| 修复 `/admin/address` 与 `/admin/users` 在使用完整邮箱（query 长度超过 50 字节）作为搜索条件时报错 `D1_ERROR: LIKE or GLOB pattern too complex` 的问题，长查询自动改用 `instr()` 绕开 D1 的 LIKE pattern 长度限制（#956）
+
+### Improvements
+
+- docs: |发送邮件 API| 明确 `/api/send_mail` 与 `/external/api/send_mail` 两个端点的认证方式差异，补充"地址 JWT"概念说明（#922）
+- docs: |Worker 变量| `JWT_SECRET` 补充生成方式说明（`openssl rand -hex 32`）（#932）
+- docs: |CLI 部署| `routes` 自定义域名配置增加用途说明（#932）
+- docs: |Admin API| `/admin/new_address` 返回值文档补充 `address_id` 字段（#912）
+- docs: |Admin| 补充管理后台账号列表排序功能说明（#918）
+- docs: |Pages 部署| 补充 SPA 模式说明，避免刷新页面或直接访问子路径时 404（#813）
+- docs: |侧边栏| 重组文档侧边栏结构，拆分为"核心配置"、"通知与集成"、"高级功能"、"管理后台"等分组
+- docs: |FAQ| 大幅扩充常见问题，新增 SPA 404、发信余额、SMTP_CONFIG 配置、邮件客户端登录等高频问题（#919, #925, #839, #715, #921, #609）
+- docs: |发送邮件| 增强 SMTP_CONFIG 字段说明和多域名示例，新增发信余额机制说明
+- docs: |Email Routing| 补充子域名需单独启用 Email Routing 的说明，避免仅在一级域名开启导致子域收不到邮件（#969）
+
+## v1.5.0
+
+### Features
+
+- feat: |Admin| 管理后台账号列表支持按列排序（ID、名称、创建时间、更新时间、邮件数量、发送数量），搜索时自动重置分页到第1页（#918）
+- feat: |Admin API| `/admin/new_address` 接口返回值新增 `address_id` 字段，避免创建后需再次查询地址 ID（#912）
+- feat: |创建邮箱| 新增 `ENABLE_CREATE_ADDRESS_SUBDOMAIN_MATCH` 开关，并支持在管理后台单独控制创建邮箱 API 的子域名后缀匹配；开启后允许 `foo.example.com` 匹配基础域名 `example.com`
+- feat: |自动回复| 发件人过滤支持正则表达式匹配，使用 `/pattern/` 语法（如 `/@example\.com$/`），同时保持前缀匹配的向后兼容
+- feat: |Turnstile| 新增全局登录表单 Turnstile 人机验证，通过 `ENABLE_GLOBAL_TURNSTILE_CHECK` 环境变量控制（#767）
+- feat: |Telegram| Telegram 推送支持发送邮件附件（单文件限制 50MB），多附件通过 `sendMediaGroup` 批量发送，通过 `ENABLE_TG_PUSH_ATTACHMENT` 环境变量开启（#894）
+- feat: |邮件存储| 支持通过 `ENABLE_MAIL_GZIP` 变量启用 Gzip 压缩邮件存储（#823）
+  - 启用前需先执行数据库迁移：`Admin -> 快速设置 -> 数据库 -> 升级数据库 Schema`，或调用接口 `POST /admin/db_migration`
+  - 新邮件写入 `raw_blob`，兼容读取 `raw` / `raw_blob`；压缩与解压会增加 CPU 开销，建议付费 Worker Plan 再开启
+
+### Bug Fixes
+
+- fix: |自动回复| 修复 `source_prefix` 为空字符串时自动回复不触发的问题（#459），空值现在正确匹配所有发件人
+- fix: |OAuth2| 修复 Android via 浏览器等移动端 OAuth2 登录时 sessionStorage 丢失导致回调失败的问题，新增 localStorage 兜底（#900）
+- fix: |IMAP| 修复嵌套回复邮件乱码、Gmail 空 Content-Type 头解析失败、缺失 Date 头及 locale 依赖日期格式等问题
+
+### Testing
+
+- test: |E2E| 新增创建邮箱子域名匹配测试，覆盖默认精确匹配、后台开启后生效，以及 env=false 的硬禁用优先级
+- test: |E2E| 新增自动回复触发 E2E 测试，覆盖空前缀、前缀匹配、正则匹配和禁用状态场景
+
+### Docs
+
+- docs: |创建邮箱| 补充创建邮箱 API / Worker 变量 / 子域名文档，说明“直接指定子域名”和“随机子域名”两种能力的区别
+- docs: |API| 新增地址 JWT 与用户 JWT 的区分说明，避免混淆两种认证方式；调整文档菜单结构，将 API 接口文档归类到独立分组（#910）
+- docs: |Telegram| 新增每用户邮件推送和全局推送功能说明文档（#769）
+- docs: |Webhook| 新增 Telegram Bot、企业微信、Discord 等常用推送平台的 Webhook 模板示例
+- feat: |Webhook| 前端预设模板新增 Telegram Bot、企业微信、Discord 三个模板
+
+### Improvements
+
+## v1.4.0
 
 ### Features
 

CHANGELOG_EN.md

@@ -2,11 +2,215 @@
 # CHANGE LOG
 
 <p align="center">
-  <a href="CHANGELOG.md">🇨🇳 中文</a> |
-  <a href="CHANGELOG_EN.md">🇺🇸 English</a>
+  <a href="CHANGELOG.md">中文</a> |
+  <a href="CHANGELOG_EN.md">English</a>
 </p>
 
-## v1.4.0(main)
+## v1.12.0(main)
+
+### Features
+
+- feat: |Mail State| Add optional read state for new mail, automatic read-on-open, manual state toggling, mark-current-page-read and state filters; the backend returns the combined system-state enum and custom groups for clients to render and use as move targets
+- feat: |Admin| Add D1 storage capacity details to the database page, with persistent Free and Workers Paid plan selection and a comparison between the current database size and capacity limit
+- feat: |User| Add mail composition, inbox-style sent-item filtering by bound address, and the shared address-credentials dialog to the user center, backed by User JWT APIs for address settings, send-access requests, sending, and sent-item management
+
+### Bug Fixes
+
+- fix: |Admin| Fix secondary tabs occasionally losing their active item, hiding content, and leaving the indicator offset after switching primary tabs
+- fix: |Send Mail| Use a consistent address/name field order and align the empty content editor caret with its placeholder
+- fix: |User Send Mail| Apply role-based unlimited sending to user-address APIs
+
+### Improvements
+
+- feat: |Send Mail| Improve the information hierarchy and responsive layout of the user and Admin composers, with a content-format toolbar, draft status, bottom send-action area, and isolated HTML preview
+
+### Testing
+
+- fix: |E2E| Cover unread state on new mail, mailbox isolation, marking mail read, and invalid status-operation validation
+- test: |E2E| Cover the D1 database-size response, config-key isolation, and persistence of the database-page plan selection across reloads
+- fix: |E2E| Cover draft editing, content-format switching, and HTML preview in the send-mail composer
+- fix: |E2E| Cover address ownership, balance decrement, delivery, and sent-item operations through the User JWT API, plus user-center credential display, sender switching, and sent-item filtering by address
+
+## v1.11.0
+
+### Features
+
+- feat: |Frontend| Add Normal, Random, and Custom subdomain mode selection within the random-subdomain scope (issue #1108)
+
+### Bug Fixes
+
+- fix: |Frontend| Relabel mailbox settings and deletion actions as email-address operations, and clarify that send permission and balance are managed independently for the current email address
+
+### Improvements
+
+- docs: |Send Mail| Document the differences between user accounts, email addresses, and send permission, including how to request permission for the currently selected address
+
+- fix: |Worker| Throttle address-activity touches to one write per day so user settings and mailbox access do not repeatedly update recently active addresses, reducing D1 writes (issue #1103)
+
+- feat: |User| Add server-side pagination for bound addresses, with totals queried only on the first page; validate user-mail list ownership with a JOIN and delete ownership with `EXISTS` instead of loading every bound address for large users (issue #1103)
+
+- feat: |Worker| Process mail, sent-mail, and creation/activity-based address cleanup in batches of 3000 by default, configurable through `CLEANUP_BATCH_SIZE` up to 5000, reducing per-run scans and deletes (issue #1103)
+
+### Testing
+
+- fix: |E2E| Add regression coverage ensuring user settings do not rewrite recent address activity timestamps
+- fix: |E2E| Cover cleanup batch limits, continuation on later runs, preservation of recent data, and address-related data cleanup
+
+## v1.10.0
+
+### Features
+
+- feat: |Admin| Add `GET /admin/mails/:id` for administrators to fetch a single mail by ID across mailboxes, including gzip-compressed storage support (issue #1096)
+- feat: |Frontend| Add a "Full-width mailbox list view" toggle in Appearance settings. When enabled, the mailbox shows a full-width list of subjects and body previews by default; clicking a mail expands it into the two-pane split view, clicking the same mail again returns to the list view; in multi-select mode, clicking a mail updates both its checked state and the right-side preview while disabling same-mail collapse, and the split width still follows the "Left list width in two-column mailbox view" setting. Defaults to off, preserving the original two-pane behavior
+- feat: |Frontend| Add "Body Preview Lines" in Appearance settings for the full-width mailbox list view, allowing runtime control over the body-preview clamp. It defaults to 2 lines, and 0 disables previews
+- feat: |Frontend| Add an "Automatically load external images in mail body" toggle in Appearance settings. When disabled, the mail body (including fullscreen view) is run through DOMPurify and an allowlist policy: only references that can be *proven* local are kept (`cid:`, `data:image/`, `blob:` and same-origin relative paths), everything else is blocked. Elements that fetch on their own or change how relative URLs resolve — `base`, `meta`, `script`, `link`, `iframe`, `object`, `embed`, `noscript` — are removed in this mode, while `<style>` is kept with remote `url()`, `image-set()` and `@import` references substituted. A banner above the body reports how many resources were blocked and loads them for that mail on demand; defaults to on, preserving the previous behavior (issue #1073)
+
+### Bug Fixes
+
+- fix: |Frontend| Preserve external navigation links on `<a>` and `<area>` elements when automatic remote-image loading is disabled, and block remote CSS resources hidden behind escaped function or at-rule names
+- fix: |Frontend| Sanitize HTML announcements in both the About page and startup notification through a shared DOMPurify helper, preventing executable tags or event attributes in `ANNOUNCEMENT` from causing XSS
+- fix: |Worker| Align junk-mail checking with authentication standards: treat SPF, DKIM, and DMARC `none` plus SPF/DKIM `neutral` as absent, and ignore unregistered results and unsupported method versions; `JUNK_MAIL_FORCE_PASS_LIST` still requires an explicit supported `pass`
+- fix: |Admin| When deleting an address from the admin panel, delete its mails, sender records, sendbox and auto-reply entries before removing the address row itself; previously the address row was deleted first, so the name-based subqueries matched nothing and the mails were left orphaned in the database
+- fix: |AI Extract| Strengthen the prompt to keep original link domains from the email, preventing small models from rewriting verification-link domains (issue #1072)
+- fix: |AI Extract| Convert HTML-only mail bodies into compact readable text before sending them to Workers AI, preventing long templates from pushing verification codes past the 4000-character truncation window
+- fix: |Frontend| Add mobile Header page padding so the title and menu button no longer sit too close to the screen edge
+- fix: |IMAP Proxy| Fix IMAP `STORE` not actually marking mail as read: messages are no longer hardcoded to `\Seen`, and `SimpleMailbox` flag changes are now persisted to a local SQLite file (new `imap_flag_db_path` setting) so the read/unread state survives a client disconnect and reconnect (e.g. Thunderbird polling) instead of resetting on every new connection (issue #1074)
+- fix: |IMAP Proxy| Fix `SEARCH UNSEEN` returning every message: `SimpleMailbox.search()` now evaluates `SEEN`/`UNSEEN`/`FLAGGED`/`DELETED`/`ANSWERED`/`DRAFT` and their negations against the persisted flags, combining multiple keys with AND; search keys it cannot evaluate keep the previous behaviour of matching everything
+- fix: |IMAP Proxy| Fix fetches never marking mail as read: `BODY[...]`, `RFC822` and `RFC822.TEXT` fetches now set `\Seen` per RFC 3501, while `BODY.PEEK[...]`, `RFC822.HEADER` and metadata-only fetches (e.g. `FLAGS`) do not
+
+### Testing
+
+- test: |Worker| Add junk_mail_policy regression tests (issue #1084): `none`/`neutral` results for SPF/DKIM/DMARC are treated as the method being absent, explicit `fail` results are still rejected, and `JUNK_MAIL_FORCE_PASS_LIST` only accepts an explicit `pass`
+
+### Improvements
+
+- docs: |README| Add a complete Japanese README and Japanese navigation links to the Chinese and English READMEs
+- feat: |Frontend| Lower the "Left list width in two-column mailbox view" minimum from 0.25 to 0 so the left list pane can fully collapse for a near-fullscreen content view, with a 0 mark added; applies to both the inbox and send-box two-pane splits, and clarifies the Appearance setting label so it is clear the value controls the left mail list width
+
+## v1.9.0
+
+### Features
+
+- feat: |AI Extract| Fall back to a built-in regex verification-code extractor (English / Chinese / Japanese / Korean, with year and `YYYYMMDD` date rejection) when no Workers AI binding is configured, so self-hosted deployments without Workers AI still surface codes in Telegram pushes and webhooks
+- feat: |Telegram| Show AI extraction results in Telegram new-mail notifications and `/mails` history views, including verification codes, auth links, service links, and subscription links
+- feat: |Webhook| Support AI extraction placeholders in mail webhook templates, including `aiExtractType`, `aiExtractResult`, and `aiExtractResultText`
+- feat: |Frontend| Add `DISABLE_SHOW_GITHUB_FOR_USER` to hide the Header GitHub/version entry from normal users while keeping it visible to admin users (issue #1041)
+- feat: |Frontend| Upgrade the address credential dialog to "Address Credentials & Connection Methods" and reuse it for both normal users and admin-created addresses; support showing AI Agent access via `ENABLE_AGENT_EMAIL_INFO` and SMTP/IMAP client settings via `SMTP_IMAP_PROXY_CONFIG`
+- docs: |Random Subdomain| Clarify in the "Use Random Subdomain" frontend tip and the `subdomain` / `worker-vars` docs (zh & en) that receiving mail on `name@<random>.abc.com` requires a wildcard `*` MX record under the base domain in DNS, because Cloudflare Email Routing does not inherit the apex configuration onto subdomains (issue #1035)
+
+### Bug Fixes
+
+- fix: |Admin| Hash address passwords in the frontend before admin reset requests, and make the backend accept and store only the hash instead of plaintext
+- fix: |Address| Stop returning stored address password hashes from the admin address list and user bound-address list APIs to avoid exposing sensitive fields
+- fix: |Address| Normalize whitespace and casing for configured domains, inbound recipient domains, and prefixes across `DOMAINS`, `DEFAULT_DOMAINS`, `USER_ROLES.domains`, random subdomains, forwarding rules, SMTP, and `SEND_MAIL` domain matching, preserve blank-domain catch-all forwarding rules, and clarify that empty `DEFAULT_DOMAINS` / role domains fall back to `DOMAINS`, to avoid create, receive, forward, or send failures caused by mixed-case configuration or inbound recipient domains (issue #926)
+- fix: |AI Extract| Switch the default Workers AI model for AI email recognition to the JSON Mode-compatible, non-deprecated `@cf/meta/llama-3.1-8b-instruct-fast`, and document structured-output compatibility guidance for `@cf/zai-org/glm-4.7-flash` (issue #1029)
+- fix: |CI| Upgrade GitHub Actions and e2e Docker images to Node.js 24 to satisfy Wrangler 4.90.0 runtime requirements
+- fix: |Frontend| Prevent iOS Safari from auto-zooming the page when focusing mobile form controls with small font sizes
+
+### Improvements
+
+## v1.8.0
+
+### Features
+
+- feat: |Frontend| Add six-language frontend support (`zh` / `en` / `es` / `pt-BR` / `ja` / `de`), keep `zh` as the default locale; locale-unprefixed routes (for example `/` and `/user`) render in Chinese by default while still recording browser language as the stored preference. Explicit locale switches are persisted, and the current route, query string, and canonical locale URL stay in sync during switching
+- feat: |API| Add server-side parsed-mail endpoints `/api/parsed_mails` and `/api/parsed_mail/:id` that return `sender` / `subject` / `text` / `html` / `attachments` metadata directly (reuses `commonParseMail`), so AI agents no longer need a client-side MIME parser
+- feat: |Skill| Bundle a read-only skill `cf-temp-mail-agent-mail` (`skills/cf-temp-mail-agent-mail/`) so AI agents like OpenClaw / Codex / Cursor can consume a mailbox with a user-supplied Address JWT + API base URL — list mails, poll verification codes, etc. — sidestepping the Turnstile challenge required to create a mailbox. Install via `npx degit dreamhunter2333/cloudflare_temp_email/skills/cf-temp-mail-agent-mail`
+- docs: |Docs| Add "AI Agent Mailbox Usage" doc (`guide/feature/agent-email`) covering the `parsed_mail` API and a local-parse fallback using `mail-parser-wasm` + `postal-mime` (mirrors the frontend) when parsed endpoints are unavailable
+- docs: |Docs| Make "a domain is a hard prerequisite" explicit at the top of `quick-start`, `worker-vars`, and `email-routing` (zh + en), spelling out that Cloudflare Email Routing must be enabled with email DNS records provisioned before deployment, the Catch-all rule must be bound after the Worker is deployed, and subdomains do not inherit the parent domain's Email Routing — so users no longer start deploying without a usable domain and end up unable to receive mail (issue #1004)
+- docs: |Deployment troubleshooting| Improve docs for recent UI-deployment and upgrade issues: document `nodejs_compat`, the required uppercase `DB` D1 binding, `/open_api/settings` verification, backend API URL entry, Cloudflare security challenges causing `Network Error`, D1 size limits and Cron Trigger cleanup, GitHub OAuth public email requirements, the difference between admin passwords and user accounts, and the `enableRandomSubdomain` API flag; move the Help/FAQ menu directly after Core Configuration so it is easier to find
+- docs: |Docs| Document how to handle the "address already exists" case when recreating an old mailbox, and clarify the GitHub Actions workflow for automatic updates with Page Functions forwarding backend requests (issues #947 #654)
+- docs: |OAuth2| Document GitHub private-email login configuration using `https://api.github.com/user/emails`, a JSONPath email field, and the `user:email` scope to read the primary email (issue #655)
+
+### Bug Fixes
+
+- fix: |Frontend| Narrow address-management modal widths and keep address tables horizontally scrollable inside the modal to prevent multi-address lists from stretching the dialog
+- fix: |Frontend| Fix the frontend settings bootstrap throwing an `undefined` error when `/open_api/settings` does not return a `domains` array by normalizing the field to an empty array before mapping it
+- fix: |Frontend| Fix every API call crashing client-side with `Invalid character in header content ["Authorization"]` when stale localStorage credentials (`jwt` / `auth` / `adminAuth` / `userJwt` / `access_token`) are empty, the literal string `"undefined"`, or contain a stray newline or other control character (issue #1000). Adds `safeHeaderValue` / `safeBearerHeader` helpers that validate every auth header against RFC 7230 and omit the header entirely when unsafe, so the worker returns a clean 401 instead of the request being rejected by axios/undici
+- fix: |Frontend| Fix the multilingual header on mobile by keeping only the menu button in the top bar and moving language/version actions into the drawer to avoid horizontal crowding or overflow
+
+### Improvements
+
+- refactor: |Worker| Split `mails_api/index.ts` and `admin_api/index.ts` so the index files only wire routes. Business logic moved into dedicated `*_api.ts` files (`mails_crud.ts` / `new_address.ts` / `parsed_mail_api.ts` / `address_api.ts` / `address_sender_api.ts` / `sendbox_api.ts` / `statistics_api.ts` / `account_settings_api.ts`). Paths and behavior unchanged
+
+## v1.7.0
+
+### Breaking Changes
+
+- breaking: |send mail| `SEND_MAIL` semantics changed from a verified-address-only compatibility path to a normal fallback send channel. If an instance already binds `SEND_MAIL` and does not configure Resend/SMTP, recipients outside `verifiedAddressList` will now also be sent through the Cloudflare binding after upgrade, changing runtime behavior and cost routing
+
+### Features
+
+- feat: |send mail| Recommend Cloudflare `send_email` binding as the default send channel. Domains onboarded to Email Routing without Resend/SMTP now automatically use the binding to send to arbitrary addresses (Workers Paid includes 3,000 msgs/month, $0.35/1000 beyond); existing `verifiedAddressList` / Resend / SMTP configurations remain fully compatible (#964)
+
+### Bug Fixes
+
+- fix: |Send Mail| Auto-initialize the default send balance for addresses that have no `address_sender` row yet when `DEFAULT_SEND_BALANCE > 0`, on the first send-settings read or send API call (`ON CONFLICT DO NOTHING`). Existing rows — including admin-disabled or admin-edited ones — are never overwritten by the runtime path, so users no longer need to manually request send permission first (#925 #985)
+- fix: |User Mailbox| Fix an issue where the user center still showed delete actions and could still delete mail via `/user_api/mails/:id` when `ENABLE_USER_DELETE_EMAIL` was disabled (#978)
+- fix: |Address| Lowercase configured prefixes when creating addresses to avoid generating mixed-case mailbox names; existing data must be migrated to lowercase manually by the user (#930)
+
+### Improvements
+
+## v1.6.0
+
+### Features
+
+- feat: |Admin| Add **IP Whitelist (strict mode)** to IP blacklist settings: when enabled, ONLY whitelisted IPs can access rate-limited APIs (create address, send mail, external send mail, user register, verify code); all other IPs are denied (#920)
+- feat: |Address| Support setting max address count to `0` for unlimited (#968)
+
+### Bug Fixes
+
+- fix: |Admin| Fix `D1_ERROR: LIKE or GLOB pattern too complex` on `/admin/address` and `/admin/users` when searching by full email address (query length pushes the LIKE pattern over D1's 50-byte limit). Long queries now fall back to `instr()` to bypass the LIKE pattern length cap (#956)
+
+### Improvements
+
+- docs: |Send Mail API| Clarify authentication differences between `/api/send_mail` and `/external/api/send_mail`, add "Address JWT" concept explanation (#922)
+- docs: |Worker Variables| Add generation instructions for `JWT_SECRET` (`openssl rand -hex 32`) (#932)
+- docs: |CLI Deployment| Add usage explanation for `routes` custom domain configuration (#932)
+- docs: |Admin API| Add `address_id` field to `/admin/new_address` response documentation (#912)
+- docs: |Admin| Add account list sorting feature documentation (#918)
+- docs: |Pages Deployment| Add SPA mode instructions to avoid 404 when refreshing or accessing sub-paths directly (#813)
+- docs: |Sidebar| Restructure documentation sidebar into "Core Configuration", "Notifications & Integrations", "Advanced Features", "Admin Console" groups
+- docs: |FAQ| Significantly expand FAQ with SPA 404, send balance, SMTP_CONFIG, mail client login and more (#919, #925, #839, #715, #921, #609)
+- docs: |Email Sending| Enhance SMTP_CONFIG field reference and multi-domain examples, add send balance mechanism documentation
+- docs: |Email Routing| Note that subdomains require Email Routing to be enabled separately; enabling it only on the apex domain does not cover subdomains (#969)
+
+## v1.5.0
+
+### Features
+
+- feat: |Admin| Admin account list now supports column sorting (ID, name, created at, updated at, mail count, send count), search automatically resets pagination to page 1 (#918)
+- feat: |Admin API| `/admin/new_address` endpoint now returns `address_id` field, avoiding additional query after address creation (#912)
+- feat: |Create Address| Add `ENABLE_CREATE_ADDRESS_SUBDOMAIN_MATCH` switch and an admin-panel toggle for suffix-based subdomain matching in create-address APIs; when enabled, `foo.example.com` can match base domain `example.com`
+- feat: |Auto Reply| Add regex matching support for sender filter using `/pattern/` syntax (e.g. `/@example\.com$/`), backward compatible with prefix matching
+- feat: |Turnstile| Add global Turnstile CAPTCHA for all login forms via `ENABLE_GLOBAL_TURNSTILE_CHECK` env var (#767)
+- feat: |Telegram| Support sending email attachments in Telegram push (50MB per file limit), multiple attachments sent via `sendMediaGroup`, controlled by `ENABLE_TG_PUSH_ATTACHMENT` env var (#894)
+- feat: |Mail Storage| Support enabling gzip-compressed email storage via `ENABLE_MAIL_GZIP` variable (#823)
+  - Run database migration before enabling it: `Admin -> Quick Setup -> Database -> Migrate Database`, or call `POST /admin/db_migration`
+  - New emails are stored in `raw_blob` and reads stay compatible with `raw` / `raw_blob`; compression and decompression add CPU overhead, so a paid Worker plan is recommended
+
+### Bug Fixes
+
+- fix: |Auto Reply| Fix auto-reply not triggering when `source_prefix` is empty string (#459), empty value now correctly matches all senders
+- fix: |OAuth2| Fix OAuth2 login callback failure on Android via browser and other mobile browsers due to sessionStorage loss during redirect, add localStorage fallback (#900)
+- fix: |IMAP| Fix nested reply email mojibake, Gmail empty Content-Type header parsing failure, missing Date header, and locale-dependent date formatting issues
+
+### Testing
+
+- test: |E2E| Add create-address subdomain matching tests covering default exact-match behavior, admin-enabled matching, and env=false hard-disable precedence
+- test: |E2E| Add auto-reply trigger E2E tests covering empty prefix, prefix matching, regex matching, and disabled state
+
+### Docs
+
+- docs: |Create Address| Update create-address API, worker variables, and subdomain docs to clarify the difference between explicitly specified subdomains and random subdomains
+- docs: |API| Add clarification between Address JWT and User JWT to avoid confusion; reorganize documentation menu structure with dedicated API Endpoints section (#910)
+- docs: |Telegram| Add per-user mail push and global push documentation (#769)
+- docs: |Webhook| Add webhook template examples for Telegram Bot, WeChat Work, Discord and other common push platforms
+- feat: |Webhook| Add Telegram Bot, WeChat Work, Discord preset templates to frontend webhook settings
+
+### Improvements
+
+## v1.4.0
 
 ### Features
 

CLAUDE.md

@@ -11,6 +11,7 @@ This file provides guidance to Claude Code (claude.ai/code) when working with co
 - **SMTP/IMAP proxy**: `smtp_proxy_server/` — Python proxy server.
 - **DB schema/migrations**: `db/` — SQLite via Cloudflare D1, dated migration patches.
 - **Docs**: `vitepress-docs/` — VitePress documentation site (zh + en).
+- **E2E tests**: `e2e/` — Playwright tests in Docker Compose (API, browser, SMTP proxy).
 - **Changelogs**: `CHANGELOG.md` (中文) + `CHANGELOG_EN.md` (English).
 
 ## Build & Dev Commands
@@ -26,19 +27,58 @@ Run inside each subfolder with `pnpm`:
 
 SMTP proxy: `pip install -r smtp_proxy_server/requirements.txt` then `python smtp_proxy_server/main.py`.
 
+## E2E Tests
+
+Tests run in Docker Compose with Playwright. From `e2e/`:
+
+```bash
+npm test              # Build, run all tests, exit
+npm run test:down     # Clean up containers
+```
+
+Test categories: `tests/api/` (API tests), `tests/browser/` (UI tests with Chromium), `tests/smtp-proxy/` (SMTP/IMAP proxy tests).
+
+The Docker frontend serves over **HTTPS** (self-signed cert) with Vite proxy to worker — required for WebAuthn (`navigator.credentials`) and `crypto.subtle` which need a secure context. Browser tests use `ignoreHTTPSErrors: true`.
+
+Key patterns for browser tests:
+- Frontend hashes passwords with SHA-256 (`crypto.subtle`) before sending — API test registration must use pre-hashed passwords if UI login is needed.
+- VueUse `useStorage('key', '')` with string default uses **raw string** serialization — set localStorage with raw value, not `JSON.stringify()`.
+- WebAuthn browser tests use CDP virtual authenticator (`WebAuthn.enable` + `WebAuthn.addVirtualAuthenticator`).
+
+## Architecture
+
+### Worker Auth Flow (`worker/src/worker.ts`)
+
+Three auth layers applied via Hono middleware, each using different headers:
+
+| Path prefix | Header | Purpose |
+|-------------|--------|---------|
+| `/api/*` | `Authorization: Bearer <jwt>` | Address (mailbox) credential |
+| `/user_api/*` | `x-user-token` | User account JWT |
+| `/admin/*` | `x-admin-auth` | Admin password |
+| (any) | `x-user-access-token` | User role-based access token |
+| (any) | `x-custom-auth` | Optional global access password |
+| (any) | `x-lang` | Language preference (`en`/`zh`) |
+
+Public endpoints (no auth): `/open_api/*`, `/user_api/login`, `/user_api/register`, `/user_api/passkey/authenticate_*`, `/user_api/oauth2/*`.
+
+### Worker Email Flow (`worker/src/email/`)
+
+Cloudflare Email Worker entry: `email()` in `worker/src/email/index.ts`. Processing pipeline:
+1. Parse raw email → check junk → check address exists
+2. Auto-reply if configured → forward if configured → webhook if enabled
+3. Store in D1 database
+
+### Frontend State (`frontend/src/store/index.js`, `frontend/src/api/index.js`)
+
+Global state via VueUse `useStorage` for persistence. The `api` module wraps axios with auto-attached auth headers and fingerprinting. API base URL comes from `VITE_API_BASE` env var (empty = same origin).
+
 ## Coding Style
 
 - `worker/` uses TypeScript + ESLint; `frontend/` uses Vue SFCs.
 - Keep existing naming patterns: `*_api/` folders, `utils/`, `models/`.
 - ESM imports only (`type: module`).
 
-## Auth Headers
-
-- Address JWT: `x-user-token`
-- User JWT: `x-user-access-token`
-- Admin: `x-admin-auth`
-- Language: `x-lang`
-
 ## Commits & PRs
 
 - Use Conventional Commits: `feat:`, `fix:`, `docs:`, `style:`, `refactor:`, `perf:`.
@@ -57,10 +97,6 @@ After completing any feature, bug fix, or improvement, **always check**:
    - `api/` — API reference docs
 3. **Both languages** — docs and changelogs exist in Chinese and English; always update both.
 
-## Testing
-
-No formal test runner. Validate with local dev servers and key flows (login, inbox, send/receive).
-
 ## Config
 
 - Worker settings in `worker/wrangler.toml` (see `wrangler.toml.template` for bindings).

README.md

@@ -30,7 +30,8 @@
 
 <p align="center">
   <a href="README.md">中文文档</a> |
-  <a href="README_EN.md">English Document</a>
+  <a href="README_EN.md">English Document</a> |
+  <a href="README_JA.md">日本語ドキュメント</a>
 </p>
 
 > 本项目仅供学习和个人用途，请勿将其用于任何违法行为，否则后果自负。
@@ -40,7 +41,9 @@
 - **完全免费** - 基于 Cloudflare 免费服务构建，零成本运行
 - **高性能** - Rust WASM 邮件解析，响应速度极快
 - **现代化界面** - 响应式设计，支持多语言，操作简便
-- **地址密码** - 支持为邮箱地址设置独立密码，增强安全性 (通过 `ENABLE_ADDRESS_PASSWORD` 启用)
+- **地址密码** - 支持为邮箱地址设置独立密码，增强安全性
+- **Agent 友好** - 内置邮箱 [`skill`](skills/cf-temp-mail-agent-mail/SKILL.md)，方便 AI agent 使用邮箱
+- **移动端管理** - 社区客户端 [CloudMail](https://github.com/Lur1N77777/CloudMail)，支持 Android 管理后台和邮箱管理
 
 ## 部署文档 - 快速开始
 
@@ -72,9 +75,9 @@
 <summary>Star History（点击收缩/展开）</summary>
 
 <picture>
-  <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date&theme=dark" />
-  <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
-  <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
+  <source media="(prefers-color-scheme: dark)" srcset="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date&theme=dark" />
+  <source media="(prefers-color-scheme: light)" srcset="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
+  <img alt="Star History Chart" src="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
 </picture>
 
 </details>
@@ -109,6 +112,7 @@
 
 - [x] 使用 `rust wasm` 解析邮件，解析速度快，几乎所有邮件都能解析，node 的解析模块解析邮件失败的邮件，rust wasm 也能解析成功
 - [x] **AI 邮件识别** - 使用 Cloudflare Workers AI 自动提取邮件中的验证码、认证链接、服务链接等重要信息
+- [x] 支持为指定基础域名创建随机二级域名邮箱地址，更适合收件隔离场景
 - [x] 支持发送邮件，支持 `DKIM` 验证
 - [x] 支持 `SMTP` 和 `Resend` 等多种发送方式 
 - [x] 增加查看 `附件` 功能，支持附件图片显示
@@ -149,6 +153,8 @@
 - [x] Webhook 支持，消息推送集成
 - [x] 支持 `CF Turnstile` 人机验证
 - [x] 限流配置，防止滥用
+- [x] **Agent 友好**：内置 [`cf-temp-mail-agent-mail`](skills/cf-temp-mail-agent-mail/SKILL.md) skill，AI agent 可直接消费邮箱，详见 [文档](vitepress-docs/docs/zh/guide/feature/agent-email.md)
+- [x] 社区移动端管理客户端：[CloudMail](https://github.com/Lur1N77777/CloudMail) 基于 Expo / React Native，面向本项目兼容 API，提供 Android 管理员后台、地址管理、收件/发件/未知邮件、验证码快捷复制、OLED 黑主题和本地分组。
 
 </details>
 

README_EN.md

@@ -30,7 +30,8 @@
 
 <p align="center">
   <a href="README.md">中文文档</a> |
-  <a href="README_EN.md">English Document</a>
+  <a href="README_EN.md">English Document</a> |
+  <a href="README_JA.md">日本語ドキュメント</a>
 </p>
 
 > This project is for learning and personal use only. Please do not use it for any illegal activities, or you will be responsible for the consequences.
@@ -40,7 +41,9 @@
 - **Completely Free** - Built on Cloudflare's free services with zero cost
 - **High Performance** - Rust WASM email parsing for extremely fast response
 - **Modern UI** - Responsive design with multi-language support and easy operation
-- **Address Password** - Support setting individual passwords for email addresses to enhance security (enabled via `ENABLE_ADDRESS_PASSWORD`)
+- **Address Password** - Support setting individual passwords for email addresses to enhance security
+- **Agent-friendly** - Built-in mailbox [`skill`](skills/cf-temp-mail-agent-mail/SKILL.md) for AI agents
+- **Mobile admin** - Community client [CloudMail](https://github.com/Lur1N77777/CloudMail) for Android admin and mailbox management
 
 ## Deployment Documentation - Quick Start
 
@@ -72,9 +75,9 @@ Try it now → [https://mail.awsl.uk/](https://mail.awsl.uk/)
 <summary>Star History (Click to expand/collapse)</summary>
 
 <picture>
-  <source media="(prefers-color-scheme: dark)" srcset="https://api.star-history.com/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date&theme=dark" />
-  <source media="(prefers-color-scheme: light)" srcset="https://api.star-history.com/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
-  <img alt="Star History Chart" src="https://api.star-history.com/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
+  <source media="(prefers-color-scheme: dark)" srcset="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date&theme=dark" />
+  <source media="(prefers-color-scheme: light)" srcset="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
+  <img alt="Star History Chart" src="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
 </picture>
 
 </details>
@@ -109,6 +112,7 @@ Try it now → [https://mail.awsl.uk/](https://mail.awsl.uk/)
 
 - [x] Use `rust wasm` to parse emails, with fast parsing speed. Almost all emails can be parsed. Even emails that Node.js parsing modules fail to parse can be successfully parsed by rust wasm
 - [x] **AI Email Recognition** - Use Cloudflare Workers AI to automatically extract verification codes, authentication links, service links and other important information from emails
+- [x] Support optional random second-level subdomain mailbox creation for selected base domains
 - [x] Support sending emails with `DKIM` verification
 - [x] Support multiple sending methods such as `SMTP` and `Resend`
 - [x] Add attachment viewing feature with support for displaying attachment images
@@ -149,6 +153,8 @@ Try it now → [https://mail.awsl.uk/](https://mail.awsl.uk/)
 - [x] Webhook support and message push integration
 - [x] Support `CF Turnstile` CAPTCHA verification
 - [x] Rate limiting configuration to prevent abuse
+- [x] **Agent-friendly**: bundled [`cf-temp-mail-agent-mail`](skills/cf-temp-mail-agent-mail/SKILL.md) skill lets AI agents consume a mailbox directly, see [docs](vitepress-docs/docs/en/guide/feature/agent-email.md)
+- [x] Community mobile admin client: [CloudMail](https://github.com/Lur1N77777/CloudMail) is built with Expo / React Native for this project's compatible API, providing an Android admin console, address management, inbox/sent/unknown mail, quick verification-code copy, OLED black theme, and local grouping.
 
 </details>
 

README_JA.md

@@ -0,0 +1,202 @@
+<!-- markdownlint-disable-file MD033 MD045 -->
+# Cloudflare 一時メール - 無料で構築できる一時メールサービス
+
+<p align="center">
+  <a href="https://temp-mail-docs.awsl.uk" target="_blank">
+    <img alt="docs" src="https://img.shields.io/badge/docs-grey?logo=vitepress">
+  </a>
+  <a href="https://github.com/dreamhunter2333/cloudflare_temp_email/releases/latest" target="_blank">
+    <img src="https://img.shields.io/github/v/release/dreamhunter2333/cloudflare_temp_email">
+  </a>
+  <a href="https://github.com/dreamhunter2333/cloudflare_temp_email/blob/main/LICENSE" target="_blank">
+    <img alt="MIT License" src="https://img.shields.io/github/license/dreamhunter2333/cloudflare_temp_email">
+  </a>
+  <a href="https://github.com/dreamhunter2333/cloudflare_temp_email/graphs/contributors" target="_blank">
+   <img alt="GitHub contributors" src="https://img.shields.io/github/contributors/dreamhunter2333/cloudflare_temp_email">
+  </a>
+  <a href="">
+    <img alt="GitHub top language" src="https://img.shields.io/github/languages/top/dreamhunter2333/cloudflare_temp_email">
+  </a>
+  <a href="">
+    <img src="https://img.shields.io/github/last-commit/dreamhunter2333/cloudflare_temp_email">
+  </a>
+</p>
+
+<p align="center">
+  <a href="https://hellogithub.com/repository/2ccc64bb1ba346b480625f584aa19eb1" target="_blank">
+    <img src="https://abroad.hellogithub.com/v1/widgets/recommend.svg?rid=2ccc64bb1ba346b480625f584aa19eb1&claim_uid=FxNypXK7UQ9OECT" alt="Featured｜HelloGitHub" height="30"/>
+  </a>
+</p>
+
+<p align="center">
+  <a href="README.md">中文文档</a> |
+  <a href="README_EN.md">English Document</a> |
+  <a href="README_JA.md">日本語ドキュメント</a>
+</p>
+
+> 本プロジェクトは学習および個人利用のみを目的としています。違法行為には使用しないでください。使用した場合、その結果については利用者自身が責任を負うものとします。
+
+**機能の充実した一時メールサービスです！**
+
+- **完全無料** - Cloudflare の無料サービス上に構築され、運用コストはかかりません
+- **高性能** - Rust WASM によるメール解析で極めて高速に応答します
+- **モダンな UI** - 多言語対応のレスポンシブデザインで、簡単に操作できます
+- **アドレスパスワード** - メールアドレスごとに個別のパスワードを設定し、セキュリティを強化できます
+- **Agent フレンドリー** - AI agent がメールボックスを利用できる組み込みの [`skill`](skills/cf-temp-mail-agent-mail/SKILL.md) を提供します
+- **モバイル管理** - Android の管理画面とメールボックス管理に対応したコミュニティクライアント [CloudMail](https://github.com/Lur1N77777/CloudMail) を利用できます
+
+## デプロイドキュメント - クイックスタート
+
+[ドキュメント](https://temp-mail-docs.awsl.uk) | [GitHub Actions デプロイガイド](https://temp-mail-docs.awsl.uk/en/guide/actions/github-action.html)
+
+<a href="https://temp-mail-docs.awsl.uk/en/guide/actions/github-action.html">
+  <img src="https://deploy.workers.cloudflare.com/button" alt="Deploy to Cloudflare Workers" height="32">
+</a>
+
+## 変更履歴
+
+最新の更新内容については [CHANGELOG](CHANGELOG.md) を参照してください。
+
+## ライブデモ
+
+今すぐ試す → [https://mail.awsl.uk/](https://mail.awsl.uk/)
+
+<details>
+<summary>サービス稼働状況（クリックして展開／折りたたみ）</summary>
+
+|                                            |                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                |
+| ------------------------------------------ | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
+| [Backend](https://temp-email-api.awsl.uk/) | [![Deploy Backend Production](https://github.com/dreamhunter2333/cloudflare_temp_email/actions/workflows/backend_deploy.yaml/badge.svg)](https://github.com/dreamhunter2333/cloudflare_temp_email/actions/workflows/backend_deploy.yaml) ![](https://uptime.aks.awsl.icu/api/badge/10/status) ![](https://uptime.aks.awsl.icu/api/badge/10/uptime) ![](https://uptime.aks.awsl.icu/api/badge/10/ping) ![](https://uptime.aks.awsl.icu/api/badge/10/avg-response) ![](https://uptime.aks.awsl.icu/api/badge/10/cert-exp) ![](https://uptime.aks.awsl.icu/api/badge/10/response) |
+| [Frontend](https://mail.awsl.uk/)          | [![Deploy Frontend](https://github.com/dreamhunter2333/cloudflare_temp_email/actions/workflows/frontend_deploy.yaml/badge.svg)](https://github.com/dreamhunter2333/cloudflare_temp_email/actions/workflows/frontend_deploy.yaml) ![](https://uptime.aks.awsl.icu/api/badge/12/status) ![](https://uptime.aks.awsl.icu/api/badge/12/uptime) ![](https://uptime.aks.awsl.icu/api/badge/12/ping) ![](https://uptime.aks.awsl.icu/api/badge/12/avg-response) ![](https://uptime.aks.awsl.icu/api/badge/12/cert-exp) ![](https://uptime.aks.awsl.icu/api/badge/12/response)         |
+
+</details>
+
+<details>
+<summary>Star History（クリックして展開／折りたたみ）</summary>
+
+<picture>
+  <source media="(prefers-color-scheme: dark)" srcset="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date&theme=dark" />
+  <source media="(prefers-color-scheme: light)" srcset="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
+  <img alt="Star History Chart" src="https://star-history.dera.page/svg?repos=dreamhunter2333/cloudflare_temp_email&type=Date" />
+</picture>
+
+</details>
+
+<details open>
+<summary>目次（クリックして展開／折りたたみ）</summary>
+
+- [Cloudflare 一時メール - 無料で構築できる一時メールサービス](#cloudflare-一時メール---無料で構築できる一時メールサービス)
+  - [デプロイドキュメント - クイックスタート](#デプロイドキュメント---クイックスタート)
+  - [変更履歴](#変更履歴)
+  - [ライブデモ](#ライブデモ)
+  - [主な機能](#主な機能)
+    - [メール処理](#メール処理)
+    - [ユーザー管理](#ユーザー管理)
+    - [管理機能](#管理機能)
+    - [多言語対応とインターフェース](#多言語対応とインターフェース)
+    - [連携と拡張](#連携と拡張)
+  - [技術アーキテクチャ](#技術アーキテクチャ)
+    - [システム構成](#システム構成)
+    - [技術スタック](#技術スタック)
+    - [主要コンポーネント](#主要コンポーネント)
+  - [コミュニティに参加](#コミュニティに参加)
+
+</details>
+
+## 主な機能
+
+<details open>
+<summary>主な機能の詳細（クリックして展開／折りたたみ）</summary>
+
+### メール処理
+
+- [x] `rust wasm` でメールを高速に解析します。ほぼすべてのメールを解析でき、Node.js の解析モジュールで失敗するメールも rust wasm なら正常に解析できます
+- [x] **AI メール認識** - Cloudflare Workers AI を使用して、メール内の確認コード、認証リンク、サービスリンクなどの重要情報を自動抽出します
+- [x] 指定したベースドメインに対して、ランダムな第 2 レベルサブドメインのメールボックスを任意で作成できます
+- [x] `DKIM` 検証付きのメール送信に対応します
+- [x] `SMTP` や `Resend` など、複数の送信方法に対応します
+- [x] 添付ファイルの表示機能を備え、添付画像も表示できます
+- [x] S3 での添付ファイルの保存と削除に対応します
+- [x] スパム検出とブラックリスト／ホワイトリストの設定に対応します
+- [x] グローバル転送先アドレスを指定できるメール転送機能を備えています
+
+### ユーザー管理
+
+- [x] `credentials` を使用して、以前利用したメールボックスへ再ログインできます
+- [x] 完全なユーザー登録・ログイン機能を備えています。メールアドレスを紐付けると、そのアドレスのメール JWT 資格情報を自動取得し、複数のメールボックスを切り替えられます
+- [x] `OAuth2` によるサードパーティログイン（Github、Authentik など）に対応します
+- [x] `Passkey` によるパスワードレスログインに対応します
+- [x] 複数ロールのドメインおよびプレフィックスを設定できるユーザーロール管理に対応します
+- [x] アドレスやキーワードで絞り込めるユーザー受信箱を提供します
+
+### 管理機能
+
+- [x] 完全な admin コンソールを備えています
+- [x] `admin` バックエンドからプレフィックスのないメールボックスを作成できます
+- [x] admin ユーザー管理画面でユーザーのアドレスを確認できます
+- [x] 複数のクリーンアップ戦略を選べる定期クリーンアップ機能を備えています
+- [x] カスタム名のメールボックスを取得でき、`admin` でブラックリストを設定できます
+- [x] アクセスパスワードを追加し、プライベートサイトとして利用できます
+
+### 多言語対応とインターフェース
+
+- [x] フロントエンドとバックエンドの両方が多言語に対応しています
+- [x] レスポンシブレイアウトのモダンな UI デザインを採用しています
+- [x] Google Ads の連携に対応します
+- [x] shadow DOM を使用してスタイルの干渉を防ぎます
+- [x] URL の JWT パラメーターによる自動ログインに対応します
+
+### 連携と拡張
+
+- [x] 完全な `Telegram Bot`、`Telegram` プッシュ通知、Telegram Bot ミニアプリに対応します
+- [x] `SMTP proxy server` を追加し、`SMTP` によるメール送信と `IMAP` によるメール閲覧に対応します
+- [x] Webhook とメッセージプッシュ連携に対応します
+- [x] `CF Turnstile` CAPTCHA 検証に対応します
+- [x] 悪用を防ぐためのレート制限を設定できます
+- [x] **Agent フレンドリー**：組み込みの [`cf-temp-mail-agent-mail`](skills/cf-temp-mail-agent-mail/SKILL.md) skill により、AI agent がメールボックスを直接利用できます。詳しくは[ドキュメント](vitepress-docs/docs/en/guide/feature/agent-email.md)を参照してください
+- [x] コミュニティのモバイル管理クライアント：[CloudMail](https://github.com/Lur1N77777/CloudMail) は本プロジェクト互換の API 向けに Expo / React Native で構築されており、Android 管理コンソール、アドレス管理、受信済み／送信済み／不明メール、確認コードのクイックコピー、OLED ブラックテーマ、ローカルグループ分けを提供します
+
+</details>
+
+## 技術アーキテクチャ
+
+<details>
+<summary>技術アーキテクチャの詳細（クリックして展開／折りたたみ）</summary>
+
+### システム構成
+
+- **データベース**：メインデータベースとして Cloudflare D1 を使用
+- **フロントエンドのデプロイ**：Cloudflare Pages を使用してフロントエンドをデプロイ
+- **バックエンドのデプロイ**：Cloudflare Workers を使用してバックエンドをデプロイ
+- **メールルーティング**：Cloudflare Email Routing を使用
+
+### 技術スタック
+
+- **フロントエンド**：Vue 3 + Vite + TypeScript
+- **バックエンド**：TypeScript + Cloudflare Workers
+- **メール解析**：Rust WASM（mail-parser-wasm）
+- **データベース**：Cloudflare D1（SQLite）
+- **ストレージ**：Cloudflare KV + R2（任意で S3）
+- **プロキシサービス**：Python SMTP/IMAP Proxy Server
+
+### 主要コンポーネント
+
+- **Worker**：中核となるバックエンドサービス
+- **Frontend**：Vue 3 ユーザーインターフェース
+- **Mail Parser WASM**：Rust メール解析モジュール
+- **SMTP Proxy Server**：Python メールプロキシサービス
+- **Pages Functions**：Cloudflare Pages ミドルウェア
+- **Documentation**：VitePress ドキュメントサイト
+
+</details>
+
+### 重要な注意事項
+
+- Resend でドメインレコードを追加する際、DNS プロバイダーが第 3 レベルドメイン a.b.com をホストしている場合は、Resend が生成したデフォルト名から第 2 レベルドメインのプレフィックス b を削除してください。削除しないと a.b.b.com が追加され、検証に失敗します。レコードを追加した後、次のコマンドで確認できます。
+```bash
+nslookup -qt="mx" a.b.com 1.1.1.1
+```
+
+## コミュニティに参加
+
+- [Telegram](https://t.me/cloudflare_temp_email)

db/2026-04-03-raw-blob.sql

@@ -0,0 +1,2 @@
+-- Add raw_blob BLOB column for gzip-compressed email storage
+ALTER TABLE raw_mails ADD COLUMN raw_blob BLOB;

db/2026-08-25-mail-flags.sql

@@ -0,0 +1 @@
+ALTER TABLE raw_mails ADD COLUMN flags INTEGER;

db/schema.sql

@@ -4,7 +4,9 @@ CREATE TABLE IF NOT EXISTS raw_mails (
     source TEXT,
     address TEXT,
     raw TEXT,
+    raw_blob BLOB,
     metadata TEXT,
+    flags INTEGER,
     created_at DATETIME DEFAULT CURRENT_TIMESTAMP
 );
 

e2e/Dockerfile.e2e

@@ -1,5 +1,5 @@
 # Keep this version in sync with @playwright/test in package.json
-FROM mcr.microsoft.com/playwright:v1.58.2-noble
+FROM mcr.microsoft.com/playwright:v1.62.1-noble
 
 RUN apt-get update && apt-get install -y curl netcat-openbsd && rm -rf /var/lib/apt/lists/*
 

e2e/Dockerfile.frontend

@@ -1,5 +1,6 @@
-FROM node:20-slim
+FROM node:24-slim
 
+RUN apt-get update && apt-get install -y openssl && rm -rf /var/lib/apt/lists/*
 RUN corepack enable && corepack prepare pnpm@10.10.0 --activate
 
 WORKDIR /app/frontend
@@ -9,14 +10,37 @@ RUN pnpm install --frozen-lockfile || (echo "WARN: frozen-lockfile failed, falli
 
 COPY frontend/ .
 
+# Generate self-signed cert for HTTPS (required for WebAuthn/crypto.subtle)
+RUN openssl req -x509 -newkey rsa:2048 -keyout /tmp/key.pem -out /tmp/cert.pem \
+    -days 365 -nodes -subj '/CN=frontend'
+
 # Allow Docker internal hostnames (e.g. "frontend") to pass Vite's host check.
-# Wrap the original config instead of sed-patching it — survives reformats.
+# Configure HTTPS with self-signed cert for secure context (WebAuthn/crypto.subtle).
+# Proxy API paths to the worker to avoid mixed-content (HTTPS->HTTP) blocking.
 RUN mv vite.config.js vite.config.original.js && \
     echo 'import config from "./vite.config.original.js";\
-config.server = { ...config.server, allowedHosts: true };\
+import fs from "fs";\
+const workerTarget = process.env.VITE_WORKER_URL || "http://worker:8787";\
+config.server = {\
+  ...config.server,\
+  allowedHosts: true,\
+  https: {\
+    key: fs.readFileSync("/tmp/key.pem"),\
+    cert: fs.readFileSync("/tmp/cert.pem"),\
+  },\
+  proxy: {\
+    "/api": { target: workerTarget, changeOrigin: true },\
+    "/admin": { target: workerTarget, changeOrigin: true },\
+    "/user_api": { target: workerTarget, changeOrigin: true },\
+    "/open_api": { target: workerTarget, changeOrigin: true },\
+    "/external": { target: workerTarget, changeOrigin: true },\
+    "/health_check": { target: workerTarget, changeOrigin: true },\
+  },\
+};\
 export default config;' > vite.config.js
 
-ENV VITE_API_BASE=http://worker:8787
+# Empty VITE_API_BASE so frontend uses same-origin (proxied through Vite)
+ENV VITE_API_BASE=
 
 EXPOSE 5173
 

e2e/Dockerfile.worker

@@ -1,4 +1,4 @@
-FROM node:20-slim
+FROM node:24-slim
 
 RUN apt-get update && apt-get install -y curl && rm -rf /var/lib/apt/lists/*
 RUN corepack enable && corepack prepare pnpm@10.10.0 --activate
@@ -11,7 +11,8 @@ RUN pnpm install --frozen-lockfile || (echo "WARN: frozen-lockfile failed, falli
 
 COPY worker/src/ src/
 COPY worker/tsconfig.json ./
-COPY e2e/fixtures/wrangler.toml.e2e wrangler.toml
+ARG WRANGLER_TOML=e2e/fixtures/wrangler.toml.e2e
+COPY ${WRANGLER_TOML} wrangler.toml
 
 EXPOSE 8787
 

e2e/docker-compose.yml

@@ -20,6 +20,76 @@ services:
       start_period: 10s
       retries: 20
 
+  worker-subdomain:
+    build:
+      context: ..
+      dockerfile: e2e/Dockerfile.worker
+    ports:
+      - "8789:8789"
+    command: ["pnpm", "exec", "wrangler", "dev", "--port", "8789", "--ip", "0.0.0.0"]
+    depends_on:
+      - mailpit
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://localhost:8789/health_check"]
+      interval: 3s
+      timeout: 5s
+      start_period: 10s
+      retries: 20
+
+  worker-env-off:
+    build:
+      context: ..
+      dockerfile: e2e/Dockerfile.worker
+    ports:
+      - "8790:8790"
+    command: ["pnpm", "exec", "wrangler", "dev", "--port", "8790", "--ip", "0.0.0.0"]
+    volumes:
+      - ./fixtures/wrangler.toml.e2e.env-off:/app/worker/wrangler.toml:ro
+    depends_on:
+      - mailpit
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://localhost:8790/health_check"]
+      interval: 3s
+      timeout: 5s
+      start_period: 10s
+      retries: 20
+
+  worker-gzip:
+    build:
+      context: ..
+      dockerfile: e2e/Dockerfile.worker
+      args:
+        WRANGLER_TOML: e2e/fixtures/wrangler.toml.e2e.gzip
+    ports:
+      - "8788:8788"
+    command: ["pnpm", "exec", "wrangler", "dev", "--port", "8788", "--ip", "0.0.0.0"]
+    depends_on:
+      - mailpit
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://localhost:8788/health_check"]
+      interval: 3s
+      timeout: 5s
+      start_period: 10s
+      retries: 20
+
+  worker-send-mail-domain:
+    build:
+      context: ..
+      dockerfile: e2e/Dockerfile.worker
+      args:
+        WRANGLER_TOML: e2e/fixtures/wrangler.toml.e2e.send-mail-domain
+    ports:
+      - "8791:8791"
+    command: ["pnpm", "exec", "wrangler", "dev", "--port", "8791", "--ip", "0.0.0.0"]
+    depends_on:
+      - mailpit
+    healthcheck:
+      test: ["CMD", "curl", "-sf", "http://localhost:8791/health_check"]
+      interval: 3s
+      timeout: 5s
+      start_period: 10s
+      retries: 20
+
   frontend:
     build:
       context: ..
@@ -73,7 +143,11 @@ services:
       dockerfile: e2e/Dockerfile.e2e
     environment:
       WORKER_URL: http://worker:8787
-      FRONTEND_URL: http://frontend:5173
+      WORKER_URL_SUBDOMAIN: http://worker-subdomain:8789
+      WORKER_URL_ENV_OFF: http://worker-env-off:8790
+      WORKER_GZIP_URL: http://worker-gzip:8788
+      WORKER_URL_SEND_MAIL_DOMAIN: http://worker-send-mail-domain:8791
+      FRONTEND_URL: https://frontend:5173
       MAILPIT_API: http://mailpit:8025/api
       SMTP_PROXY_HOST: smtp-proxy
       SMTP_PROXY_SMTP_PORT: "8025"
@@ -85,6 +159,14 @@ services:
     depends_on:
       worker:
         condition: service_healthy
+      worker-subdomain:
+        condition: service_healthy
+      worker-env-off:
+        condition: service_healthy
+      worker-gzip:
+        condition: service_healthy
+      worker-send-mail-domain:
+        condition: service_healthy
       frontend:
         condition: service_started
       smtp-proxy:

e2e/fixtures/test-helpers.ts

@@ -1,11 +1,23 @@
-import { APIRequestContext } from '@playwright/test';
+import type { APIRequestContext } from '@playwright/test';
+import { createHash } from 'crypto';
 import WebSocket from 'ws';
 
 export const WORKER_URL = process.env.WORKER_URL!;
+export const WORKER_URL_SUBDOMAIN = process.env.WORKER_URL_SUBDOMAIN || '';
+export const WORKER_URL_ENV_OFF = process.env.WORKER_URL_ENV_OFF || '';
+export const WORKER_GZIP_URL = process.env.WORKER_GZIP_URL || '';
+export const WORKER_URL_SEND_MAIL_DOMAIN = process.env.WORKER_URL_SEND_MAIL_DOMAIN || '';
 export const FRONTEND_URL = process.env.FRONTEND_URL!;
 export const MAILPIT_API = process.env.MAILPIT_API!;
 export const TEST_DOMAIN = 'test.example.com';
 
+/**
+ * SHA-256 hash matching the frontend hashPassword utility.
+ */
+export function hashPassword(password: string): string {
+  return createHash('sha256').update(password).digest('hex');
+}
+
 /**
  * Create a new email address via the worker API.
  * Appends a timestamp suffix to avoid UNIQUE constraint collisions
@@ -16,7 +28,7 @@ export async function createTestAddress(
   ctx: APIRequestContext,
   name: string,
   domain: string = TEST_DOMAIN
-): Promise<{ jwt: string; address: string }> {
+): Promise<{ jwt: string; address: string; address_id: number }> {
   const uniqueName = `${name}${Date.now()}`;
   const res = await ctx.post(`${WORKER_URL}/api/new_address`, {
     data: { name: uniqueName, domain },
@@ -25,7 +37,7 @@ export async function createTestAddress(
     throw new Error(`Failed to create address: ${res.status()} ${await res.text()}`);
   }
   const body = await res.json();
-  return { jwt: body.jwt, address: body.address };
+  return { jwt: body.jwt, address: body.address, address_id: body.address_id };
 }
 
 /**
@@ -179,8 +191,9 @@ export function onMailpitMessage(
 
 /**
  * Request send mail access for an address.
- * Must be called before sending mail — creates the address_sender row
- * with the DEFAULT_SEND_BALANCE configured in the worker.
+ * Kept for backward compatibility and manual-request flows. When
+ * DEFAULT_SEND_BALANCE > 0, send balance may already be auto-initialized
+ * before this endpoint is called.
  */
 export async function requestSendAccess(
   ctx: APIRequestContext,
@@ -194,6 +207,62 @@ export async function requestSendAccess(
   }
 }
 
+/**
+ * Fetch the sender access row for an address from the admin API.
+ */
+export async function getAddressSender(
+  ctx: APIRequestContext,
+  address: string,
+  workerUrl: string = WORKER_URL
+): Promise<any> {
+  const res = await ctx.get(
+    `${workerUrl}/admin/address_sender?limit=1&offset=0&address=${encodeURIComponent(address)}`,
+  );
+  if (!res.ok()) {
+    throw new Error(`Failed to get address sender: ${res.status()} ${await res.text()}`);
+  }
+  const body = await res.json();
+  if (!Array.isArray(body.results) || body.results.length < 1) {
+    throw new Error(`address_sender row not found for ${address}`);
+  }
+  return body.results[0];
+}
+
+/**
+ * Update a sender access row through the admin API.
+ */
+export async function updateAddressSender(
+  ctx: APIRequestContext,
+  opts: {
+    address: string;
+    address_id: number;
+    balance: number;
+    enabled: boolean;
+  },
+  workerUrl: string = WORKER_URL
+): Promise<void> {
+  const res = await ctx.post(`${workerUrl}/admin/address_sender`, {
+    data: opts,
+  });
+  if (!res.ok()) {
+    throw new Error(`Failed to update address sender: ${res.status()} ${await res.text()}`);
+  }
+}
+
+/**
+ * Delete a sender access row through the admin API by its id.
+ */
+export async function deleteAddressSender(
+  ctx: APIRequestContext,
+  id: number,
+  workerUrl: string = WORKER_URL
+): Promise<void> {
+  const res = await ctx.delete(`${workerUrl}/admin/address_sender/${id}`);
+  if (!res.ok()) {
+    throw new Error(`Failed to delete address sender: ${res.status()} ${await res.text()}`);
+  }
+}
+
 /**
  * Delete a test address via its JWT.
  */

e2e/fixtures/wrangler.toml.e2e

@@ -5,21 +5,31 @@ compatibility_flags = [ "nodejs_compat" ]
 keep_vars = true
 
 [vars]
-PREFIX = "tmp"
-DEFAULT_DOMAINS = ["test.example.com"]
-DOMAINS = ["test.example.com"]
+PREFIX = "TMP"
+DEFAULT_DOMAINS = []
+DOMAINS = ["TEST.EXAMPLE.COM", "MANUAL.EXAMPLE.COM"]
+RANDOM_SUBDOMAIN_DOMAINS = ["TEST.EXAMPLE.COM"]
+CREATE_ADDRESS_DEFAULT_DOMAIN_FIRST = true
+USER_ROLES = [
+  { domains = ["TEST.EXAMPLE.COM"], role = "case-role", prefix = "ROLE" },
+  { domains = [], role = "empty-role", prefix = "EMPTY" },
+]
 JWT_SECRET = "e2e-test-secret-key"
 BLACK_LIST = ""
 ENABLE_USER_CREATE_EMAIL = true
 ENABLE_USER_DELETE_EMAIL = true
+ENABLE_MAIL_FLAGS = true
 ENABLE_AUTO_REPLY = true
 DEFAULT_SEND_BALANCE = 10
+NO_LIMIT_SEND_ROLE = "case-role"
 ENABLE_ADDRESS_PASSWORD = true
 DISABLE_ADMIN_PASSWORD_CHECK = true
+ADMIN_PASSWORDS = '["e2e-admin-pass"]'
 ENABLE_WEBHOOK = true
 E2E_TEST_MODE = true
+CLEANUP_BATCH_SIZE = 10
 SMTP_CONFIG = """
-{"test.example.com":{"host":"mailpit","port":1025,"secure":false}}
+{"TEST.EXAMPLE.COM":{"host":"mailpit","port":1025,"secure":false}}
 """
 
 [[kv_namespaces]]

e2e/fixtures/wrangler.toml.e2e.env-off

@@ -0,0 +1,34 @@
+name = "cloudflare_temp_email_env_off"
+main = "src/worker.ts"
+compatibility_date = "2025-04-01"
+compatibility_flags = [ "nodejs_compat" ]
+keep_vars = true
+
+[vars]
+PREFIX = "tmp"
+DEFAULT_DOMAINS = ["test.example.com"]
+DOMAINS = ["test.example.com"]
+ENABLE_CREATE_ADDRESS_SUBDOMAIN_MATCH = false
+JWT_SECRET = "e2e-test-secret-key-env-off"
+BLACK_LIST = ""
+ENABLE_USER_CREATE_EMAIL = true
+ENABLE_USER_DELETE_EMAIL = false
+ENABLE_AUTO_REPLY = true
+DEFAULT_SEND_BALANCE = 10
+ENABLE_ADDRESS_PASSWORD = true
+DISABLE_ADMIN_PASSWORD_CHECK = true
+ADMIN_PASSWORDS = '["e2e-admin-pass"]'
+ENABLE_WEBHOOK = true
+E2E_TEST_MODE = true
+SMTP_CONFIG = """
+{"test.example.com":{"host":"mailpit","port":1025,"secure":false}}
+"""
+
+[[kv_namespaces]]
+binding = "KV"
+id = "e2e-test-kv-env-off-00000000-0000-0000-0000-000000000000"
+
+[[d1_databases]]
+binding = "DB"
+database_name = "e2e-temp-email-env-off"
+database_id = "e2e-test-db-env-off-00000000-0000-0000-0000-000000000000"

e2e/fixtures/wrangler.toml.e2e.gzip

@@ -0,0 +1,34 @@
+name = "cloudflare_temp_email_gzip"
+main = "src/worker.ts"
+compatibility_date = "2025-04-01"
+compatibility_flags = [ "nodejs_compat" ]
+keep_vars = true
+
+[vars]
+PREFIX = "tmp"
+DEFAULT_DOMAINS = ["test.example.com"]
+DOMAINS = ["test.example.com"]
+JWT_SECRET = "e2e-test-secret-key"
+BLACK_LIST = ""
+ENABLE_USER_CREATE_EMAIL = true
+ENABLE_USER_DELETE_EMAIL = true
+ENABLE_AUTO_REPLY = true
+DEFAULT_SEND_BALANCE = 10
+ENABLE_ADDRESS_PASSWORD = true
+DISABLE_ADMIN_PASSWORD_CHECK = true
+ADMIN_PASSWORDS = '["e2e-admin-pass"]'
+ENABLE_WEBHOOK = true
+E2E_TEST_MODE = true
+ENABLE_MAIL_GZIP = true
+SMTP_CONFIG = """
+{"test.example.com":{"host":"mailpit","port":1025,"secure":false}}
+"""
+
+[[kv_namespaces]]
+binding = "KV"
+id = "e2e-test-kv-gzip-00000000-0000-0000-0000-000000000000"
+
+[[d1_databases]]
+binding = "DB"
+database_name = "e2e-temp-email-gzip"
+database_id = "e2e-test-db-gzip-00000000-0000-0000-0000-000000000000"

e2e/fixtures/wrangler.toml.e2e.send-mail-domain

@@ -0,0 +1,38 @@
+name = "cloudflare_temp_email"
+main = "src/worker.ts"
+compatibility_date = "2025-04-01"
+compatibility_flags = [ "nodejs_compat" ]
+keep_vars = true
+
+send_email = [
+  { name = "SEND_MAIL" },
+]
+
+[vars]
+PREFIX = "TMP"
+DEFAULT_DOMAINS = ["TEST.EXAMPLE.COM"]
+DOMAINS = ["TEST.EXAMPLE.COM"]
+SEND_MAIL_DOMAINS = ["TEST.EXAMPLE.COM"]
+JWT_SECRET = "e2e-test-secret-key"
+BLACK_LIST = ""
+ENABLE_USER_CREATE_EMAIL = true
+ENABLE_USER_DELETE_EMAIL = true
+ENABLE_AUTO_REPLY = true
+DEFAULT_SEND_BALANCE = 10
+ENABLE_ADDRESS_PASSWORD = true
+DISABLE_ADMIN_PASSWORD_CHECK = true
+ADMIN_PASSWORDS = '["e2e-admin-pass"]'
+ENABLE_WEBHOOK = true
+E2E_TEST_MODE = true
+SMTP_CONFIG = """
+{"TEST.EXAMPLE.COM":{"host":"mailpit","port":1025,"secure":false}}
+"""
+
+[[kv_namespaces]]
+binding = "KV"
+id = "e2e-test-kv-00000000-0000-0000-0000-000000000000"
+
+[[d1_databases]]
+binding = "DB"
+database_name = "e2e-temp-email"
+database_id = "e2e-test-db-00000000-0000-0000-0000-000000000000"

e2e/package-lock.json

@@ -6,14 +6,14 @@
     "": {
       "name": "cloudflare-temp-email-e2e",
       "dependencies": {
-        "imapflow": "^1.2.12",
-        "nodemailer": "^8.0.1"
+        "imapflow": "^1.7.1",
+        "nodemailer": "^9.0.5"
       },
       "devDependencies": {
-        "@playwright/test": "1.58.2",
-        "@types/nodemailer": "^7.0.11",
-        "@types/ws": "^8.5.0",
-        "ws": "^8.18.0"
+        "@playwright/test": "1.62.1",
+        "@types/nodemailer": "^8.0.1",
+        "@types/ws": "^8.18.1",
+        "ws": "^8.21.3"
       }
     },
     "node_modules/@pinojs/redact": {
@@ -23,35 +23,35 @@
       "license": "MIT"
     },
     "node_modules/@playwright/test": {
-      "version": "1.58.2",
-      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.58.2.tgz",
-      "integrity": "sha512-akea+6bHYBBfA9uQqSYmlJXn61cTa+jbO87xVLCWbTqbWadRVmhxlXATaOjOgcBaWU4ePo0wB41KMFv3o35IXA==",
+      "version": "1.62.1",
+      "resolved": "https://registry.npmjs.org/@playwright/test/-/test-1.62.1.tgz",
+      "integrity": "sha512-DTcUc8qii+cpHvtOwggMtBRMjKZHXYWdw8syRYu2vtzuq4Wxphqq4NfCs5Zt44L6mA8rfDfj+PHnxFc/FeK6mQ==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "playwright": "1.58.2"
+        "playwright": "1.62.1"
       },
       "bin": {
         "playwright": "cli.js"
       },
       "engines": {
-        "node": ">=18"
+        "node": ">=20"
       }
     },
     "node_modules/@types/node": {
-      "version": "25.3.3",
-      "resolved": "https://registry.npmjs.org/@types/node/-/node-25.3.3.tgz",
-      "integrity": "sha512-DpzbrH7wIcBaJibpKo9nnSQL0MTRdnWttGyE5haGwK86xgMOkFLp7vEyfQPGLOJh5wNYiJ3V9PmUMDhV9u8kkQ==",
+      "version": "26.1.2",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.1.2.tgz",
+      "integrity": "sha512-Vu4a5UFA9rIIFJ7rB/Vaafh9lrCQszopTCx6KjFboXTGQbPNasehVR5TEiithSDGyd1DEiUByggTZsg8jukeIg==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
-        "undici-types": "~7.18.0"
+        "undici-types": "~8.3.0"
       }
     },
     "node_modules/@types/nodemailer": {
-      "version": "7.0.11",
-      "resolved": "https://registry.npmjs.org/@types/nodemailer/-/nodemailer-7.0.11.tgz",
-      "integrity": "sha512-E+U4RzR2dKrx+u3N4DlsmLaDC6mMZOM/TPROxA0UAPiTgI0y4CEFBmZE+coGWTjakDriRsXG368lNk1u9Q0a2g==",
+      "version": "8.0.1",
+      "resolved": "https://registry.npmjs.org/@types/nodemailer/-/nodemailer-8.0.1.tgz",
+      "integrity": "sha512-PxpaInm8V1JQDd4j0ds5HfvWQk8JupS1C0Picb96QJsrrRDjBH+DlK7L4ZdNSqNULhiZRQHc40nLVShaGxXAMw==",
       "dev": true,
       "license": "MIT",
       "dependencies": {
@@ -69,13 +69,13 @@
       }
     },
     "node_modules/@zone-eu/mailsplit": {
-      "version": "5.4.8",
-      "resolved": "https://registry.npmjs.org/@zone-eu/mailsplit/-/mailsplit-5.4.8.tgz",
-      "integrity": "sha512-eEyACj4JZ7sjzRvy26QhLgKEMWwQbsw1+QZnlLX+/gihcNH07lVPOcnwf5U6UAL7gkc//J3jVd76o/WS+taUiA==",
+      "version": "5.4.15",
+      "resolved": "https://registry.npmjs.org/@zone-eu/mailsplit/-/mailsplit-5.4.15.tgz",
+      "integrity": "sha512-c7ZpxauvF4AEkDJlKDYO7iMUtMuqJMBnDWNff1cyx+d7zaBVR3iFEmXhNHOVoMmVyVF3pTZLsLIJsEFKDldOAA==",
       "license": "(MIT OR EUPL-1.1+)",
       "dependencies": {
         "libbase64": "1.3.0",
-        "libmime": "5.3.7",
+        "libmime": "5.4.2",
         "libqp": "2.1.1"
       }
     },
@@ -113,9 +113,9 @@
       }
     },
     "node_modules/iconv-lite": {
-      "version": "0.7.2",
-      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.2.tgz",
-      "integrity": "sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==",
+      "version": "0.7.3",
+      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.7.3.tgz",
+      "integrity": "sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==",
       "license": "MIT",
       "dependencies": {
         "safer-buffer": ">= 2.1.2 < 3.0.0"
@@ -129,26 +129,25 @@
       }
     },
     "node_modules/imapflow": {
-      "version": "1.2.12",
-      "resolved": "https://registry.npmjs.org/imapflow/-/imapflow-1.2.12.tgz",
-      "integrity": "sha512-UX8qCKXZk2xExe/x8KPTSbhROdtUGP13bSLSjT9Sb3YwGuryD4aFNlGhbWBW5B1GtgHMRxVv9yvl61RqXgIQtQ==",
+      "version": "1.7.1",
+      "resolved": "https://registry.npmjs.org/imapflow/-/imapflow-1.7.1.tgz",
+      "integrity": "sha512-etpyRH7wOPQGawjl/5ChgaaX5NRK2fxJAi9EFFNwv0N3FXsvjsL3Qu5dJ4i/myH61Cq2RSTb6vI5T9rXDbXD+g==",
       "license": "MIT",
       "dependencies": {
-        "@zone-eu/mailsplit": "5.4.8",
+        "@zone-eu/mailsplit": "5.4.15",
         "encoding-japanese": "2.2.0",
-        "iconv-lite": "0.7.2",
+        "iconv-lite": "0.7.3",
         "libbase64": "1.3.0",
-        "libmime": "5.3.7",
+        "libmime": "5.4.2",
         "libqp": "2.1.1",
-        "nodemailer": "8.0.1",
         "pino": "10.3.1",
-        "socks": "2.8.7"
+        "socks": "2.8.9"
       }
     },
     "node_modules/ip-address": {
-      "version": "10.1.0",
-      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.1.0.tgz",
-      "integrity": "sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==",
+      "version": "10.3.1",
+      "resolved": "https://registry.npmjs.org/ip-address/-/ip-address-10.3.1.tgz",
+      "integrity": "sha512-1e9d3kb97NHJTIJDZW9rKqW2h6+dFa50Dy0fpPSMQp2ADje5gvKsXmdiK6dwY5t76TaTt5+P5N1Y/LoToIxP6g==",
       "license": "MIT",
       "engines": {
         "node": ">= 12"
@@ -161,29 +160,17 @@
       "license": "MIT"
     },
     "node_modules/libmime": {
-      "version": "5.3.7",
-      "resolved": "https://registry.npmjs.org/libmime/-/libmime-5.3.7.tgz",
-      "integrity": "sha512-FlDb3Wtha8P01kTL3P9M+ZDNDWPKPmKHWaU/cG/lg5pfuAwdflVpZE+wm9m7pKmC5ww6s+zTxBKS1p6yl3KpSw==",
+      "version": "5.4.2",
+      "resolved": "https://registry.npmjs.org/libmime/-/libmime-5.4.2.tgz",
+      "integrity": "sha512-+IQnCOdPiufGBkOii+Ze8F7iniyBzOwvWDbn1DyExBpc9pT2B3IEMQi7GUc/PpqhNUh/sr1SG9UXDITQoR0VIA==",
       "license": "MIT",
       "dependencies": {
         "encoding-japanese": "2.2.0",
-        "iconv-lite": "0.6.3",
+        "iconv-lite": "0.7.3",
         "libbase64": "1.3.0",
         "libqp": "2.1.1"
       }
     },
-    "node_modules/libmime/node_modules/iconv-lite": {
-      "version": "0.6.3",
-      "resolved": "https://registry.npmjs.org/iconv-lite/-/iconv-lite-0.6.3.tgz",
-      "integrity": "sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==",
-      "license": "MIT",
-      "dependencies": {
-        "safer-buffer": ">= 2.1.2 < 3.0.0"
-      },
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/libqp": {
       "version": "2.1.1",
       "resolved": "https://registry.npmjs.org/libqp/-/libqp-2.1.1.tgz",
@@ -191,9 +178,9 @@
       "license": "MIT"
     },
     "node_modules/nodemailer": {
-      "version": "8.0.1",
-      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-8.0.1.tgz",
-      "integrity": "sha512-5kcldIXmaEjZcHR6F28IKGSgpmZHaF1IXLWFTG+Xh3S+Cce4MiakLtWY+PlBU69fLbRa8HlaGIrC/QolUpHkhg==",
+      "version": "9.0.5",
+      "resolved": "https://registry.npmjs.org/nodemailer/-/nodemailer-9.0.5.tgz",
+      "integrity": "sha512-wvjiKvjczmsN7U/8006JOdXubgBk2XFAbioDMbT+sM7cPs0QrhJTa6KBRX7P5REGGkDcLUz/EarWidb8G8C1jQ==",
       "license": "MIT-0",
       "engines": {
         "node": ">=6.0.0"
@@ -246,41 +233,41 @@
       "license": "MIT"
     },
     "node_modules/playwright": {
-      "version": "1.58.2",
-      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.58.2.tgz",
-      "integrity": "sha512-vA30H8Nvkq/cPBnNw4Q8TWz1EJyqgpuinBcHET0YVJVFldr8JDNiU9LaWAE1KqSkRYazuaBhTpB5ZzShOezQ6A==",
+      "version": "1.62.1",
+      "resolved": "https://registry.npmjs.org/playwright/-/playwright-1.62.1.tgz",
+      "integrity": "sha512-0M+L3LAD8/nm554LOla9Ayx0j0tmFZ0FBcoQ7F1VuVHpM/XpiC8RcDzBQB8W5+hA8L22THxELzeF+2WcUzvcLg==",
       "dev": true,
       "license": "Apache-2.0",
       "dependencies": {
-        "playwright-core": "1.58.2"
+        "playwright-core": "1.62.1"
       },
       "bin": {
         "playwright": "cli.js"
       },
       "engines": {
-        "node": ">=18"
+        "node": ">=20"
       },
       "optionalDependencies": {
         "fsevents": "2.3.2"
       }
     },
     "node_modules/playwright-core": {
-      "version": "1.58.2",
-      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.58.2.tgz",
-      "integrity": "sha512-yZkEtftgwS8CsfYo7nm0KE8jsvm6i/PTgVtB8DL726wNf6H2IMsDuxCpJj59KDaxCtSnrWan2AeDqM7JBaultg==",
+      "version": "1.62.1",
+      "resolved": "https://registry.npmjs.org/playwright-core/-/playwright-core-1.62.1.tgz",
+      "integrity": "sha512-wPYSwEBJY9GHraISXqyqtx0na0LpO3XEX7jNDhntbex7tzUS7kLnZsOlFruFJB4Hi/rhDMjXGqHewDZ68nYZVw==",
       "dev": true,
       "license": "Apache-2.0",
       "bin": {
         "playwright-core": "cli.js"
       },
       "engines": {
-        "node": ">=18"
+        "node": ">=20"
       }
     },
     "node_modules/process-warning": {
-      "version": "5.0.0",
-      "resolved": "https://registry.npmjs.org/process-warning/-/process-warning-5.0.0.tgz",
-      "integrity": "sha512-a39t9ApHNx2L4+HBnQKqxxHNs1r7KF+Intd8Q/g1bUh6q0WIp9voPXJ/x0j+ZL45KF1pJd9+q2jLIRMfvEshkA==",
+      "version": "5.1.0",
+      "resolved": "https://registry.npmjs.org/process-warning/-/process-warning-5.1.0.tgz",
+      "integrity": "sha512-jQSaVHsPgtyw60e1rQ/A+/ArPEj/S8pS/vFnyGa/gYFXrKk/6RuDkoqVDQ5NI5MmS01698ltlAk0NoDBNLujRw==",
       "funding": [
         {
           "type": "github",
@@ -334,12 +321,12 @@
       }
     },
     "node_modules/socks": {
-      "version": "2.8.7",
-      "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.7.tgz",
-      "integrity": "sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==",
+      "version": "2.8.9",
+      "resolved": "https://registry.npmjs.org/socks/-/socks-2.8.9.tgz",
+      "integrity": "sha512-LJhUYUvItdQ0LkJTmPeaEObWXAqFyfmP85x0tch/ez9cahmhlBBLbIqDFnvBnUJGagb0JbIQrkBs1wJ+yRYpEw==",
       "license": "MIT",
       "dependencies": {
-        "ip-address": "^10.0.1",
+        "ip-address": "^10.1.1",
         "smart-buffer": "^4.2.0"
       },
       "engines": {
@@ -366,28 +353,34 @@
       }
     },
     "node_modules/thread-stream": {
-      "version": "4.0.0",
-      "resolved": "https://registry.npmjs.org/thread-stream/-/thread-stream-4.0.0.tgz",
-      "integrity": "sha512-4iMVL6HAINXWf1ZKZjIPcz5wYaOdPhtO8ATvZ+Xqp3BTdaqtAwQkNmKORqcIo5YkQqGXq5cwfswDwMqqQNrpJA==",
+      "version": "4.2.0",
+      "resolved": "https://registry.npmjs.org/thread-stream/-/thread-stream-4.2.0.tgz",
+      "integrity": "sha512-e2zZ96wSChazBsbENf/Pcm/4swHt2cEKQ92rhUjkL9GCKiTDJIaTBenjE/m9DXi0QBmTMDkFDdOomUy20A1tDQ==",
       "license": "MIT",
       "dependencies": {
-        "real-require": "^0.2.0"
+        "real-require": "^1.0.0"
       },
       "engines": {
         "node": ">=20"
       }
     },
+    "node_modules/thread-stream/node_modules/real-require": {
+      "version": "1.0.0",
+      "resolved": "https://registry.npmjs.org/real-require/-/real-require-1.0.0.tgz",
+      "integrity": "sha512-P4nbQYQfePJxRSmY+v/KINxVucm4NF3p3s7pJveMTtom52FR4YGltUQLB8idDXwDDWW+eYrWDFbuzUnjoWHF7g==",
+      "license": "MIT"
+    },
     "node_modules/undici-types": {
-      "version": "7.18.2",
-      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.18.2.tgz",
-      "integrity": "sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==",
+      "version": "8.3.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.3.0.tgz",
+      "integrity": "sha512-j375ScV60dom+YkPFIfTLcOiPxkN/buHz5GobjLhixFuANaNs3C9l4GmrWqejgXWJ7BbJcFYpTEUkS1Ge8bpZQ==",
       "dev": true,
       "license": "MIT"
     },
     "node_modules/ws": {
-      "version": "8.19.0",
-      "resolved": "https://registry.npmjs.org/ws/-/ws-8.19.0.tgz",
-      "integrity": "sha512-blAT2mjOEIi0ZzruJfIhb3nps74PRWTCz1IjglWEEpQl5XS/UNama6u2/rjFkDDouqr4L67ry+1aGIALViWjDg==",
+      "version": "8.21.3",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.21.3.tgz",
+      "integrity": "sha512-201TZ/kPWxoPr/OKWjquZR1SWKXcvxdH+e1xrx89b3YbmzLMFCLfnaG1HFIgWzJOEWZ7MvpK++odZufgYR50Rw==",
       "dev": true,
       "license": "MIT",
       "engines": {

e2e/package.json

@@ -7,13 +7,13 @@
     "test:down": "docker compose down -v"
   },
   "devDependencies": {
-    "@playwright/test": "1.58.2",
-    "@types/nodemailer": "^7.0.11",
-    "@types/ws": "^8.5.0",
-    "ws": "^8.18.0"
+    "@playwright/test": "1.62.1",
+    "@types/nodemailer": "^8.0.1",
+    "@types/ws": "^8.18.1",
+    "ws": "^8.21.3"
   },
   "dependencies": {
-    "imapflow": "^1.2.12",
-    "nodemailer": "^8.0.1"
+    "imapflow": "^1.7.1",
+    "nodemailer": "^9.0.5"
   }
 }

e2e/playwright.config.ts

@@ -1,6 +1,7 @@
 import { defineConfig, devices } from '@playwright/test';
 
 const WORKER_BASE = process.env.WORKER_URL!;
+const WORKER_GZIP_BASE = process.env.WORKER_GZIP_URL || '';
 const FRONTEND_BASE = process.env.FRONTEND_URL!;
 
 export default defineConfig({
@@ -16,6 +17,13 @@ export default defineConfig({
         baseURL: WORKER_BASE,
       },
     },
+    {
+      name: 'api-gzip',
+      testDir: './tests/api-gzip',
+      use: {
+        baseURL: WORKER_GZIP_BASE,
+      },
+    },
     {
       name: 'smtp-proxy',
       testDir: './tests/smtp-proxy',
@@ -29,6 +37,8 @@ export default defineConfig({
       use: {
         baseURL: FRONTEND_BASE,
         ...devices['Desktop Chrome'],
+        // Accept self-signed cert from Docker frontend (HTTPS for WebAuthn)
+        ignoreHTTPSErrors: true,
       },
     },
   ],

e2e/scripts/docker-entrypoint.sh

@@ -14,9 +14,54 @@ for i in $(seq 1 60); do
   sleep 1
 done
 
+if [ -n "${WORKER_URL_SUBDOMAIN:-}" ]; then
+  echo "==> Waiting for subdomain worker at $WORKER_URL_SUBDOMAIN ..."
+  for i in $(seq 1 60); do
+    if curl -sf "$WORKER_URL_SUBDOMAIN/health_check" > /dev/null 2>&1; then
+      echo "    Subdomain worker ready after ${i}s"
+      break
+    fi
+    if [ "$i" -eq 60 ]; then
+      echo "ERROR: Subdomain worker not ready after 60s"
+      exit 1
+    fi
+    sleep 1
+  done
+fi
+
+if [ -n "${WORKER_URL_ENV_OFF:-}" ]; then
+  echo "==> Waiting for env-off worker at $WORKER_URL_ENV_OFF ..."
+  for i in $(seq 1 60); do
+    if curl -sf "$WORKER_URL_ENV_OFF/health_check" > /dev/null 2>&1; then
+      echo "    Env-off worker ready after ${i}s"
+      break
+    fi
+    if [ "$i" -eq 60 ]; then
+      echo "ERROR: Env-off worker not ready after 60s"
+      exit 1
+    fi
+    sleep 1
+  done
+fi
+
+if [ -n "${WORKER_GZIP_URL:-}" ]; then
+  echo "==> Waiting for worker-gzip at $WORKER_GZIP_URL ..."
+  for i in $(seq 1 60); do
+    if curl -sf "$WORKER_GZIP_URL/health_check" > /dev/null 2>&1; then
+      echo "    Worker-gzip ready after ${i}s"
+      break
+    fi
+    if [ "$i" -eq 60 ]; then
+      echo "ERROR: Worker-gzip not ready after 60s"
+      exit 1
+    fi
+    sleep 1
+  done
+fi
+
 echo "==> Waiting for frontend at $FRONTEND_URL ..."
 for i in $(seq 1 60); do
-  if curl -sf "$FRONTEND_URL" > /dev/null 2>&1; then
+  if curl -skf "$FRONTEND_URL" > /dev/null 2>&1; then
     echo "    Frontend ready after ${i}s"
     break
   fi
@@ -44,5 +89,26 @@ curl -sf -X POST "$WORKER_URL/admin/db_initialize" > /dev/null
 curl -sf -X POST "$WORKER_URL/admin/db_migration" > /dev/null
 echo "    Database initialized"
 
+if [ -n "${WORKER_URL_SUBDOMAIN:-}" ]; then
+  echo "==> Initializing subdomain worker database"
+  curl -sf -X POST "$WORKER_URL_SUBDOMAIN/admin/db_initialize" > /dev/null
+  curl -sf -X POST "$WORKER_URL_SUBDOMAIN/admin/db_migration" > /dev/null
+  echo "    Subdomain worker database initialized"
+fi
+
+if [ -n "${WORKER_URL_ENV_OFF:-}" ]; then
+  echo "==> Initializing env-off worker database"
+  curl -sf -X POST "$WORKER_URL_ENV_OFF/admin/db_initialize" > /dev/null
+  curl -sf -X POST "$WORKER_URL_ENV_OFF/admin/db_migration" > /dev/null
+  echo "    Env-off database initialized"
+fi
+
+if [ -n "${WORKER_GZIP_URL:-}" ]; then
+  echo "==> Initializing gzip worker database"
+  curl -sf -X POST "$WORKER_GZIP_URL/admin/db_initialize" > /dev/null
+  curl -sf -X POST "$WORKER_GZIP_URL/admin/db_migration" > /dev/null
+  echo "    Gzip worker database initialized"
+fi
+
 echo "==> Running Playwright tests"
 exec npx playwright test "$@"

e2e/tests/api-gzip/mail-gzip.spec.ts

@@ -0,0 +1,270 @@
+import { test, expect } from '@playwright/test';
+import { WORKER_GZIP_URL, TEST_DOMAIN } from '../../fixtures/test-helpers';
+
+/**
+ * These tests run against a worker instance with ENABLE_MAIL_GZIP=true.
+ * They verify gzip-compressed storage and backward-compatible reading.
+ */
+
+// Helper: create address on the gzip worker
+async function createGzipAddress(ctx: any, name: string) {
+  const uniqueName = `${name}${Date.now()}`;
+  const res = await ctx.post(`${WORKER_GZIP_URL}/api/new_address`, {
+    data: { name: uniqueName, domain: TEST_DOMAIN },
+  });
+  if (!res.ok()) throw new Error(`Failed to create address: ${res.status()} ${await res.text()}`);
+  const body = await res.json();
+  return { jwt: body.jwt, address: body.address, address_id: body.address_id };
+}
+
+// Helper: seed mail via receiveMail (goes through email() handler → gzip compression)
+async function receiveGzipMail(
+  ctx: any, address: string,
+  opts: { subject?: string; html?: string; text?: string; from?: string }
+) {
+  const from = opts.from || `sender@${TEST_DOMAIN}`;
+  const subject = opts.subject || 'Test Email';
+  const boundary = `----E2E${Date.now()}`;
+  const htmlPart = opts.html || `<p>${opts.text || 'Hello from E2E'}</p>`;
+  const textPart = opts.text || 'Hello from E2E';
+  const messageId = `<e2e-${Date.now()}-${Math.random().toString(36).slice(2, 10)}@test>`;
+
+  const raw = [
+    `From: ${from}`,
+    `To: ${address}`,
+    `Subject: ${subject}`,
+    `Message-ID: ${messageId}`,
+    `MIME-Version: 1.0`,
+    `Content-Type: multipart/alternative; boundary="${boundary}"`,
+    ``,
+    `--${boundary}`,
+    `Content-Type: text/plain; charset=utf-8`,
+    ``,
+    textPart,
+    `--${boundary}`,
+    `Content-Type: text/html; charset=utf-8`,
+    ``,
+    htmlPart,
+    `--${boundary}--`,
+  ].join('\r\n');
+
+  const res = await ctx.post(`${WORKER_GZIP_URL}/admin/test/receive_mail`, {
+    data: { from, to: address, raw },
+  });
+  if (!res.ok()) throw new Error(`Failed to receive mail: ${res.status()} ${await res.text()}`);
+  const body = await res.json();
+  if (!body.success) throw new Error(`Mail was rejected: ${body.rejected || 'unknown reason'}`);
+}
+
+// Helper: seed mail via seedMail (direct INSERT → plaintext raw, no gzip)
+async function seedPlaintextMail(
+  ctx: any, address: string,
+  opts: { subject?: string; text?: string; from?: string }
+) {
+  const from = opts.from || `sender@${TEST_DOMAIN}`;
+  const subject = opts.subject || 'Plaintext Mail';
+  const messageId = `<e2e-plain-${Date.now()}-${Math.random().toString(36).slice(2, 10)}@test>`;
+  const raw = [
+    `From: ${from}`,
+    `To: ${address}`,
+    `Subject: ${subject}`,
+    `Message-ID: ${messageId}`,
+    `Content-Type: text/plain; charset=utf-8`,
+    ``,
+    opts.text || 'Hello plaintext from E2E',
+  ].join('\r\n');
+
+  const res = await ctx.post(`${WORKER_GZIP_URL}/admin/test/seed_mail`, {
+    data: { address, source: from, raw, message_id: messageId },
+  });
+  if (!res.ok()) throw new Error(`Failed to seed mail: ${res.status()} ${await res.text()}`);
+}
+
+// Helper: delete address on gzip worker
+async function deleteGzipAddress(ctx: any, jwt: string) {
+  await ctx.delete(`${WORKER_GZIP_URL}/api/delete_address`, {
+    headers: { Authorization: `Bearer ${jwt}` },
+  });
+}
+
+test.describe('Mail Gzip Storage', () => {
+  test.beforeEach(() => {
+    test.skip(!WORKER_GZIP_URL, 'WORKER_GZIP_URL not set — skipping gzip tests');
+  });
+
+  test('gzip-compressed mail is readable in list', async ({ request }) => {
+    const { jwt, address } = await createGzipAddress(request, 'gzip-list');
+    try {
+      await receiveGzipMail(request, address, {
+        subject: 'Gzip List Test',
+        text: 'compressed content here',
+      });
+
+      const res = await request.get(`${WORKER_GZIP_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(res.ok()).toBe(true);
+      const { results } = await res.json();
+      expect(results).toHaveLength(1);
+      expect(results[0].raw).toContain('Gzip List Test');
+      expect(results[0].raw).toContain('compressed content here');
+    } finally {
+      await deleteGzipAddress(request, jwt);
+    }
+  });
+
+  test('gzip-compressed mail is readable in detail', async ({ request }) => {
+    const { jwt, address } = await createGzipAddress(request, 'gzip-detail');
+    try {
+      await receiveGzipMail(request, address, {
+        subject: 'Gzip Detail Test',
+        html: '<b>bold gzip</b>',
+      });
+
+      const listRes = await request.get(`${WORKER_GZIP_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      const { results } = await listRes.json();
+      expect(results.length).toBeGreaterThanOrEqual(1);
+      const mailId = results[0].id;
+
+      const detailRes = await request.get(`${WORKER_GZIP_URL}/api/mail/${mailId}`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(detailRes.ok()).toBe(true);
+      const mail = await detailRes.json();
+      expect(mail.raw).toContain('Gzip Detail Test');
+      expect(mail.raw).toContain('<b>bold gzip</b>');
+    } finally {
+      await deleteGzipAddress(request, jwt);
+    }
+  });
+
+  test('gzip-compressed mail is readable through admin detail API', async ({ request }) => {
+    const { jwt, address } = await createGzipAddress(request, 'gzip-admin-detail');
+    try {
+      await receiveGzipMail(request, address, {
+        subject: 'Gzip Admin Detail Test',
+        text: 'admin compressed content',
+      });
+
+      const listRes = await request.get(`${WORKER_GZIP_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      const { results } = await listRes.json();
+      expect(results.length).toBeGreaterThanOrEqual(1);
+      const mailId = results[0].id;
+
+      const detailRes = await request.get(`${WORKER_GZIP_URL}/admin/mails/${mailId}`, {
+        headers: { 'x-admin-auth': 'e2e-admin-pass' },
+      });
+      expect(detailRes.ok()).toBe(true);
+      const mail = await detailRes.json();
+      expect(mail.raw).toContain('Gzip Admin Detail Test');
+      expect(mail.raw).toContain('admin compressed content');
+      expect(mail.raw_blob).toBeUndefined();
+    } finally {
+      await deleteGzipAddress(request, jwt);
+    }
+  });
+
+  test('mixed: plaintext seed + gzip receive both readable in same list', async ({ request }) => {
+    const { jwt, address } = await createGzipAddress(request, 'gzip-mixed');
+    try {
+      // 1. Direct INSERT plaintext (simulates pre-gzip data)
+      await seedPlaintextMail(request, address, {
+        subject: 'Old Plaintext Mail',
+        text: 'legacy plain content',
+      });
+
+      // 2. receiveMail → goes through email() handler → gzip compressed
+      await receiveGzipMail(request, address, {
+        subject: 'New Gzip Mail',
+        text: 'new compressed content',
+      });
+
+      const res = await request.get(`${WORKER_GZIP_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(res.ok()).toBe(true);
+      const { results } = await res.json();
+      expect(results).toHaveLength(2);
+
+      // Both mails should have readable raw content
+      const subjects = results.map((r: any) => r.raw);
+      expect(subjects.some((r: string) => r.includes('Old Plaintext Mail'))).toBe(true);
+      expect(subjects.some((r: string) => r.includes('New Gzip Mail'))).toBe(true);
+      expect(subjects.some((r: string) => r.includes('legacy plain content'))).toBe(true);
+      expect(subjects.some((r: string) => r.includes('new compressed content'))).toBe(true);
+    } finally {
+      await deleteGzipAddress(request, jwt);
+    }
+  });
+
+  test('admin internal mail (sendAdminInternalMail) is gzip-compressed and readable', async ({ request }) => {
+    const { jwt, address } = await createGzipAddress(request, 'gzip-admin-mail');
+    try {
+      // 1. Request send access → creates address_sender row
+      const reqAccessRes = await request.post(`${WORKER_GZIP_URL}/api/request_send_mail_access`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(reqAccessRes.ok()).toBe(true);
+
+      // 2. Get address_sender id
+      const senderListRes = await request.get(
+        `${WORKER_GZIP_URL}/admin/address_sender?limit=10&offset=0&address=${encodeURIComponent(address)}`,
+      );
+      expect(senderListRes.ok()).toBe(true);
+      const senderList = await senderListRes.json();
+      expect(senderList.results.length).toBeGreaterThanOrEqual(1);
+      const senderId = senderList.results[0].id;
+
+      // 3. Update send access via admin API → triggers sendAdminInternalMail
+      const updateRes = await request.post(`${WORKER_GZIP_URL}/admin/address_sender`, {
+        data: { address, address_id: senderId, balance: 99, enabled: true },
+      });
+      expect(updateRes.ok()).toBe(true);
+
+      // 4. Verify the internal mail is readable
+      const mailsRes = await request.get(`${WORKER_GZIP_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(mailsRes.ok()).toBe(true);
+      const { results } = await mailsRes.json();
+      expect(results.length).toBeGreaterThanOrEqual(1);
+
+      // mimetext base64-encodes the Subject header, so match on body content instead
+      const internalMail = results.find((m: any) => m.raw?.includes('balance: 99'));
+      expect(internalMail).toBeDefined();
+      expect(internalMail.raw).toContain('admin@internal');
+      expect(internalMail.raw).toContain('balance: 99');
+      expect(internalMail).not.toHaveProperty('raw_blob');
+    } finally {
+      await deleteGzipAddress(request, jwt);
+    }
+  });
+
+  test('raw_blob field is not exposed in API response', async ({ request }) => {
+    const { jwt, address } = await createGzipAddress(request, 'gzip-noblob');
+    try {
+      await receiveGzipMail(request, address, { subject: 'No Blob Leak' });
+
+      // Check list response
+      const listRes = await request.get(`${WORKER_GZIP_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      const { results } = await listRes.json();
+      expect(results.length).toBeGreaterThanOrEqual(1);
+      expect(results[0]).not.toHaveProperty('raw_blob');
+
+      // Check detail response
+      const detailRes = await request.get(`${WORKER_GZIP_URL}/api/mail/${results[0].id}`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      const mail = await detailRes.json();
+      expect(mail).not.toHaveProperty('raw_blob');
+    } finally {
+      await deleteGzipAddress(request, jwt);
+    }
+  });
+});

e2e/tests/api/address-activity-throttle.spec.ts

@@ -0,0 +1,79 @@
+import { test, expect } from '@playwright/test';
+import {
+  WORKER_URL,
+  createTestAddress,
+  deleteAddress,
+  hashPassword,
+} from '../../fixtures/test-helpers';
+
+const waitForNextTimestamp = () => new Promise((resolve) => setTimeout(resolve, 1_100));
+
+test.describe('Address activity throttling', () => {
+  test('does not rewrite recently active addresses from user settings', async ({ request }) => {
+    const email = `activity-throttle-${Date.now()}@test.example.com`;
+    const password = hashPassword('test-password-123');
+    const address = await createTestAddress(request, 'activity-throttle');
+    let userId: number | undefined;
+
+    try {
+      const settingsRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+        data: { enable: true, enableMailVerify: false },
+      });
+      expect(settingsRes.ok()).toBe(true);
+
+      const registerRes = await request.post(`${WORKER_URL}/user_api/register`, {
+        data: { email, password },
+      });
+      expect(registerRes.ok()).toBe(true);
+
+      const loginRes = await request.post(`${WORKER_URL}/user_api/login`, {
+        data: { email, password },
+      });
+      expect(loginRes.ok()).toBe(true);
+      const { jwt: userJwt } = await loginRes.json();
+      const payload = JSON.parse(Buffer.from(userJwt.split('.')[1], 'base64url').toString('utf8'));
+      userId = payload.user_id;
+
+      const bindRes = await request.post(`${WORKER_URL}/user_api/bind_address`, {
+        headers: {
+          Authorization: `Bearer ${address.jwt}`,
+          'x-user-token': userJwt,
+        },
+      });
+      expect(bindRes.ok()).toBe(true);
+
+      const beforeRes = await request.get(`${WORKER_URL}/user_api/bind_address`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(beforeRes.ok()).toBe(true);
+      const before = await beforeRes.json();
+      const initialUpdatedAt = before.results.find(
+        (row: { name: string }) => row.name === address.address,
+      )?.updated_at;
+      expect(initialUpdatedAt).toBeTruthy();
+
+      await waitForNextTimestamp();
+      const userSettingsRes = await request.get(`${WORKER_URL}/user_api/settings`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(userSettingsRes.ok()).toBe(true);
+      await waitForNextTimestamp();
+
+      const afterRes = await request.get(`${WORKER_URL}/user_api/bind_address`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(afterRes.ok()).toBe(true);
+      const after = await afterRes.json();
+      const updatedAt = after.results.find(
+        (row: { name: string }) => row.name === address.address,
+      )?.updated_at;
+      expect(updatedAt).toBe(initialUpdatedAt);
+    } finally {
+      await deleteAddress(request, address.jwt);
+      if (userId) {
+        const deleteUserRes = await request.delete(`${WORKER_URL}/admin/users/${userId}`);
+        expect(deleteUserRes.ok()).toBe(true);
+      }
+    }
+  });
+});

e2e/tests/api/address-lifecycle.spec.ts

@@ -1,17 +1,15 @@
 import { test, expect } from '@playwright/test';
-import { WORKER_URL, TEST_DOMAIN, createTestAddress, deleteAddress, requestSendAccess } from '../../fixtures/test-helpers';
+import { WORKER_URL, TEST_DOMAIN, createTestAddress, deleteAddress } from '../../fixtures/test-helpers';
 
 test.describe('Address Lifecycle', () => {
-  test('create address, request send access, fetch settings, then delete', async ({ request }) => {
+  test('create address, auto-init send balance via settings, then delete', async ({ request }) => {
     // Create address
-    const { jwt, address } = await createTestAddress(request, 'lifecycle-test');
+    const { jwt, address, address_id } = await createTestAddress(request, 'lifecycle-test');
     expect(address).toContain('@' + TEST_DOMAIN);
     expect(jwt).toBeTruthy();
+    expect(address_id).toBeGreaterThan(0);
 
-    // Request send access (creates address_sender row with DEFAULT_SEND_BALANCE)
-    await requestSendAccess(request, jwt);
-
-    // Fetch address settings — balance should match DEFAULT_SEND_BALANCE=10
+    // Fetch address settings — balance should auto-initialize from DEFAULT_SEND_BALANCE=10
     const settingsRes = await request.get(`${WORKER_URL}/api/settings`, {
       headers: { Authorization: `Bearer ${jwt}` },
     });

e2e/tests/api/address-password.spec.ts

@@ -1,15 +1,16 @@
 import { test, expect } from '@playwright/test';
-import { WORKER_URL, createTestAddress, deleteAddress } from '../../fixtures/test-helpers';
+import { WORKER_URL, createTestAddress, deleteAddress, hashPassword } from '../../fixtures/test-helpers';
 
 test.describe('Address Password Login', () => {
   test('set password then login with it', async ({ request }) => {
     const { jwt, address } = await createTestAddress(request, 'pwd-login');
+    const passwordHash = hashPassword('test-password-123');
 
     try {
       // Set a password on the address
       const changePwdRes = await request.post(`${WORKER_URL}/api/address_change_password`, {
         headers: { Authorization: `Bearer ${jwt}` },
-        data: { new_password: 'test-password-123' },
+        data: { new_password: passwordHash },
       });
       expect(changePwdRes.ok()).toBe(true);
       const changePwdBody = await changePwdRes.json();
@@ -17,7 +18,7 @@ test.describe('Address Password Login', () => {
 
       // Login with the correct password
       const loginRes = await request.post(`${WORKER_URL}/api/address_login`, {
-        data: { email: address, password: 'test-password-123' },
+        data: { email: address, password: passwordHash },
       });
       expect(loginRes.ok()).toBe(true);
       const loginBody = await loginRes.json();
@@ -36,12 +37,13 @@ test.describe('Address Password Login', () => {
 
   test('login with wrong password returns 401', async ({ request }) => {
     const { jwt, address } = await createTestAddress(request, 'pwd-wrong');
+    const passwordHash = hashPassword('correct-password');
 
     try {
       // Set a password
       const changePwdRes = await request.post(`${WORKER_URL}/api/address_change_password`, {
         headers: { Authorization: `Bearer ${jwt}` },
-        data: { new_password: 'correct-password' },
+        data: { new_password: passwordHash },
       });
       expect(changePwdRes.ok()).toBe(true);
       const changePwdBody = await changePwdRes.json();
@@ -49,11 +51,117 @@ test.describe('Address Password Login', () => {
 
       // Login with wrong password
       const loginRes = await request.post(`${WORKER_URL}/api/address_login`, {
-        data: { email: address, password: 'wrong-password' },
+        data: { email: address, password: hashPassword('wrong-password') },
       });
       expect(loginRes.status()).toBe(401);
     } finally {
       await deleteAddress(request, jwt);
     }
   });
+
+  test('admin reset stores frontend-hashed address password', async ({ request }) => {
+    const { jwt, address, address_id } = await createTestAddress(request, 'pwd-admin-reset');
+    const plainPassword = `admin-reset-${Date.now()}`;
+    const passwordHash = hashPassword(plainPassword);
+
+    try {
+      const resetRes = await request.post(`${WORKER_URL}/admin/address/${address_id}/reset_password`, {
+        data: { password: passwordHash },
+      });
+      expect(resetRes.ok()).toBe(true);
+      await expect(resetRes.json()).resolves.toMatchObject({ success: true });
+
+      const plaintextLoginRes = await request.post(`${WORKER_URL}/api/address_login`, {
+        data: { email: address, password: plainPassword },
+      });
+      expect(plaintextLoginRes.status()).toBe(401);
+
+      const loginRes = await request.post(`${WORKER_URL}/api/address_login`, {
+        data: { email: address, password: passwordHash },
+      });
+      expect(loginRes.ok()).toBe(true);
+      const loginBody = await loginRes.json();
+      expect(loginBody.jwt).toBeTruthy();
+      expect(loginBody.address).toBe(address);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('admin address list does not expose stored password hash', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'pwd-list-hidden');
+    const passwordHash = hashPassword('list-hidden-password');
+
+    try {
+      const changePwdRes = await request.post(`${WORKER_URL}/api/address_change_password`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+        data: { new_password: passwordHash },
+      });
+      expect(changePwdRes.ok()).toBe(true);
+
+      const listRes = await request.get(
+        `${WORKER_URL}/admin/address?limit=10&offset=0&query=${encodeURIComponent(address)}`
+      );
+      expect(listRes.ok()).toBe(true);
+      const listBody = await listRes.json();
+      const listedAddress = listBody.results.find((row: { name: string }) => row.name === address);
+      expect(listedAddress).toBeTruthy();
+      expect(listedAddress).not.toHaveProperty('password');
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('user bind address list does not expose stored password hash', async ({ request }) => {
+    const userEmail = `pwd-bind-hidden-${Date.now()}@test.example.com`;
+    const userPasswordHash = hashPassword('bind-hidden-user-password');
+    const { jwt, address } = await createTestAddress(request, 'pwd-bind-hidden');
+    const addressPasswordHash = hashPassword('bind-hidden-address-password');
+
+    try {
+      const enableRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+        data: {
+          enable: true,
+          enableMailVerify: false,
+        },
+      });
+      expect(enableRes.ok()).toBe(true);
+
+      const registerRes = await request.post(`${WORKER_URL}/user_api/register`, {
+        data: { email: userEmail, password: userPasswordHash },
+      });
+      expect(registerRes.ok()).toBe(true);
+
+      const loginRes = await request.post(`${WORKER_URL}/user_api/login`, {
+        data: { email: userEmail, password: userPasswordHash },
+      });
+      expect(loginRes.ok()).toBe(true);
+      const { jwt: userJwt } = await loginRes.json();
+
+      const changePwdRes = await request.post(`${WORKER_URL}/api/address_change_password`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+        data: { new_password: addressPasswordHash },
+      });
+      expect(changePwdRes.ok()).toBe(true);
+
+      const bindRes = await request.post(`${WORKER_URL}/user_api/bind_address`, {
+        headers: {
+          Authorization: `Bearer ${jwt}`,
+          'x-user-token': userJwt,
+        },
+      });
+      expect(bindRes.ok()).toBe(true);
+
+      const listRes = await request.get(`${WORKER_URL}/user_api/bind_address`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(listRes.ok()).toBe(true);
+      const listBody = await listRes.json();
+      const listedAddress = listBody.results.find((row: { name: string }) => row.name === address);
+      expect(listedAddress).toBeTruthy();
+      expect(listedAddress).not.toHaveProperty('password');
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
 });

e2e/tests/api/admin-address-query.spec.ts

@@ -0,0 +1,48 @@
+import { test, expect } from '@playwright/test';
+import { WORKER_URL, TEST_DOMAIN, createTestAddress } from '../../fixtures/test-helpers';
+
+// Regression tests for #956: long admin search queries must not trigger
+// D1's "LIKE or GLOB pattern too complex" error.
+test.describe('Admin Address Query (#956)', () => {
+  test('short query (subdomain fragment) returns matching address via LIKE', async ({ request }) => {
+    const created = await createTestAddress(request, 'q956short');
+    const fragment = created.address.split('@')[0].slice(0, 8);
+
+    const res = await request.get(`${WORKER_URL}/admin/address`, {
+      params: { limit: '20', offset: '0', query: fragment },
+    });
+    expect(res.ok()).toBe(true);
+    const body = await res.json();
+    expect(Array.isArray(body.results)).toBe(true);
+    const names: string[] = body.results.map((r: any) => r.name);
+    expect(names).toContain(created.address);
+  });
+
+  test('long query (>50-byte pattern) does not crash with D1 LIKE error', async ({ request }) => {
+    const longQuery = 'a48r893s@5hx7zb.nationalgeographic.algomindtrade.com';
+    expect(new TextEncoder().encode(`%${longQuery}%`).length).toBeGreaterThan(50);
+
+    const res = await request.get(`${WORKER_URL}/admin/address`, {
+      params: { limit: '20', offset: '0', query: longQuery },
+    });
+    expect(res.status()).toBe(200);
+    const body = await res.json();
+    expect(Array.isArray(body.results)).toBe(true);
+    expect(body.results.length).toBe(0);
+    expect(body.count).toBe(0);
+  });
+
+  test('long query also works for /admin/users', async ({ request }) => {
+    const longQuery = 'no-such-user-' + 'x'.repeat(40) + `@${TEST_DOMAIN}`;
+    expect(new TextEncoder().encode(`%${longQuery}%`).length).toBeGreaterThan(50);
+
+    const res = await request.get(`${WORKER_URL}/admin/users`, {
+      params: { limit: '20', offset: '0', query: longQuery },
+    });
+    expect(res.status()).toBe(200);
+    const body = await res.json();
+    expect(Array.isArray(body.results)).toBe(true);
+    expect(body.results.length).toBe(0);
+    expect(body.count).toBe(0);
+  });
+});

e2e/tests/api/admin-config.spec.ts

@@ -0,0 +1,73 @@
+import { expect, test } from '@playwright/test';
+import { WORKER_URL } from '../../fixtures/test-helpers';
+
+const ADMIN_HEADERS = { 'x-admin-auth': 'e2e-admin-pass' };
+
+test.describe('Admin Config and D1 Storage', () => {
+  test('reports database size in the database status response', async ({ request }) => {
+    const response = await request.get(`${WORKER_URL}/admin/db_version`, {
+      headers: ADMIN_HEADERS,
+    });
+
+    expect(response.ok()).toBe(true);
+    const body = await response.json();
+    expect(body.database_size).toEqual(expect.any(Number));
+    expect(body.database_size).toBeGreaterThan(0);
+  });
+
+  test('saves and retrieves a namespaced config value', async ({ request }) => {
+    const saveResponse = await request.post(`${WORKER_URL}/admin/config`, {
+      headers: ADMIN_HEADERS,
+      data: { key: 'd1_storage_plan', value: 'free' },
+    });
+
+    expect(saveResponse.ok()).toBe(true);
+    expect(await saveResponse.json()).toEqual({
+      success: true,
+      key: 'd1_storage_plan',
+      value: 'free',
+    });
+
+    const getResponse = await request.get(`${WORKER_URL}/admin/config/d1_storage_plan`, {
+      headers: ADMIN_HEADERS,
+    });
+
+    expect(getResponse.ok()).toBe(true);
+    expect(await getResponse.json()).toEqual({
+      key: 'd1_storage_plan',
+      value: 'free',
+    });
+  });
+
+  test('keeps config values isolated from internal settings', async ({ request }) => {
+    const versionBeforeResponse = await request.get(`${WORKER_URL}/admin/db_version`, {
+      headers: ADMIN_HEADERS,
+    });
+    const versionBefore = (await versionBeforeResponse.json()).current_db_version;
+
+    const saveResponse = await request.post(`${WORKER_URL}/admin/config`, {
+      headers: ADMIN_HEADERS,
+      data: { key: 'db_version', value: 'shadow-version' },
+    });
+    expect(saveResponse.ok()).toBe(true);
+
+    const versionAfterResponse = await request.get(`${WORKER_URL}/admin/db_version`, {
+      headers: ADMIN_HEADERS,
+    });
+    expect((await versionAfterResponse.json()).current_db_version).toBe(versionBefore);
+  });
+
+  test('rejects invalid keys and non-string values', async ({ request }) => {
+    const invalidKeyResponse = await request.post(`${WORKER_URL}/admin/config`, {
+      headers: ADMIN_HEADERS,
+      data: { key: 'invalid key', value: 'value' },
+    });
+    expect(invalidKeyResponse.status()).toBe(400);
+
+    const invalidValueResponse = await request.post(`${WORKER_URL}/admin/config`, {
+      headers: ADMIN_HEADERS,
+      data: { key: 'valid_key', value: 1 },
+    });
+    expect(invalidValueResponse.status()).toBe(400);
+  });
+});

e2e/tests/api/admin-new-address.spec.ts

@@ -0,0 +1,131 @@
+import { test, expect } from '@playwright/test';
+import { WORKER_URL, TEST_DOMAIN } from '../../fixtures/test-helpers';
+
+test.describe('Admin New Address', () => {
+  test('should return address_id in response', async ({ request }) => {
+    const uniqueName = `admin-test${Date.now()}`;
+    const res = await request.post(`${WORKER_URL}/admin/new_address`, {
+      data: { name: uniqueName, domain: TEST_DOMAIN },
+    });
+
+    expect(res.ok()).toBe(true);
+    const body = await res.json();
+
+    expect(body.address).toContain('@' + TEST_DOMAIN);
+    expect(body.jwt).toBeTruthy();
+    expect(body.address_id).toBeGreaterThan(0);
+    expect(typeof body.address_id).toBe('number');
+  });
+
+  test('normalizes uppercase configured prefix and domain', async ({ request }) => {
+    const uniqueName = `admincase${Date.now()}`;
+    const res = await request.post(`${WORKER_URL}/admin/new_address`, {
+      data: { name: uniqueName, domain: TEST_DOMAIN.toUpperCase(), enablePrefix: true },
+    });
+
+    expect(res.ok()).toBe(true);
+    const body = await res.json();
+
+    expect(body.address).toBe(`tmp${uniqueName}@${TEST_DOMAIN}`);
+    expect(body.jwt).toBeTruthy();
+    expect(body.address_id).toBeGreaterThan(0);
+  });
+
+  test('falls back to domains when default domains is empty', async ({ request }) => {
+    const uniqueName = `fallback${Date.now().toString(36)}`;
+    const res = await request.post(`${WORKER_URL}/api/new_address`, {
+      data: { name: uniqueName },
+    });
+
+    expect(res.ok()).toBe(true);
+    const body = await res.json();
+
+    expect(body.address).toBe(`tmp${uniqueName}@${TEST_DOMAIN}`);
+    expect(body.jwt).toBeTruthy();
+    expect(body.address_id).toBeGreaterThan(0);
+  });
+
+  test('normalizes user role domains and prefix', async ({ request }) => {
+    const suffix = `${Date.now()}${Math.random().toString(36).slice(2, 8)}`;
+    const email = `role-case-${suffix}@${TEST_DOMAIN}`;
+    const password = `role-pass-${suffix}`;
+    const name = `rolecase${suffix}`;
+
+    const createUserRes = await request.post(`${WORKER_URL}/admin/users`, {
+      data: { email, password },
+    });
+    expect(createUserRes.ok()).toBe(true);
+
+    const usersRes = await request.get(`${WORKER_URL}/admin/users`, {
+      params: { limit: '20', offset: '0', query: email },
+    });
+    expect(usersRes.ok()).toBe(true);
+    const usersBody = await usersRes.json();
+    const user = usersBody.results.find((row: { user_email: string }) => row.user_email === email);
+    expect(user).toBeTruthy();
+
+    const updateRoleRes = await request.post(`${WORKER_URL}/admin/user_roles`, {
+      data: { user_id: user.id, role_text: 'case-role' },
+    });
+    expect(updateRoleRes.ok()).toBe(true);
+
+    const loginRes = await request.post(`${WORKER_URL}/user_api/login`, {
+      data: { email, password },
+    });
+    expect(loginRes.ok()).toBe(true);
+    const { jwt: userJwt } = await loginRes.json();
+
+    const createAddressRes = await request.post(`${WORKER_URL}/api/new_address`, {
+      headers: { 'x-user-token': userJwt },
+      data: { name },
+    });
+    expect(createAddressRes.ok()).toBe(true);
+    const addressBody = await createAddressRes.json();
+
+    expect(addressBody.address).toBe(`role${name}@${TEST_DOMAIN}`);
+    expect(addressBody.jwt).toBeTruthy();
+    expect(addressBody.address_id).toBeGreaterThan(0);
+  });
+
+  test('falls back to default domains when user role domains is empty', async ({ request }) => {
+    const suffix = `${Date.now()}${Math.random().toString(36).slice(2, 8)}`;
+    const email = `empty-role-${suffix}@${TEST_DOMAIN}`;
+    const password = `empty-role-pass-${suffix}`;
+    const name = `emptyrole${suffix}`;
+
+    const createUserRes = await request.post(`${WORKER_URL}/admin/users`, {
+      data: { email, password },
+    });
+    expect(createUserRes.ok()).toBe(true);
+
+    const usersRes = await request.get(`${WORKER_URL}/admin/users`, {
+      params: { limit: '20', offset: '0', query: email },
+    });
+    expect(usersRes.ok()).toBe(true);
+    const usersBody = await usersRes.json();
+    const user = usersBody.results.find((row: { user_email: string }) => row.user_email === email);
+    expect(user).toBeTruthy();
+
+    const updateRoleRes = await request.post(`${WORKER_URL}/admin/user_roles`, {
+      data: { user_id: user.id, role_text: 'empty-role' },
+    });
+    expect(updateRoleRes.ok()).toBe(true);
+
+    const loginRes = await request.post(`${WORKER_URL}/user_api/login`, {
+      data: { email, password },
+    });
+    expect(loginRes.ok()).toBe(true);
+    const { jwt: userJwt } = await loginRes.json();
+
+    const createAddressRes = await request.post(`${WORKER_URL}/api/new_address`, {
+      headers: { 'x-user-token': userJwt },
+      data: { name },
+    });
+    expect(createAddressRes.ok()).toBe(true);
+    const addressBody = await createAddressRes.json();
+
+    expect(addressBody.address).toBe(`empty${name}@${TEST_DOMAIN}`);
+    expect(addressBody.jwt).toBeTruthy();
+    expect(addressBody.address_id).toBeGreaterThan(0);
+  });
+});

e2e/tests/api/auto-reply-trigger.spec.ts

@@ -0,0 +1,185 @@
+import { test, expect } from '@playwright/test';
+import type { APIRequestContext } from '@playwright/test';
+import { WORKER_URL, createTestAddress, deleteAddress } from '../../fixtures/test-helpers';
+
+test.describe('Auto Reply Trigger (#459)', () => {
+  /**
+   * Bug #459: source_prefix empty string causes auto-reply to never trigger.
+   * The old condition `results.source_prefix && ...` short-circuits when
+   * source_prefix is "" (falsy). Fix: empty source_prefix should match all.
+   */
+  test('empty source_prefix triggers auto-reply for any sender', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'auto-reply-trigger');
+
+    try {
+      // Configure auto-reply with empty source_prefix (match all senders)
+      const saveRes = await request.post(`${WORKER_URL}/api/auto_reply`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+        data: {
+          auto_reply: {
+            name: 'Auto Bot',
+            subject: 'Auto Reply',
+            source_prefix: '',
+            message: 'Thanks for your email!',
+            enabled: true,
+          },
+        },
+      });
+      expect(saveRes.ok()).toBe(true);
+
+      // Send a mail to the address — should trigger auto-reply
+      const receiveRes = await seedTestMailWithReply(request, address, {
+        from: 'anyone@other.com',
+        subject: 'Hello',
+        text: 'Test message',
+      });
+      expect(receiveRes.success).toBe(true);
+      expect(receiveRes.replyCalled).toBe(true);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('source_prefix startsWith still works (backward compat)', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'auto-reply-prefix');
+
+    try {
+      const saveRes = await request.post(`${WORKER_URL}/api/auto_reply`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+        data: {
+          auto_reply: {
+            name: 'Prefix Bot',
+            subject: 'Prefix Reply',
+            source_prefix: 'vip@',
+            message: 'VIP auto-reply',
+            enabled: true,
+          },
+        },
+      });
+      expect(saveRes.ok()).toBe(true);
+
+      // Matching sender — should trigger
+      const matchRes = await seedTestMailWithReply(request, address, {
+        from: 'vip@example.com',
+        subject: 'VIP mail',
+      });
+      expect(matchRes.replyCalled).toBe(true);
+
+      // Non-matching sender — should NOT trigger
+      const noMatchRes = await seedTestMailWithReply(request, address, {
+        from: 'random@example.com',
+        subject: 'Random mail',
+      });
+      expect(noMatchRes.replyCalled).toBe(false);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('source_prefix regex match', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'auto-reply-regex');
+
+    try {
+      // Configure regex: match senders from example.com or example.org
+      const saveRes = await request.post(`${WORKER_URL}/api/auto_reply`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+        data: {
+          auto_reply: {
+            name: 'Regex Bot',
+            subject: 'Regex Reply',
+            source_prefix: '/@example\\.(com|org)$/',
+            message: 'Regex auto-reply',
+            enabled: true,
+          },
+        },
+      });
+      expect(saveRes.ok()).toBe(true);
+
+      // Matching sender
+      const matchRes = await seedTestMailWithReply(request, address, {
+        from: 'user@example.com',
+        subject: 'Match test',
+      });
+      expect(matchRes.replyCalled).toBe(true);
+
+      // Another matching sender
+      const matchRes2 = await seedTestMailWithReply(request, address, {
+        from: 'user@example.org',
+        subject: 'Match test 2',
+      });
+      expect(matchRes2.replyCalled).toBe(true);
+
+      // Non-matching sender
+      const noMatchRes = await seedTestMailWithReply(request, address, {
+        from: 'user@other.com',
+        subject: 'No match test',
+      });
+      expect(noMatchRes.replyCalled).toBe(false);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('disabled auto-reply does not trigger', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'auto-reply-disabled');
+
+    try {
+      const saveRes = await request.post(`${WORKER_URL}/api/auto_reply`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+        data: {
+          auto_reply: {
+            name: 'Disabled Bot',
+            subject: 'Should not reply',
+            source_prefix: '',
+            message: 'This should never be sent',
+            enabled: false,
+          },
+        },
+      });
+      expect(saveRes.ok()).toBe(true);
+
+      const receiveRes = await seedTestMailWithReply(request, address, {
+        from: 'anyone@other.com',
+        subject: 'Test disabled',
+      });
+      expect(receiveRes.success).toBe(true);
+      expect(receiveRes.replyCalled).toBe(false);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+});
+
+/**
+ * Send a mail via receive_mail endpoint and return the response
+ * including replyCalled field.
+ */
+async function seedTestMailWithReply(
+  ctx: APIRequestContext,
+  address: string,
+  opts: { from?: string; subject?: string; text?: string }
+): Promise<{ success: boolean; replyCalled: boolean }> {
+  const from = opts.from || 'sender@test.example.com';
+  const subject = opts.subject || 'Test Email';
+  const text = opts.text || 'Hello from E2E';
+  const messageId = `<e2e-${Date.now()}-${Math.random().toString(36).slice(2, 10)}@test>`;
+
+  const raw = [
+    `From: ${from}`,
+    `To: ${address}`,
+    `Subject: ${subject}`,
+    `Message-ID: ${messageId}`,
+    `MIME-Version: 1.0`,
+    `Content-Type: text/plain; charset=utf-8`,
+    ``,
+    text,
+  ].join('\r\n');
+
+  const res = await ctx.post(`${WORKER_URL}/admin/test/receive_mail`, {
+    data: { from, to: address, raw },
+  });
+  if (!res.ok()) {
+    throw new Error(`Failed to receive mail: ${res.status()} ${await res.text()}`);
+  }
+  return await res.json();
+}

e2e/tests/api/cleanup.spec.ts

@@ -0,0 +1,104 @@
+import { test, expect, type APIRequestContext } from '@playwright/test';
+import { WORKER_URL, createTestAddress, deleteAddress } from '../../fixtures/test-helpers';
+
+const listMails = async (request: APIRequestContext, address: string) => {
+  const response = await request.get(`${WORKER_URL}/admin/mails`, {
+    params: { address, limit: '100', offset: '0' },
+  });
+  expect(response.ok()).toBe(true);
+  return response.json();
+};
+
+test.describe('Bounded cleanup', () => {
+  test('cleans at most one batch and continues on the next run', async ({ request }) => {
+    const address = `cleanup-batch-${Date.now()}@test.example.com`;
+    const seedResponses = await Promise.all(Array.from({ length: 11 }, (_, index) =>
+      request.post(`${WORKER_URL}/admin/test/seed_mail`, {
+        data: {
+          address,
+          raw: 'old cleanup mail',
+          message_id: `<cleanup-old-${Date.now()}-${index}@test>`,
+        },
+      })
+    ));
+    expect(seedResponses.every((response) => response.ok())).toBe(true);
+    await new Promise((resolve) => setTimeout(resolve, 1100));
+
+    const firstCleanup = await request.post(`${WORKER_URL}/admin/cleanup`, {
+      data: { cleanType: 'mails', cleanDays: 0 },
+    });
+    expect(firstCleanup.ok()).toBe(true);
+
+    const afterFirstCleanup = await listMails(request, address);
+    expect(afterFirstCleanup.count).toBe(1);
+
+    const secondCleanup = await request.post(`${WORKER_URL}/admin/cleanup`, {
+      data: { cleanType: 'mails', cleanDays: 0 },
+    });
+    expect(secondCleanup.ok()).toBe(true);
+
+    const afterSecondCleanup = await listMails(request, address);
+    expect(afterSecondCleanup.count).toBe(0);
+
+    const recentMailResponse = await request.post(`${WORKER_URL}/admin/test/seed_mail`, {
+      data: {
+        address,
+        raw: 'recent cleanup mail',
+        message_id: `<cleanup-recent-${Date.now()}@test>`,
+      },
+    });
+    expect(recentMailResponse.ok()).toBe(true);
+
+    const recentCleanup = await request.post(`${WORKER_URL}/admin/cleanup`, {
+      data: { cleanType: 'mails', cleanDays: 1 },
+    });
+    expect(recentCleanup.ok()).toBe(true);
+
+    const recentMails = await listMails(request, address);
+    expect(recentMails.count).toBe(1);
+    expect(recentMails.results[0].raw).toBe('recent cleanup mail');
+    await request.delete(`${WORKER_URL}/admin/mails/${recentMails.results[0].id}`);
+  });
+
+  test('deletes one address batch and its related data', async ({ request }) => {
+    const oldAddress = await createTestAddress(request, 'cleanup-old');
+
+    const seedResponse = await request.post(`${WORKER_URL}/admin/test/seed_mail`, {
+      data: {
+        address: oldAddress.address,
+        raw: 'address cleanup mail',
+        message_id: `<cleanup-address-${Date.now()}@test>`,
+      },
+    });
+    expect(seedResponse.ok()).toBe(true);
+    await new Promise((resolve) => setTimeout(resolve, 1100));
+
+    const cleanupResponse = await request.post(`${WORKER_URL}/admin/cleanup`, {
+      data: { cleanType: 'addressCreated', cleanDays: 0 },
+    });
+    expect(cleanupResponse.ok()).toBe(true);
+
+    const oldAddressResponse = await request.get(`${WORKER_URL}/admin/address`, {
+      params: { query: oldAddress.address, limit: '20', offset: '0' },
+    });
+    expect(oldAddressResponse.ok()).toBe(true);
+    expect((await oldAddressResponse.json()).count).toBe(0);
+    expect((await listMails(request, oldAddress.address)).count).toBe(0);
+
+    const recentAddress = await createTestAddress(request, 'cleanup-recent');
+    try {
+      const recentCleanup = await request.post(`${WORKER_URL}/admin/cleanup`, {
+        data: { cleanType: 'addressCreated', cleanDays: 1 },
+      });
+      expect(recentCleanup.ok()).toBe(true);
+
+      const recentAddressResponse = await request.get(`${WORKER_URL}/admin/address`, {
+        params: { query: recentAddress.address, limit: '20', offset: '0' },
+      });
+      expect(recentAddressResponse.ok()).toBe(true);
+      expect((await recentAddressResponse.json()).count).toBe(1);
+    } finally {
+      await deleteAddress(request, recentAddress.jwt);
+    }
+  });
+});

e2e/tests/api/email-forward-domain-normalization.spec.ts

@@ -0,0 +1,175 @@
+import { test, expect } from '@playwright/test';
+import type { APIRequestContext } from '@playwright/test';
+import {
+  WORKER_URL,
+  TEST_DOMAIN,
+  createTestAddress,
+  deleteAddress,
+} from '../../fixtures/test-helpers';
+
+const ADMIN_PASSWORD = 'e2e-admin-pass';
+const ADMIN_HEADERS = { 'x-admin-auth': ADMIN_PASSWORD };
+
+const DEFAULT_ACCOUNT_SETTINGS = {
+  blockList: [],
+  sendBlockList: [],
+  verifiedAddressList: [],
+  fromBlockList: [],
+  noLimitSendAddressList: [],
+  emailRuleSettings: {},
+  addressCreationSettings: {},
+};
+
+async function resetAccountSettings(request: APIRequestContext) {
+  const res = await request.post(`${WORKER_URL}/admin/account_settings`, {
+    headers: ADMIN_HEADERS,
+    data: DEFAULT_ACCOUNT_SETTINGS,
+  });
+  expect(res.ok()).toBe(true);
+}
+
+test.describe('Email forward domain normalization', () => {
+  test.afterEach(async ({ request }) => {
+    await resetAccountSettings(request);
+  });
+
+  test('normalizes uppercase forwarding rule and recipient domains', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'forward-case');
+    const forwardAddress = 'forward-target@test.example.com';
+
+    try {
+      const saveRes = await request.post(`${WORKER_URL}/admin/account_settings`, {
+        headers: ADMIN_HEADERS,
+        data: {
+          ...DEFAULT_ACCOUNT_SETTINGS,
+          emailRuleSettings: {
+            emailForwardingList: [{
+              domains: [TEST_DOMAIN.toUpperCase()],
+              forward: forwardAddress,
+            }],
+          },
+        },
+      });
+      expect(saveRes.ok()).toBe(true);
+
+      const to = address.replace(`@${TEST_DOMAIN}`, `@${TEST_DOMAIN.toUpperCase()}`);
+      const subject = `forward-case-${Date.now()}`;
+      const raw = [
+        `From: sender@test.example.com`,
+        `To: ${to}`,
+        `Subject: ${subject}`,
+        `Message-ID: <${subject}@test>`,
+        `MIME-Version: 1.0`,
+        `Content-Type: text/plain; charset=utf-8`,
+        ``,
+        `Forward domain normalization test`,
+      ].join('\r\n');
+
+      const res = await request.post(`${WORKER_URL}/admin/test/receive_mail`, {
+        data: { from: 'sender@test.example.com', to, raw },
+      });
+      expect(res.ok()).toBe(true);
+      const body = await res.json();
+      expect(body.success).toBe(true);
+      expect(body.forwardedTo).toEqual([forwardAddress]);
+
+      const mailsRes = await request.get(`${WORKER_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(mailsRes.ok()).toBe(true);
+      const mailsBody = await mailsRes.json();
+      expect(mailsBody.results.some((mail: { address: string; raw: string }) => {
+        return mail.address === address && mail.raw.includes(subject);
+      })).toBe(true);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('does not forward when only the domain suffix string matches', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'forward-boundary');
+    const forwardAddress = 'forward-boundary-target@test.example.com';
+
+    try {
+      const saveRes = await request.post(`${WORKER_URL}/admin/account_settings`, {
+        headers: ADMIN_HEADERS,
+        data: {
+          ...DEFAULT_ACCOUNT_SETTINGS,
+          emailRuleSettings: {
+            emailForwardingList: [{
+              domains: [TEST_DOMAIN],
+              forward: forwardAddress,
+            }],
+          },
+        },
+      });
+      expect(saveRes.ok()).toBe(true);
+
+      const to = address.replace(`@${TEST_DOMAIN}`, `@evil${TEST_DOMAIN}`);
+      const subject = `forward-boundary-${Date.now()}`;
+      const raw = [
+        `From: sender@test.example.com`,
+        `To: ${to}`,
+        `Subject: ${subject}`,
+        `Message-ID: <${subject}@test>`,
+        `MIME-Version: 1.0`,
+        `Content-Type: text/plain; charset=utf-8`,
+        ``,
+        `Forward domain boundary test`,
+      ].join('\r\n');
+
+      const res = await request.post(`${WORKER_URL}/admin/test/receive_mail`, {
+        data: { from: 'sender@test.example.com', to, raw },
+      });
+      expect(res.ok()).toBe(true);
+      const body = await res.json();
+      expect(body.success).toBe(true);
+      expect(body.forwardedTo).toEqual([]);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('keeps blank forwarding rule domain as catch-all', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'forward-catch-all');
+    const forwardAddress = 'forward-catch-all-target@test.example.com';
+
+    try {
+      const saveRes = await request.post(`${WORKER_URL}/admin/account_settings`, {
+        headers: ADMIN_HEADERS,
+        data: {
+          ...DEFAULT_ACCOUNT_SETTINGS,
+          emailRuleSettings: {
+            emailForwardingList: [{
+              domains: ['', 'not-the-domain.example.com'],
+              forward: forwardAddress,
+            }],
+          },
+        },
+      });
+      expect(saveRes.ok()).toBe(true);
+
+      const subject = `forward-catch-all-${Date.now()}`;
+      const raw = [
+        `From: sender@test.example.com`,
+        `To: ${address}`,
+        `Subject: ${subject}`,
+        `Message-ID: <${subject}@test>`,
+        `MIME-Version: 1.0`,
+        `Content-Type: text/plain; charset=utf-8`,
+        ``,
+        `Forward catch-all domain test`,
+      ].join('\r\n');
+
+      const res = await request.post(`${WORKER_URL}/admin/test/receive_mail`, {
+        data: { from: 'sender@test.example.com', to: address, raw },
+      });
+      expect(res.ok()).toBe(true);
+      const body = await res.json();
+      expect(body.success).toBe(true);
+      expect(body.forwardedTo).toEqual([forwardAddress]);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+});

e2e/tests/api/health.spec.ts

@@ -15,6 +15,7 @@ test.describe('Health & Settings', () => {
     const settings = await res.json();
     expect(settings.domains).toContain('test.example.com');
     expect(settings.defaultDomains).toContain('test.example.com');
+    expect(settings.prefix).toBe('tmp');
     expect(settings.enableSendMail).toBe(true);
     expect(settings.enableUserCreateEmail).toBe(true);
     expect(settings.enableUserDeleteEmail).toBe(true);

e2e/tests/api/ip-whitelist.spec.ts

@@ -0,0 +1,274 @@
+import { test, expect } from '@playwright/test';
+import { WORKER_URL, createTestAddress } from '../../fixtures/test-helpers';
+
+const ADMIN_PASSWORD = 'e2e-admin-pass';
+
+const RESET_SETTINGS = {
+  enabled: false,
+  blacklist: [],
+  asnBlacklist: [],
+  fingerprintBlacklist: [],
+  enableWhitelist: false,
+  whitelist: [],
+  enableDailyLimit: false,
+  dailyRequestLimit: 1000,
+};
+
+test.describe('IP Whitelist Settings', () => {
+  test.afterEach(async ({ request }) => {
+    await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: RESET_SETTINGS,
+    });
+  });
+
+  test('get default IP whitelist settings returns disabled with empty list', async ({ request }) => {
+    const res = await request.get(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+    });
+    expect(res.ok()).toBe(true);
+    const settings = await res.json();
+    expect(settings.enableWhitelist).toBeFalsy();
+    expect(settings.whitelist).toEqual([]);
+  });
+
+  test('save and retrieve IP whitelist settings', async ({ request }) => {
+    // Save whitelist settings
+    const saveRes = await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        enabled: false,
+        blacklist: [],
+        asnBlacklist: [],
+        fingerprintBlacklist: [],
+        enableWhitelist: true,
+        whitelist: ['1.2.3.4', '^192\\.168\\.1\\.\\d+$'],
+        enableDailyLimit: false,
+        dailyRequestLimit: 1000,
+      },
+    });
+    expect(saveRes.ok()).toBe(true);
+    const saveBody = await saveRes.json();
+    expect(saveBody.success).toBe(true);
+
+    // Retrieve and verify
+    const getRes = await request.get(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+    });
+    expect(getRes.ok()).toBe(true);
+    const settings = await getRes.json();
+    expect(settings.enableWhitelist).toBe(true);
+    expect(settings.whitelist).toEqual(['1.2.3.4', '^192\\.168\\.1\\.\\d+$']);
+  });
+
+  test('whitelist rejects empty list when enabled', async ({ request }) => {
+    // Note: Frontend blocks this, but backend allows it (empty list = ignored)
+    // This test verifies backend behavior
+    const saveRes = await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        enabled: false,
+        blacklist: [],
+        asnBlacklist: [],
+        fingerprintBlacklist: [],
+        enableWhitelist: true,
+        whitelist: [],
+        enableDailyLimit: false,
+        dailyRequestLimit: 1000,
+      },
+    });
+    // Backend accepts empty whitelist (it will be ignored at runtime)
+    expect(saveRes.ok()).toBe(true);
+  });
+
+  test('whitelist validates array type', async ({ request }) => {
+    const saveRes = await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        enabled: false,
+        blacklist: [],
+        asnBlacklist: [],
+        fingerprintBlacklist: [],
+        enableWhitelist: true,
+        whitelist: 'not-an-array', // Invalid type
+        enableDailyLimit: false,
+        dailyRequestLimit: 1000,
+      },
+    });
+    expect(saveRes.ok()).toBe(false);
+    expect(saveRes.status()).toBe(400);
+  });
+
+  test('whitelist enforces max size limit', async ({ request }) => {
+    const largeList = Array.from({ length: 1001 }, (_, i) => `1.2.3.${i % 256}`);
+    const saveRes = await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        enabled: false,
+        blacklist: [],
+        asnBlacklist: [],
+        fingerprintBlacklist: [],
+        enableWhitelist: true,
+        whitelist: largeList,
+        enableDailyLimit: false,
+        dailyRequestLimit: 1000,
+      },
+    });
+    expect(saveRes.ok()).toBe(false);
+    expect(saveRes.status()).toBe(400);
+    const body = await saveRes.text();
+    expect(body).toContain('whitelist');
+    expect(body).toContain('1000');
+  });
+
+  test('backward compatibility: old frontend without whitelist fields', async ({ request }) => {
+    // Simulate old frontend that doesn't send enableWhitelist/whitelist
+    const saveRes = await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        enabled: true,
+        blacklist: ['10.0.0.1'],
+        asnBlacklist: [],
+        fingerprintBlacklist: [],
+        // enableWhitelist and whitelist omitted
+        enableDailyLimit: false,
+        dailyRequestLimit: 1000,
+      },
+    });
+    // Should succeed with defaults applied
+    expect(saveRes.ok()).toBe(true);
+
+    // Verify defaults were applied
+    const getRes = await request.get(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+    });
+    expect(getRes.ok()).toBe(true);
+    const settings = await getRes.json();
+    expect(settings.enableWhitelist).toBe(false);
+    expect(settings.whitelist).toEqual([]);
+  });
+
+  test('whitelist sanitizes patterns (trims and removes empty)', async ({ request }) => {
+    const saveRes = await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        enabled: false,
+        blacklist: [],
+        asnBlacklist: [],
+        fingerprintBlacklist: [],
+        enableWhitelist: true,
+        whitelist: ['  1.2.3.4  ', '', '   ', '5.6.7.8'],
+        enableDailyLimit: false,
+        dailyRequestLimit: 1000,
+      },
+    });
+    expect(saveRes.ok()).toBe(true);
+
+    const getRes = await request.get(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+    });
+    expect(getRes.ok()).toBe(true);
+    const settings = await getRes.json();
+    // Empty strings should be filtered out, whitespace trimmed
+    expect(settings.whitelist).toEqual(['1.2.3.4', '5.6.7.8']);
+  });
+
+  test('whitelist rejects invalid regex pattern', async ({ request }) => {
+    const saveRes = await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: { ...RESET_SETTINGS, whitelist: ['^[1.2.3.4$'] }, // invalid regex
+    });
+    expect(saveRes.ok()).toBe(false);
+    expect(saveRes.status()).toBe(400);
+    expect(await saveRes.text()).toContain('whitelist');
+  });
+
+  test('whitelist rejects non-string elements', async ({ request }) => {
+    const saveRes = await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: { ...RESET_SETTINGS, whitelist: [1, null] },
+    });
+    expect(saveRes.ok()).toBe(false);
+    expect(saveRes.status()).toBe(400);
+  });
+});
+
+test.describe('IP Whitelist Runtime Behavior', () => {
+  test('whitelist with empty list allows requests (protection mode)', async ({ request }) => {
+    // Enable whitelist with empty list
+    await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        enabled: false,
+        blacklist: [],
+        asnBlacklist: [],
+        fingerprintBlacklist: [],
+        enableWhitelist: true,
+        whitelist: [],
+        enableDailyLimit: false,
+        dailyRequestLimit: 1000,
+      },
+    });
+
+    // Try to create address (rate-limited endpoint)
+    // Should succeed because empty whitelist is ignored
+    const res = await createTestAddress(request, 'whitelist-empty');
+    expect(res.jwt).toBeTruthy();
+    expect(res.address).toBeTruthy();
+  });
+
+  test('whitelist blocks requests when IP does not match whitelist', async ({ request }) => {
+    await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        ...RESET_SETTINGS,
+        enableWhitelist: true,
+        whitelist: ['1.2.3.4'],
+      },
+    });
+
+    // In e2e, cf-connecting-ip is absent → fail-closed → 403
+    const res = await request.post(`${WORKER_URL}/api/new_address`, {
+      data: { name: `whitelist-block-${Date.now()}`, domain: 'test.example.com' },
+    });
+    expect(res.status()).toBe(403);
+    const body = await res.text();
+    expect(body).toContain('IP');
+  });
+
+  test('fingerprint blacklist blocks even when cf-connecting-ip is absent', async ({ request }) => {
+    await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        ...RESET_SETTINGS,
+        enabled: true,
+        fingerprintBlacklist: ['blocked-fingerprint-123'],
+      },
+    });
+
+    const res = await request.post(`${WORKER_URL}/api/new_address`, {
+      headers: { 'x-fingerprint': 'blocked-fingerprint-123' },
+      data: { name: `fp-block-${Date.now()}`, domain: 'test.example.com' },
+    });
+    expect(res.status()).toBe(403);
+    expect(await res.text()).toContain('fingerprint');
+  });
+
+  test.afterEach(async ({ request }) => {
+    // Reset whitelist to disabled after each test
+    await request.post(`${WORKER_URL}/admin/ip_blacklist/settings`, {
+      headers: { 'x-admin-auth': ADMIN_PASSWORD },
+      data: {
+        enabled: false,
+        blacklist: [],
+        asnBlacklist: [],
+        fingerprintBlacklist: [],
+        enableWhitelist: false,
+        whitelist: [],
+        enableDailyLimit: false,
+        dailyRequestLimit: 1000,
+      },
+    });
+  });
+});
+

e2e/tests/api/login-endpoints.spec.ts

@@ -0,0 +1,124 @@
+import { test, expect } from '@playwright/test';
+import { WORKER_URL, createTestAddress, deleteAddress, hashPassword } from '../../fixtures/test-helpers';
+
+test.describe('Turnstile Login Endpoints (ENABLE_GLOBAL_TURNSTILE_CHECK disabled)', () => {
+
+  test('settings returns enableGlobalTurnstileCheck as false', async ({ request }) => {
+    const res = await request.get(`${WORKER_URL}/open_api/settings`);
+    expect(res.ok()).toBe(true);
+    const settings = await res.json();
+    expect(settings.enableGlobalTurnstileCheck).toBe(false);
+  });
+
+  test.describe('/open_api/site_login', () => {
+    test('returns 401 when no PASSWORDS configured', async ({ request }) => {
+      const res = await request.post(`${WORKER_URL}/open_api/site_login`, {
+        data: {
+          password: hashPassword('any-pass'),
+          cf_token: ''
+        }
+      });
+      expect(res.status()).toBe(401);
+    });
+  });
+
+  test.describe('/open_api/admin_login', () => {
+    test('correct hashed password succeeds', async ({ request }) => {
+      const res = await request.post(`${WORKER_URL}/open_api/admin_login`, {
+        data: {
+          password: hashPassword('e2e-admin-pass'),
+          cf_token: ''
+        }
+      });
+      expect(res.ok()).toBe(true);
+      const body = await res.json();
+      expect(body.success).toBe(true);
+    });
+
+    test('wrong password returns 401', async ({ request }) => {
+      const res = await request.post(`${WORKER_URL}/open_api/admin_login`, {
+        data: {
+          password: hashPassword('wrong-admin'),
+          cf_token: ''
+        }
+      });
+      expect(res.status()).toBe(401);
+    });
+
+    test('empty password returns 401', async ({ request }) => {
+      const res = await request.post(`${WORKER_URL}/open_api/admin_login`, {
+        data: {
+          password: '',
+          cf_token: ''
+        }
+      });
+      expect(res.status()).toBe(401);
+    });
+  });
+
+  test.describe('/open_api/credential_login', () => {
+    test('valid JWT credential succeeds', async ({ request }) => {
+      const { jwt, address } = await createTestAddress(request, 'cred-login');
+      try {
+        const res = await request.post(`${WORKER_URL}/open_api/credential_login`, {
+          data: {
+            credential: jwt,
+            cf_token: ''
+          }
+        });
+        expect(res.ok()).toBe(true);
+        const body = await res.json();
+        expect(body.success).toBe(true);
+      } finally {
+        await deleteAddress(request, jwt);
+      }
+    });
+
+    test('invalid JWT returns 401', async ({ request }) => {
+      const res = await request.post(`${WORKER_URL}/open_api/credential_login`, {
+        data: {
+          credential: 'invalid.jwt.token',
+          cf_token: ''
+        }
+      });
+      expect(res.status()).toBe(401);
+    });
+
+    test('empty credential returns 401', async ({ request }) => {
+      const res = await request.post(`${WORKER_URL}/open_api/credential_login`, {
+        data: {
+          credential: '',
+          cf_token: ''
+        }
+      });
+      expect(res.status()).toBe(401);
+    });
+  });
+
+  test.describe('/api/address_login with cf_token', () => {
+    test('address login with empty cf_token works when turnstile disabled', async ({ request }) => {
+      const { jwt, address } = await createTestAddress(request, 'addr-cf');
+      try {
+        // Set a password
+        await request.post(`${WORKER_URL}/api/address_change_password`, {
+          headers: { Authorization: `Bearer ${jwt}` },
+          data: { new_password: hashPassword('addr-pass-123') },
+        });
+
+        // Login with cf_token field present but empty
+        const loginRes = await request.post(`${WORKER_URL}/api/address_login`, {
+          data: {
+            email: address,
+            password: hashPassword('addr-pass-123'),
+            cf_token: ''
+          },
+        });
+        expect(loginRes.ok()).toBe(true);
+        const body = await loginRes.json();
+        expect(body.jwt).toBeTruthy();
+      } finally {
+        await deleteAddress(request, jwt);
+      }
+    });
+  });
+});

e2e/tests/api/mail-deletion.spec.ts

@@ -1,7 +1,108 @@
+import { createHash } from 'node:crypto';
 import { test, expect } from '@playwright/test';
-import { WORKER_URL, createTestAddress, seedTestMail, deleteAddress } from '../../fixtures/test-helpers';
+import { WORKER_URL, WORKER_URL_ENV_OFF, createTestAddress, seedTestMail, deleteAddress } from '../../fixtures/test-helpers';
 
 test.describe('Mail Deletion', () => {
+  test('user mail deletion is disabled when ENABLE_USER_DELETE_EMAIL is false', async ({ request }) => {
+    test.skip(!WORKER_URL_ENV_OFF, 'WORKER_URL_ENV_OFF is not configured');
+
+    const testUserEmail = `mail-delete-e2e-${Date.now()}@test.example.com`;
+    const testUserPassword = 'test-password-123';
+    const testUserPasswordHash = createHash('sha256').update(testUserPassword).digest('hex');
+
+    const enableRes = await request.post(`${WORKER_URL_ENV_OFF}/admin/user_settings`, {
+      data: {
+        enable: true,
+        enableMailVerify: false,
+      },
+    });
+    expect(enableRes.ok()).toBe(true);
+
+    const registerRes = await request.post(`${WORKER_URL_ENV_OFF}/user_api/register`, {
+      data: { email: testUserEmail, password: testUserPasswordHash },
+    });
+    expect(registerRes.ok()).toBe(true);
+
+    const loginRes = await request.post(`${WORKER_URL_ENV_OFF}/user_api/login`, {
+      data: { email: testUserEmail, password: testUserPasswordHash },
+    });
+    expect(loginRes.ok()).toBe(true);
+    const { jwt: userJwt } = await loginRes.json();
+    expect(userJwt).toBeTruthy();
+
+    const createRes = await request.post(`${WORKER_URL_ENV_OFF}/api/new_address`, {
+      data: {
+        name: `user-del-disabled${Date.now()}`,
+        domain: 'test.example.com',
+      },
+    });
+    expect(createRes.ok()).toBe(true);
+    const { jwt, address, address_id } = await createRes.json();
+
+    try {
+      const bindRes = await request.post(`${WORKER_URL_ENV_OFF}/user_api/bind_address`, {
+        headers: {
+          Authorization: `Bearer ${jwt}`,
+          'x-user-token': userJwt,
+        },
+      });
+      expect(bindRes.ok()).toBe(true);
+
+      const from = 'sender@test.example.com';
+      const subject = 'Disabled Mail Delete';
+      const boundary = `----E2E${Date.now()}`;
+      const raw = [
+        `From: ${from}`,
+        `To: ${address}`,
+        `Subject: ${subject}`,
+        `Message-ID: <e2e-${Date.now()}-${Math.random().toString(36).slice(2, 10)}@test>`,
+        'MIME-Version: 1.0',
+        `Content-Type: multipart/alternative; boundary="${boundary}"`,
+        '',
+        `--${boundary}`,
+        'Content-Type: text/plain; charset=utf-8',
+        '',
+        'Hello from E2E',
+        `--${boundary}`,
+        'Content-Type: text/html; charset=utf-8',
+        '',
+        '<p>Hello from E2E</p>',
+        `--${boundary}--`,
+      ].join('\r\n');
+
+      const seedRes = await request.post(`${WORKER_URL_ENV_OFF}/admin/test/receive_mail`, {
+        data: { from, to: address, raw },
+      });
+      expect(seedRes.ok()).toBe(true);
+      const seedBody = await seedRes.json();
+      expect(seedBody.success).toBe(true);
+
+      const listRes = await request.get(`${WORKER_URL_ENV_OFF}/user_api/mails?limit=10&offset=0`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(listRes.ok()).toBe(true);
+      const { results } = await listRes.json();
+      expect(results).toHaveLength(1);
+
+      const targetId = results[0].id;
+      const delRes = await request.delete(`${WORKER_URL_ENV_OFF}/user_api/mails/${targetId}`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(delRes.status()).toBe(403);
+
+      const afterRes = await request.get(`${WORKER_URL_ENV_OFF}/user_api/mails?limit=10&offset=0`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(afterRes.ok()).toBe(true);
+      const after = await afterRes.json();
+      expect(after.results).toHaveLength(1);
+      expect(after.results[0].id).toBe(targetId);
+    } finally {
+      const deleteRes = await request.delete(`${WORKER_URL_ENV_OFF}/admin/delete_address/${address_id}`);
+      expect(deleteRes.ok()).toBe(true);
+    }
+  });
+
   test('delete a single mail by ID', async ({ request }) => {
     const { jwt, address } = await createTestAddress(request, 'del-single');
 

e2e/tests/api/mail-detail.spec.ts

@@ -1,6 +1,8 @@
 import { test, expect } from '@playwright/test';
 import { WORKER_URL, createTestAddress, seedTestMail, deleteAddress } from '../../fixtures/test-helpers';
 
+const ADMIN_HEADERS = { 'x-admin-auth': 'e2e-admin-pass' };
+
 test.describe('Mail Detail', () => {
   test('fetch a single mail by ID', async ({ request }) => {
     const { jwt, address } = await createTestAddress(request, 'detail-get');
@@ -53,3 +55,46 @@ test.describe('Mail Detail', () => {
     }
   });
 });
+
+test.describe('Admin Mail Detail', () => {
+  test('fetch a single mail by ID without a mailbox JWT', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'admin-detail-get');
+
+    try {
+      await seedTestMail(request, address, {
+        subject: 'Admin Detail Test',
+        from: 'admin-detail@test.example.com',
+        text: 'Hello admin detail',
+      });
+
+      const listRes = await request.get(`${WORKER_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(listRes.ok()).toBe(true);
+      const { results } = await listRes.json();
+      expect(results).toHaveLength(1);
+      const mailId = results[0].id;
+
+      const detailRes = await request.get(`${WORKER_URL}/admin/mails/${mailId}`, {
+        headers: ADMIN_HEADERS,
+      });
+      expect(detailRes.ok()).toBe(true);
+      const mail = await detailRes.json();
+      expect(mail.id).toBe(mailId);
+      expect(mail.address).toBe(address);
+      expect(mail.source).toBe('admin-detail@test.example.com');
+      expect(mail.raw).toContain('Admin Detail Test');
+      expect(mail.raw_blob).toBeUndefined();
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('fetch non-existent mail returns null', async ({ request }) => {
+    const res = await request.get(`${WORKER_URL}/admin/mails/99999999`, {
+      headers: ADMIN_HEADERS,
+    });
+    expect(res.ok()).toBe(true);
+    expect(await res.json()).toBeNull();
+  });
+});

e2e/tests/api/mail-flags.spec.ts

@@ -0,0 +1,94 @@
+import { test, expect } from '@playwright/test';
+import {
+  WORKER_URL,
+  createTestAddress,
+  deleteAddress,
+  seedTestMail,
+} from '../../fixtures/test-helpers';
+
+test.describe('Mail Read Status', () => {
+  test('new mail is unread and can be marked as read without changing other mailboxes', async ({ request }) => {
+    const first = await createTestAddress(request, 'mail-flags-first');
+    const second = await createTestAddress(request, 'mail-flags-second');
+
+    try {
+      const statesRes = await request.get(`${WORKER_URL}/api/mail-states`, {
+        headers: { Authorization: `Bearer ${first.jwt}` },
+      });
+      expect(statesRes.ok()).toBe(true);
+      expect((await statesRes.json()).results.map((state: { value: string }) => state.value))
+        .toEqual(['all', 'unread', 'read']);
+
+      await seedTestMail(request, first.address, { subject: 'Unread mail' });
+      const listRes = await request.get(`${WORKER_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${first.jwt}` },
+      });
+      expect(listRes.ok()).toBe(true);
+      const { results } = await listRes.json();
+      expect(results).toHaveLength(1);
+      expect(results[0].flags).toBeUndefined();
+      expect(results[0].unread).toBe(true);
+
+      const unreadRes = await request.get(
+        `${WORKER_URL}/api/mails?limit=10&offset=0&mail_state=unread`,
+        { headers: { Authorization: `Bearer ${first.jwt}` } },
+      );
+      expect((await unreadRes.json()).results).toHaveLength(1);
+
+      const deniedRes = await request.patch(`${WORKER_URL}/api/mails/state`, {
+        headers: { Authorization: `Bearer ${second.jwt}` },
+        data: { ids: [results[0].id], state: 'read' },
+      });
+      expect(deniedRes.ok()).toBe(true);
+      expect((await deniedRes.json()).changes).toBe(0);
+
+      const updateRes = await request.patch(`${WORKER_URL}/api/mails/state`, {
+        headers: { Authorization: `Bearer ${first.jwt}` },
+        data: { ids: [results[0].id], state: 'read' },
+      });
+      expect(updateRes.ok()).toBe(true);
+      const updateResult = await updateRes.json();
+      expect(updateResult.changes).toBe(1);
+      expect(updateResult.results[0].unread).toBe(false);
+
+      const updatedListRes = await request.get(`${WORKER_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${first.jwt}` },
+      });
+      expect((await updatedListRes.json()).results[0].unread).toBe(false);
+
+      const unreadAfterUpdateRes = await request.get(
+        `${WORKER_URL}/api/mails?limit=10&offset=0&mail_state=unread`,
+        { headers: { Authorization: `Bearer ${first.jwt}` } },
+      );
+      expect((await unreadAfterUpdateRes.json()).results).toHaveLength(0);
+
+      const unreadStateRes = await request.patch(`${WORKER_URL}/api/mails/state`, {
+        headers: { Authorization: `Bearer ${first.jwt}` },
+        data: { ids: [results[0].id], state: 'unread' },
+      });
+      expect(unreadStateRes.ok()).toBe(true);
+      expect((await unreadStateRes.json()).results[0].unread).toBe(true);
+    } finally {
+      await deleteAddress(request, first.jwt);
+      await deleteAddress(request, second.jwt);
+    }
+  });
+
+  test('rejects unsupported mail states', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'mail-flags-invalid');
+    try {
+      for (const data of [
+        { ids: [1], state: 'invalid' },
+        { ids: [1] },
+      ]) {
+        const res = await request.patch(`${WORKER_URL}/api/mails/state`, {
+          headers: { Authorization: `Bearer ${jwt}` },
+          data,
+        });
+        expect(res.status()).toBe(400);
+      }
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+});

e2e/tests/api/passkey.spec.ts

@@ -0,0 +1,162 @@
+import { test, expect } from '@playwright/test';
+import type { APIRequestContext } from '@playwright/test';
+import { WORKER_URL } from '../../fixtures/test-helpers';
+
+const TEST_USER_EMAIL = `passkey-e2e-${Date.now()}@test.example.com`;
+const TEST_USER_PASSWORD = 'test-password-123';
+
+/**
+ * Enable user registration via admin API, register a user, and login to get JWT.
+ */
+async function createTestUser(request: APIRequestContext): Promise<string> {
+  // Enable user registration (KV setting)
+  const enableRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+    data: {
+      enable: true,
+      enableMailVerify: false,
+    },
+  });
+  expect(enableRes.ok()).toBe(true);
+
+  // Register user
+  const registerRes = await request.post(`${WORKER_URL}/user_api/register`, {
+    data: { email: TEST_USER_EMAIL, password: TEST_USER_PASSWORD },
+  });
+  expect(registerRes.ok()).toBe(true);
+
+  // Login to get JWT
+  const loginRes = await request.post(`${WORKER_URL}/user_api/login`, {
+    data: { email: TEST_USER_EMAIL, password: TEST_USER_PASSWORD },
+  });
+  expect(loginRes.ok()).toBe(true);
+  const { jwt } = await loginRes.json();
+  expect(jwt).toBeTruthy();
+  return jwt;
+}
+
+test.describe('Passkey API', () => {
+  let userJwt: string;
+
+  test.beforeAll(async ({ request }) => {
+    userJwt = await createTestUser(request);
+  });
+
+  test('register_request returns valid WebAuthn options', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL}/user_api/passkey/register_request`, {
+      headers: { 'x-user-token': userJwt },
+      data: { domain: 'localhost' },
+    });
+    expect(res.ok()).toBe(true);
+    const options = await res.json();
+
+    // Verify WebAuthn registration options structure
+    expect(options.rp).toBeDefined();
+    expect(options.rp.id).toBe('localhost');
+    expect(options.user).toBeDefined();
+    expect(options.user.name).toBe(TEST_USER_EMAIL);
+    expect(options.challenge).toBeTruthy();
+    expect(options.pubKeyCredParams).toBeInstanceOf(Array);
+    expect(options.pubKeyCredParams.length).toBeGreaterThan(0);
+  });
+
+  test('authenticate_request returns valid WebAuthn options', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL}/user_api/passkey/authenticate_request`, {
+      data: { domain: 'localhost' },
+    });
+    expect(res.ok()).toBe(true);
+    const options = await res.json();
+
+    // Verify WebAuthn authentication options structure
+    expect(options.challenge).toBeTruthy();
+    expect(options.rpId).toBe('localhost');
+    expect(options.allowCredentials).toBeInstanceOf(Array);
+  });
+
+  test('authenticate_response with invalid credential returns error', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL}/user_api/passkey/authenticate_response`, {
+      data: {
+        domain: 'localhost',
+        origin: 'http://localhost',
+        credential: { id: 'nonexistent-passkey-id' },
+      },
+    });
+    expect(res.ok()).toBe(false);
+    expect(res.status()).toBe(404);
+  });
+
+  test('passkey list is empty for new user', async ({ request }) => {
+    const res = await request.get(`${WORKER_URL}/user_api/passkey`, {
+      headers: { 'x-user-token': userJwt },
+    });
+    expect(res.ok()).toBe(true);
+    const passkeys = await res.json();
+    expect(passkeys).toBeInstanceOf(Array);
+    expect(passkeys.length).toBe(0);
+  });
+
+  test('passkey list remains empty without registration', async ({ request }) => {
+    const listRes = await request.get(`${WORKER_URL}/user_api/passkey`, {
+      headers: { 'x-user-token': userJwt },
+    });
+    expect(listRes.ok()).toBe(true);
+    const passkeys = await listRes.json();
+    expect(passkeys).toBeInstanceOf(Array);
+    expect(passkeys.length).toBe(0);
+  });
+
+  test('register_response with invalid credential returns 400', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL}/user_api/passkey/register_response`, {
+      headers: { 'x-user-token': userJwt },
+      data: {
+        credential: {
+          id: 'fake-id',
+          rawId: 'fake-raw-id',
+          type: 'public-key',
+          response: {
+            attestationObject: 'invalid-data',
+            clientDataJSON: 'invalid-data',
+          },
+        },
+        origin: 'http://localhost',
+        passkey_name: 'test-passkey',
+      },
+    });
+    expect(res.ok()).toBe(false);
+    // Should fail verification
+    expect(res.status()).toBeGreaterThanOrEqual(400);
+  });
+
+  test('rename nonexistent passkey succeeds silently', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL}/user_api/passkey/rename`, {
+      headers: { 'x-user-token': userJwt },
+      data: {
+        passkey_id: 'nonexistent-id',
+        passkey_name: 'new-name',
+      },
+    });
+    // The SQL UPDATE just affects 0 rows, still returns success
+    expect(res.ok()).toBe(true);
+    const body = await res.json();
+    expect(body.success).toBe(true);
+  });
+
+  test('rename with invalid name returns 400', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL}/user_api/passkey/rename`, {
+      headers: { 'x-user-token': userJwt },
+      data: {
+        passkey_id: 'any-id',
+        passkey_name: 'x'.repeat(256),
+      },
+    });
+    expect(res.status()).toBe(400);
+  });
+
+  test('delete nonexistent passkey succeeds silently', async ({ request }) => {
+    const res = await request.delete(`${WORKER_URL}/user_api/passkey/nonexistent-id`, {
+      headers: { 'x-user-token': userJwt },
+    });
+    expect(res.ok()).toBe(true);
+    const body = await res.json();
+    expect(body.success).toBe(true);
+  });
+});

e2e/tests/api/send-access.spec.ts

@@ -1,12 +1,20 @@
 import { test, expect } from '@playwright/test';
-import { WORKER_URL, createTestAddress, requestSendAccess, deleteAddress } from '../../fixtures/test-helpers';
+import {
+  WORKER_URL,
+  createTestAddress,
+  requestSendAccess,
+  deleteAddress,
+  deleteAddressSender,
+  getAddressSender,
+  updateAddressSender,
+} from '../../fixtures/test-helpers';
 
 test.describe('Send Access', () => {
-  test('request send access succeeds once, duplicate returns 400', async ({ request }) => {
-    const { jwt } = await createTestAddress(request, 'send-access');
+  test('request send access stays idempotent when default balance is auto-initialized', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'send-access');
 
     try {
-      // First request — should succeed
+      // First request — should succeed even if balance will also auto-init elsewhere.
       await requestSendAccess(request, jwt);
 
       // Verify balance is set via settings
@@ -17,13 +25,119 @@ test.describe('Send Access', () => {
       const settings = await settingsRes.json();
       expect(settings.send_balance).toBe(10);
 
-      // Duplicate request — should fail with 400
+      // Duplicate request should stay safe and idempotent.
       const dupRes = await request.post(`${WORKER_URL}/api/request_send_mail_access`, {
         headers: { Authorization: `Bearer ${jwt}` },
       });
-      expect(dupRes.status()).toBe(400);
-      const dupBody = await dupRes.text();
-      expect(dupBody).toContain('Already');
+      expect(dupRes.ok()).toBe(true);
+
+      const sender = await getAddressSender(request, address);
+      expect(sender.balance).toBe(10);
+      expect(sender.enabled).toBe(1);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('admin-disabled rows are not overwritten by settings or send', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'sa-admin-blocked');
+
+    try {
+      await requestSendAccess(request, jwt);
+
+      const sender = await getAddressSender(request, address);
+      await updateAddressSender(request, {
+        address,
+        address_id: sender.id,
+        balance: 0,
+        enabled: false,
+      });
+
+      // Reading settings must not auto-repair an admin-disabled row.
+      const settingsRes = await request.get(`${WORKER_URL}/api/settings`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(settingsRes.ok()).toBe(true);
+      const settings = await settingsRes.json();
+      expect(settings.send_balance).toBe(0);
+
+      const stillDisabled = await getAddressSender(request, address);
+      expect(stillDisabled.balance).toBe(0);
+      expect(stillDisabled.enabled).toBe(0);
+
+      // Attempting to send must also fail and must not auto-repair the row.
+      const sendRes = await request.post(`${WORKER_URL}/api/send_mail`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+        data: {
+          from_name: 'E2E',
+          to_name: 'E2E',
+          to_mail: 'recipient@test.example.com',
+          subject: 'should not send',
+          content: 'body',
+          is_html: false,
+        },
+      });
+      expect(sendRes.ok()).toBe(false);
+
+      const afterSend = await getAddressSender(request, address);
+      expect(afterSend.balance).toBe(0);
+      expect(afterSend.enabled).toBe(0);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('send after admin deletion auto-initializes a fresh sender row', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'send-access-deleted');
+
+    try {
+      await requestSendAccess(request, jwt);
+
+      const sender = await getAddressSender(request, address);
+      await deleteAddressSender(request, sender.id);
+
+      const sendRes = await request.post(`${WORKER_URL}/api/send_mail`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+        data: {
+          from_name: 'E2E',
+          to_name: 'E2E',
+          to_mail: 'recipient@test.example.com',
+          subject: `E2E reinit ${Date.now()}`,
+          content: 'body',
+          is_html: false,
+        },
+      });
+      expect(sendRes.ok()).toBe(true);
+
+      // A fresh row should exist with the default balance decremented by 1.
+      const recreated = await getAddressSender(request, address);
+      expect(recreated.enabled).toBe(1);
+      expect(recreated.balance).toBe(9);
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+
+  test('request send access does not falsely succeed when quota is already exhausted', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'sendexh');
+
+    try {
+      await requestSendAccess(request, jwt);
+
+      const sender = await getAddressSender(request, address);
+      await updateAddressSender(request, {
+        address,
+        address_id: sender.id,
+        balance: 0,
+        enabled: true,
+      });
+
+      const retryRes = await request.post(`${WORKER_URL}/api/request_send_mail_access`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(retryRes.status()).toBe(400);
+      const retryBody = await retryRes.text();
+      expect(retryBody).toContain('Already');
     } finally {
       await deleteAddress(request, jwt);
     }

e2e/tests/api/send-mail-limit.spec.ts

@@ -0,0 +1,532 @@
+import { test, expect } from '@playwright/test';
+import type { APIRequestContext } from '@playwright/test';
+import {
+  WORKER_URL,
+  WORKER_URL_SEND_MAIL_DOMAIN,
+  createTestAddress,
+  deleteAddress,
+  deleteAllMailpitMessages,
+  requestSendAccess,
+  onMailpitMessage,
+} from '../../fixtures/test-helpers';
+
+const ADMIN_PASSWORD = 'e2e-admin-pass';
+const ADMIN_HEADERS = { 'x-admin-auth': ADMIN_PASSWORD };
+
+const DEFAULT_ACCOUNT_SETTINGS = {
+  blockList: [],
+  sendBlockList: [],
+  verifiedAddressList: [],
+  fromBlockList: [],
+  noLimitSendAddressList: [],
+  emailRuleSettings: {},
+  addressCreationSettings: {},
+};
+
+const DISABLED_LIMIT_CONFIG = {
+  dailyEnabled: false,
+  monthlyEnabled: false,
+  dailyLimit: null as number | null,
+  monthlyLimit: null as number | null,
+};
+
+async function saveLimitConfig(
+  request: APIRequestContext,
+  sendMailLimitConfig: Record<string, unknown>
+) {
+  return request.post(`${WORKER_URL}/admin/account_settings`, {
+    headers: ADMIN_HEADERS,
+    data: { ...DEFAULT_ACCOUNT_SETTINGS, sendMailLimitConfig },
+  });
+}
+
+async function resetLimitConfig(request: APIRequestContext) {
+  const res = await saveLimitConfig(request, DISABLED_LIMIT_CONFIG);
+  expect(res.ok()).toBe(true);
+}
+
+async function sendOneMail(
+  request: APIRequestContext,
+  jwt: string,
+  tag: string,
+  opts: { expectDelivery?: boolean; lang?: string } = {}
+) {
+  const { expectDelivery = true, lang } = opts;
+  const subject = `limit-${tag}-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+  const headers: Record<string, string> = { Authorization: `Bearer ${jwt}` };
+  if (lang) headers['x-lang'] = lang;
+
+  let listener: ReturnType<typeof onMailpitMessage> | undefined;
+  if (expectDelivery) {
+    listener = onMailpitMessage((m) => m.Subject === subject);
+    await listener.ready;
+  }
+  const res = await request.post(`${WORKER_URL}/api/send_mail`, {
+    headers,
+    data: {
+      from_name: 'Limit E2E',
+      to_name: 'Recipient',
+      to_mail: 'recipient@test.example.com',
+      subject,
+      content: `Limit test body ${tag}`,
+      is_html: false,
+    },
+  });
+  return { res, listener, subject };
+}
+
+async function probeLimitBaseline(
+  request: APIRequestContext,
+  jwt: string,
+  config: {
+    dailyEnabled: boolean;
+    monthlyEnabled: boolean;
+    dailyLimit: number | null;
+    monthlyLimit: number | null;
+  },
+  subjectPrefix: string,
+  maxProbeLimit: number = 50
+): Promise<number> {
+  for (let limit = 1; limit <= maxProbeLimit; limit++) {
+    const save = await saveLimitConfig(request, {
+      ...config,
+      dailyLimit: config.dailyEnabled ? limit : null,
+      monthlyLimit: config.monthlyEnabled ? limit : null,
+    });
+    expect(save.ok()).toBe(true);
+
+    const probe = await request.post(`${WORKER_URL}/api/send_mail`, {
+      headers: { Authorization: `Bearer ${jwt}` },
+      data: {
+        from_name: 'probe',
+        to_name: '',
+        to_mail: 'recipient@test.example.com',
+        subject: `${subjectPrefix}-${limit}-${Date.now()}`,
+        content: 'probe',
+        is_html: false,
+      },
+    });
+    if (probe.ok()) {
+      return limit;
+    }
+  }
+  throw new Error(`Failed to probe send mail limit baseline within ${maxProbeLimit}`);
+}
+
+async function probeDailyBaseline(
+  request: APIRequestContext,
+  jwt: string
+): Promise<number> {
+  return probeLimitBaseline(request, jwt, {
+    dailyEnabled: true,
+    monthlyEnabled: false,
+    dailyLimit: 1,
+    monthlyLimit: null,
+  }, 'probe-daily');
+}
+
+async function probeMonthlyBaseline(
+  request: APIRequestContext,
+  jwt: string
+): Promise<number> {
+  return probeLimitBaseline(request, jwt, {
+    dailyEnabled: false,
+    monthlyEnabled: true,
+    dailyLimit: null,
+    monthlyLimit: 1,
+  }, 'probe-monthly');
+}
+
+test.describe('Send Mail Limit', () => {
+  test.beforeEach(async ({ request }) => {
+    await deleteAllMailpitMessages(request);
+    await resetLimitConfig(request);
+  });
+
+  test.afterEach(async ({ request }) => {
+    await resetLimitConfig(request);
+  });
+
+  test('save + read roundtrip preserves all fields', async ({ request }) => {
+    const config = {
+      dailyEnabled: true,
+      monthlyEnabled: true,
+      dailyLimit: 7,
+      monthlyLimit: 1234,
+    };
+    const save = await saveLimitConfig(request, config);
+    expect(save.ok()).toBe(true);
+
+    const read = await request.get(`${WORKER_URL}/admin/account_settings`, {
+      headers: ADMIN_HEADERS,
+    });
+    expect(read.ok()).toBe(true);
+    const body = await read.json();
+    expect(body.sendMailLimitConfig).toEqual(config);
+  });
+
+  test('disabled flags coerce numeric limits to null', async ({ request }) => {
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: false,
+      monthlyEnabled: false,
+      dailyLimit: 10,
+      monthlyLimit: 20,
+    });
+    expect(save.ok()).toBe(true);
+
+    const read = await request.get(`${WORKER_URL}/admin/account_settings`, {
+      headers: ADMIN_HEADERS,
+    });
+    const body = await read.json();
+    expect(body.sendMailLimitConfig).toEqual(DISABLED_LIMIT_CONFIG);
+  });
+
+  test('minus one is accepted as unlimited', async ({ request }) => {
+    const config = {
+      dailyEnabled: true,
+      monthlyEnabled: true,
+      dailyLimit: -1,
+      monthlyLimit: -1,
+    };
+    const save = await saveLimitConfig(request, config);
+    expect(save.ok()).toBe(true);
+
+    const read = await request.get(`${WORKER_URL}/admin/account_settings`, {
+      headers: ADMIN_HEADERS,
+    });
+    const body = await read.json();
+    expect(body.sendMailLimitConfig).toEqual(config);
+  });
+
+  test('invalid payloads rejected with 400', async ({ request }) => {
+    const cases: Array<Record<string, unknown>> = [
+      { dailyEnabled: 'yes', monthlyEnabled: false, dailyLimit: null, monthlyLimit: null },
+      { dailyEnabled: true, monthlyEnabled: false, dailyLimit: -2, monthlyLimit: null },
+      { dailyEnabled: true, monthlyEnabled: false, dailyLimit: 1.5, monthlyLimit: null },
+      { dailyEnabled: true, monthlyEnabled: false, dailyLimit: null, monthlyLimit: null },
+      { dailyEnabled: false, monthlyEnabled: true, dailyLimit: null, monthlyLimit: null },
+    ];
+    for (const bad of cases) {
+      const res = await saveLimitConfig(request, bad);
+      expect(res.status(), `payload: ${JSON.stringify(bad)}`).toBe(400);
+    }
+  });
+
+  test('disabled limit allows unlimited sends', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-off');
+    await requestSendAccess(request, jwt);
+    await resetLimitConfig(request);
+
+    for (let i = 0; i < 3; i++) {
+      const { res, listener } = await sendOneMail(request, jwt, `off${i}`);
+      expect(res.ok()).toBe(true);
+      await listener!.message;
+    }
+    await deleteAddress(request, jwt);
+  });
+
+  test('zero limit blocks sending immediately', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-zero');
+    await requestSendAccess(request, jwt);
+
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: true,
+      monthlyEnabled: false,
+      dailyLimit: 0,
+      monthlyLimit: null,
+    });
+    expect(save.ok()).toBe(true);
+
+    const { res } = await sendOneMail(request, jwt, 'zero', {
+      expectDelivery: false,
+    });
+    expect(res.ok()).toBe(false);
+    const text = await res.text();
+    expect(text).toContain('Server daily send quota has been reached');
+
+    await deleteAddress(request, jwt);
+  });
+
+  test('daily limit blocks once reached and returns English message', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-daily');
+    await requestSendAccess(request, jwt);
+
+    const baseline = await probeDailyBaseline(request, jwt);
+    const allowed = 2;
+    const limit = baseline + allowed;
+
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: true,
+      monthlyEnabled: false,
+      dailyLimit: limit,
+      monthlyLimit: null,
+    });
+    expect(save.ok()).toBe(true);
+
+    for (let i = 0; i < allowed; i++) {
+      const { res, listener } = await sendOneMail(request, jwt, `d${i}`);
+      expect(res.ok(), `send #${i} should succeed`).toBe(true);
+      await listener!.message;
+    }
+
+    const { res: blocked } = await sendOneMail(request, jwt, 'd-over', {
+      expectDelivery: false,
+    });
+    expect(blocked.ok()).toBe(false);
+    const text = await blocked.text();
+    expect(text).toContain('Server daily send quota has been reached');
+
+    await deleteAddress(request, jwt);
+  });
+
+  test('monthly limit blocks once reached', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-monthly');
+    await requestSendAccess(request, jwt);
+
+    const baseline = await probeMonthlyBaseline(request, jwt);
+    const allowed = 2;
+    const limit = baseline + allowed;
+
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: false,
+      monthlyEnabled: true,
+      dailyLimit: null,
+      monthlyLimit: limit,
+    });
+    expect(save.ok()).toBe(true);
+
+    for (let i = 0; i < allowed; i++) {
+      const { res, listener } = await sendOneMail(request, jwt, `m${i}`);
+      expect(res.ok(), `send #${i} should succeed`).toBe(true);
+      await listener!.message;
+    }
+
+    const { res: blocked } = await sendOneMail(request, jwt, 'm-over', {
+      expectDelivery: false,
+    });
+    expect(blocked.ok()).toBe(false);
+    const text = await blocked.text();
+    expect(text).toContain('Server monthly send quota has been reached');
+
+    await deleteAddress(request, jwt);
+  });
+
+  test('zh-lang header returns Chinese daily limit message', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-zh');
+    await requestSendAccess(request, jwt);
+
+    const baseline = await probeDailyBaseline(request, jwt);
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: true,
+      monthlyEnabled: false,
+      dailyLimit: baseline,
+      monthlyLimit: null,
+    });
+    expect(save.ok()).toBe(true);
+
+    const { res } = await sendOneMail(request, jwt, 'zh-over', {
+      expectDelivery: false,
+      lang: 'zh',
+    });
+    expect(res.ok()).toBe(false);
+    const text = await res.text();
+    expect(text).toContain('服务器今日发信次数已达上限');
+
+    await deleteAddress(request, jwt);
+  });
+
+  test('validation failures (missing subject) do not consume quota', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-noconsume');
+    await requestSendAccess(request, jwt);
+
+    const baseline = await probeDailyBaseline(request, jwt);
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: true,
+      monthlyEnabled: false,
+      dailyLimit: baseline + 1,
+      monthlyLimit: null,
+    });
+    expect(save.ok()).toBe(true);
+
+    // Empty subject → rejected by validation BEFORE the counter increments.
+    const badRes = await request.post(`${WORKER_URL}/api/send_mail`, {
+      headers: { Authorization: `Bearer ${jwt}` },
+      data: {
+        from_name: '',
+        to_name: '',
+        to_mail: 'recipient@test.example.com',
+        subject: '',
+        content: 'no subject',
+        is_html: false,
+      },
+    });
+    expect(badRes.ok()).toBe(false);
+
+    const { res, listener } = await sendOneMail(request, jwt, 'after-bad');
+    expect(res.ok()).toBe(true);
+    await listener!.message;
+
+    await deleteAddress(request, jwt);
+  });
+
+  test('both daily + monthly enabled: tighter daily limit wins', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-both');
+    await requestSendAccess(request, jwt);
+
+    const baseline = await probeDailyBaseline(request, jwt);
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: true,
+      monthlyEnabled: true,
+      dailyLimit: baseline,
+      monthlyLimit: baseline + 10_000,
+    });
+    expect(save.ok()).toBe(true);
+
+    const { res } = await sendOneMail(request, jwt, 'both-over', {
+      expectDelivery: false,
+    });
+    expect(res.ok()).toBe(false);
+    const text = await res.text();
+    expect(text).toContain('Server daily send quota has been reached');
+
+    await deleteAddress(request, jwt);
+  });
+
+  test('minus one means unlimited at runtime', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-unlimited');
+    await requestSendAccess(request, jwt);
+
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: true,
+      monthlyEnabled: true,
+      dailyLimit: -1,
+      monthlyLimit: -1,
+    });
+    expect(save.ok()).toBe(true);
+
+    for (let i = 0; i < 3; i++) {
+      const { res, listener } = await sendOneMail(request, jwt, `unl${i}`);
+      expect(res.ok(), `send #${i} should succeed`).toBe(true);
+      await listener!.message;
+    }
+
+    await deleteAddress(request, jwt);
+  });
+
+  test('/admin/send_mail_by_binding returns 400 when SEND_MAIL binding is missing', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL}/admin/send_mail_by_binding`, {
+      headers: ADMIN_HEADERS,
+      data: {
+        from: 'admin@test.example.com',
+        to: ['recipient@test.example.com'],
+        subject: 'no-binding',
+        text: 'body',
+      },
+    });
+    expect(res.status()).toBe(400);
+  });
+
+  test('/admin/send_mail_by_binding normalizes uppercase allowed domain', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL_SEND_MAIL_DOMAIN}/admin/send_mail_by_binding`, {
+      headers: ADMIN_HEADERS,
+      data: {
+        from: 'admin@TEST.EXAMPLE.COM',
+        to: ['recipient@test.example.com'],
+        subject: `send-mail-domain-ok-${Date.now()}`,
+        text: 'body',
+      },
+    });
+    expect(res.ok()).toBe(true);
+    expect(await res.json()).toEqual({ status: 'ok' });
+  });
+
+  test('/admin/send_mail_by_binding normalizes object-form from domain', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL_SEND_MAIL_DOMAIN}/admin/send_mail_by_binding`, {
+      headers: ADMIN_HEADERS,
+      data: {
+        from: { email: 'admin@TEST.EXAMPLE.COM', name: 'Admin' },
+        to: ['recipient@test.example.com'],
+        subject: `send-mail-domain-object-ok-${Date.now()}`,
+        text: 'body',
+      },
+    });
+    expect(res.ok()).toBe(true);
+    expect(await res.json()).toEqual({ status: 'ok' });
+  });
+
+  test('/admin/send_mail_by_binding returns 400 when domain is not allowed', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL_SEND_MAIL_DOMAIN}/admin/send_mail_by_binding`, {
+      headers: ADMIN_HEADERS,
+      data: {
+        from: 'admin@blocked.example.com',
+        to: ['recipient@test.example.com'],
+        subject: `send-mail-domain-blocked-${Date.now()}`,
+        text: 'body',
+      },
+    });
+    expect(res.status()).toBe(400);
+    expect(await res.text()).toContain('Please enable SEND_MAIL for this domain first');
+  });
+
+  test('daily and monthly counters both increment on successful send', async ({ request }) => {
+    const { jwt } = await createTestAddress(request, 'limit-both-inc');
+    await requestSendAccess(request, jwt);
+
+    const dailyBaseline = await probeDailyBaseline(request, jwt);
+    const monthlyBaseline = await probeMonthlyBaseline(request, jwt);
+
+    // Give plenty of headroom so sends succeed.
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: true,
+      monthlyEnabled: true,
+      dailyLimit: dailyBaseline + 10,
+      monthlyLimit: monthlyBaseline + 10,
+    });
+    expect(save.ok()).toBe(true);
+
+    const { res, listener } = await sendOneMail(request, jwt, 'inc');
+    expect(res.ok()).toBe(true);
+    await listener!.message;
+
+    // Re-probe to confirm both counters moved forward after the successful send.
+    const dailyAfter = await probeDailyBaseline(request, jwt);
+    expect(dailyAfter).toBeGreaterThanOrEqual(dailyBaseline + 1);
+    const monthlyAfter = await probeMonthlyBaseline(request, jwt);
+    expect(monthlyAfter).toBeGreaterThanOrEqual(monthlyBaseline + 1);
+
+    await deleteAddress(request, jwt);
+  });
+
+  test('admin /admin/send_mail also respects daily limit', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'limit-admin');
+    await requestSendAccess(request, jwt);
+
+    // Probe via a user-facing send to establish baseline.
+    const baseline = await probeDailyBaseline(request, jwt);
+    const save = await saveLimitConfig(request, {
+      dailyEnabled: true,
+      monthlyEnabled: false,
+      dailyLimit: baseline,
+      monthlyLimit: null,
+    });
+    expect(save.ok()).toBe(true);
+
+    const res = await request.post(`${WORKER_URL}/admin/send_mail`, {
+      headers: ADMIN_HEADERS,
+      data: {
+        from_name: '',
+        from_mail: address,
+        to_name: '',
+        to_mail: 'recipient@test.example.com',
+        subject: `admin-over-${Date.now()}`,
+        content: 'admin blocked body',
+        is_html: false,
+      },
+    });
+    expect(res.ok()).toBe(false);
+    const text = await res.text();
+    expect(text).toContain('Server daily send quota has been reached');
+
+    await deleteAddress(request, jwt);
+  });
+});

e2e/tests/api/send-mail.spec.ts

@@ -3,7 +3,6 @@ import {
   createTestAddress,
   deleteAddress,
   deleteAllMailpitMessages,
-  requestSendAccess,
   onMailpitMessage,
   WORKER_URL,
 } from '../../fixtures/test-helpers';
@@ -15,10 +14,6 @@ test.describe('Send Mail via SMTP', () => {
 
   test('send HTML email and verify in Mailpit', async ({ request }) => {
     const { jwt, address } = await createTestAddress(request, 'sender-test');
-
-    // Must request send access before sending (creates address_sender row)
-    await requestSendAccess(request, jwt);
-
     const subject = `E2E Test ${Date.now()}`;
     const htmlContent = '<h1>Hello</h1><p>This is an <b>E2E test</b> email.</p>';
 
@@ -45,6 +40,14 @@ test.describe('Send Mail via SMTP', () => {
     expect(mail.From.Address).toBe(address);
     expect(mail.To[0].Address).toBe('recipient@test.example.com');
 
+    // Balance should auto-initialize to 10 and then decrement to 9 after sending.
+    const settingsRes = await request.get(`${WORKER_URL}/api/settings`, {
+      headers: { Authorization: `Bearer ${jwt}` },
+    });
+    expect(settingsRes.ok()).toBe(true);
+    const settings = await settingsRes.json();
+    expect(settings.send_balance).toBe(9);
+
     // Cleanup
     await deleteAddress(request, jwt);
   });

e2e/tests/api/subdomain-create.spec.ts

@@ -0,0 +1,230 @@
+import { test, expect } from '@playwright/test';
+import { TEST_DOMAIN, WORKER_URL, WORKER_URL_ENV_OFF, WORKER_URL_SUBDOMAIN } from '../../fixtures/test-helpers';
+
+const MANUAL_BASE_DOMAIN = 'manual.example.com';
+const SUBDOMAIN = `team.${MANUAL_BASE_DOMAIN}`;
+const NESTED_SUBDOMAIN = `deep.team.${MANUAL_BASE_DOMAIN}`;
+const MIXED_CASE_SUBDOMAIN = `TeAm.${MANUAL_BASE_DOMAIN.toUpperCase()}`;
+const INVALID_LOOKALIKE_DOMAIN = `bad${MANUAL_BASE_DOMAIN}`;
+const INVALID_EMPTY_PREFIX_DOMAIN = `.${MANUAL_BASE_DOMAIN}`;
+const INVALID_EMPTY_LABEL_DOMAIN = `a..b.${MANUAL_BASE_DOMAIN}`;
+const INVALID_OVERLONG_DOMAIN = `${'a.'.repeat(119)}${MANUAL_BASE_DOMAIN}`;
+const RANDOM_SUBDOMAIN = `team.${TEST_DOMAIN}`;
+const CREATE_ADDRESS_WORKER_URL = WORKER_URL_SUBDOMAIN || WORKER_URL;
+let originalCreateAddressStoredEnabled: boolean | undefined;
+let originalEnvOffStoredEnabled: boolean | undefined;
+
+async function getAccountSettings(request: any, workerUrl: string) {
+  const res = await request.get(`${workerUrl}/admin/account_settings`);
+  expect(res.ok()).toBe(true);
+  return await res.json();
+}
+
+function buildAccountSettingsPayload(
+  current: any,
+  addressCreationSettings?: { enableSubdomainMatch?: boolean | null },
+  overrides: Record<string, unknown> = {}
+) {
+  return {
+    blockList: current.blockList || [],
+    sendBlockList: current.sendBlockList || [],
+    verifiedAddressList: current.verifiedAddressList || [],
+    fromBlockList: current.fromBlockList || [],
+    noLimitSendAddressList: current.noLimitSendAddressList || [],
+    emailRuleSettings: current.emailRuleSettings || {},
+    ...(typeof addressCreationSettings !== 'undefined'
+      ? { addressCreationSettings }
+      : {}),
+    ...overrides,
+  };
+}
+
+async function saveSubdomainMatchSetting(
+  request: any,
+  workerUrl: string,
+  enableSubdomainMatch: boolean | null
+) {
+  const current = await getAccountSettings(request, workerUrl);
+  const res = await request.post(`${workerUrl}/admin/account_settings`, {
+    data: buildAccountSettingsPayload(current, {
+      enableSubdomainMatch,
+    }),
+  });
+  expect(res.ok()).toBe(true);
+}
+
+async function restoreSubdomainMatchSetting(
+  request: any,
+  workerUrl: string,
+  originalValue: boolean | undefined
+) {
+  if (typeof originalValue === 'boolean') {
+    await saveSubdomainMatchSetting(request, workerUrl, originalValue);
+    return;
+  }
+  await saveSubdomainMatchSetting(request, workerUrl, null);
+}
+
+test.describe('Create Address Subdomain Match', () => {
+  test.beforeAll(async ({ request }) => {
+    const createAddressSettings = await getAccountSettings(request, CREATE_ADDRESS_WORKER_URL);
+    originalCreateAddressStoredEnabled = createAddressSettings.addressCreationSubdomainMatchStatus?.storedEnabled;
+
+    if (WORKER_URL_ENV_OFF) {
+      const envOffSettings = await getAccountSettings(request, WORKER_URL_ENV_OFF);
+      originalEnvOffStoredEnabled = envOffSettings.addressCreationSubdomainMatchStatus?.storedEnabled;
+    }
+  });
+
+  test.afterEach(async ({ request }) => {
+    await restoreSubdomainMatchSetting(request, CREATE_ADDRESS_WORKER_URL, originalCreateAddressStoredEnabled);
+    if (WORKER_URL_ENV_OFF) {
+      await restoreSubdomainMatchSetting(request, WORKER_URL_ENV_OFF, originalEnvOffStoredEnabled);
+    }
+  });
+
+  test('admin can clear override and return to env fallback', async ({ request }) => {
+    await saveSubdomainMatchSetting(request, CREATE_ADDRESS_WORKER_URL, true);
+    await saveSubdomainMatchSetting(request, CREATE_ADDRESS_WORKER_URL, null);
+
+    const settings = await getAccountSettings(request, CREATE_ADDRESS_WORKER_URL);
+    expect(settings.addressCreationSubdomainMatchStatus?.storedEnabled).toBeUndefined();
+
+    const res = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/new_address`, {
+      data: { name: `subenvfb${Date.now()}`, domain: SUBDOMAIN },
+    });
+
+    expect(res.ok()).toBe(false);
+    expect(await res.text()).toContain('Invalid domain');
+  });
+
+  test('invalid addressCreationSettings payload does not partially persist earlier settings', async ({ request }) => {
+    const current = await getAccountSettings(request, CREATE_ADDRESS_WORKER_URL);
+    const uniqueBlockedKeyword = `should-not-persist-${Date.now()}`;
+
+    const res = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/account_settings`, {
+      data: buildAccountSettingsPayload(
+        current,
+        { enableSubdomainMatch: 'invalid-value' as any },
+        {
+          blockList: [...(current.blockList || []), uniqueBlockedKeyword],
+        }
+      ),
+    });
+
+    expect(res.status()).toBe(400);
+
+    const after = await getAccountSettings(request, CREATE_ADDRESS_WORKER_URL);
+    expect(after.blockList || []).toEqual(current.blockList || []);
+    expect(after.addressCreationSubdomainMatchStatus?.storedEnabled).toBe(
+      current.addressCreationSubdomainMatchStatus?.storedEnabled
+    );
+  });
+
+  test('random subdomain scope allows a manually entered subdomain', async ({ request }) => {
+    await saveSubdomainMatchSetting(request, CREATE_ADDRESS_WORKER_URL, false);
+
+    const uniqueName = `subdomain-default-${Date.now()}`;
+    const res = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/new_address`, {
+      data: { name: uniqueName, domain: RANDOM_SUBDOMAIN },
+    });
+
+    expect(res.ok()).toBe(true);
+    expect((await res.json()).address).toContain(`@${RANDOM_SUBDOMAIN}`);
+  });
+
+  test('admin switch enables suffix subdomain match for both admin and user create APIs', async ({ request }) => {
+    await saveSubdomainMatchSetting(request, CREATE_ADDRESS_WORKER_URL, true);
+
+    const adminName = `subdomain-admin-${Date.now()}`;
+    const adminRes = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/new_address`, {
+      data: { name: adminName, domain: SUBDOMAIN },
+    });
+    expect(adminRes.ok()).toBe(true);
+    const adminBody = await adminRes.json();
+    expect(adminBody.address).toContain(`@${SUBDOMAIN}`);
+    expect(adminBody.address_id).toBeGreaterThan(0);
+
+    const userName = `subdomain-user-${Date.now()}`;
+    const userRes = await request.post(`${CREATE_ADDRESS_WORKER_URL}/api/new_address`, {
+      data: { name: userName, domain: NESTED_SUBDOMAIN },
+    });
+    expect(userRes.ok()).toBe(true);
+    const userBody = await userRes.json();
+    expect(userBody.address).toContain(`@${NESTED_SUBDOMAIN}`);
+    expect(userBody.address_id).toBeGreaterThan(0);
+
+    const mixedCaseRes = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/new_address`, {
+      data: { name: `subcase${Date.now()}`, domain: MIXED_CASE_SUBDOMAIN },
+    });
+    expect(mixedCaseRes.ok()).toBe(true);
+    const mixedCaseBody = await mixedCaseRes.json();
+    expect(mixedCaseBody.address).toContain(`@${SUBDOMAIN}`);
+
+    const invalidRes = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/new_address`, {
+      data: { name: `subinvalid${Date.now()}`, domain: INVALID_LOOKALIKE_DOMAIN },
+    });
+    expect(invalidRes.ok()).toBe(false);
+    expect(await invalidRes.text()).toContain('Invalid domain');
+
+    const invalidEmptyPrefixRes = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/new_address`, {
+      data: { name: `subempty${Date.now()}`, domain: INVALID_EMPTY_PREFIX_DOMAIN },
+    });
+    expect(invalidEmptyPrefixRes.ok()).toBe(false);
+    expect(await invalidEmptyPrefixRes.text()).toContain('Invalid domain');
+
+    const invalidEmptyLabelRes = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/new_address`, {
+      data: { name: `sublabel${Date.now()}`, domain: INVALID_EMPTY_LABEL_DOMAIN },
+    });
+    expect(invalidEmptyLabelRes.ok()).toBe(false);
+    expect(await invalidEmptyLabelRes.text()).toContain('Invalid domain');
+
+    const invalidOverlongRes = await request.post(`${CREATE_ADDRESS_WORKER_URL}/admin/new_address`, {
+      data: { name: `sublong${Date.now()}`, domain: INVALID_OVERLONG_DOMAIN },
+    });
+    expect(invalidOverlongRes.ok()).toBe(false);
+    expect(await invalidOverlongRes.text()).toContain('Invalid domain');
+  });
+
+  test('deleted random subdomain address can be recreated manually', async ({ request }) => {
+    await saveSubdomainMatchSetting(request, CREATE_ADDRESS_WORKER_URL, false);
+
+    const name = `subreuse${Date.now()}`;
+    const firstCreate = await request.post(`${CREATE_ADDRESS_WORKER_URL}/api/new_address`, {
+      data: { name, domain: TEST_DOMAIN, enableRandomSubdomain: true },
+    });
+    expect(firstCreate.ok()).toBe(true);
+    const firstAddress = await firstCreate.json();
+    const generatedDomain = firstAddress.address.split('@')[1];
+    expect(generatedDomain).not.toBe(TEST_DOMAIN);
+
+    const firstDelete = await request.delete(`${CREATE_ADDRESS_WORKER_URL}/api/delete_address`, {
+      headers: { Authorization: `Bearer ${firstAddress.jwt}` },
+    });
+    expect(firstDelete.ok()).toBe(true);
+
+    const secondCreate = await request.post(`${CREATE_ADDRESS_WORKER_URL}/api/new_address`, {
+      data: { name, domain: generatedDomain },
+    });
+    expect(secondCreate.ok()).toBe(true);
+    const secondAddress = await secondCreate.json();
+    expect(secondAddress.address).toBe(firstAddress.address);
+
+    const secondDelete = await request.delete(`${CREATE_ADDRESS_WORKER_URL}/api/delete_address`, {
+      headers: { Authorization: `Bearer ${secondAddress.jwt}` },
+    });
+    expect(secondDelete.ok()).toBe(true);
+  });
+
+  test('env false works as hard kill switch even if admin setting is enabled', async ({ request }) => {
+    test.skip(!WORKER_URL_ENV_OFF, 'WORKER_URL_ENV_OFF is not configured');
+
+    await saveSubdomainMatchSetting(request, WORKER_URL_ENV_OFF, true);
+
+    const res = await request.post(`${WORKER_URL_ENV_OFF}/admin/new_address`, {
+      data: { name: `subdomain-env-off-${Date.now()}`, domain: RANDOM_SUBDOMAIN },
+    });
+    expect(res.ok()).toBe(false);
+    expect(await res.text()).toContain('Invalid domain');
+  });
+});

e2e/tests/api/telegram-ai-extract.spec.ts

@@ -0,0 +1,55 @@
+import { test, expect } from '@playwright/test';
+import { WORKER_URL, createTestAddress, deleteAddress } from '../../fixtures/test-helpers';
+
+test.describe('Telegram AI extraction rendering', () => {
+  test('realtime mail stores AI extraction metadata for Telegram rendering', async ({ request }) => {
+    const { jwt, address } = await createTestAddress(request, 'tg-ai');
+
+    try {
+      const subject = `Telegram AI realtime ${Date.now()}`;
+      const raw = [
+        'From: sender@test.example.com',
+        `To: ${address}`,
+        `Subject: ${subject}`,
+        `Message-ID: <telegram-ai-${Date.now()}@test>`,
+        'MIME-Version: 1.0',
+        'Content-Type: text/plain; charset=utf-8',
+        '',
+        'Telegram AI extraction realtime body',
+      ].join('\r\n');
+
+      const receiveRes = await request.post(`${WORKER_URL}/admin/test/receive_mail`, {
+        data: {
+          from: 'sender@test.example.com',
+          to: address,
+          raw,
+          ai_extract_result: {
+            type: 'auth_code',
+            result: '123456',
+            result_text: '',
+          },
+        },
+      });
+      expect(receiveRes.ok()).toBe(true);
+      const receiveBody = await receiveRes.json();
+      expect(receiveBody.success).toBe(true);
+
+      const mailsRes = await request.get(`${WORKER_URL}/api/mails?limit=10&offset=0`, {
+        headers: { Authorization: `Bearer ${jwt}` },
+      });
+      expect(mailsRes.ok()).toBe(true);
+      const { results } = await mailsRes.json();
+      expect(results).toHaveLength(1);
+
+      const metadata = JSON.parse(results[0].metadata);
+      expect(metadata.ai_extract).toEqual({
+        type: 'auth_code',
+        result: '123456',
+        result_text: '',
+      });
+      expect(metadata.extracted_at).toBeTruthy();
+    } finally {
+      await deleteAddress(request, jwt);
+    }
+  });
+});

e2e/tests/api/user-address-pagination.spec.ts

@@ -0,0 +1,170 @@
+import { test, expect, type APIRequestContext } from '@playwright/test';
+import {
+  WORKER_URL,
+  createTestAddress,
+  deleteAddress,
+  hashPassword,
+  seedTestMail,
+} from '../../fixtures/test-helpers';
+
+async function createUser(request: APIRequestContext) {
+  const email = `address-page-${Date.now()}@test.example.com`;
+  const password = hashPassword('test-password-123');
+
+  const registerRes = await request.post(`${WORKER_URL}/user_api/register`, {
+    data: { email, password },
+  });
+  expect(registerRes.ok()).toBe(true);
+
+  const loginRes = await request.post(`${WORKER_URL}/user_api/login`, {
+    data: { email, password },
+  });
+  expect(loginRes.ok()).toBe(true);
+  const { jwt } = await loginRes.json();
+  const payload = JSON.parse(Buffer.from(jwt.split('.')[1], 'base64url').toString('utf8'));
+  return { jwt, userId: payload.user_id as number };
+}
+
+test.describe('User address pagination', () => {
+  test('paginates addresses and enforces mail ownership', async ({ request }) => {
+    const addresses: Awaited<ReturnType<typeof createTestAddress>>[] = [];
+    let outsider: Awaited<ReturnType<typeof createTestAddress>> | undefined;
+    let originalUserSettings: Record<string, unknown> | undefined;
+    let userId: number | undefined;
+
+    try {
+      const settingsRes = await request.get(`${WORKER_URL}/admin/user_settings`);
+      expect(settingsRes.ok()).toBe(true);
+      originalUserSettings = await settingsRes.json();
+      const enableUserRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+        data: {
+          ...originalUserSettings,
+          enable: true,
+          enableMailVerify: false,
+          maxAddressCount: 0,
+        },
+      });
+      expect(enableUserRes.ok()).toBe(true);
+
+      const user = await createUser(request);
+      const userJwt = user.jwt;
+      userId = user.userId;
+      addresses.push(...await Promise.all([
+        createTestAddress(request, 'user-page-a'),
+        createTestAddress(request, 'user-page-b'),
+        createTestAddress(request, 'user-page-c'),
+      ]));
+      outsider = await createTestAddress(request, 'user-page-outsider');
+
+      for (const item of addresses) {
+        const bindRes = await request.post(`${WORKER_URL}/user_api/bind_address`, {
+          headers: {
+            Authorization: `Bearer ${item.jwt}`,
+            'x-user-token': userJwt,
+          },
+        });
+        expect(bindRes.ok()).toBe(true);
+      }
+
+      const defaultPageRes = await request.get(`${WORKER_URL}/user_api/bind_address`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(defaultPageRes.ok()).toBe(true);
+      const defaultPage = await defaultPageRes.json();
+      expect(defaultPage.count).toBe(3);
+      expect(defaultPage.results).toHaveLength(3);
+
+      const firstPageRes = await request.get(
+        `${WORKER_URL}/user_api/bind_address?limit=2&offset=0`,
+        { headers: { 'x-user-token': userJwt } },
+      );
+      expect(firstPageRes.ok()).toBe(true);
+      const firstPage = await firstPageRes.json();
+      expect(firstPage.count).toBe(3);
+      expect(firstPage.results).toHaveLength(2);
+      expect(firstPage.results[0].mail_count).toBe(0);
+      expect(firstPage.results[0].send_count).toBe(0);
+      expect(firstPage.results[0]).toHaveProperty('source_meta');
+      expect(firstPage.results[0]).not.toHaveProperty('password');
+
+      const secondPageRes = await request.get(
+        `${WORKER_URL}/user_api/bind_address?limit=2&offset=2`,
+        { headers: { 'x-user-token': userJwt } },
+      );
+      expect(secondPageRes.ok()).toBe(true);
+      const secondPage = await secondPageRes.json();
+      expect(secondPage.count).toBe(0);
+      expect(secondPage.results).toHaveLength(1);
+
+      const invalidLimitRes = await request.get(
+        `${WORKER_URL}/user_api/bind_address?limit=101&offset=0`,
+        { headers: { 'x-user-token': userJwt } },
+      );
+      expect(invalidLimitRes.status()).toBe(400);
+
+      const invalidOffsetRes = await request.get(
+        `${WORKER_URL}/user_api/bind_address?limit=20&offset=-1`,
+        { headers: { 'x-user-token': userJwt } },
+      );
+      expect(invalidOffsetRes.status()).toBe(400);
+
+      await seedTestMail(request, addresses[0].address, { subject: 'Bound mail' });
+      await seedTestMail(request, outsider.address, { subject: 'Outsider mail' });
+
+      const userMailsRes = await request.get(`${WORKER_URL}/user_api/mails?limit=20&offset=0`, {
+        headers: { 'x-user-token': userJwt },
+      });
+      expect(userMailsRes.ok()).toBe(true);
+      const userMails = await userMailsRes.json();
+      expect(userMails.count).toBe(1);
+      expect(userMails.results[0].address).toBe(addresses[0].address);
+
+      const filteredOutsiderMailsRes = await request.get(
+        `${WORKER_URL}/user_api/mails?limit=20&offset=0&address=${encodeURIComponent(outsider.address)}`,
+        { headers: { 'x-user-token': userJwt } },
+      );
+      expect(filteredOutsiderMailsRes.ok()).toBe(true);
+      const filteredOutsiderMails = await filteredOutsiderMailsRes.json();
+      expect(filteredOutsiderMails.count).toBe(0);
+      expect(filteredOutsiderMails.results).toHaveLength(0);
+
+      const outsiderMailsRes = await request.get(`${WORKER_URL}/api/mails?limit=20&offset=0`, {
+        headers: { Authorization: `Bearer ${outsider.jwt}` },
+      });
+      expect(outsiderMailsRes.ok()).toBe(true);
+      const outsiderMails = await outsiderMailsRes.json();
+      expect(outsiderMails.results).toHaveLength(1);
+
+      const forbiddenDeleteRes = await request.delete(
+        `${WORKER_URL}/user_api/mails/${outsiderMails.results[0].id}`,
+        { headers: { 'x-user-token': userJwt } },
+      );
+      expect(forbiddenDeleteRes.ok()).toBe(true);
+
+      const outsiderAfterRes = await request.get(`${WORKER_URL}/api/mails?limit=20&offset=0`, {
+        headers: { Authorization: `Bearer ${outsider.jwt}` },
+      });
+      expect(outsiderAfterRes.ok()).toBe(true);
+      const outsiderAfter = await outsiderAfterRes.json();
+      expect(outsiderAfter.results).toHaveLength(1);
+    } finally {
+      try {
+        await Promise.allSettled(
+          [...addresses, outsider].filter((item) => item !== undefined)
+            .map((item) => deleteAddress(request, item.jwt)),
+        );
+        if (userId !== undefined) {
+          const deleteUserRes = await request.delete(`${WORKER_URL}/admin/users/${userId}`);
+          expect(deleteUserRes.ok()).toBe(true);
+        }
+      } finally {
+        if (originalUserSettings) {
+          const restoreSettingsRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+            data: originalUserSettings,
+          });
+          expect(restoreSettingsRes.ok()).toBe(true);
+        }
+      }
+    }
+  });
+});

e2e/tests/api/user-domain-normalization.spec.ts

@@ -0,0 +1,118 @@
+import { test, expect } from '@playwright/test';
+import type { APIRequestContext } from '@playwright/test';
+import http from 'node:http';
+import { WORKER_URL } from '../../fixtures/test-helpers';
+
+async function resetUserSettings(request: APIRequestContext) {
+  const res = await request.post(`${WORKER_URL}/admin/user_settings`, {
+    data: {
+      enable: true,
+      enableMailVerify: false,
+      enableMailAllowList: false,
+      mailAllowList: [],
+    },
+  });
+  expect(res.ok()).toBe(true);
+}
+
+async function resetOauth2Settings(request: APIRequestContext) {
+  const res = await request.post(`${WORKER_URL}/admin/user_oauth2_settings`, {
+    data: [],
+  });
+  expect(res.ok()).toBe(true);
+}
+
+async function startOauthServer(email: string): Promise<{ server: http.Server; baseUrl: string }> {
+  const server = http.createServer((req, res) => {
+    if (req.url === '/token') {
+      res.writeHead(200, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ access_token: 'token', token_type: 'Bearer' }));
+      return;
+    }
+    if (req.url === '/userinfo') {
+      res.writeHead(200, { 'Content-Type': 'application/json' });
+      res.end(JSON.stringify({ email }));
+      return;
+    }
+    res.writeHead(404, { 'Content-Type': 'text/plain' });
+    res.end('not found');
+  });
+
+  await new Promise<void>((resolve) => server.listen(0, '0.0.0.0', resolve));
+  const addr = server.address();
+  if (!addr || typeof addr === 'string') throw new Error('Failed to resolve OAuth test server port');
+  const hostname = process.env.CI ? 'e2e-runner' : 'localhost';
+  return { server, baseUrl: `http://${hostname}:${addr.port}` };
+}
+
+test.describe('User domain normalization', () => {
+  test.afterEach(async ({ request }) => {
+    await resetOauth2Settings(request);
+    await resetUserSettings(request);
+  });
+
+  test('normalizes uppercase verify mail sender domain in admin settings', async ({ request }) => {
+    const res = await request.post(`${WORKER_URL}/admin/user_settings`, {
+      data: {
+        enable: true,
+        enableMailVerify: true,
+        verifyMailSender: 'verify@TEST.EXAMPLE.COM',
+      },
+    });
+    expect(res.ok()).toBe(true);
+  });
+
+  test('normalizes uppercase user registration allow-list domains', async ({ request }) => {
+    const saveRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+      data: {
+        enable: true,
+        enableMailVerify: false,
+        enableMailAllowList: true,
+        mailAllowList: ['TEST.EXAMPLE.COM'],
+      },
+    });
+    expect(saveRes.ok()).toBe(true);
+
+    const registerRes = await request.post(`${WORKER_URL}/user_api/register`, {
+      data: {
+        email: `allow-list-${Date.now()}@TEST.EXAMPLE.COM`,
+        password: 'allow-list-password',
+      },
+    });
+    expect(registerRes.ok()).toBe(true);
+  });
+
+  test('normalizes uppercase OAuth2 allow-list domains', async ({ request }) => {
+    const email = `oauth-allow-${Date.now()}@TEST.EXAMPLE.COM`;
+    const { server, baseUrl } = await startOauthServer(email);
+
+    try {
+      const saveRes = await request.post(`${WORKER_URL}/admin/user_oauth2_settings`, {
+        data: [{
+          name: 'case-oauth',
+          clientID: 'case-client',
+          clientSecret: 'case-secret',
+          authorizationURL: `${baseUrl}/authorize`,
+          accessTokenURL: `${baseUrl}/token`,
+          accessTokenFormat: 'json',
+          userInfoURL: `${baseUrl}/userinfo`,
+          redirectURL: `${baseUrl}/callback`,
+          userEmailKey: 'email',
+          scope: 'openid email',
+          enableMailAllowList: true,
+          mailAllowList: ['TEST.EXAMPLE.COM'],
+        }],
+      });
+      expect(saveRes.ok()).toBe(true);
+
+      const callbackRes = await request.post(`${WORKER_URL}/user_api/oauth2/callback`, {
+        data: { clientID: 'case-client', code: 'case-code' },
+      });
+      expect(callbackRes.ok()).toBe(true);
+      const body = await callbackRes.json();
+      expect(body.jwt).toBeTruthy();
+    } finally {
+      server.close();
+    }
+  });
+});

e2e/tests/api/user-send-mail.spec.ts

@@ -0,0 +1,415 @@
+import { expect, test, type APIRequestContext } from '@playwright/test';
+
+import {
+  WORKER_URL,
+  createTestAddress,
+  deleteAddress,
+  deleteAllMailpitMessages,
+  getAddressSender,
+  hashPassword,
+  onMailpitMessage,
+  updateAddressSender,
+} from '../../fixtures/test-helpers';
+
+async function createUser(request: APIRequestContext) {
+  const email = `user-send-${Date.now()}@test.example.com`;
+  const password = hashPassword('test-password-123');
+  const registerRes = await request.post(`${WORKER_URL}/user_api/register`, {
+    data: { email, password },
+  });
+  expect(registerRes.ok()).toBe(true);
+
+  const loginRes = await request.post(`${WORKER_URL}/user_api/login`, {
+    data: { email, password },
+  });
+  expect(loginRes.ok()).toBe(true);
+  const { jwt } = await loginRes.json();
+  const payload = JSON.parse(Buffer.from(jwt.split('.')[1], 'base64url').toString('utf8'));
+  return { jwt, userId: payload.user_id as number };
+}
+
+async function bindAddress(
+  request: APIRequestContext,
+  userJwt: string,
+  addressJwt: string,
+) {
+  const response = await request.post(`${WORKER_URL}/user_api/bind_address`, {
+    headers: {
+      Authorization: `Bearer ${addressJwt}`,
+      'x-user-token': userJwt,
+    },
+  });
+  expect(response.ok()).toBe(true);
+}
+
+test.describe('User send mail API', () => {
+  test('sends and manages sent items for a bound address only', async ({ request }) => {
+    const addresses: Awaited<ReturnType<typeof createTestAddress>>[] = [];
+    let userId: number | undefined;
+    let originalUserSettings: Record<string, unknown> | undefined;
+
+    try {
+      const settingsRes = await request.get(`${WORKER_URL}/admin/user_settings`);
+      expect(settingsRes.ok()).toBe(true);
+      originalUserSettings = await settingsRes.json();
+      const enableUserRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+        data: {
+          ...originalUserSettings,
+          enable: true,
+          enableMailVerify: false,
+          maxAddressCount: 0,
+        },
+      });
+      expect(enableUserRes.ok()).toBe(true);
+
+      const user = await createUser(request);
+      userId = user.userId;
+      const bound = await createTestAddress(request, 'user-send-bound-');
+      const accessRequest = await createTestAddress(request, 'user-send-access-');
+      const outsider = await createTestAddress(request, 'usr-outsider-');
+      addresses.push(bound, accessRequest, outsider);
+      await bindAddress(request, user.jwt, bound.jwt);
+      await bindAddress(request, user.jwt, accessRequest.jwt);
+
+      const invalidAddressSettingsRes = await request.get(
+        `${WORKER_URL}/user_api/address/0/settings`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(invalidAddressSettingsRes.status()).toBe(400);
+
+      const outsiderSettingsRes = await request.get(
+        `${WORKER_URL}/user_api/address/${outsider.address_id}/settings`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(outsiderSettingsRes.status()).toBe(400);
+
+      const outsiderCredentialRes = await request.get(
+        `${WORKER_URL}/user_api/bind_address_jwt/${outsider.address_id}`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(outsiderCredentialRes.status()).toBe(400);
+
+      const outsiderAccessRes = await request.post(
+        `${WORKER_URL}/user_api/address/${outsider.address_id}/request_send_mail_access`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(outsiderAccessRes.status()).toBe(400);
+
+      const outsiderUserSendRes = await request.post(
+        `${WORKER_URL}/user_api/address/${outsider.address_id}/send_mail`,
+        {
+          headers: { 'x-user-token': user.jwt },
+          data: {
+            to_mail: 'recipient@test.example.com',
+            subject: 'Forbidden user send',
+            content: 'This message must not be sent',
+            is_html: false,
+          },
+        },
+      );
+      expect(outsiderUserSendRes.status()).toBe(400);
+
+      const unauthenticatedSendboxRes = await request.get(
+        `${WORKER_URL}/user_api/sendbox?limit=20&offset=0`,
+      );
+      expect(unauthenticatedSendboxRes.status()).toBe(401);
+
+      const requestAccessRes = await request.post(
+        `${WORKER_URL}/user_api/address/${accessRequest.address_id}/request_send_mail_access`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(requestAccessRes.ok()).toBe(true);
+
+      const accessSender = await getAddressSender(request, accessRequest.address);
+      await updateAddressSender(request, {
+        address: accessRequest.address,
+        address_id: accessSender.id,
+        balance: 0,
+        enabled: true,
+      });
+      const duplicateAccessRes = await request.post(
+        `${WORKER_URL}/user_api/address/${accessRequest.address_id}/request_send_mail_access`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(duplicateAccessRes.status()).toBe(400);
+      expect(await duplicateAccessRes.text()).toContain('Already');
+
+      const addressSettingsRes = await request.get(
+        `${WORKER_URL}/user_api/address/${bound.address_id}/settings`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(addressSettingsRes.ok()).toBe(true);
+      const addressSettings = await addressSettingsRes.json();
+      expect(addressSettings.address).toBe(bound.address);
+      expect(addressSettings.send_balance).toBe(10);
+
+      await deleteAllMailpitMessages(request);
+      const subject = `User API send ${Date.now()}`;
+      const listener = onMailpitMessage((mail) => mail.Subject === subject);
+      await listener.ready;
+
+      const sendRes = await request.post(
+        `${WORKER_URL}/user_api/address/${bound.address_id}/send_mail`,
+        {
+          headers: { 'x-user-token': user.jwt },
+          data: {
+            from_name: 'User Sender',
+            from_mail: outsider.address,
+            to_name: 'Recipient',
+            to_mail: 'recipient@test.example.com',
+            subject,
+            content: 'Sent through the user API',
+            is_html: false,
+          },
+        },
+      );
+      expect(sendRes.ok()).toBe(true);
+      const delivered = await listener.message;
+      expect(delivered.From.Address).toBe(bound.address);
+
+      const outsiderSubject = `Outsider send ${Date.now()}`;
+      const outsiderSendRes = await request.post(`${WORKER_URL}/api/send_mail`, {
+        headers: { Authorization: `Bearer ${outsider.jwt}` },
+        data: {
+          to_mail: 'recipient@test.example.com',
+          subject: outsiderSubject,
+          content: 'This sent item must remain inaccessible to the user',
+          is_html: false,
+        },
+      });
+      expect(outsiderSendRes.ok()).toBe(true);
+      const outsiderAddressSendboxRes = await request.get(
+        `${WORKER_URL}/api/sendbox?limit=20&offset=0`,
+        { headers: { Authorization: `Bearer ${outsider.jwt}` } },
+      );
+      const outsiderAddressSendbox = await outsiderAddressSendboxRes.json();
+      const outsiderMail = outsiderAddressSendbox.results.find((item: { raw: string }) => (
+        JSON.parse(item.raw).subject === outsiderSubject
+      ));
+      expect(outsiderMail).toBeTruthy();
+
+      const unauthorizedDeleteRes = await request.delete(
+        `${WORKER_URL}/user_api/sendbox/${outsiderMail.id}`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(unauthorizedDeleteRes.ok()).toBe(true);
+      const outsiderSendboxAfterDeleteRes = await request.get(
+        `${WORKER_URL}/api/sendbox?limit=20&offset=0`,
+        { headers: { Authorization: `Bearer ${outsider.jwt}` } },
+      );
+      expect((await outsiderSendboxAfterDeleteRes.json()).count).toBe(1);
+
+      const updatedSettingsRes = await request.get(
+        `${WORKER_URL}/user_api/address/${bound.address_id}/settings`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect((await updatedSettingsRes.json()).send_balance).toBe(9);
+
+      const sender = await getAddressSender(request, bound.address);
+      await updateAddressSender(request, {
+        address: bound.address,
+        address_id: sender.id,
+        balance: 0,
+        enabled: true,
+      });
+      const noBalanceRes = await request.post(
+        `${WORKER_URL}/user_api/address/${bound.address_id}/send_mail`,
+        {
+          headers: { 'x-user-token': user.jwt },
+          data: {
+            to_mail: 'recipient@test.example.com',
+            subject: 'No balance user send',
+            content: 'This message must not be sent',
+            is_html: false,
+          },
+        },
+      );
+      expect(noBalanceRes.status()).toBe(400);
+      expect(await noBalanceRes.text()).toContain('No balance');
+
+      const userSendboxRes = await request.get(
+        `${WORKER_URL}/user_api/sendbox?limit=20&offset=0`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(userSendboxRes.ok()).toBe(true);
+      const userSendbox = await userSendboxRes.json();
+      expect(userSendbox.count).toBe(1);
+      expect(userSendbox.results).toHaveLength(1);
+      expect(JSON.parse(userSendbox.results[0].raw).subject).toBe(subject);
+
+      const filteredSendboxRes = await request.get(
+        `${WORKER_URL}/user_api/sendbox?limit=20&offset=0&address=${encodeURIComponent(bound.address)}`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(filteredSendboxRes.ok()).toBe(true);
+      expect((await filteredSendboxRes.json()).count).toBe(1);
+
+      const outsiderFilterRes = await request.get(
+        `${WORKER_URL}/user_api/sendbox?limit=20&offset=0&address=${encodeURIComponent(outsider.address)}`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(outsiderFilterRes.ok()).toBe(true);
+      expect((await outsiderFilterRes.json()).count).toBe(0);
+
+      const deleteRes = await request.delete(
+        `${WORKER_URL}/user_api/sendbox/${userSendbox.results[0].id}`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(deleteRes.ok()).toBe(true);
+
+      const emptySendboxRes = await request.get(
+        `${WORKER_URL}/user_api/sendbox?limit=20&offset=0`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      const emptySendbox = await emptySendboxRes.json();
+      expect(emptySendbox.count).toBe(0);
+      expect(emptySendbox.results).toHaveLength(0);
+    } finally {
+      try {
+        await Promise.allSettled(addresses.map((address) => deleteAddress(request, address.jwt)));
+        if (userId !== undefined) {
+          await request.delete(`${WORKER_URL}/admin/users/${userId}`);
+        }
+      } finally {
+        if (originalUserSettings) {
+          await request.post(`${WORKER_URL}/admin/user_settings`, {
+            data: originalUserSettings,
+          });
+        }
+      }
+    }
+  });
+
+  test('applies unlimited balance from the user role access token', async ({ request }) => {
+    const addresses: Awaited<ReturnType<typeof createTestAddress>>[] = [];
+    const userIds: number[] = [];
+    let originalUserSettings: Record<string, unknown> | undefined;
+
+    try {
+      const settingsRes = await request.get(`${WORKER_URL}/admin/user_settings`);
+      expect(settingsRes.ok()).toBe(true);
+      originalUserSettings = await settingsRes.json();
+      const enableUserRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+        data: {
+          ...originalUserSettings,
+          enable: true,
+          enableMailVerify: false,
+          maxAddressCount: 0,
+        },
+      });
+      expect(enableUserRes.ok()).toBe(true);
+
+      const user = await createUser(request);
+      userIds.push(user.userId);
+      const address = await createTestAddress(request, 'user-send-role-');
+      addresses.push(address);
+      await bindAddress(request, user.jwt, address.jwt);
+
+      const updateRoleRes = await request.post(`${WORKER_URL}/admin/user_roles`, {
+        data: { user_id: user.userId, role_text: 'case-role' },
+      });
+      expect(updateRoleRes.ok()).toBe(true);
+
+      const accessRes = await request.post(
+        `${WORKER_URL}/user_api/address/${address.address_id}/request_send_mail_access`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(accessRes.ok()).toBe(true);
+      const sender = await getAddressSender(request, address.address);
+      await updateAddressSender(request, {
+        address: address.address,
+        address_id: sender.id,
+        balance: 0,
+        enabled: true,
+      });
+
+      const userSettingsRes = await request.get(`${WORKER_URL}/user_api/settings`, {
+        headers: { 'x-user-token': user.jwt },
+      });
+      expect(userSettingsRes.ok()).toBe(true);
+      const { access_token: accessToken } = await userSettingsRes.json();
+      expect(accessToken).toBeTruthy();
+      const userHeaders = {
+        'x-user-token': user.jwt,
+        'x-user-access-token': accessToken,
+      };
+
+      const addressSettingsRes = await request.get(
+        `${WORKER_URL}/user_api/address/${address.address_id}/settings`,
+        { headers: userHeaders },
+      );
+      expect(addressSettingsRes.ok()).toBe(true);
+      expect((await addressSettingsRes.json()).send_balance).toBe(99999);
+
+      const sendRes = await request.post(
+        `${WORKER_URL}/user_api/address/${address.address_id}/send_mail`,
+        {
+          headers: userHeaders,
+          data: {
+            to_mail: 'recipient@test.example.com',
+            subject: `Unlimited role send ${Date.now()}`,
+            content: 'Sent without consuming address balance',
+            is_html: false,
+          },
+        },
+      );
+      expect(sendRes.ok()).toBe(true);
+      expect((await getAddressSender(request, address.address)).balance).toBe(0);
+
+      const otherUser = await createUser(request);
+      userIds.push(otherUser.userId);
+      const otherAddress = await createTestAddress(request, 'user-send-other-');
+      addresses.push(otherAddress);
+      await bindAddress(request, otherUser.jwt, otherAddress.jwt);
+      const otherAccessRes = await request.post(
+        `${WORKER_URL}/user_api/address/${otherAddress.address_id}/request_send_mail_access`,
+        { headers: { 'x-user-token': otherUser.jwt } },
+      );
+      expect(otherAccessRes.ok()).toBe(true);
+      const otherSender = await getAddressSender(request, otherAddress.address);
+      await updateAddressSender(request, {
+        address: otherAddress.address,
+        address_id: otherSender.id,
+        balance: 0,
+        enabled: true,
+      });
+
+      const mixedHeaders = {
+        'x-user-token': otherUser.jwt,
+        'x-user-access-token': accessToken,
+      };
+      const otherSettingsRes = await request.get(
+        `${WORKER_URL}/user_api/address/${otherAddress.address_id}/settings`,
+        { headers: mixedHeaders },
+      );
+      expect(otherSettingsRes.ok()).toBe(true);
+      expect((await otherSettingsRes.json()).send_balance).toBe(0);
+
+      const otherSendRes = await request.post(
+        `${WORKER_URL}/user_api/address/${otherAddress.address_id}/send_mail`,
+        {
+          headers: mixedHeaders,
+          data: {
+            to_mail: 'recipient@test.example.com',
+            subject: `Mismatched role token ${Date.now()}`,
+            content: 'This message must not be sent',
+            is_html: false,
+          },
+        },
+      );
+      expect(otherSendRes.status()).toBe(400);
+      expect(await otherSendRes.text()).toContain('No balance');
+    } finally {
+      await Promise.allSettled(addresses.map((address) => deleteAddress(request, address.jwt)));
+      await Promise.allSettled(userIds.map((userId) => (
+        request.delete(`${WORKER_URL}/admin/users/${userId}`)
+      )));
+      if (originalUserSettings) {
+        await request.post(`${WORKER_URL}/admin/user_settings`, {
+          data: originalUserSettings,
+        });
+      }
+    }
+  });
+
+});

e2e/tests/api/webhook-trigger.spec.ts

@@ -72,6 +72,9 @@ test.describe('Webhook — triggered on incoming mail', () => {
             from: '${from}',
             to: '${to}',
             subject: '${subject}',
+            aiExtractType: '${aiExtractType}',
+            aiExtractResult: '${aiExtractResult}',
+            aiExtractResultText: '${aiExtractResultText}',
           }),
         },
       });
@@ -93,7 +96,16 @@ test.describe('Webhook — triggered on incoming mail', () => {
       ].join('\r\n');
 
       const res = await request.post(`${WORKER_URL}/admin/test/receive_mail`, {
-        data: { from, to: address, raw },
+        data: {
+          from,
+          to: address,
+          raw,
+          ai_extract_result: {
+            type: 'auth_code',
+            result: '654321',
+            result_text: 'Login verification code',
+          },
+        },
       });
       expect(res.ok()).toBe(true);
 
@@ -106,6 +118,9 @@ test.describe('Webhook — triggered on incoming mail', () => {
       expect(payload.from).toContain('webhook-sender@test.example.com');
       expect(payload.to).toBe(address);
       expect(payload.subject).toBe(subject);
+      expect(payload.aiExtractType).toBe('auth_code');
+      expect(payload.aiExtractResult).toBe('654321');
+      expect(payload.aiExtractResultText).toBe('Login verification code');
     } finally {
       server.close();
     }

e2e/tests/browser/custom-subdomain.spec.ts

@@ -0,0 +1,50 @@
+import { expect, test } from '@playwright/test';
+import { FRONTEND_URL, TEST_DOMAIN, deleteAddress } from '../../fixtures/test-helpers';
+
+test('create an address with a custom subdomain from the UI', async ({ page, request }) => {
+  let jwt: string | undefined;
+
+  try {
+    await page.goto(`${FRONTEND_URL}/en/`);
+    await page.getByRole('button', { name: 'Create New Email' }).click();
+
+    const name = `subui${Date.now()}`;
+    const createForm = page.locator('.n-tab-pane:visible form');
+    await createForm.locator('.n-input-group .n-input input').fill(name);
+
+    const domainSelect = createForm.locator('.n-input-group .n-select');
+    await expect(domainSelect.locator('input')).toHaveCount(0);
+
+    const normalSubdomain = createForm.getByRole('radio', { name: 'Normal Domain' });
+    const randomSubdomain = createForm.getByRole('radio', { name: 'Use Random Subdomain' });
+    const customSubdomain = createForm.getByRole('radio', { name: 'Use Custom Subdomain' });
+
+    await expect(normalSubdomain).toBeChecked();
+    await createForm.getByText('Use Random Subdomain', { exact: true }).click();
+    await expect(normalSubdomain).not.toBeChecked();
+    await expect(randomSubdomain).toBeChecked();
+    await expect(customSubdomain).not.toBeChecked();
+
+    await createForm.getByText('Use Custom Subdomain', { exact: true }).click();
+    await expect(randomSubdomain).not.toBeChecked();
+    await expect(customSubdomain).toBeChecked();
+
+    await createForm.getByText('Use Random Subdomain', { exact: true }).click();
+    await expect(randomSubdomain).toBeChecked();
+    await expect(customSubdomain).not.toBeChecked();
+
+    await createForm.getByText('Use Custom Subdomain', { exact: true }).click();
+    await createForm.locator('.n-input-group:visible .n-input input').last().fill('team');
+
+    await createForm.getByRole('button', { name: 'Create New Email' }).click();
+
+    const domain = `team.${TEST_DOMAIN}`;
+    const address = `tmp${name}@${domain}`;
+    await expect(page.locator('code').getByText(address, { exact: true })).toBeVisible();
+    await page.waitForFunction(() => Boolean(localStorage.getItem('jwt')));
+    jwt = await page.evaluate(() => localStorage.getItem('jwt') || undefined);
+    expect(jwt).toBeTruthy();
+  } finally {
+    if (jwt) await deleteAddress(request, jwt);
+  }
+});

e2e/tests/browser/database-storage.spec.ts

@@ -0,0 +1,37 @@
+import { expect, test } from '@playwright/test';
+import { FRONTEND_URL, WORKER_URL } from '../../fixtures/test-helpers';
+
+const ADMIN_HEADERS = { 'x-admin-auth': 'e2e-admin-pass' };
+
+test('persists the selected D1 plan and restores it after reload', async ({ page, request }) => {
+  const seedResponse = await request.post(`${WORKER_URL}/admin/config`, {
+    headers: ADMIN_HEADERS,
+    data: { key: 'd1_storage_plan', value: 'free' },
+  });
+  expect(seedResponse.ok()).toBe(true);
+
+  await page.addInitScript(() => {
+    localStorage.setItem('adminAuth', 'e2e-admin-pass');
+    sessionStorage.setItem('adminTab', 'qucickSetup');
+  });
+  await page.goto(`${FRONTEND_URL}/en/admin`);
+
+  const storagePanel = page.locator('.storage-panel');
+  const planSelect = storagePanel.locator('.plan-select .n-select');
+
+  await expect(storagePanel.getByText('Current Database Size', { exact: true })).toBeVisible();
+  await expect(storagePanel.getByText('Database Capacity Limit', { exact: true })).toBeVisible();
+  await expect(storagePanel.getByText('Capacity Usage', { exact: true })).toBeVisible();
+  await expect(planSelect).toContainText('Free');
+
+  await planSelect.click();
+  await page.locator('.n-base-select-option').filter({ hasText: 'Workers Paid' }).click();
+
+  await expect(page.getByText('Workers plan saved')).toBeVisible();
+  await expect(storagePanel).toContainText('10.0 GB');
+
+  await page.reload();
+
+  await expect(planSelect).toContainText('Workers Paid');
+  await expect(storagePanel).toContainText('10.0 GB');
+});

e2e/tests/browser/locale-switch.spec.ts

@@ -0,0 +1,64 @@
+import { expect, test } from '@playwright/test';
+import type { Locator, Page } from '@playwright/test';
+
+import { FRONTEND_URL } from '../../fixtures/test-helpers';
+
+const installLocaleInitScript = async (page: Page, locales: string[], preferredLocale: string | null = null) => {
+  await page.addInitScript(
+    ({ locales: initialLocales, preferredLocale: initialPreferredLocale }: { locales: string[]; preferredLocale: string | null }) => {
+      const localeInitStorageKey = '__localeInitDone';
+      if (!window.sessionStorage.getItem(localeInitStorageKey)) {
+        window.localStorage.removeItem('preferredLocale');
+        if (initialPreferredLocale) {
+          window.localStorage.setItem('preferredLocale', initialPreferredLocale);
+        }
+        window.sessionStorage.setItem(localeInitStorageKey, '1');
+      }
+
+      Object.defineProperty(window.navigator, 'language', {
+        configurable: true,
+        get: () => initialLocales[0],
+      });
+      Object.defineProperty(window.navigator, 'languages', {
+        configurable: true,
+        get: () => initialLocales,
+      });
+    },
+    { locales, preferredLocale },
+  );
+};
+
+const selectLanguage = async (page: Page, selectTrigger: Locator, optionLabel: string) => {
+  await selectTrigger.click();
+  const option = page.locator('.n-dropdown-option, .n-dropdown-option-body').filter({ hasText: optionLabel }).first();
+  await expect(option).toBeVisible();
+  await option.click();
+};
+
+test.describe('Locale switching', () => {
+  test('keeps default route in Chinese while persisting browser language preference', async ({ page }) => {
+    await installLocaleInitScript(page, ['es-ES', 'en-US']);
+
+    await page.goto(`${FRONTEND_URL}/`);
+
+    await expect(page).toHaveURL(`${FRONTEND_URL}/`);
+    await expect.poll(() => page.evaluate(() => window.localStorage.getItem('preferredLocale'))).toBe('es');
+    await expect.poll(() => page.evaluate(() => document.documentElement.lang)).toBe('zh');
+  });
+
+  test('mobile drawer switch updates locale route and persisted preference', async ({ page }) => {
+    await page.setViewportSize({ width: 375, height: 844 });
+    await installLocaleInitScript(page, ['zh-CN']);
+
+    await page.goto(`${FRONTEND_URL}/`);
+
+    await page.getByRole('button', { name: /菜单|Menu/i }).click();
+
+    const drawerLocaleDropdown = page.locator('.n-drawer').getByRole('button', { name: /中文|English|Español|Português|日本語|Deutsch/ }).first();
+    await selectLanguage(page, drawerLocaleDropdown, 'Deutsch');
+
+    await expect(page).toHaveURL(`${FRONTEND_URL}/de/`);
+    await expect.poll(() => page.evaluate(() => window.localStorage.getItem('preferredLocale'))).toBe('de');
+    await expect.poll(() => page.evaluate(() => document.documentElement.lang)).toBe('de');
+  });
+});

e2e/tests/browser/passkey.spec.ts

@@ -0,0 +1,114 @@
+import { test, expect } from '@playwright/test';
+import { request as apiRequest } from '@playwright/test';
+import { createHash } from 'crypto';
+import { WORKER_URL, FRONTEND_URL } from '../../fixtures/test-helpers';
+
+const TEST_USER_EMAIL = `passkey-browser-${Date.now()}@test.example.com`;
+const TEST_USER_PASSWORD = 'browser-test-pwd-123';
+
+// Frontend hashes passwords with SHA-256 before sending to the API.
+// Register with the hashed password so UI login matches.
+const HASHED_PASSWORD = createHash('sha256').update(TEST_USER_PASSWORD).digest('hex');
+
+test.describe('Passkey Browser Flow', () => {
+  let userJwt: string;
+
+  test.beforeAll(async () => {
+    const api = await apiRequest.newContext();
+    try {
+      // Enable user registration
+      await api.post(`${WORKER_URL}/admin/user_settings`, {
+        data: { enable: true, enableMailVerify: false },
+      });
+      // Register user with hashed password (matching frontend behavior)
+      await api.post(`${WORKER_URL}/user_api/register`, {
+        data: { email: TEST_USER_EMAIL, password: HASHED_PASSWORD },
+      });
+      // Login to get JWT for localStorage injection
+      const loginRes = await api.post(`${WORKER_URL}/user_api/login`, {
+        data: { email: TEST_USER_EMAIL, password: HASHED_PASSWORD },
+      });
+      const body = await loginRes.json();
+      userJwt = body.jwt;
+    } finally {
+      await api.dispose();
+    }
+  });
+
+  test('register passkey, then login with passkey', async ({ page, context }) => {
+    // Set up virtual authenticator via CDP
+    const cdp = await context.newCDPSession(page);
+    await cdp.send('WebAuthn.enable');
+    const { authenticatorId } = await cdp.send('WebAuthn.addVirtualAuthenticator', {
+      options: {
+        protocol: 'ctap2',
+        transport: 'internal',
+        hasResidentKey: true,
+        hasUserVerification: true,
+        isUserVerified: true,
+      },
+    });
+
+    try {
+      // === Step 1: Login via localStorage injection ===
+      // Inject JWT into localStorage to skip UI login flow.
+      await page.goto(`${FRONTEND_URL}/en/`);
+      // VueUse's useStorage with string default stores raw strings (no JSON)
+      await page.evaluate((jwt) => {
+        localStorage.setItem('userJwt', jwt);
+      }, userJwt);
+      await page.goto(`${FRONTEND_URL}/en/user`);
+
+      // Wait for user settings to load (shows user email)
+      await expect(page.getByText(TEST_USER_EMAIL)).toBeVisible({ timeout: 15_000 });
+
+      // === Step 2: Click "User Settings" tab ===
+      await page.getByText('User Settings').click();
+
+      // === Step 3: Create a passkey ===
+      await page.getByRole('button', { name: 'Create Passkey' }).click();
+
+      // Fill passkey name in the modal
+      const createModal = page.locator('.n-dialog');
+      await expect(createModal).toBeVisible({ timeout: 5_000 });
+      await createModal.getByRole('textbox').fill('E2E Test Passkey');
+
+      // Click the Create Passkey button inside the modal
+      await createModal.getByRole('button', { name: 'Create Passkey' }).click();
+
+      // Wait for success — modal should close
+      await expect(createModal).not.toBeVisible({ timeout: 10_000 });
+
+      // === Step 4: Verify passkey appears in the list ===
+      await page.getByRole('button', { name: 'Show Passkey List' }).click();
+
+      const listModal = page.locator('.n-card-header:has-text("Show Passkey List")').locator('..');
+      await expect(page.getByText('E2E Test Passkey')).toBeVisible({ timeout: 5_000 });
+
+      // Close the list modal
+      await page.keyboard.press('Escape');
+
+      // === Step 5: Logout ===
+      await page.getByRole('button', { name: 'Logout' }).click();
+      const logoutModal = page.locator('.n-dialog');
+      await expect(logoutModal).toBeVisible({ timeout: 5_000 });
+      await logoutModal.getByRole('button', { name: 'Logout' }).click();
+
+      // Wait for logout to complete and navigate to user page
+      await page.waitForTimeout(2000);
+      await page.goto(`${FRONTEND_URL}/en/user`);
+
+      // === Step 6: Login with passkey ===
+      const passkeyBtn = page.getByRole('button', { name: 'Login with Passkey' });
+      await expect(passkeyBtn).toBeVisible({ timeout: 10_000 });
+      await passkeyBtn.click();
+
+      // Virtual authenticator handles the WebAuthn ceremony automatically
+      // Wait for login to complete — user email should appear
+      await expect(page.getByText(TEST_USER_EMAIL)).toBeVisible({ timeout: 15_000 });
+    } finally {
+      await cdp.send('WebAuthn.removeVirtualAuthenticator', { authenticatorId });
+      await cdp.detach();
+    }
+  });
+});

e2e/tests/browser/send-mail-compose.spec.ts

@@ -0,0 +1,134 @@
+import { test, expect, request as apiRequest, type Page } from '@playwright/test';
+import {
+  FRONTEND_URL,
+  createTestAddress,
+  deleteAddress,
+  requestSendAccess,
+} from '../../fixtures/test-helpers';
+
+const expectEditorOriginsToAlign = async (page: Page) => {
+  const editorOriginDelta = await page.locator('.compose-textarea').evaluate((editor) => {
+    const textareaElement = editor.querySelector('textarea');
+    const placeholder = editor.querySelector('.n-input__placeholder');
+    if (!textareaElement) throw new Error('compose textarea element not found');
+    if (!placeholder) throw new Error('compose placeholder element not found');
+    const textareaBox = textareaElement.getBoundingClientRect();
+    const placeholderBox = placeholder.getBoundingClientRect();
+    const textareaStyle = getComputedStyle(textareaElement);
+    const placeholderStyle = getComputedStyle(placeholder);
+    return {
+      x: textareaBox.x + parseFloat(textareaStyle.paddingLeft)
+        - placeholderBox.x - parseFloat(placeholderStyle.paddingLeft),
+      y: textareaBox.y + parseFloat(textareaStyle.paddingTop)
+        - placeholderBox.y - parseFloat(placeholderStyle.paddingTop),
+    };
+  });
+  expect(Math.abs(editorOriginDelta.x)).toBeLessThan(1);
+  expect(Math.abs(editorOriginDelta.y)).toBeLessThan(1);
+};
+
+test.describe('Send mail composer', () => {
+  test('edits a draft, changes format, and previews HTML', async ({ page }) => {
+    const api = await apiRequest.newContext();
+    let jwt: string | undefined;
+
+    try {
+      const created = await createTestAddress(api, 'compose-ui');
+      jwt = created.jwt;
+      await requestSendAccess(api, jwt);
+
+      await page.goto(`${FRONTEND_URL}/en/?jwt=${jwt}`);
+      await page.getByText('Send Mail', { exact: true }).click();
+
+      await expect(page.getByRole('heading', { name: 'Compose email', exact: true })).toBeVisible();
+      await expect(page.locator('.composer-title')).toContainText(created.address);
+
+      const expectedFieldOrder = [
+        'send-mail-sender-address',
+        'send-mail-sender-name',
+        'send-mail-recipient-address',
+        'send-mail-recipient-name',
+      ];
+      const fieldIds = await page.locator('.composer-form .n-grid input').evaluateAll(
+        (inputs) => inputs.map((input) => input.id)
+      );
+      expect(fieldIds.filter((id) => expectedFieldOrder.includes(id))).toEqual(expectedFieldOrder);
+
+      const textarea = page.locator('.compose-textarea textarea');
+      await expectEditorOriginsToAlign(page);
+
+      const recipient = page.getByRole('textbox', { name: /^Recipient address/ });
+      const subject = page.getByRole('textbox', { name: /^Subject/ });
+      await recipient.fill('recipient@test.example.com');
+      await subject.fill('Composer preview');
+
+      await page.getByText('HTML', { exact: true }).click();
+      const htmlContent = [
+        '<h1>Preview heading</h1><p>Preview body</p>',
+        '<script>alert("xss")</script><img src="x" onerror="alert(1)">',
+      ].join('');
+      let previewDialogAppeared = false;
+      page.on('dialog', async (dialog) => {
+        previewDialogAppeared = true;
+        await dialog.dismiss();
+      });
+      await textarea.fill(htmlContent);
+      await page.getByRole('button', { name: 'Preview' }).click();
+
+      const preview = page.locator('.compose-preview');
+      await expect(preview).toBeVisible();
+      await expect(preview).toContainText('Preview heading');
+      await expect(preview.locator('script, [onerror]')).toHaveCount(0);
+      expect(previewDialogAppeared).toBe(false);
+
+      await page.getByRole('button', { name: 'Edit' }).click();
+      await expect(preview).toBeHidden();
+      await expect(recipient).toHaveValue('recipient@test.example.com');
+      await expect(subject).toHaveValue('Composer preview');
+      await expect(textarea).toHaveValue(htmlContent);
+
+      await page.setViewportSize({ width: 320, height: 800 });
+      await page.goto(`${FRONTEND_URL}/es/?jwt=${jwt}`);
+      await page.getByText('Enviar correo', { exact: true }).click();
+
+      await expect(page.getByRole('heading', { name: 'Redactar correo', exact: true })).toBeVisible();
+      await expect(page.getByRole('textbox', { name: /^Dirección del destinatario/ })).toBeVisible();
+      await expect(page.getByText('Borrador guardado en este navegador', { exact: true })).toBeVisible();
+
+      await page.getByText('HTML', { exact: true }).click();
+      const previewButton = page.getByRole('button', { name: 'Vista previa', exact: true });
+      await expect(previewButton).toBeVisible();
+      const previewBox = await previewButton.boundingBox();
+      expect(previewBox).not.toBeNull();
+      expect(previewBox!.x + previewBox!.width).toBeLessThanOrEqual(320);
+    } finally {
+      try {
+        if (jwt) await deleteAddress(api, jwt);
+      } finally {
+        await api.dispose();
+      }
+    }
+  });
+
+  test('keeps the Admin field order and editor placeholder aligned', async ({ page }) => {
+    await page.addInitScript(() => {
+      localStorage.setItem('adminAuth', 'e2e-admin-pass');
+      sessionStorage.setItem('adminTab', 'mails');
+    });
+    await page.goto(`${FRONTEND_URL}/en/admin`);
+    await page.getByText('Send Mail', { exact: true }).click();
+
+    await expect(page.getByRole('heading', { name: 'Compose email', exact: true })).toBeVisible();
+    const expectedFieldOrder = [
+      'admin-send-mail-sender-address',
+      'admin-send-mail-sender-name',
+      'admin-send-mail-recipient-address',
+      'admin-send-mail-recipient-name',
+    ];
+    const fieldIds = await page.locator('.composer-form .n-grid input').evaluateAll(
+      (inputs) => inputs.map((input) => input.id)
+    );
+    expect(fieldIds.filter((id) => expectedFieldOrder.includes(id))).toEqual(expectedFieldOrder);
+    await expectEditorOriginsToAlign(page);
+  });
+});

e2e/tests/browser/user-address-pagination.spec.ts

@@ -0,0 +1,135 @@
+import { expect, request as apiRequest, test } from '@playwright/test';
+import type { APIRequestContext } from '@playwright/test';
+
+import {
+  FRONTEND_URL,
+  WORKER_URL,
+  createTestAddress,
+  deleteAddress,
+  hashPassword,
+} from '../../fixtures/test-helpers';
+
+async function saveUserSettings(request: APIRequestContext, settings: Record<string, unknown>) {
+  const response = await request.post(`${WORKER_URL}/admin/user_settings`, { data: settings });
+  expect(response.ok()).toBe(true);
+}
+
+async function createUser(request: APIRequestContext) {
+  const email = `address-browser-${Date.now()}@test.example.com`;
+  const password = hashPassword('test-password-123');
+  const registerResponse = await request.post(`${WORKER_URL}/user_api/register`, {
+    data: { email, password },
+  });
+  expect(registerResponse.ok()).toBe(true);
+
+  const loginResponse = await request.post(`${WORKER_URL}/user_api/login`, {
+    data: { email, password },
+  });
+  expect(loginResponse.ok()).toBe(true);
+  const { jwt } = await loginResponse.json();
+  const payload = JSON.parse(Buffer.from(jwt.split('.')[1], 'base64url').toString('utf8'));
+  return { email, jwt, userId: payload.user_id as number };
+}
+
+async function bindAddress(request: APIRequestContext, userJwt: string, addressJwt: string) {
+  const response = await request.post(`${WORKER_URL}/user_api/bind_address`, {
+    headers: {
+      Authorization: `Bearer ${addressJwt}`,
+      'x-user-token': userJwt,
+    },
+  });
+  expect(response.ok()).toBe(true);
+}
+
+test.describe('User address pagination browser flow', () => {
+  test('paginates addresses and filters mail', async ({ page }) => {
+    test.setTimeout(120_000);
+
+    const request = await apiRequest.newContext();
+    const createdAddresses: Awaited<ReturnType<typeof createTestAddress>>[] = [];
+    let originalUserSettings: Record<string, unknown> | undefined;
+    let userId: number | undefined;
+
+    try {
+      const settingsResponse = await request.get(`${WORKER_URL}/admin/user_settings`);
+      expect(settingsResponse.ok()).toBe(true);
+      originalUserSettings = await settingsResponse.json();
+      await saveUserSettings(request, {
+        ...originalUserSettings,
+        enable: true,
+        enableMailVerify: false,
+        maxAddressCount: 0,
+      });
+
+      const user = await createUser(request);
+      userId = user.userId;
+
+      for (let index = 0; index < 21; index += 1) {
+        const address = await createTestAddress(request, `browser-page-${index}-`);
+        createdAddresses.push(address);
+        await bindAddress(request, user.jwt, address.jwt);
+      }
+      const defaultAddressPageResponse = await request.get(
+        `${WORKER_URL}/user_api/bind_address`,
+        { headers: { 'x-user-token': user.jwt } },
+      );
+      expect(defaultAddressPageResponse.ok()).toBe(true);
+      const defaultAddressPage = await defaultAddressPageResponse.json();
+      expect(defaultAddressPage.count).toBe(21);
+      expect(defaultAddressPage.results).toHaveLength(20);
+
+      await page.goto(`${FRONTEND_URL}/en/`);
+      await page.evaluate((userJwt) => {
+        localStorage.setItem('userJwt', userJwt);
+      }, user.jwt);
+      await page.goto(`${FRONTEND_URL}/en/user`);
+
+      await expect(page.getByText(user.email)).toBeVisible({ timeout: 15_000 });
+      const pagination = page.locator('.n-pagination').first();
+      const addressRows = page.locator('.n-data-table-tbody .n-data-table-tr');
+      await expect(pagination).toContainText(/Total:\s*21/);
+      await expect(addressRows).toHaveCount(20);
+
+      await pagination.locator('.n-pagination-item').filter({ hasText: /^2$/ }).click();
+      await expect(addressRows).toHaveCount(1);
+
+      const selectedAddress = createdAddresses[20];
+
+      const initialMailboxAddressesResponse = page.waitForResponse((response) => {
+        const url = new URL(response.url());
+        return url.pathname === '/user_api/bind_address'
+          && url.searchParams.get('limit') === '100';
+      });
+      await page.getByText('Mail Box', { exact: true }).click();
+      const initialMailboxResponse = await initialMailboxAddressesResponse;
+      expect(initialMailboxResponse.ok()).toBe(true);
+      const mailboxAddressSelect = page.locator('.n-input-group .n-select').first();
+      await mailboxAddressSelect.click();
+
+      const mailboxOptions = page.locator('.n-base-select-menu:visible');
+      await expect(mailboxOptions).toContainText(selectedAddress.address);
+      const filteredMailResponse = page.waitForResponse((response) => {
+        const url = new URL(response.url());
+        return url.pathname === '/user_api/mails'
+          && url.searchParams.get('address') === selectedAddress.address;
+      });
+      await mailboxOptions.getByText(selectedAddress.address, { exact: true }).click();
+      expect((await filteredMailResponse).ok()).toBe(true);
+    } finally {
+      try {
+        try {
+          await Promise.allSettled(createdAddresses.map((address) => deleteAddress(request, address.jwt)));
+          if (userId !== undefined) {
+            await request.delete(`${WORKER_URL}/admin/users/${userId}`);
+          }
+        } finally {
+          if (originalUserSettings) {
+            await saveUserSettings(request, originalUserSettings);
+          }
+        }
+      } finally {
+        await request.dispose();
+      }
+    }
+  });
+});

e2e/tests/browser/user-send-mail.spec.ts

@@ -0,0 +1,137 @@
+import { expect, request as apiRequest, test, type APIRequestContext } from '@playwright/test';
+
+import {
+  FRONTEND_URL,
+  WORKER_URL,
+  createTestAddress,
+  deleteAddress,
+  hashPassword,
+} from '../../fixtures/test-helpers';
+
+async function createUser(request: APIRequestContext) {
+  const email = `user-send-browser-${Date.now()}@test.example.com`;
+  const password = hashPassword('test-password-123');
+  const registerRes = await request.post(`${WORKER_URL}/user_api/register`, {
+    data: { email, password },
+  });
+  expect(registerRes.ok()).toBe(true);
+
+  const loginRes = await request.post(`${WORKER_URL}/user_api/login`, {
+    data: { email, password },
+  });
+  expect(loginRes.ok()).toBe(true);
+  const { jwt } = await loginRes.json();
+  const payload = JSON.parse(Buffer.from(jwt.split('.')[1], 'base64url').toString('utf8'));
+  return { email, jwt, userId: payload.user_id as number };
+}
+
+test.describe('User send mail page', () => {
+  test('selects a bound address, sends mail, and opens its sent items', async ({ page }) => {
+    const request = await apiRequest.newContext();
+    const addresses: Awaited<ReturnType<typeof createTestAddress>>[] = [];
+    let userId: number | undefined;
+    let originalUserSettings: Record<string, unknown> | undefined;
+
+    try {
+      const settingsRes = await request.get(`${WORKER_URL}/admin/user_settings`);
+      expect(settingsRes.ok()).toBe(true);
+      originalUserSettings = await settingsRes.json();
+      const enableUserRes = await request.post(`${WORKER_URL}/admin/user_settings`, {
+        data: {
+          ...originalUserSettings,
+          enable: true,
+          enableMailVerify: false,
+          maxAddressCount: 0,
+        },
+      });
+      expect(enableUserRes.ok()).toBe(true);
+
+      const user = await createUser(request);
+      userId = user.userId;
+      const address = await createTestAddress(request, 'usr-browser-');
+      const secondAddress = await createTestAddress(request, 'usr-second-');
+      addresses.push(address, secondAddress);
+      for (const boundAddress of addresses) {
+        const bindRes = await request.post(`${WORKER_URL}/user_api/bind_address`, {
+          headers: {
+            Authorization: `Bearer ${boundAddress.jwt}`,
+            'x-user-token': user.jwt,
+          },
+        });
+        expect(bindRes.ok()).toBe(true);
+      }
+
+      await page.goto(`${FRONTEND_URL}/en/`);
+      await page.evaluate((userJwt) => {
+        localStorage.setItem('userJwt', userJwt);
+      }, user.jwt);
+      await page.goto(`${FRONTEND_URL}/en/user`);
+
+      await expect(page.getByText(user.email)).toBeVisible({ timeout: 15_000 });
+      const credentialResponse = page.waitForResponse((response) => (
+        response.request().method() === 'GET'
+        && new URL(response.url()).pathname
+          === `/user_api/bind_address_jwt/${address.address_id}`
+      ));
+      const addressRow = page.getByRole('row').filter({ hasText: address.address });
+      await addressRow.getByRole('button', { name: 'Address Credential' }).click();
+      expect((await credentialResponse).ok()).toBe(true);
+      await expect(page.getByRole('dialog')).toContainText(address.address);
+      await page.getByRole('button', { name: 'close' }).click();
+
+      const initialSettingsResponse = page.waitForResponse((response) => (
+        new URL(response.url()).pathname
+          === `/user_api/address/${secondAddress.address_id}/settings`
+      ));
+      await page.getByText('Send Mail', { exact: true }).click();
+      expect((await initialSettingsResponse).ok()).toBe(true);
+      await expect(page.locator('.composer-title h2')).toHaveText('Compose email');
+
+      const settingsResponse = page.waitForResponse((response) => (
+        new URL(response.url()).pathname
+          === `/user_api/address/${address.address_id}/settings`
+      ));
+      await page.locator('.address-picker-select').click();
+      await page.locator('.n-base-select-option').filter({ hasText: address.address }).click();
+      expect((await settingsResponse).ok()).toBe(true);
+      await expect(page.locator('.address-picker-select')).toContainText(address.address);
+
+      const subject = `Browser user send ${Date.now()}`;
+      await page.getByRole('textbox', { name: /^Recipient address/ })
+        .fill('recipient@test.example.com');
+      await page.getByRole('textbox', { name: /^Subject/ }).fill(subject);
+      await page.locator('.compose-textarea textarea').fill('Sent from the user page');
+
+      const sendResponse = page.waitForResponse((response) => (
+        response.request().method() === 'POST'
+        && new URL(response.url()).pathname
+          === `/user_api/address/${address.address_id}/send_mail`
+      ));
+      const sendboxResponse = page.waitForResponse((response) => (
+        response.request().method() === 'GET'
+        && new URL(response.url()).pathname === '/user_api/sendbox'
+      ));
+      await page.getByRole('button', { name: 'Send', exact: true }).click();
+      expect((await sendResponse).ok()).toBe(true);
+      expect((await sendboxResponse).ok()).toBe(true);
+
+      await expect(page.locator('.n-tabs-tab--active')).toHaveText('Sent');
+      await expect(page.locator('.n-thing-header__title').filter({ hasText: subject }))
+        .toHaveText(subject, { timeout: 15_000 });
+    } finally {
+      try {
+        await Promise.allSettled(addresses.map((address) => deleteAddress(request, address.jwt)));
+        if (userId !== undefined) {
+          await request.delete(`${WORKER_URL}/admin/users/${userId}`);
+        }
+      } finally {
+        if (originalUserSettings) {
+          await request.post(`${WORKER_URL}/admin/user_settings`, {
+            data: originalUserSettings,
+          });
+        }
+        await request.dispose();
+      }
+    }
+  });
+});

e2e/tests/smtp-proxy/imap-proxy.spec.ts

@@ -132,8 +132,10 @@ test.describe('IMAP Proxy', () => {
     try {
       const results = await client.search({ all: true });
       expect(results.length).toBeGreaterThan(0);
-      const msg = await client.fetchOne(String(results[0]), { uid: true, flags: true }, { uid: true });
-      expect(msg.uid).toBe(results[0]);
+      const seqMsg = await client.fetchOne(String(results[0]), { uid: true, flags: true });
+      expect(seqMsg.uid).toBeGreaterThan(0);
+      const uidMsg = await client.fetchOne(String(seqMsg.uid), { uid: true, flags: true }, { uid: true });
+      expect(uidMsg.uid).toBe(seqMsg.uid);
     } finally {
       lock.release();
     }

frontend/package.json

@@ -1,6 +1,6 @@
 {
   "name": "cloudflare_temp_email",
-  "version": "1.4.0",
+  "version": "1.12.0",
   "private": true,
   "type": "module",
   "scripts": {
@@ -18,43 +18,42 @@
     "deploy:preview": "npm run build && wrangler pages deploy ./dist --branch preview",
     "deploy": "npm run build && wrangler pages deploy ./dist --branch production",
     "deploy:actions": "npm run build && wrangler pages deploy ./dist",
-    "test": "vitest run",
+    "test": "vitest run --passWithNoTests",
     "test:watch": "vitest"
   },
   "dependencies": {
-    "@fingerprintjs/fingerprintjs": "^5.1.0",
-    "@simplewebauthn/browser": "10.0.0",
-    "@unhead/vue": "^2.1.10",
-    "@vueuse/core": "^14.2.1",
+    "@fingerprintjs/fingerprintjs": "^5.2.0",
+    "@simplewebauthn/browser": "^13.3.0",
+    "@unhead/vue": "^2.1.17",
+    "@vueuse/core": "^14.4.0",
     "@wangeditor/editor": "^5.1.23",
     "@wangeditor/editor-for-vue": "^5.1.12",
-    "axios": "^1.13.6",
-    "dompurify": "^3.3.2",
+    "axios": "^1.19.0",
+    "dompurify": "^3.4.13",
     "jszip": "^3.10.1",
-    "mail-parser-wasm": "^0.2.1",
-    "naive-ui": "^2.43.2",
-    "postal-mime": "^2.7.3",
+    "mail-parser-wasm": "^0.2.2",
+    "naive-ui": "^2.45.0",
+    "postal-mime": "^2.7.6",
     "vooks": "^0.2.12",
-    "vue": "^3.5.29",
+    "vue": "^3.5.41",
     "vue-clipboard3": "^2.0.0",
-    "vue-i18n": "^11.2.8",
+    "vue-i18n": "^11.4.8",
     "vue-router": "^4.6.4"
   },
   "devDependencies": {
     "@vicons/fa": "^0.13.0",
     "@vicons/material": "^0.13.0",
-    "@vitejs/plugin-vue": "^6.0.4",
+    "@vitejs/plugin-vue": "^6.0.8",
     "jsdom": "^28.1.0",
     "unplugin-auto-import": "^20.3.0",
     "unplugin-vue-components": "^30.0.0",
-    "vite": "^7.3.1",
-    "vite-plugin-pwa": "^1.2.0",
-    "vite-plugin-top-level-await": "^1.6.0",
-    "vite-plugin-wasm": "^3.5.0",
-    "vitest": "^3.2.4",
-    "workbox-build": "^7.4.0",
-    "workbox-window": "^7.4.0",
-    "wrangler": "^4.70.0"
+    "vite": "^7.3.6",
+    "vite-plugin-pwa": "^1.3.0",
+    "vite-plugin-wasm": "^3.6.0",
+    "vitest": "^4.1.11",
+    "workbox-build": "^7.4.1",
+    "workbox-window": "^7.4.1",
+    "wrangler": "^4.124.0"
   },
   "packageManager": "pnpm@10.10.0+sha512.d615db246fe70f25dcfea6d8d73dee782ce23e2245e3c4f6f888249fb568149318637dca73c2c5c8ef2a4ca0d5657fb9567188bfab47f566d1ee6ce987815c39"
 }

frontend/src/App.vue

@@ -1,6 +1,8 @@
 <script setup>
-import { darkTheme, NGlobalStyle, zhCN } from 'naive-ui'
-import { computed, onMounted } from 'vue'
+import {
+  darkTheme,
+} from 'naive-ui'
+import { computed, onMounted, watchEffect } from 'vue'
 import { useScript } from '@unhead/vue'
 import { useI18n } from 'vue-i18n'
 import { useGlobalState } from './store'
@@ -8,20 +10,27 @@ import { useIsMobile } from './utils/composables'
 import Header from './views/Header.vue';
 import Footer from './views/Footer.vue';
 import { api } from './api'
+import { getNaiveLocaleConfig } from './i18n/naive-locale'
+import { DEFAULT_LOCALE, isSupportedLocale } from './i18n/utils'
 
 const {
   isDark, loading, useSideMargin, telegramApp, isTelegram
 } = useGlobalState()
 const adClient = import.meta.env.VITE_GOOGLE_AD_CLIENT;
 const adSlot = import.meta.env.VITE_GOOGLE_AD_SLOT;
-const { locale } = useI18n({});
+const { locale } = useI18n({ useScope: 'global' });
 const theme = computed(() => isDark.value ? darkTheme : null)
-const localeConfig = computed(() => locale.value == 'zh' ? zhCN : null)
+const localeConfig = computed(() => getNaiveLocaleConfig(isSupportedLocale(locale.value) ? locale.value : DEFAULT_LOCALE))
 const isMobile = useIsMobile()
 const showSideMargin = computed(() => !isMobile.value && useSideMargin.value);
 const showAd = computed(() => !isMobile.value && adClient && adSlot);
 const gridMaxCols = computed(() => showAd.value ? 8 : 12);
 
+watchEffect(() => {
+  if (typeof document === 'undefined') return
+  document.documentElement.lang = isSupportedLocale(locale.value) ? locale.value : DEFAULT_LOCALE
+})
+
 // Load Google Ad script at top level (not inside onMounted)
 if (showAd.value) {
   useScript({
@@ -77,7 +86,7 @@ onMounted(async () => {
 </script>
 
 <template>
-  <n-config-provider :locale="localeConfig" :theme="theme">
+  <n-config-provider :locale="localeConfig.locale" :date-locale="localeConfig.dateLocale" :theme="theme">
     <n-global-style />
     <n-spin description="loading..." :show="loading">
       <n-notification-provider container-style="margin-top: 60px;">
@@ -120,6 +129,16 @@ onMounted(async () => {
   margin-left: 10px;
   margin-right: 10px;
 }
+
+@media (hover: none) and (pointer: coarse) and (max-width: 1024px) {
+  :where(input, textarea, select, [contenteditable="true"]) {
+    font-size: 16px !important;
+  }
+
+  :where(.n-input, .n-input-number, .n-base-selection, .n-input-group-label) {
+    --n-font-size: 16px !important;
+  }
+}
 </style>
 
 <style scoped>

frontend/src/api/index.js

@@ -4,6 +4,8 @@ import axios from 'axios'
 
 import i18n from '../i18n'
 import { getFingerprint } from '../utils/fingerprint'
+import { safeBearerHeader, safeHeaderValue } from '../utils/headers'
+import { sanitizeHtml } from '../utils/sanitize-html'
 
 const API_BASE = import.meta.env.VITE_API_BASE || "";
 const {
@@ -24,19 +26,29 @@ const apiFetch = async (path, options = {}) => {
         // Get browser fingerprint for request tracking
         const fingerprint = await getFingerprint();
 
+        // Skip auth headers whose value is empty / "undefined" / contains
+        // control chars (otherwise axios throws "Invalid character in header
+        // content" before the request is sent — see issue #1000).
+        const headers = {
+            'x-lang': i18n.global.locale.value,
+            'x-fingerprint': fingerprint,
+            'Content-Type': 'application/json',
+        };
+        const userTokenHeader = safeHeaderValue(options.userJwt || userJwt.value);
+        if (userTokenHeader) headers['x-user-token'] = userTokenHeader;
+        const userAccessHeader = safeHeaderValue(userSettings.value.access_token);
+        if (userAccessHeader) headers['x-user-access-token'] = userAccessHeader;
+        const customAuthHeader = safeHeaderValue(auth.value);
+        if (customAuthHeader) headers['x-custom-auth'] = customAuthHeader;
+        const adminAuthHeader = safeHeaderValue(adminAuth.value);
+        if (adminAuthHeader) headers['x-admin-auth'] = adminAuthHeader;
+        const authorizationHeader = safeBearerHeader(jwt.value);
+        if (authorizationHeader) headers['Authorization'] = authorizationHeader;
+
         const response = await instance.request(path, {
             method: options.method || 'GET',
             data: options.body || null,
-            headers: {
-                'x-lang': i18n.global.locale.value,
-                'x-user-token': options.userJwt || userJwt.value,
-                'x-user-access-token': userSettings.value.access_token,
-                'x-custom-auth': auth.value,
-                'x-admin-auth': adminAuth.value,
-                'x-fingerprint': fingerprint,
-                'Authorization': `Bearer ${jwt.value}`,
-                'Content-Type': 'application/json',
-            },
+            headers,
         });
         if (response.status === 401 && path.startsWith("/admin")) {
             showAdminAuth.value = true;
@@ -62,8 +74,9 @@ const apiFetch = async (path, options = {}) => {
 const getOpenSettings = async (message, notification) => {
     try {
         const res = await api.fetch("/open_api/settings");
+        const domains = Array.isArray(res["domains"]) ? res["domains"] : [];
         const domainLabels = res["domainLabels"] || [];
-        if (res["domains"]?.length < 1) {
+        if (domains.length < 1) {
             message.error("No domains found, please check your worker settings");
         }
         Object.assign(openSettings.value, {
@@ -74,7 +87,8 @@ const getOpenSettings = async (message, notification) => {
             maxAddressLen: res["maxAddressLen"] || 30,
             needAuth: res["needAuth"] || false,
             defaultDomains: res["defaultDomains"] || [],
-            domains: res["domains"].map((domain, index) => {
+            randomSubdomainDomains: res["randomSubdomainDomains"] || [],
+            domains: domains.map((domain, index) => {
                 return {
                     label: domainLabels.length > index ? domainLabels[index] : domain,
                     value: domain
@@ -91,8 +105,12 @@ const getOpenSettings = async (message, notification) => {
             cfTurnstileSiteKey: res["cfTurnstileSiteKey"] || "",
             enableWebhook: res["enableWebhook"] || false,
             isS3Enabled: res["isS3Enabled"] || false,
+            showGithubForUser: res["showGithubForUser"] ?? openSettings.value.showGithubForUser,
             enableAddressPassword: res["enableAddressPassword"] || false,
+            enableAgentEmailInfo: res["enableAgentEmailInfo"] || false,
+            smtpImapProxyConfig: res["smtpImapProxyConfig"] || openSettings.value.smtpImapProxyConfig,
             statusUrl: res["statusUrl"] || "",
+            enableGlobalTurnstileCheck: res["enableGlobalTurnstileCheck"] || false,
         });
         if (openSettings.value.needAuth) {
             showAuth.value = true;
@@ -106,7 +124,7 @@ const getOpenSettings = async (message, notification) => {
             notification.info({
                 content: () => {
                     return h("div", {
-                        innerHTML: announcement.value
+                        innerHTML: sanitizeHtml(announcement.value)
                     });
                 }
             });

frontend/src/components/AddressCredentialModal.vue

@@ -0,0 +1,322 @@
+<script setup>
+import { computed } from 'vue'
+import { useScopedI18n } from '@/i18n/app'
+
+import { useGlobalState } from '../store'
+
+const props = defineProps({
+  show: {
+    type: Boolean,
+    default: false,
+  },
+  address: {
+    type: String,
+    default: '',
+  },
+  jwt: {
+    type: String,
+    default: '',
+  },
+  addressPassword: {
+    type: String,
+    default: '',
+  },
+})
+
+const emit = defineEmits(['update:show'])
+
+const { openSettings, auth } = useGlobalState()
+const { locale, t } = useScopedI18n('components.AddressCredentialModal')
+const message = useMessage()
+
+const modalShow = computed({
+  get: () => props.show,
+  set: (value) => emit('update:show', value),
+})
+
+const configuredApiBaseUrl = import.meta.env.VITE_API_BASE || ''
+const frontendBaseUrl = computed(() => window.location.origin)
+const apiBaseUrl = computed(() => (configuredApiBaseUrl || frontendBaseUrl.value).replace(/\/$/, ''))
+const docLocale = computed(() => locale.value === 'zh' ? 'zh' : 'en')
+const agentDocUrl = computed(() => `https://temp-mail-docs.awsl.uk/${docLocale.value}/guide/feature/agent-email.html`)
+const smtpImapDocUrl = computed(() => `https://temp-mail-docs.awsl.uk/${docLocale.value}/guide/feature/config-smtp-proxy.html`)
+const agentSkillUrl = 'https://github.com/dreamhunter2333/cloudflare_temp_email/blob/main/skills/cf-temp-mail-agent-mail/SKILL.md'
+const autoLoginUrl = computed(() => `${frontendBaseUrl.value}/?jwt=${encodeURIComponent(props.jwt)}`)
+const showAgent = computed(() => !!openSettings.value.enableAgentEmailInfo)
+const smtpImapConfig = computed(() => openSettings.value.smtpImapProxyConfig || {})
+const smtpConfig = computed(() => smtpImapConfig.value.smtp || {})
+const imapConfig = computed(() => smtpImapConfig.value.imap || {})
+const showSmtpImap = computed(() => !!smtpConfig.value.host || !!imapConfig.value.host)
+const securityLabel = computed(() =>
+  smtpConfig.value.starttls || imapConfig.value.starttls ? t('starttls') : t('plainOrProxyTls')
+)
+const agentConfigJson = computed(() => JSON.stringify({
+  base: apiBaseUrl.value,
+  jwt: props.jwt,
+  site_password: auth.value || '',
+}, null, 2))
+const agentText = computed(() => [
+  `${t('currentAddress')}: ${props.address || '-'}`,
+  `${t('apiBase')}: ${apiBaseUrl.value}`,
+  `${t('agentSkill')}: ${agentSkillUrl}`,
+  `${t('agentConfig')}:`,
+  agentConfigJson.value,
+].join('\n'))
+const smtpImapText = computed(() => [
+  `${t('smtpHost')}: ${smtpConfig.value.host || '-'}`,
+  `${t('smtpPort')}: ${smtpConfig.value.port || 8025}`,
+  `${t('imapHost')}: ${imapConfig.value.host || '-'}`,
+  `${t('imapPort')}: ${imapConfig.value.port || 11143}`,
+  `${t('security')}: ${securityLabel.value}`,
+  `${t('username')}: ${props.address || '-'}`,
+  `${t('password')}: ${props.jwt}`,
+].join('\n'))
+
+const copyText = async (text) => {
+  if (!text) return
+  try {
+    if (navigator.clipboard?.writeText) {
+      await navigator.clipboard.writeText(text)
+      message.success(t('copySuccess'))
+      return
+    }
+
+    const textarea = document.createElement('textarea')
+    try {
+      textarea.value = text
+      textarea.setAttribute('readonly', '')
+      textarea.style.position = 'fixed'
+      textarea.style.opacity = '0'
+      document.body.appendChild(textarea)
+      textarea.select()
+      if (document.execCommand('copy')) {
+        message.success(t('copySuccess'))
+        return
+      }
+      message.error(t('copyFailed'))
+    } finally {
+      textarea.parentNode?.removeChild(textarea)
+    }
+  } catch (error) {
+    console.error(error)
+    message.error(t('copyFailed'))
+  }
+}
+
+</script>
+
+<template>
+  <n-modal v-model:show="modalShow" preset="card" :title="t('title')"
+    style="width: min(760px, calc(100vw - 32px));">
+    <n-alert type="info" :show-icon="false" :bordered="false">
+      {{ t('tip') }}
+    </n-alert>
+    <section class="credential-panel">
+      <h3 class="credential-title">{{ t('addressCredential') }}</h3>
+      <div class="credential-section">
+        <div class="credential-field" v-if="address">
+          <span class="credential-label">{{ t('currentAddress') }}</span>
+          <div class="credential-copy-row">
+            <code class="credential-code">{{ address }}</code>
+            <n-button size="tiny" tertiary type="primary" @click="copyText(address)">
+              {{ t('copySection') }}
+            </n-button>
+          </div>
+        </div>
+        <div class="credential-field">
+          <span class="credential-label">{{ t('addressCredentialLabel') }}</span>
+          <div class="credential-copy-row">
+            <code class="credential-code">{{ jwt }}</code>
+            <n-button size="tiny" tertiary type="primary" @click="copyText(jwt)">
+              {{ t('copySection') }}
+            </n-button>
+          </div>
+        </div>
+        <div class="credential-field" v-if="addressPassword">
+          <span class="credential-label">{{ t('addressPassword') }}</span>
+          <code class="credential-code">{{ addressPassword }}</code>
+        </div>
+      </div>
+    </section>
+
+    <n-collapse accordion class="credential-collapse">
+      <n-collapse-item v-if="showAgent" name="agent" :title="t('agentAccess')">
+        <template #header-extra>
+          <n-button size="tiny" tertiary type="primary" @click.stop="copyText(agentText)">
+            {{ t('copySection') }}
+          </n-button>
+        </template>
+        <div class="credential-section">
+          <p class="credential-tip">{{ t('agentAccessTip') }}</p>
+          <div class="credential-field">
+            <span class="credential-label">{{ t('apiBase') }}</span>
+            <code class="credential-code">{{ apiBaseUrl }}</code>
+          </div>
+          <div class="credential-field">
+            <span class="credential-label">{{ t('agentSkill') }}</span>
+            <code class="credential-code">
+              <a :href="agentSkillUrl" target="_blank" rel="noopener noreferrer">{{ agentSkillUrl }}</a>
+            </code>
+          </div>
+          <div class="credential-field">
+            <span class="credential-label">{{ t('agentConfig') }}</span>
+            <pre class="credential-code credential-code-block">{{ agentConfigJson }}</pre>
+          </div>
+          <div class="credential-actions">
+            <n-button tag="a" :href="agentDocUrl" target="_blank" rel="noopener noreferrer" text type="primary">
+              {{ t('docs') }}
+            </n-button>
+          </div>
+        </div>
+      </n-collapse-item>
+
+      <n-collapse-item v-if="showSmtpImap" name="smtp-imap" :title="t('smtpImapAccess')">
+        <template #header-extra>
+          <n-button size="tiny" tertiary type="primary" @click.stop="copyText(smtpImapText)">
+            {{ t('copySection') }}
+          </n-button>
+        </template>
+        <div class="credential-section">
+          <p class="credential-tip">{{ t('smtpImapTip') }}</p>
+          <div class="credential-grid">
+            <div class="credential-field">
+              <span class="credential-label">{{ t('smtpHost') }}</span>
+              <code class="credential-code">{{ smtpConfig.host || '-' }}</code>
+            </div>
+            <div class="credential-field">
+              <span class="credential-label">{{ t('smtpPort') }}</span>
+              <code class="credential-code">{{ smtpConfig.port || 8025 }}</code>
+            </div>
+            <div class="credential-field">
+              <span class="credential-label">{{ t('imapHost') }}</span>
+              <code class="credential-code">{{ imapConfig.host || '-' }}</code>
+            </div>
+            <div class="credential-field">
+              <span class="credential-label">{{ t('imapPort') }}</span>
+              <code class="credential-code">{{ imapConfig.port || 11143 }}</code>
+            </div>
+          </div>
+          <div class="credential-field">
+            <span class="credential-label">{{ t('security') }}</span>
+            <code class="credential-code">{{ securityLabel }}</code>
+          </div>
+          <div class="credential-field">
+            <span class="credential-label">{{ t('username') }}</span>
+            <code class="credential-code">{{ address }}</code>
+          </div>
+          <div class="credential-field">
+            <span class="credential-label">{{ t('password') }}</span>
+            <code class="credential-code">{{ jwt }}</code>
+          </div>
+          <div class="credential-actions">
+            <n-button tag="a" :href="smtpImapDocUrl" target="_blank" rel="noopener noreferrer" text type="primary">
+              {{ t('docs') }}
+            </n-button>
+          </div>
+        </div>
+      </n-collapse-item>
+
+      <n-collapse-item name="share-link" :title="t('autoLoginLink')">
+        <template #header-extra>
+          <n-button size="tiny" tertiary type="primary" @click.stop="copyText(autoLoginUrl)">
+            {{ t('copySection') }}
+          </n-button>
+        </template>
+        <div class="credential-section">
+          <div class="credential-field">
+            <code class="credential-code">{{ autoLoginUrl }}</code>
+          </div>
+        </div>
+      </n-collapse-item>
+    </n-collapse>
+  </n-modal>
+</template>
+
+<style scoped>
+.credential-collapse {
+  margin-top: 14px;
+}
+
+.credential-panel {
+  display: grid;
+  gap: 12px;
+  margin-top: 14px;
+}
+
+.credential-title {
+  margin: 0;
+  font-size: 15px;
+  font-weight: 600;
+  line-height: 1.4;
+}
+
+.credential-section {
+  display: grid;
+  gap: 12px;
+  text-align: left;
+}
+
+.credential-tip {
+  margin: 0;
+  color: var(--n-text-color-2);
+  line-height: 1.6;
+}
+
+.credential-grid {
+  display: grid;
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+  gap: 10px;
+}
+
+.credential-field {
+  display: grid;
+  gap: 6px;
+  min-width: 0;
+}
+
+.credential-label {
+  color: var(--n-text-color-2);
+  font-size: 12px;
+  font-weight: 600;
+}
+
+.credential-code {
+  display: block;
+  min-width: 0;
+  overflow-wrap: anywhere;
+  border-radius: 6px;
+  padding: 6px 8px;
+  background: var(--n-color-embedded);
+  font-size: 12px;
+  line-height: 1.5;
+}
+
+.credential-copy-row {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  align-items: start;
+  gap: 8px;
+}
+
+.credential-code-block {
+  margin: 0;
+  white-space: pre-wrap;
+}
+
+.credential-actions {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+  justify-content: flex-end;
+}
+
+@media (max-width: 640px) {
+  .credential-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .credential-copy-row {
+    grid-template-columns: 1fr;
+  }
+}
+</style>

frontend/src/components/AddressSelect.vue

@@ -1,7 +1,7 @@
 <script setup>
 import { onMounted, ref, watch } from 'vue'
 import { useLocalStorage } from '@vueuse/core'
-import { useI18n } from 'vue-i18n'
+import { useScopedI18n } from '@/i18n/app'
 import { useMessage } from 'naive-ui'
 import useClipboard from 'vue-clipboard3'
 import { Copy } from '@vicons/fa'
@@ -27,24 +27,7 @@ const {
     jwt, settings, userJwt, isTelegram, openSettings, telegramApp
 } = useGlobalState()
 
-const { t } = useI18n({
-    messages: {
-        en: {
-            userAddresses: 'User Addresses',
-            localAddresses: 'Local Addresses',
-            address: 'Address',
-            copy: 'Copy',
-            copied: 'Copied',
-        },
-        zh: {
-            userAddresses: '用户地址',
-            localAddresses: '本地地址',
-            address: '地址',
-            copy: '复制',
-            copied: '已复制',
-        }
-    }
-});
+const { t } = useScopedI18n('components.AddressSelect')
 
 const addressOptions = ref([])
 const addressValue = ref(null)
@@ -114,7 +97,7 @@ const buildLocalOptions = (excludeAddresses = new Set()) => {
 const buildUserOptions = async () => {
     const children = [];
     try {
-        const { results } = await api.fetch(`/user_api/bind_address`);
+        const { results } = await api.fetch(`/user_api/bind_address?limit=100&offset=0`);
         for (const row of results || []) {
             const address = row.address || row.name;
             if (!address) continue;

frontend/src/components/AiExtractInfo.vue

@@ -1,6 +1,6 @@
 <script setup>
 import { computed } from 'vue';
-import { useI18n } from 'vue-i18n';
+import { useScopedI18n } from '@/i18n/app';
 import { ContentCopyOutlined, LinkRound, CodeRound } from '@vicons/material';
 import { useMessage } from 'naive-ui';
 import { useGlobalState } from '../store';
@@ -32,30 +32,7 @@ const tagThemeOverrides = computed(() => {
   return {}
 });
 
-const { t } = useI18n({
-  messages: {
-    en: {
-      authCode: 'Verification Code',
-      authLink: 'Authentication Link',
-      serviceLink: 'Service Link',
-      subscriptionLink: 'Subscription Link',
-      otherLink: 'Other Link',
-      copySuccess: 'Copied successfully',
-      copyFailed: 'Copy failed',
-      open: 'Open',
-    },
-    zh: {
-      authCode: '验证码',
-      authLink: '认证链接',
-      serviceLink: '服务链接',
-      subscriptionLink: '订阅链接',
-      otherLink: '其他链接',
-      copySuccess: '复制成功',
-      copyFailed: '复制失败',
-      open: '打开',
-    }
-  }
-});
+const { t } = useScopedI18n('components.AiExtractInfo')
 
 const props = defineProps({
   metadata: {

frontend/src/components/MailBox.vue

@@ -1,7 +1,7 @@
 <script setup>
 import { watch, onMounted, ref, onBeforeUnmount, computed } from "vue";
 import { useMessage } from 'naive-ui'
-import { useI18n } from 'vue-i18n'
+import { useScopedI18n } from '@/i18n/app'
 import { useGlobalState } from '../store'
 import { CloudDownloadRound, ArrowBackIosNewFilled, ArrowForwardIosFilled, InboxRound } from '@vicons/material'
 import { useIsMobile } from '../utils/composables'
@@ -55,12 +55,29 @@ const props = defineProps({
     default: false,
     required: false
   },
+  enableMailStates: {
+    type: Boolean,
+    default: false,
+    required: false
+  },
+  updateMailState: {
+    type: Function,
+    default: () => { },
+    required: false
+  },
+  fetchMailStates: {
+    type: Function,
+    default: () => ({ results: [] }),
+    required: false
+  },
 })
 
 const localFilterKeyword = ref('')
+const mailStateFilter = ref(null)
+const mailStates = ref([])
 
 const {
-  isDark, mailboxSplitSize, indexTab, loading, useUTCDate,
+  isDark, mailboxSplitSize, mailListView, mailListPreviewLineClamp, indexTab, loading, useUTCDate,
   autoRefresh, configAutoRefreshInterval, sendMailModel
 } = useGlobalState()
 const autoRefreshInterval = ref(configAutoRefreshInterval.value)
@@ -71,6 +88,12 @@ const count = ref(0)
 const page = ref(1)
 const pageSize = ref(20)
 
+const mailListPreviewLineClampValue = computed(() => {
+  const value = Number(mailListPreviewLineClamp.value)
+  if (!Number.isFinite(value)) return 0
+  return Math.min(5, Math.max(0, Math.round(value)))
+})
+
 // Computed property for filtered data (only filter current page)
 const data = computed(() => {
   if (!localFilterKeyword.value || localFilterKeyword.value.trim() === '') {
@@ -88,6 +111,55 @@ const data = computed(() => {
   });
 })
 
+const isMailUnread = (mail) => {
+  return props.enableMailStates && mail?.unread === true
+}
+
+const currentPageHasUnread = computed(() => rawData.value.some(isMailUnread))
+const mailStateFilterOptions = computed(() => mailStates.value.map(state => ({
+  label: state.label || t(state.label_key),
+  value: state.value,
+})))
+
+const getReadStateValue = (unread) => {
+  return mailStates.value.find(state => state.unread === unread)?.value
+}
+
+const updateUnreadState = async (mails, state) => {
+  if (mails.length === 0 || !state) return true
+  try {
+    const response = await props.updateMailState(mails.map(mail => mail.id), state)
+    const results = response?.results ?? []
+    const resultById = new Map(results.map(result => [result.id, result]))
+    mails.forEach(mail => {
+      const result = resultById.get(mail.id)
+      if (result) mail.unread = result.unread
+    })
+    return true
+  } catch (error) {
+    message.error(error.message || "error")
+    return false
+  }
+}
+
+const markMailsRead = async (mails) => updateUnreadState(mails, getReadStateValue(false))
+
+const toggleCurrentMailUnread = async () => {
+  if (!curMail.value) return
+  await updateUnreadState([curMail.value], getReadStateValue(!curMail.value.unread))
+}
+
+const openMail = async (mail) => {
+  curMail.value = mail
+  await markMailsRead([mail])
+}
+
+const markCurrentPageRead = async () => {
+  if (!await markMailsRead(rawData.value)) return
+  message.success(t("success"))
+  if (mailStateFilter.value === getReadStateValue(true)) await backFirstPageAndRefresh()
+}
+
 const canGoPrevMail = computed(() => {
   if (!curMail.value) return false
   const currentIndex = data.value.findIndex(mail => mail.id === curMail.value.id)
@@ -105,12 +177,12 @@ const prevMail = async () => {
   const currentIndex = data.value.findIndex(mail => mail.id === curMail.value.id)
 
   if (currentIndex > 0) {
-    curMail.value = data.value[currentIndex - 1]
+    await openMail(data.value[currentIndex - 1])
   } else if (page.value > 1) {
     page.value--
     await refresh()
     if (data.value.length > 0) {
-      curMail.value = data.value[data.value.length - 1]
+      await openMail(data.value[data.value.length - 1])
     }
   }
 }
@@ -120,12 +192,12 @@ const nextMail = async () => {
   const currentIndex = data.value.findIndex(mail => mail.id === curMail.value.id)
 
   if (currentIndex < data.value.length - 1) {
-    curMail.value = data.value[currentIndex + 1]
+    await openMail(data.value[currentIndex + 1])
   } else if (count.value > page.value * pageSize.value) {
     page.value++
     await refresh()
     if (data.value.length > 0) {
-      curMail.value = data.value[0]
+      await openMail(data.value[0])
     }
   }
 }
@@ -138,60 +210,7 @@ const showMultiActionDelete = ref(false)
 const multiActionDownloadZip = ref({})
 const multiActionDeleteProgress = ref({ percentage: 0, tip: '0/0' })
 
-const { t } = useI18n({
-  messages: {
-    en: {
-      success: 'Success',
-      autoRefresh: 'Auto Refresh',
-      refreshAfter: 'Refresh After {msg} Seconds',
-      refresh: 'Refresh',
-      attachments: 'Show Attachments',
-      downloadMail: 'Download Mail',
-      pleaseSelectMail: "Please select mail",
-      emptyInbox: "Your inbox is empty",
-      delete: 'Delete',
-      deleteMailTip: 'Are you sure you want to delete mail?',
-      reply: 'Reply',
-      forwardMail: 'Forward',
-      showTextMail: 'Show Text Mail',
-      showHtmlMail: 'Show Html Mail',
-      saveToS3: 'Save to S3',
-      multiAction: 'Multi Action',
-      cancelMultiAction: 'Cancel Multi Action',
-      selectAll: 'Select All of This Page',
-      unselectAll: 'Unselect All',
-      prevMail: 'Previous',
-      nextMail: 'Next',
-      keywordQueryTip: 'Filter current page',
-      query: 'Query',
-    },
-    zh: {
-      success: '成功',
-      autoRefresh: '自动刷新',
-      refreshAfter: '{msg}秒后刷新',
-      refresh: '刷新',
-      downloadMail: '下载邮件',
-      attachments: '查看附件',
-      pleaseSelectMail: "请选择邮件",
-      emptyInbox: "收件箱为空",
-      delete: '删除',
-      deleteMailTip: '确定要删除邮件吗?',
-      reply: '回复',
-      forwardMail: '转发',
-      showTextMail: '显示纯文本邮件',
-      showHtmlMail: '显示HTML邮件',
-      saveToS3: '保存到S3',
-      multiAction: '多选',
-      cancelMultiAction: '取消多选',
-      selectAll: '全选本页',
-      unselectAll: '取消全选',
-      prevMail: '上一封',
-      nextMail: '下一封',
-      keywordQueryTip: '过滤当前页',
-      query: '查询',
-    }
-  }
-});
+const { t } = useScopedI18n('components.MailBox')
 
 const setupAutoRefresh = async (autoRefresh) => {
   // auto refresh every configAutoRefreshInterval seconds
@@ -222,22 +241,25 @@ watch([page, pageSize], async ([page, pageSize], [oldPage, oldPageSize]) => {
   }
 })
 
+watch(mailStateFilter, async (_value, oldValue) => {
+  if (oldValue === null) return
+  await backFirstPageAndRefresh()
+})
+
 const refresh = async () => {
   try {
     const { results, count: totalCount } = await props.fetchMailData(
-      pageSize.value, (page.value - 1) * pageSize.value
+      pageSize.value, (page.value - 1) * pageSize.value, mailStateFilter.value
     );
     loading.value = true;
     rawData.value = await Promise.all(results.map(async (item) => {
       item.checked = false;
       return await processItem(item);
     }));
-    if (totalCount > 0) {
-      count.value = totalCount;
-    }
+    if (page.value === 1) count.value = totalCount;
     curMail.value = null;
-    if (!isMobile.value && data.value.length > 0) {
-      curMail.value = data.value[0];
+    if (!isMobile.value && !mailListView.value && data.value.length > 0) {
+      await openMail(data.value[0]);
     }
   } catch (error) {
     message.error(error.message || "error");
@@ -255,9 +277,14 @@ const backFirstPageAndRefresh = async () => {
 const clickRow = async (row) => {
   if (multiActionMode.value) {
     row.checked = !row.checked;
+    curMail.value = row;
     return;
   }
-  curMail.value = row;
+  if (mailListView.value && curMail.value?.id === row.id) {
+    curMail.value = null;
+    return;
+  }
+  await openMail(row);
 };
 
 
@@ -371,6 +398,16 @@ const multiActionDownload = async () => {
 }
 
 onMounted(async () => {
+  if (props.enableMailStates) {
+    try {
+      const { results = [] } = await props.fetchMailStates()
+      mailStates.value = results
+      mailStateFilter.value = results.find(state => state.default)?.value ?? results[0]?.value ?? null
+    } catch (error) {
+      mailStates.value = []
+      message.error(error.message || "error")
+    }
+  }
   await refresh();
 });
 
@@ -423,23 +460,36 @@ onBeforeUnmount(() => {
           <n-button @click="backFirstPageAndRefresh" type="primary" tertiary>
             {{ t('refresh') }}
           </n-button>
+          <n-button v-if="enableMailStates && currentPageHasUnread" @click="markCurrentPageRead" tertiary>
+            {{ t('markCurrentPageRead') }}
+          </n-button>
+          <n-select v-if="enableMailStates" v-model:value="mailStateFilter" :options="mailStateFilterOptions"
+            style="width: 120px" />
           <n-input v-if="showFilterInput" v-model:value="localFilterKeyword"
             :placeholder="t('keywordQueryTip')" style="width: 200px; display: flex; align-items: center;"
             clearable />
         </n-space>
       </div>
-      <n-split class="left" direction="horizontal" :max="0.75" :min="0.25" :default-size="mailboxSplitSize"
-        :on-update:size="onSpiltSizeChange">
+      <n-split class="left" direction="horizontal" :max="0.75" :min="0" :resize-trigger-size="8"
+        :default-size="mailboxSplitSize" :on-update:size="onSpiltSizeChange" v-if="!mailListView || curMail">
+        <template #resize-trigger>
+          <div class="split-handle">
+            <div class="split-handle__grip" />
+          </div>
+        </template>
         <template #1>
           <div style="overflow: auto; min-height: 60vh; max-height: 100vh;">
             <n-list hoverable clickable>
               <n-list-item v-for="row in data" v-bind:key="row.id" @click="() => clickRow(row)"
-                :class="mailItemClass(row)">
+                :class="[mailItemClass(row), { 'mail-list-unread': isMailUnread(row) }]">
                 <template #prefix v-if="multiActionMode">
                   <n-checkbox v-model:checked="row.checked" />
                 </template>
                 <n-thing :title="row.subject">
                   <template #description>
+                    <n-tag v-if="isMailUnread(row)" type="warning">
+                      {{ t('unread') }}
+                    </n-tag>
                     <n-tag type="info">
                       ID: {{ row.id }}
                     </n-tag>
@@ -465,15 +515,25 @@ onBeforeUnmount(() => {
         </template>
         <template #2>
           <div v-if="curMail" style="margin: 8px;">
-            <n-flex justify="space-between">
-              <n-button @click="prevMail" :disabled="!canGoPrevMail" text size="small">
-                <template #icon>
-                  <n-icon>
-                    <ArrowBackIosNewFilled />
-                  </n-icon>
-                </template>
-                {{ t('prevMail') }}
-              </n-button>
+            <n-flex justify="space-between" align="center">
+              <n-space :wrap="false" align="center">
+                <n-button v-if="mailListView" @click="curMail = null" text size="small">
+                  <template #icon>
+                    <n-icon>
+                      <ArrowBackIosNewFilled />
+                    </n-icon>
+                  </template>
+                  {{ t('backToList') }}
+                </n-button>
+                <n-button @click="prevMail" :disabled="!canGoPrevMail" text size="small">
+                  <template #icon>
+                    <n-icon>
+                      <ArrowBackIosNewFilled />
+                    </n-icon>
+                  </template>
+                  {{ t('prevMail') }}
+                </n-button>
+              </n-space>
               <n-button @click="nextMail" :disabled="!canGoNextMail" text size="small" icon-placement="right">
                 <template #icon>
                   <n-icon>
@@ -488,6 +548,7 @@ onBeforeUnmount(() => {
             style="overflow: auto; max-height: 100vh;">
             <MailContentRenderer :mail="curMail" :showEMailTo="showEMailTo"
               :enableUserDeleteEmail="enableUserDeleteEmail" :showReply="showReply" :showSaveS3="showSaveS3"
+              :enableMailStates="enableMailStates" :onToggleUnread="toggleCurrentMailUnread"
               :onDelete="deleteMail" :onReply="replyMail" :onForward="forwardMail" :onSaveToS3="saveToS3Proxy" />
           </n-card>
           <n-card :bordered="false" embedded class="mail-item" v-else>
@@ -499,6 +560,51 @@ onBeforeUnmount(() => {
           </n-card>
         </template>
       </n-split>
+      <div v-else class="mail-list-scroll">
+        <n-list hoverable clickable>
+          <n-list-item v-for="row in data" v-bind:key="row.id" @click="() => clickRow(row)"
+            :class="[mailItemClass(row), { 'mail-list-unread': isMailUnread(row) }]">
+            <template #prefix v-if="multiActionMode">
+              <n-checkbox v-model:checked="row.checked" />
+            </template>
+            <n-thing class="mail-list-thing">
+              <template #header>
+                <n-ellipsis class="mail-list-title">
+                  {{ row.subject }}
+                </n-ellipsis>
+              </template>
+              <template #description>
+                <div class="mail-list-meta">
+                  <n-tag v-if="isMailUnread(row)" type="warning">
+                    {{ t('unread') }}
+                  </n-tag>
+                  <n-tag type="info">
+                    ID: {{ row.id }}
+                  </n-tag>
+                  <n-tag type="info">
+                    {{ utcToLocalDate(row.created_at, useUTCDate) }}
+                  </n-tag>
+                  <n-tag type="info">
+                    <n-ellipsis class="mail-list-meta-text">
+                      {{ showEMailTo ? "FROM: " + row.source : row.source }}
+                    </n-ellipsis>
+                  </n-tag>
+                  <n-tag v-if="showEMailTo" type="info">
+                    <n-ellipsis class="mail-list-meta-text">
+                      TO: {{ row.address }}
+                    </n-ellipsis>
+                  </n-tag>
+                  <AiExtractInfo :metadata="row.metadata" compact />
+                </div>
+              </template>
+              <n-ellipsis v-if="row.text && mailListPreviewLineClampValue > 0"
+                :line-clamp="mailListPreviewLineClampValue" class="mail-list-preview" :tooltip="false">
+                {{ row.text }}
+              </n-ellipsis>
+            </n-thing>
+          </n-list-item>
+        </n-list>
+      </div>
     </div>
     <div class="left" v-else>
       <n-space justify="space-around" align="center" :wrap="false" style="display: flex; align-items: center;">
@@ -514,16 +620,26 @@ onBeforeUnmount(() => {
         <n-button @click="backFirstPageAndRefresh" tertiary size="small" type="primary">
           {{ t('refresh') }}
         </n-button>
+        <n-button v-if="enableMailStates && currentPageHasUnread" @click="markCurrentPageRead" tertiary size="small">
+          {{ t('markCurrentPageRead') }}
+        </n-button>
       </n-space>
       <div v-if="showFilterInput" style="padding: 0 10px; margin-top: 8px; margin-bottom: 10px;">
         <n-input v-model:value="localFilterKeyword"
           :placeholder="t('keywordQueryTip')" size="small" clearable />
       </div>
+      <div v-if="enableMailStates" style="padding: 0 10px; margin-bottom: 10px;">
+        <n-select v-model:value="mailStateFilter" :options="mailStateFilterOptions" size="small" />
+      </div>
       <div style="overflow: auto; min-height: 60vh; max-height: 100vh;">
         <n-list hoverable clickable>
-          <n-list-item v-for="row in data" v-bind:key="row.id" @click="() => clickRow(row)">
+          <n-list-item v-for="row in data" v-bind:key="row.id" @click="() => clickRow(row)"
+            :class="{ 'mail-list-unread': isMailUnread(row) }">
             <n-thing :title="row.subject">
               <template #description>
+                <n-tag v-if="isMailUnread(row)" type="warning">
+                  {{ t('unread') }}
+                </n-tag>
                 <n-tag type="info">
                   ID: {{ row.id }}
                 </n-tag>
@@ -553,6 +669,7 @@ onBeforeUnmount(() => {
             <MailContentRenderer :mail="curMail" :showEMailTo="showEMailTo"
               :enableUserDeleteEmail="enableUserDeleteEmail" :showReply="showReply" :showSaveS3="showSaveS3"
               :useUTCDate="useUTCDate" :onDelete="deleteMail" :onReply="replyMail" :onForward="forwardMail"
+              :enableMailStates="enableMailStates" :onToggleUnread="toggleCurrentMailUnread"
               :onSaveToS3="saveToS3Proxy" />
           </n-card>
         </n-drawer-content>
@@ -608,8 +725,84 @@ onBeforeUnmount(() => {
   height: 100%;
 }
 
+.mail-list-scroll {
+  overflow-y: auto;
+  overflow-x: hidden;
+  min-height: 60vh;
+  max-height: 100vh;
+}
+
+.mail-list-thing,
+.mail-list-title,
+.mail-list-preview {
+  min-width: 0;
+  max-width: 100%;
+}
+
+.mail-list-thing,
+.mail-list-preview {
+  width: 100%;
+}
+
+.mail-list-thing :deep(.n-thing-main),
+.mail-list-thing :deep(.n-thing-header),
+.mail-list-thing :deep(.n-thing-header__title),
+.mail-list-thing :deep(.n-thing-main__description),
+.mail-list-thing :deep(.n-thing-main__content) {
+  min-width: 0;
+}
+
+.mail-list-meta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 4px;
+  min-width: 0;
+  max-width: 100%;
+}
+
+.mail-list-meta :deep(.n-tag) {
+  max-width: 100%;
+}
+
+.mail-list-meta-text {
+  max-width: min(240px, 100%);
+}
+
+.mail-list-preview {
+  display: -webkit-box;
+  overflow-wrap: anywhere;
+  opacity: 0.7;
+}
+
+.mail-list-scroll :deep(.n-list-item__main) {
+  min-width: 0;
+}
+
+.mail-list-unread :deep(.n-thing-header__title) {
+  font-weight: 700;
+}
+
 pre {
   white-space: pre-wrap;
   word-wrap: break-word;
 }
+
+.split-handle {
+  height: 100%;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.split-handle__grip {
+  width: 4px;
+  height: 32px;
+  border-radius: 2px;
+  background-color: var(--n-resize-trigger-color);
+  transition: background-color 0.2s;
+}
+
+.split-handle:hover .split-handle__grip {
+  background-color: var(--n-resize-trigger-color-hover);
+}
 </style>

frontend/src/components/MailContentRenderer.vue

@@ -1,45 +1,17 @@
 <script setup>
-import { ref } from "vue";
-import { useI18n } from 'vue-i18n'
-import { CloudDownloadRound, ReplyFilled, ForwardFilled, FullscreenRound } from '@vicons/material'
+import { ref, computed, watch } from "vue";
+import { useScopedI18n } from '@/i18n/app'
+import { CloudDownloadRound, ReplyFilled, ForwardFilled, FullscreenRound, ImageRound } from '@vicons/material'
 import ShadowHtmlComponent from "./ShadowHtmlComponent.vue";
 import AiExtractInfo from "./AiExtractInfo.vue";
 import { getDownloadEmlUrl } from '../utils/email-parser';
+import { blockRemoteContent } from '../utils/remote-content-policy';
 import { utcToLocalDate } from '../utils';
 import { useGlobalState } from '../store';
 
-const { preferShowTextMail, useIframeShowMail, useUTCDate, isDark } = useGlobalState();
+const { preferShowTextMail, useIframeShowMail, useUTCDate, isDark, autoLoadRemoteImages } = useGlobalState();
 
-const { t } = useI18n({
-  messages: {
-    en: {
-      delete: 'Delete',
-      deleteMailTip: 'Are you sure you want to delete mail?',
-      attachments: 'View Attachments',
-      downloadMail: 'Download Mail',
-      reply: 'Reply',
-      forward: 'Forward',
-      showTextMail: 'Show Text Mail',
-      showHtmlMail: 'Show HTML Mail',
-      saveToS3: 'Save to S3',
-      size: 'Size',
-      fullscreen: 'Fullscreen',
-    },
-    zh: {
-      delete: '删除',
-      deleteMailTip: '确定要删除邮件吗?',
-      attachments: '查看附件',
-      downloadMail: '下载邮件',
-      reply: '回复',
-      forward: '转发',
-      showTextMail: '显示纯文本邮件',
-      showHtmlMail: '显示HTML邮件',
-      saveToS3: '保存到S3',
-      size: '大小',
-      fullscreen: '全屏',
-    }
-  }
-});
+const { t } = useScopedI18n('components.MailContentRenderer')
 
 const props = defineProps({
   mail: {
@@ -62,6 +34,10 @@ const props = defineProps({
     type: Boolean,
     default: false
   },
+  enableMailStates: {
+    type: Boolean,
+    default: false
+  },
   // 回调函数 props
   onDelete: {
     type: Function,
@@ -78,6 +54,10 @@ const props = defineProps({
   onSaveToS3: {
     type: Function,
     default: () => { }
+  },
+  onToggleUnread: {
+    type: Function,
+    default: () => { }
   }
 });
 
@@ -87,6 +67,26 @@ const curAttachments = ref([]);
 const attachmentLoding = ref(false);
 const showFullscreen = ref(false);
 
+// Per-mail consent, deliberately independent of the global setting: it only
+// ever turns true when the user clicks "load images" for this specific mail,
+// and resets when a different mail is shown.
+const showRemoteImages = ref(false);
+watch(() => props.mail.id, () => {
+  showRemoteImages.value = false;
+});
+
+const processedMail = computed(() => {
+  if (autoLoadRemoteImages.value || showRemoteImages.value) {
+    return { message: props.mail.message, blocked: 0 };
+  }
+  const { html, blocked } = blockRemoteContent(props.mail.message);
+  return { message: html, blocked };
+});
+
+const handleLoadRemoteImages = () => {
+  showRemoteImages.value = true;
+};
+
 const handleDelete = () => {
   props.onDelete();
 };
@@ -154,6 +154,10 @@ const handleSaveToS3 = async (filename, blob) => {
         {{ t('downloadMail') }}
       </n-button>
 
+      <n-button v-if="enableMailStates" size="small" tertiary type="info" @click="onToggleUnread">
+        {{ mail.unread ? t('markRead') : t('markUnread') }}
+      </n-button>
+
       <n-button v-if="showReply" size="small" tertiary type="info" @click="handleReply">
         <template #icon>
           <n-icon :component="ReplyFilled" />
@@ -178,17 +182,32 @@ const handleSaveToS3 = async (filename, blob) => {
         </template>
         {{ t('fullscreen') }}
       </n-button>
+
     </n-space>
 
+    <!-- 外部资源阻断提示 -->
+    <n-alert v-if="processedMail.blocked" type="warning" :show-icon="false" :bordered="false"
+      class="remote-images-banner">
+      <n-space align="center" justify="space-between">
+        <span>{{ t('remoteImagesBlocked', { count: processedMail.blocked }) }}</span>
+        <n-button size="tiny" tertiary type="warning" @click="handleLoadRemoteImages">
+          <template #icon>
+            <n-icon :component="ImageRound" />
+          </template>
+          {{ t('loadRemoteImages') }}
+        </n-button>
+      </n-space>
+    </n-alert>
+
     <!-- AI 提取信息 -->
     <AiExtractInfo :metadata="mail.metadata" />
 
     <!-- 邮件内容 -->
     <div class="mail-content" :class="{ 'dark-mode': isDark }">
       <pre v-if="showTextMail" class="mail-text">{{ mail.text }}</pre>
-      <iframe v-else-if="useIframeShowMail" :srcdoc="mail.message" class="mail-iframe">
+      <iframe v-else-if="useIframeShowMail" :srcdoc="processedMail.message" class="mail-iframe">
       </iframe>
-      <ShadowHtmlComponent v-else :key="mail.id" :htmlContent="mail.message" :isDark="isDark" class="mail-html" />
+      <ShadowHtmlComponent v-else :key="mail.id" :htmlContent="processedMail.message" :isDark="isDark" class="mail-html" />
     </div>
   </div>
 
@@ -197,9 +216,9 @@ const handleSaveToS3 = async (filename, blob) => {
     <n-drawer-content :title="mail.subject" closable>
       <div class="fullscreen-mail-content" :class="{ 'dark-mode': isDark }">
         <pre v-if="showTextMail" class="mail-text">{{ mail.text }}</pre>
-        <iframe v-else-if="useIframeShowMail" :srcdoc="mail.message" class="mail-iframe">
+        <iframe v-else-if="useIframeShowMail" :srcdoc="processedMail.message" class="mail-iframe">
         </iframe>
-        <ShadowHtmlComponent v-else :key="mail.id" :htmlContent="mail.message" :isDark="isDark" class="mail-html" />
+        <ShadowHtmlComponent v-else :key="mail.id" :htmlContent="processedMail.message" :isDark="isDark" class="mail-html" />
       </div>
     </n-drawer-content>
   </n-drawer>
@@ -244,6 +263,11 @@ const handleSaveToS3 = async (filename, blob) => {
   gap: 10px;
 }
 
+/* Let the banner's inner space fill the alert so the button sits on the right. */
+.remote-images-banner :deep(.n-space) {
+  width: 100%;
+}
+
 .mail-content {
   margin-top: 10px;
   flex: 1;

frontend/src/components/SendBox.vue

@@ -1,7 +1,7 @@
 <script setup>
 import { watch, onMounted, ref, computed } from "vue";
 import { useMessage } from 'naive-ui'
-import { useI18n } from 'vue-i18n'
+import { useScopedI18n } from '@/i18n/app'
 import { useGlobalState } from '../store'
 import { useIsMobile } from '../utils/composables'
 import { utcToLocalDate } from '../utils';
@@ -46,36 +46,7 @@ const multiActionMode = ref(false)
 const showMultiActionDelete = ref(false)
 const multiActionDeleteProgress = ref({ percentage: 0, tip: '0/0' })
 
-const { t } = useI18n({
-  messages: {
-    en: {
-      success: 'Success',
-      refresh: 'Refresh',
-      showCode: 'Change View Original Code',
-      pleaseSelectMail: "Please select a mail to view.",
-      emptySent: "No sent emails",
-      delete: 'Delete',
-      deleteMailTip: 'Are you sure you want to delete mail?',
-      multiAction: 'Multi Action',
-      cancelMultiAction: 'Cancel Multi Action',
-      selectAll: 'Select All of This Page',
-      unselectAll: 'Unselect All',
-    },
-    zh: {
-      success: '成功',
-      refresh: '刷新',
-      showCode: '切换查看元数据',
-      pleaseSelectMail: "请选择一封邮件查看。",
-      emptySent: "发件箱为空",
-      delete: '删除',
-      deleteMailTip: '确定要删除邮件吗?',
-      multiAction: '多选',
-      cancelMultiAction: '取消多选',
-      selectAll: '全选本页',
-      unselectAll: '取消全选',
-    }
-  }
-});
+const { t } = useScopedI18n('components.SendBox')
 
 watch([page, pageSize], async ([page, pageSize], [oldPage, oldPageSize]) => {
   if (page !== oldPage || pageSize !== oldPageSize) {
@@ -239,8 +210,13 @@ onMounted(async () => {
           </n-button>
         </n-space>
       </div>
-      <n-split direction="horizontal" :max="0.75" :min="0.25" :default-size="mailboxSplitSize"
-        :on-update:size="onSpiltSizeChange">
+      <n-split direction="horizontal" :max="0.75" :min="0" :resize-trigger-size="8"
+        :default-size="mailboxSplitSize" :on-update:size="onSpiltSizeChange">
+        <template #resize-trigger>
+          <div class="split-handle">
+            <div class="split-handle__grip" />
+          </div>
+        </template>
         <template #1>
           <div style="overflow: auto; min-height: 60vh; max-height: 100vh;">
             <n-list hoverable clickable>
@@ -408,4 +384,23 @@ pre {
   white-space: pre-wrap;
   word-wrap: break-word;
 }
+
+.split-handle {
+  height: 100%;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+}
+
+.split-handle__grip {
+  width: 4px;
+  height: 32px;
+  border-radius: 2px;
+  background-color: var(--n-resize-trigger-color);
+  transition: background-color 0.2s;
+}
+
+.split-handle:hover .split-handle__grip {
+  background-color: var(--n-resize-trigger-color-hover);
+}
 </style>

frontend/src/components/Turnstile.vue

@@ -1,33 +1,40 @@
 <script setup>
-import { ref, watch, onMounted } from "vue";
-import { useI18n } from 'vue-i18n'
+import { ref, watch } from "vue";
+import { useScopedI18n } from '@/i18n/app'
 import { useGlobalState } from '../store'
+import { getTurnstileLocale } from '../i18n/locale-registry'
+import { DEFAULT_LOCALE, isSupportedLocale } from '../i18n/utils'
 const { openSettings, isDark } = useGlobalState()
 
 const cfToken = defineModel('value')
 
-const { locale, t } = useI18n({
-    messages: {
-        en: {
-            refresh: 'Refresh'
-        },
-        zh: {
-            refresh: '刷新'
-        }
-    }
-});
+const { locale, t } = useScopedI18n('components.Turnstile')
 
+const containerId = `cf-turnstile-${Math.random().toString(36).slice(2, 9)}`
 const cfTurnstileId = ref("")
 const turnstileLoading = ref(false)
+let turnstileRenderQueue = Promise.resolve()
+
+const refresh = () => rerenderTurnstile()
+defineExpose({ refresh })
+
+const rerenderTurnstile = () => {
+    cfToken.value = "";
+    turnstileRenderQueue = turnstileRenderQueue
+        .catch(() => { })
+        .then(() => checkCfTurnstile(true))
+    turnstileRenderQueue.catch(() => { })
+    return turnstileRenderQueue
+}
 
 const checkCfTurnstile = async (remove) => {
     if (!openSettings.value.cfTurnstileSiteKey) return;
     turnstileLoading.value = true;
     try {
-        let container = document.getElementById("cf-turnstile");
+        let container = document.getElementById(containerId);
         let count = 100;
         while (!container && count-- > 0) {
-            container = document.getElementById("cf-turnstile");
+            container = document.getElementById(containerId);
             await new Promise(r => setTimeout(r, 10));
         }
         count = 100;
@@ -37,11 +44,15 @@ const checkCfTurnstile = async (remove) => {
         if (remove && cfTurnstileId.value) {
             window.turnstile.remove(cfTurnstileId.value);
         }
+        // Cloudflare documents sitekey/theme/language as render-time options and
+        // exposes remove()/render() for widget lifecycle updates, so recreate the
+        // widget when any of those inputs change:
+        // https://developers.cloudflare.com/turnstile/get-started/client-side-rendering/
         cfTurnstileId.value = window.turnstile.render(
-            "#cf-turnstile",
+            `#${containerId}`,
             {
                 sitekey: openSettings.value.cfTurnstileSiteKey,
-                language: locale.value == 'zh' ? 'zh-CN' : 'en-US',
+                language: getTurnstileLocale(isSupportedLocale(locale.value) ? locale.value : DEFAULT_LOCALE),
                 theme: isDark.value ? 'dark' : 'light',
                 callback: function (token) {
                     cfToken.value = token;
@@ -53,14 +64,7 @@ const checkCfTurnstile = async (remove) => {
     }
 }
 
-watch(isDark, async (isDark) => {
-    checkCfTurnstile(true)
-}, { immediate: true })
-
-onMounted(() => {
-    cfToken.value = "";
-    checkCfTurnstile(true);
-})
+watch([isDark, locale, () => openSettings.value.cfTurnstileSiteKey], rerenderTurnstile, { immediate: true })
 </script>
 
 <template>
@@ -68,8 +72,8 @@ onMounted(() => {
         <n-spin description="loading..." :show="turnstileLoading">
             <n-form-item-row>
                 <n-flex vertical>
-                    <div id="cf-turnstile"></div>
-                    <n-button text @click="checkCfTurnstile(true)">
+                    <div :id="containerId"></div>
+                    <n-button text @click="rerenderTurnstile">
                         {{ t('refresh') }}
                     </n-button>
                 </n-flex>

frontend/src/components/WebhookComponent.vue

@@ -1,6 +1,6 @@
 <script setup lang="ts">
 import { onMounted, ref, h } from 'vue'
-import { useI18n } from 'vue-i18n'
+import { useScopedI18n } from '@/i18n/app'
 import type { DropdownOption } from 'naive-ui'
 
 const props = defineProps({
@@ -24,30 +24,7 @@ const props = defineProps({
 // @ts-ignore
 const message = useMessage()
 
-const { t } = useI18n({
-    messages: {
-        en: {
-            successTip: 'Success',
-            test: 'Test',
-            save: 'Save',
-            notEnabled: 'Webhook is not enabled for you',
-            urlMissing: 'URL is required',
-            enable: 'Enable',
-            presets: 'Presets',
-            fillInDemoTip: 'Please modify the URL and other settings to your own',
-        },
-        zh: {
-            successTip: '成功',
-            test: '测试',
-            save: '保存',
-            notEnabled: 'Webhook 未开启，请联系管理员开启',
-            urlMissing: 'URL 不能为空',
-            enable: '启用',
-            presets: '示例模板',
-            fillInDemoTip: '请修改URL和其他设置为您自己的配置',
-        }
-    }
-});
+const { t } = useScopedI18n('components.WebhookComponent')
 
 class WebhookSettings {
     enabled: boolean = false
@@ -117,6 +94,55 @@ const presets: WebhookPreset[] = [
             }, null, 2),
         },
     },
+    {
+        name: 'Telegram Bot',
+        doc: 'https://core.telegram.org/bots/api#sendmessage',
+        settings: {
+            enabled: true,
+            url: 'https://api.telegram.org/botYOUR_BOT_TOKEN/sendMessage',
+            method: 'POST',
+            headers: JSON.stringify({
+                'Content-Type': 'application/json',
+            }, null, 2),
+            body: JSON.stringify({
+                "chat_id": "YOUR_CHAT_ID",
+                "text": "New Email\nFrom: ${from}\nTo: ${to}\nSubject: ${subject}\nURL: ${url}"
+            }, null, 2),
+        },
+    },
+    {
+        name: 'WeChat Work',
+        doc: 'https://developer.work.weixin.qq.com/document/path/91770',
+        settings: {
+            enabled: true,
+            url: 'https://qyapi.weixin.qq.com/cgi-bin/webhook/send?key=YOUR_KEY',
+            method: 'POST',
+            headers: JSON.stringify({
+                'Content-Type': 'application/json',
+            }, null, 2),
+            body: JSON.stringify({
+                "msgtype": "text",
+                "text": {
+                    "content": "New Email\nFrom: ${from}\nTo: ${to}\nSubject: ${subject}\nURL: ${url}"
+                }
+            }, null, 2),
+        },
+    },
+    {
+        name: 'Discord',
+        doc: 'https://discord.com/developers/docs/resources/webhook',
+        settings: {
+            enabled: true,
+            url: 'https://discord.com/api/webhooks/YOUR_WEBHOOK_ID/YOUR_WEBHOOK_TOKEN',
+            method: 'POST',
+            headers: JSON.stringify({
+                'Content-Type': 'application/json',
+            }, null, 2),
+            body: JSON.stringify({
+                "content": "**New Email**\nFrom: ${from}\nTo: ${to}\nSubject: ${subject}\nURL: ${url}"
+            }, null, 2),
+        },
+    },
 ]
 
 const presetDropdownOptions: DropdownOption[] = presets.map((preset, index) => ({

frontend/src/i18n.ts

@@ -1,15 +0,0 @@
-import { createI18n } from 'vue-i18n'
-
-const i18n = createI18n({
-    legacy: false, // you must set `false`, to use Composition API
-    locale: 'zh', // set locale
-    fallbackLocale: 'en', // set fallback locale
-    'en': {
-        messages: {}
-    },
-    'zh': {
-        messages: {}
-    }
-})
-
-export default i18n;

frontend/src/i18n/app.ts

@@ -0,0 +1,12 @@
+import { useI18n } from 'vue-i18n'
+
+const withNamespace = (namespace: string, key: string) => `${namespace}.${key}`
+
+export const useScopedI18n = (namespace: string) => {
+  const composer = useI18n({ useScope: 'global' })
+
+  return {
+    ...composer,
+    t: ((key: string, ...args: unknown[]) => composer.t(withNamespace(namespace, key), ...(args as []))) as typeof composer.t,
+  }
+}

frontend/src/i18n/index.ts

@@ -0,0 +1,18 @@
+import { createI18n } from 'vue-i18n'
+
+import {
+    FALLBACK_LOCALE,
+    getInitialLocale,
+} from './utils'
+import { I18N_MESSAGES } from './messages'
+
+const i18n = createI18n({
+    legacy: false, // you must set `false`, to use Composition API
+    locale: getInitialLocale(),
+    fallbackLocale: FALLBACK_LOCALE,
+    messages: I18N_MESSAGES,
+    missingWarn: false,
+    fallbackWarn: false,
+})
+
+export default i18n;

frontend/src/i18n/locale-registry.ts

@@ -0,0 +1,107 @@
+import {
+  dateDeDE,
+  dateEnUS,
+  dateEsAR,
+  dateJaJP,
+  datePtBR,
+  dateZhCN,
+  deDE,
+  enUS,
+  esAR,
+  jaJP,
+  ptBR,
+  zhCN,
+} from 'naive-ui'
+
+import type { NDateLocale, NLocale } from 'naive-ui'
+
+type NaiveLocaleConfig = {
+  locale: NLocale
+  dateLocale: NDateLocale
+}
+
+type LocaleRegistryEntry = {
+  locale: string
+  label: string
+  browserMatches: string[]
+  naive: NaiveLocaleConfig
+  turnstileLocale: string
+}
+
+export const LOCALE_REGISTRY = [
+  {
+    locale: 'zh',
+    label: '中文',
+    browserMatches: ['zh'],
+    naive: { locale: zhCN, dateLocale: dateZhCN },
+    turnstileLocale: 'zh-CN',
+  },
+  {
+    locale: 'en',
+    label: 'English',
+    browserMatches: ['en'],
+    naive: { locale: enUS, dateLocale: dateEnUS },
+    turnstileLocale: 'en',
+  },
+  {
+    locale: 'es',
+    label: 'Español',
+    browserMatches: ['es'],
+    naive: { locale: esAR, dateLocale: dateEsAR },
+    turnstileLocale: 'es',
+  },
+  {
+    locale: 'pt-BR',
+    label: 'Português (Brasil)',
+    browserMatches: ['pt'],
+    naive: { locale: ptBR, dateLocale: datePtBR },
+    turnstileLocale: 'pt-BR',
+  },
+  {
+    locale: 'ja',
+    label: '日本語',
+    browserMatches: ['ja'],
+    naive: { locale: jaJP, dateLocale: dateJaJP },
+    turnstileLocale: 'ja',
+  },
+  {
+    locale: 'de',
+    label: 'Deutsch',
+    browserMatches: ['de'],
+    naive: { locale: deDE, dateLocale: dateDeDE },
+    turnstileLocale: 'de',
+  },
+] as const satisfies readonly LocaleRegistryEntry[]
+
+export type SupportedLocale = (typeof LOCALE_REGISTRY)[number]['locale']
+
+export const SUPPORTED_LOCALES = LOCALE_REGISTRY.map(({ locale }) => locale) as SupportedLocale[]
+
+const localeRegistryMap = Object.fromEntries(
+  LOCALE_REGISTRY.map((entry) => [entry.locale, entry]),
+) as Record<SupportedLocale, (typeof LOCALE_REGISTRY)[number]>
+
+export const getLocaleRegistryEntry = (locale: SupportedLocale) => {
+  return localeRegistryMap[locale]
+}
+
+export const getLocaleLabel = (locale: SupportedLocale) => {
+  return getLocaleRegistryEntry(locale).label
+}
+
+export const getLocaleOptions = () => {
+  return LOCALE_REGISTRY.map(({ locale, label }) => ({
+    label,
+    value: locale,
+    key: locale,
+  }))
+}
+
+export const getNaiveLocaleConfig = (locale: SupportedLocale) => {
+  return getLocaleRegistryEntry(locale).naive
+}
+
+export const getTurnstileLocale = (locale: SupportedLocale) => {
+  return getLocaleRegistryEntry(locale).turnstileLocale
+}
+

frontend/src/i18n/locales/source/de.ts

@@ -0,0 +1,657 @@
+export const deMessages = {
+  "views.index.SendMail.balanceUnavailable": "Kein Sendeguthaben für diese Adresse",
+  "views.index.SendMail.composeMail": "E-Mail verfassen",
+  "views.index.SendMail.contentPlaceholder": "Nachricht schreiben...",
+  "views.index.SendMail.draftSaved": "Entwurf in diesem Browser gespeichert",
+  "views.index.SendMail.recipientAddress": "Empfängeradresse",
+  "views.index.SendMail.recipientName": "Empfängername (optional)",
+  "views.index.SendMail.senderAddress": "Absenderadresse",
+  "views.index.SendMail.senderName": "Absendername (optional)",
+  "views.admin.SendMail.adminComposeTip": "Von einer konfigurierten E-Mail-Adresse senden",
+  "views.admin.SendMail.composeMail": "E-Mail verfassen",
+  "views.admin.SendMail.contentPlaceholder": "Nachricht schreiben...",
+  "views.admin.SendMail.draftSaved": "Entwurf in diesem Browser gespeichert",
+  "views.admin.SendMail.recipientAddress": "Empfängeradresse",
+  "views.admin.SendMail.recipientName": "Empfängername (optional)",
+  "views.admin.SendMail.senderAddress": "Absenderadresse",
+  "views.admin.SendMail.senderName": "Absendername (optional)",
+  "views.admin.DatabaseManager.current_database_size": "Aktuelle Datenbankgröße",
+  "views.admin.DatabaseManager.free_plan": "Free",
+  "views.admin.DatabaseManager.paid_plan": "Workers Paid",
+  "views.admin.DatabaseManager.plan": "Workers-Tarif",
+  "views.admin.DatabaseManager.plan_placeholder": "Cloudflare-Workers-Tarif auswählen",
+  "views.admin.DatabaseManager.planSaved": "Workers-Tarif gespeichert",
+  "views.admin.DatabaseManager.single_database_limit": "Datenbank-Kapazitätslimit",
+  "views.admin.DatabaseManager.storage_description": "Vergleiche die aktuelle Datenbankgröße mit den Tariflimits.",
+  "views.admin.DatabaseManager.storage_tip": "Die Auslastung wird anhand der aktuellen Datenbankgröße und des gewählten Tariflimits berechnet.",
+  "views.admin.DatabaseManager.storage_title": "D1-Speicherkapazität",
+  "views.admin.DatabaseManager.storage_usage": "Kapazitätsauslastung",
+  "views.admin.DatabaseManager.unavailable": "Nicht verfügbar",
+  "views.index.SimpleIndex.mailCount": "{current} / {total} E-Mails",
+  "views.admin.Statistics.activeAddressCount30days": "Aktive Adressanzahl in 30 Tagen",
+  "views.admin.Statistics.activeAddressCount7days": "Aktive Adressanzahl in 7 Tagen",
+  "views.Index.about": "Über",
+  "views.Admin.about": "Über",
+  "views.Header.accessHeader": "Zugangspasswort",
+  "views.Admin.account": "Konto",
+  "views.Index.accountSettings": "E-Mail-Einstellungen",
+  "views.Admin.account_settings": "Kontoeinstellungen",
+  "views.index.SimpleIndex.accountSettings": "E-Mail-Einstellungen",
+  "views.index.Attachment.action": "Aktion",
+  "views.admin.SenderAccess.action": "Aktion",
+  "views.user.UserSettings.actions": "Aktionen",
+  "views.user.AddressManagement.actions": "Aktionen",
+  "views.index.TelegramAddress.actions": "Aktionen",
+  "views.admin.Account.actions": "Aktionen",
+  "views.index.LocalAddress.actions": "Aktionen",
+  "views.admin.UserManagement.actions": "Aktionen",
+  "views.admin.AccountSettings.actions": "Aktionen",
+  "views.admin.AccountSettings.add": "Hinzufügen",
+  "views.admin.Maintenance.customSqlTip": "Füge benutzerdefinierte DELETE-SQL-Anweisungen für die geplante Bereinigung hinzu. Pro Eintrag ist nur eine DELETE-Anweisung erlaubt.",
+  "views.admin.Maintenance.addCustomSql": "Benutzerdefinierte SQL hinzufügen",
+  "views.admin.UserOauth2Settings.addOauth2": "Oauth2 hinzufügen",
+  "components.AddressSelect.address": "Adresse",
+  "views.user.AddressManagement.address": "Adresse",
+  "views.index.TelegramAddress.address": "Adresse",
+  "views.admin.SenderAccess.address": "Adresse",
+  "views.index.LocalAddress.address": "Adresse",
+  "views.admin.CreateAccount.address": "Adresse",
+  "views.admin.AiExtractSettings.allowList": "Adressfreigabeliste (Adresse eingeben und Enter drücken; Wildcards werden unterstützt)",
+  "views.admin.AccountSettings.send_address_block_list": "Blockierbegriffe für ausgehende E-Mails",
+  "views.admin.AccountSettings.address_block_list": "Blockierbegriffe für Benutzer (Administrator kann überspringen)",
+  "views.index.SimpleIndex.addressCopied": "Adresse erfolgreich kopiert",
+  "views.admin.Statistics.addressCount": "Adressanzahl",
+  "views.admin.UserManagement.address_count": "Adressanzahl",
+  "views.User.address_management": "Adressverwaltung",
+  "views.admin.UserManagement.userAddressManagement": "Adressverwaltung",
+  "views.index.AddressBar.addressPassword": "Adresspasswort",
+  "views.admin.CreateAccount.addressPassword": "Adresspasswort",
+  "views.Admin.adminAccount": "Administrator",
+  "views.Admin.accessHeader": "Admin-Passwort",
+  "views.Admin.loginViaPassword": "Administrator mit Passwort anmelden",
+  "views.admin.AiExtractSettings.title": "KI-E-Mail-Extraktionseinstellungen",
+  "views.Admin.aiExtractSettings": "KI-Extraktionseinstellungen",
+  "views.admin.AccountSettings.match_all": "Alle",
+  "views.admin.AccountSettings.create_address_subdomain_match": "Suffix-Abgleich für Subdomains beim Erstellen von Adressen erlauben",
+  "views.admin.UserSettings.enableUserRegister": "Benutzerregistrierung erlauben",
+  "views.admin.AccountSettings.match_any": "Beliebig",
+  "views.Index.appearance": "Darstellung",
+  "views.Admin.appearance": "Darstellung",
+  "views.admin.IpBlacklistSettings.tip_scope": "Gilt für: Adresse erstellen, E-Mail senden, externe Sende-API, Benutzerregistrierung und Code-Prüfung",
+  "views.index.AccountSettings.clearInboxConfirm": "Möchtest du wirklich alle E-Mails im Posteingang löschen?",
+  "views.index.AccountSettings.clearSentItemsConfirm": "Möchtest du wirklich alle E-Mails in den gesendeten Elementen löschen?",
+  "views.admin.Account.multiClearInboxTip": "Möchtest du wirklich den Posteingang der ausgewählten Adressen leeren?",
+  "views.admin.Account.clearInboxTip": "Möchtest du wirklich den Posteingang dieser E-Mail-Adresse leeren?",
+  "views.admin.Account.multiClearSentItemsTip": "Möchtest du wirklich die gesendeten Elemente der ausgewählten Adressen leeren?",
+  "views.admin.Account.clearSentItemsTip": "Möchtest du wirklich die gesendeten Elemente dieser E-Mail-Adresse leeren?",
+  "views.admin.Account.multiDeleteTip": "Möchtest du wirklich die ausgewählten Adressen löschen?",
+  "views.index.Attachment.deleteConfirm": "Möchtest du wirklich diesen Anhang löschen?",
+  "views.admin.Account.deleteTip": "Möchtest du wirklich diese E-Mail löschen?",
+  "views.admin.SenderAccess.deleteTip": "Möchtest du dies wirklich löschen?",
+  "views.index.AccountSettings.deleteAccountConfirm": "Möchtest du diese E-Mail-Adresse und alle zugehörigen E-Mails wirklich löschen? Dein Benutzerkonto wird dabei nicht gelöscht.",
+  "views.index.AccountSettings.logoutConfirm": "Möchtest du dich wirklich von der aktuellen E-Mail-Adresse abmelden?",
+  "components.MailBox.deleteMailTip": "Möchtest du die E-Mail wirklich löschen?",
+  "components.MailContentRenderer.deleteMailTip": "Möchtest du die E-Mail wirklich löschen?",
+  "components.SendBox.deleteMailTip": "Möchtest du die E-Mail wirklich löschen?",
+  "views.admin.AccountSettings.delete_rule_confirm": "Möchtest du diese Regel wirklich löschen?",
+  "views.admin.UserManagement.deleteUserTip": "Möchtest du diesen Benutzer wirklich löschen?",
+  "views.Admin.logoutConfirmContent": "Möchtest du dich wirklich aus dem Admin-Bereich abmelden?",
+  "views.user.UserSettings.logoutConfirm": "Möchtest du dich wirklich abmelden?",
+  "views.admin.IpBlacklistSettings.asn_blacklist": "ASN-Organisationssperrliste",
+  "views.admin.IpBlacklistSettings.tip_asn": "ASN-Organisation: Nach ISP/Provider blockieren. Groß-/Kleinschreibung-unabhängiger Textabgleich oder Regex.",
+  "components.AiExtractInfo.authLink": "Authentifizierungslink",
+  "views.admin.Maintenance.autoCleanup": "Automatische Bereinigung",
+  "components.MailBox.autoRefresh": "Automatische Aktualisierung",
+  "components.MailBox.backToList": "Zurück zur Liste",
+  "views.common.Appearance.autoRefreshInterval": "Automatisches Aktualisierungsintervall (s)",
+  "views.Index.auto_reply": "Automatische Antwort",
+  "views.index.AutoReply.autoReply": "Automatische Antwort",
+  "views.common.Login.autoGeneratedName": "Automatisch erzeugter Name",
+  "views.admin.SenderAccess.balance": "Guthaben",
+  "views.admin.Maintenance.basicCleanup": "Grundbereinigung",
+  "views.user.AddressManagement.unbindAddressTip": "Wechsle vor dem Trennen zu dieser E-Mail-Adresse und speichere die Zugangsdaten.",
+  "views.index.TelegramAddress.bind": "Verknüpfen",
+  "views.index.TelegramAddress.bindAddressSuccess": "Adresse erfolgreich verknüpft",
+  "views.index.LocalAddress.bindAddressSuccess": "Adresse erfolgreich verknüpft",
+  "views.User.bind_address": "Mailadresse verknüpfen",
+  "views.admin.IpBlacklistSettings.enable_tip": "IPs blockieren, die Sperrlistenmustern entsprechen und auf limitierte APIs zugreifen",
+  "views.admin.AccountSettings.fromBlockList": "Blockierbegriffe für eingehende E-Mails",
+  "views.admin.AccountSettings.block_receive_unknow_address_email": "Empfang von E-Mails an unbekannte Adressen blockieren",
+  "views.common.Appearance.bottom": "unten",
+  "views.admin.IpBlacklistSettings.fingerprint_blacklist": "Browser-Fingerprint-Sperrliste",
+  "views.admin.IpBlacklistSettings.tip_fingerprint": "Browser-Fingerprint: Sperrt per Fingerprint. Unterstützt exakte Treffer oder Regex.",
+  "views.admin.AccountSettings.cancel": "Abbrechen",
+  "components.MailBox.cancelMultiAction": "Mehrfachaktion abbrechen",
+  "components.SendBox.cancelMultiAction": "Mehrfachaktion abbrechen",
+  "views.user.AddressManagement.changeMailAddress": "Adresse wechseln",
+  "views.index.TelegramAddress.changeMailAddress": "Mailadresse ändern",
+  "views.index.LocalAddress.changeMailAddress": "Mailadresse ändern",
+  "views.index.AccountSettings.changePassword": "Adresspasswort ändern",
+  "views.admin.UserManagement.changeRole": "Ändern Rolle",
+  "components.SendBox.showCode": "Ansicht des Originalcodes umschalten",
+  "views.admin.Telegram.status": "Status prüfen",
+  "views.admin.AccountSettings.create_address_subdomain_match_follow_env_note": "Wenn du „Umgebungsvariable folgen“ auswählst, wird die Admin-Überschreibung entfernt und der Zustand auf „nicht gesetzt“ zurückgesetzt. Das tatsächliche Ergebnis wird weiterhin durch die Worker-Umgebung und die Prioritätsregeln bestimmt.",
+  "views.admin.Maintenance.cleanupNow": "Jetzt bereinigen",
+  "views.admin.Maintenance.cleanupSuccess": "Bereinigung erfolgreich",
+  "views.admin.Maintenance.addressCreateLabel": "Adressen löschen, die vor mehr als n Tagen erstellt wurden",
+  "views.admin.Maintenance.emptyAddressLabel": "Leere Adressen löschen, die älter als n Tage sind",
+  "views.admin.Maintenance.inactiveAddressLabel": "Inaktive Adressen löschen, die älter als n Tage sind",
+  "views.admin.Maintenance.mailBoxLabel": "Posteingänge löschen, die älter als n Tage sind",
+  "views.admin.Maintenance.sendBoxLabel": "Postausgänge löschen, die älter als n Tage sind",
+  "views.admin.Maintenance.unboundAddressLabel": "Nicht verknüpfte Adressen löschen, die älter als n Tage sind",
+  "views.admin.Maintenance.mailUnknowLabel": "E-Mails mit unbekanntem Empfänger löschen, die älter als n Tage sind",
+  "views.index.AccountSettings.clearInbox": "Posteingang leeren",
+  "views.admin.Account.clearInbox": "Posteingang leeren",
+  "views.index.AccountSettings.clearSentItems": "Gesendete Elemente leeren",
+  "views.admin.Account.clearSentItems": "Gesendete Elemente leeren",
+  "views.Header.title": "Cloudflare Temporäre E-Mail",
+  "views.admin.DatabaseManager.code_db_version": "Vom Code benötigte DB-Version",
+  "views.user.UserOauth2Callback.codeNotFound": "Code nicht gefunden",
+  "views.admin.AccountSettings.config": "Konfiguration",
+  "views.admin.RoleAddressConfig.roleConfigDesc": "Lege die maximale Anzahl von Adressen pro Benutzerrolle fest. Rollenbasierte Limits haben Vorrang vor globalen Einstellungen. Verwende 0 für unbegrenzt.",
+  "views.Admin.confirm": "Bestätigen",
+  "views.Admin.logoutConfirmTitle": "Abmeldung bestätigen",
+  "views.index.AccountSettings.confirmPassword": "Passwort bestätigen",
+  "views.index.SendMail.content": "Inhalt",
+  "views.admin.SendMail.content": "Inhalt",
+  "views.index.SendMail.contentEmpty": "Der Inhalt ist leer",
+  "views.admin.SendMail.contentEmpty": "Der Inhalt ist leer",
+  "components.AddressSelect.copied": "Kopiert",
+  "components.AiExtractInfo.copySuccess": "Erfolgreich kopiert",
+  "components.AddressSelect.copy": "Kopieren",
+  "views.index.SimpleIndex.copyAddress": "Kopieren",
+  "components.AiExtractInfo.copyFailed": "Kopieren fehlgeschlagen",
+  "views.Footer.copyright": "Urheberrecht",
+  "views.Admin.account_create": "Konto erstellen",
+  "views.admin.CreateAccount.creatNewEmail": "Neue E-Mail erstellen",
+  "views.common.Login.getNewEmail": "Neue E-Mail erstellen",
+  "views.user.AddressManagement.create_or_bind": "Erstellen oder verknüpfen",
+  "views.index.LocalAddress.create_or_bind": "Erstellen oder verknüpfen",
+  "views.user.UserSettings.createPasskey": "Passkey erstellen",
+  "views.admin.UserManagement.createUser": "Benutzer erstellen",
+  "views.user.UserSettings.created_at": "Erstellt am",
+  "views.admin.Account.created_at": "Erstellt am",
+  "views.admin.SenderAccess.created_at": "Erstellt am",
+  "views.admin.UserManagement.created_at": "Erstellt am",
+  "views.common.Login.credentialLogin": "Mit Zugangsdaten anmelden",
+  "views.admin.DatabaseManager.current_db_version": "Aktuelle DB-Version",
+  "views.user.UserBar.currentUser": "Aktuell angemeldeter Benutzer",
+  "views.admin.UserManagement.roleDonotExist": "Die aktuelle Rolle existiert nicht",
+  "views.admin.Maintenance.customSqlCleanup": "Benutzerdefinierte SQL-Bereinigung",
+  "views.admin.AccountSettings.send_mail_daily_limit": "Tageslimit",
+  "views.admin.AccountSettings.send_mail_daily_limit_invalid": "Das Tageslimit muss eine ganze Zahl größer oder gleich -1 sein",
+  "views.admin.IpBlacklistSettings.tip_daily_limit": "Tageslimit: Begrenzt die maximale Anzahl von Anfragen pro IP-Adresse und Tag (1-1000000).",
+  "views.admin.IpBlacklistSettings.daily_request_limit": "Tägliches Anfrage-Limit",
+  "views.Header.dark": "Dunkel",
+  "views.Admin.database": "Datenbank",
+  "views.admin.DatabaseManager.need_initialization_tip": "Die Datenbank muss initialisiert werden. Bitte zuerst initialisieren.",
+  "views.admin.DatabaseManager.initializationSuccess": "Datenbank erfolgreich initialisiert",
+  "views.admin.DatabaseManager.migrationSuccess": "Datenbank erfolgreich migriert",
+  "views.admin.DatabaseManager.need_migration_tip": "Die Datenbank muss migriert werden. Bitte zuerst migrieren.",
+  "components.MailBox.delete": "Löschen",
+  "components.MailContentRenderer.delete": "Löschen",
+  "components.SendBox.delete": "Löschen",
+  "views.index.Attachment.delete": "Löschen",
+  "views.admin.Account.delete": "Löschen",
+  "views.admin.UserOauth2Settings.delete": "Löschen",
+  "views.admin.SenderAccess.delete": "Löschen",
+  "views.admin.UserManagement.delete": "Löschen",
+  "views.admin.AccountSettings.delete_rule": "Löschen",
+  "views.admin.Maintenance.deleteCustomSql": "Löschen",
+  "views.index.AccountSettings.deleteAccount": "E-Mail-Adresse löschen",
+  "views.admin.Account.deleteAccount": "Konto löschen",
+  "views.user.UserSettings.deletePasskey": "Passkey löschen",
+  "views.admin.AccountSettings.delete_success": "Erfolgreich gelöscht",
+  "views.admin.UserManagement.deleteUser": "Benutzer löschen",
+  "views.index.Attachment.deleteSuccess": "Erfolgreich gelöscht",
+  "views.admin.SenderAccess.disable": "Deaktivieren",
+  "views.Admin.loginViaDisabledCheck": "Passwortprüfung deaktiviert",
+  "views.common.Appearance.preferShowTextMail": "Text-Mail standardmäßig anzeigen",
+  "views.admin.AccountSettings.domain_list": "Domain-Liste (optional)",
+  "views.admin.AccountSettings.source_patterns_tip": "Die Domain-Liste filtert nach Empfängeradresse, die Quell-Regex nach Absenderadresse. Für die Weiterleitung müssen beide Bedingungen erfüllt sein (UND-Logik). Leer lassen, um den jeweiligen Filter zu überspringen.",
+  "views.admin.UserManagement.domains": "Domains",
+  "views.index.Attachment.download": "Herunterladen",
+  "components.MailBox.downloadMail": "Herunterladen Mail",
+  "components.MailContentRenderer.downloadMail": "Herunterladen Mail",
+  "views.admin.Maintenance.sqlNamePlaceholder": "z. B. Alte Logs bereinigen",
+  "views.admin.Maintenance.sqlPlaceholder": "z. B. DELETE FROM raw_mails WHERE source GLOB '*{'@'}example.com' AND created_at < datetime('now', '-3 day')",
+  "views.admin.AccountSettings.source_patterns_placeholder": "z. B. gmail.com",
+  "views.admin.AccountSettings.forwarding_rule_warning": "Jede Regel wird unabhängig ausgeführt. Die Weiterleitungsadresse muss verifiziert sein.",
+  "views.index.SendMail.edit": "Bearbeiten",
+  "views.admin.SendMail.edit": "Bearbeiten",
+  "views.user.UserLogin.email": "E-Mail",
+  "views.admin.UserManagement.email": "E-Mail",
+  "views.common.Login.email": "E-Mail",
+  "views.common.Login.credential": "E-Mail-Adresszugangsdaten",
+  "views.common.Login.emailPasswordRequired": "E-Mail und Passwort sind erforderlich",
+  "views.admin.UserSettings.emailCheckRegex": "Regex zur E-Mail-Prüfung (z. B. ^[^.]+{'@'}.+$, um Punkte vor {'@'} zu verbieten)",
+  "views.admin.AccountSettings.email_forwarding_config": "E-Mail-Weiterleitungskonfiguration",
+  "views.admin.UserOauth2Settings.userEmailFormat": "E-Mail-Regex-Muster",
+  "views.Admin.mails": "E-Mails",
+  "views.index.AutoReply.sourcePrefixPlaceholder": "Leer=alle, Präfixabgleich oder /regex/",
+  "components.WebhookComponent.enable": "Aktivieren",
+  "views.admin.UserOauth2Settings.enable": "Aktivieren",
+  "views.admin.SenderAccess.enable": "Aktivieren",
+  "views.admin.Telegram.enable": "Aktivieren",
+  "views.admin.UserSettings.enable": "Aktivieren",
+  "views.admin.AiExtractSettings.enableAllowList": "Aktivieren Adressfreigabeliste",
+  "views.admin.Webhook.enableAllowList": "Freigabeliste aktivieren (Webhook-Zugriff auf bestimmte Benutzer beschränken)",
+  "views.index.AutoReply.enableAutoReply": "Automatische Antwort aktivieren",
+  "views.admin.Maintenance.cronTip": "Um die Cron-Bereinigung zu aktivieren, konfiguriere [crons] im Worker. Siehe Dokumentation; 0 Tage bedeutet alles löschen.",
+  "views.admin.IpBlacklistSettings.enable_daily_limit": "Aktivieren Tägliches Anfrage-Limit",
+  "views.admin.UserSettings.enableEmailCheckRegex": "E-Mail-Prüfregex aktivieren",
+  "views.admin.UserOauth2Settings.enableEmailFormat": "E-Mail-Format aktivieren",
+  "views.admin.Telegram.enableGlobalMailPush": "Globalen Mail-Push aktivieren (Telegram-Chat-ID manuell eingeben)",
+  "views.admin.IpBlacklistSettings.enable_ip_blacklist": "IP-Sperrliste aktivieren",
+  "views.admin.IpBlacklistSettings.enable_ip_whitelist": "IP-Freigabeliste aktivieren (streng)",
+  "views.admin.UserOauth2Settings.enableMailAllowList": "Aktivieren E-Mail-Adressfreigabeliste(Manually enterable)",
+  "views.admin.UserSettings.enableMailAllowList": "Aktivieren E-Mail-Adressfreigabeliste(Manually enterable)",
+  "views.admin.UserSettings.enableMailVerify": "Mail-Prüfung aktivieren (die Absenderadresse muss im System vorhanden sein, Guthaben haben und normal senden können)",
+  "views.admin.Telegram.enableTelegramAllowList": "Aktivieren Telegram-Freigabeliste(Manually input Chat ID)",
+  "views.admin.IpBlacklistSettings.asn_blacklist_placeholder": "ASN-Organisation eingeben (z. B. Google, Amazon)",
+  "views.admin.IpBlacklistSettings.fingerprint_blacklist_placeholder": "Fingerprint-ID eingeben (z. B. a1b2c3d4e5f6g7h8)",
+  "views.admin.IpBlacklistSettings.daily_request_limit_placeholder": "Limit eingeben (z. B. 1000)",
+  "views.admin.IpBlacklistSettings.ip_blacklist_placeholder": "Muster eingeben (z. B. 192.168.1 oder ^10\\.0\\.0\\.5$)",
+  "views.common.Login.bindUserAddressError": "Fehler beim Verknüpfen der E-Mail-Adresse mit dem Benutzer",
+  "views.admin.IpBlacklistSettings.ip_whitelist_placeholder": "Exakte IP (z. B. 1.2.3.4) oder verankerte Regex (z. B. ^192\\.168\\.1\\.\\d+$)",
+  "views.index.SimpleIndex.exitSimpleIndex": "Einfachen Modus verlassen",
+  "components.MailBox.keywordQueryTip": "Aktuelle Seite filtern",
+  "views.admin.AccountSettings.create_address_subdomain_match_follow_env": "Umgebungsvariable folgen",
+  "views.admin.AccountSettings.create_address_subdomain_match_force_disable": "Erzwingt deaktivieren",
+  "views.admin.AccountSettings.create_address_subdomain_match_force_enable": "Erzwingt aktivieren",
+  "views.user.UserLogin.forgotPassword": "Passwort vergessen",
+  "components.MailBox.forwardMail": "Weiterleiten",
+  "components.MailContentRenderer.forward": "Weiterleiten",
+  "views.admin.AccountSettings.forward_address": "Weiterleitungsadresse",
+  "views.admin.AccountSettings.forward_address_required": "Eine Weiterleitungsadresse ist erforderlich",
+  "views.admin.AccountSettings.forward_placeholder": "forward@example.com",
+  "components.MailContentRenderer.fullscreen": "Vollbild",
+  "views.common.Login.generateName": "Zufälligen Namen erzeugen",
+  "views.admin.Telegram.globalMailPushList": "Globale Mail-Push-Chat-ID-Liste",
+  "views.common.Appearance.globalTabplacement": "Globale Tab-Position",
+  "views.common.Login.help": "Hilfe",
+  "views.Header.home": "Startseite",
+  "views.index.SendMail.html": "HTML",
+  "views.admin.SendMail.html": "HTML",
+  "views.admin.UserOauth2Settings.icon": "Icon (SVG, bitte nur aus vertrauenswürdiger Quelle)",
+  "views.admin.CreateAccount.enablePrefix": "Wenn Präfix aktiviert ist",
+  "views.common.AdminContact.adminContact": "Wenn du Hilfe brauchst, kontaktiere bitte den Administrator ({msg})",
+  "views.admin.Telegram.init": "Initialisieren",
+  "views.admin.DatabaseManager.init": "Datenbank initialisieren",
+  "views.admin.AccountSettings.regex_invalid": "Ungültiges Regex-Muster",
+  "views.Admin.ipBlacklistSettings": "IP-Sperrliste",
+  "views.admin.IpBlacklistSettings.ip_blacklist": "Muster der IP-Sperrliste",
+  "views.admin.IpBlacklistSettings.title": "Einstellungen der IP-Sperrliste",
+  "views.admin.IpBlacklistSettings.tip_ip": "IP-Sperrliste: Unterstützt Textabgleich (z. B. \"192.168.1\") oder Regex (z. B. \"^10\\.0\\.0\\.5$\").",
+  "views.admin.IpBlacklistSettings.whitelist_empty_warning": "Die IP-Freigabeliste ist aktiviert, aber leer. Der Server ignoriert dies, um eine Aussperrung zu vermeiden. Bitte vor dem Aktivieren mindestens einen Eintrag hinzufügen.",
+  "views.admin.IpBlacklistSettings.ip_whitelist": "IP-Freigabeliste Muster",
+  "views.admin.IpBlacklistSettings.tip_whitelist": "IP-Freigabeliste: Strenger Freigabemodus. Einfache Einträge müssen EXAKT zur IP passen (keine Teilzeichenfolge). Verwende verankerte Regex (^...$) für Bereiche. Freigegebene IPs überspringen die Sperrlistenprüfung.",
+  "views.admin.SenderAccess.is_enabled": "Aktiviert",
+  "views.admin.Account.itemCount": "itemCount",
+  "views.admin.SenderAccess.itemCount": "itemCount",
+  "views.admin.UserManagement.itemCount": "itemCount",
+  "views.user.UserMailBox.addressQueryTip": "Leer lassen, um alle Adressen abzufragen",
+  "views.admin.Account.addressQueryTip": "Leer lassen, um alle Adressen abzufragen",
+  "views.admin.Mails.addressQueryTip": "Leer lassen, um alle Adressen abzufragen",
+  "views.common.Appearance.left": "links",
+  "views.common.Login.getNewEmailTip2": "Wenn es leer bleibt, wird eine zufällige E-Mail-Adresse erzeugt.",
+  "views.Header.light": "Hell",
+  "views.admin.IpBlacklistSettings.enable_daily_limit_tip": "Anzahl der API-Anfragen pro IP-Adresse und Tag begrenzen",
+  "components.AddressSelect.localAddresses": "Lokale Adressen",
+  "views.common.Login.bindUserInfo": "Angemeldete Benutzer: Anmeldung ohne verknüpfte E-Mail oder das Erstellen einer neuen Adresse verknüpft sie mit dem aktuellen Benutzer",
+  "views.user.UserOauth2Callback.logging": "Anmeldung läuft...",
+  "views.user.UserLogin.login": "Anmelden",
+  "views.common.Login.login": "Anmelden",
+  "views.common.Login.loginAndBind": "Anmelden und verknüpfen",
+  "views.Admin.loginMethod": "Anmeldemethode",
+  "views.user.UserBar.fetchUserSettingsError": "Das Anmeldepasswort ist ungültig oder das Konto existiert nicht. Es könnte auch ein Netzwerkproblem vorliegen. Bitte später erneut versuchen.",
+  "views.user.UserLogin.loginWith": "Mit {provider} anmelden",
+  "views.user.UserLogin.loginWithPasskey": "Mit Passkey anmelden",
+  "views.user.UserSettings.logout": "Abmelden",
+  "views.user.BindAddress.logout": "Abmelden",
+  "views.Admin.logout": "Abmelden",
+  "views.index.AccountSettings.logout": "Von aktueller E-Mail-Adresse abmelden",
+  "views.Admin.logoutSuccess": "Erfolgreich abgemeldet",
+  "views.admin.UserOauth2Settings.mailAllowList": "E-Mail-Adressfreigabeliste",
+  "views.admin.UserSettings.mailAllowList": "E-Mail-Adressfreigabeliste",
+  "views.index.SimpleIndex.addressCredential": "E-Mail-Adresszugangsdaten",
+  "views.index.AddressBar.addressCredential": "E-Mail-Adresszugangsdaten",
+  "views.admin.Account.addressCredential": "E-Mail-Adresszugangsdaten",
+  "views.admin.CreateAccount.addressCredential": "E-Mail-Adresszugangsdaten",
+  "views.index.AddressBar.fetchAddressError": "Die E-Mail-Zugangsdaten sind ungültig oder das Konto existiert nicht. Es kann auch ein Netzwerkproblem sein. Bitte später erneut versuchen.",
+  "views.Index.mailbox": "Posteingang",
+  "views.User.user_mail_box_tab": "Posteingang",
+  "views.user.AddressManagement.mail_count": "E-Mail-Anzahl",
+  "views.admin.Account.mail_count": "E-Mail-Anzahl",
+  "views.admin.Statistics.mailCount": "E-Mail-Anzahl",
+  "views.admin.UserAddressManagement.mail_count": "E-Mail-Anzahl",
+  "views.index.SimpleIndex.deleteSuccess": "E-Mail erfolgreich gelöscht",
+  "views.user.UserLogin.cannotForgotPassword": "E-Mail-Verifizierung oder Registrierung ist deaktiviert; das Passwort kann nicht zurückgesetzt werden. Bitte den Administrator kontaktieren.",
+  "views.Admin.mailWebhook": "Mail-Webhook",
+  "views.common.Appearance.mailboxSplitSize": "Breite der linken Liste in der zweispaltigen Postfachansicht",
+  "views.common.Appearance.mailListView": "Postfach-Listenansicht in voller Breite",
+  "views.common.Appearance.mailListPreviewLineClamp": "Zeilen der Textvorschau",
+  "views.common.Appearance.off": "Aus",
+  "views.index.SimpleIndex.refreshSuccess": "E-Mails erfolgreich aktualisiert",
+  "views.Admin.unknow": "E-Mails mit unbekanntem Empfänger",
+  "views.Admin.maintenance": "Wartung",
+  "views.index.AddressBar.addressManage": "Verwalten",
+  "views.admin.AccountSettings.source_match_mode": "Abgleichsmodus",
+  "views.admin.RoleAddressConfig.maxAddressCount": "Maximale Adressanzahl (0 = unbegrenzt)",
+  "views.admin.UserSettings.maxAddressCount": "Maximale Anzahl verknüpfbarer E-Mail-Adressen (0 = unbegrenzt)",
+  "views.Header.menu": "Menü",
+  "views.admin.DatabaseManager.migration": "Datenbank migrieren",
+  "views.admin.SenderAccess.modify": "Ändern",
+  "views.admin.AccountSettings.send_mail_monthly_limit": "Monatslimit",
+  "views.admin.AccountSettings.send_mail_monthly_limit_invalid": "Das Monatslimit muss eine ganze Zahl größer oder gleich -1 sein",
+  "components.MailBox.multiAction": "Mehrfachaktion",
+  "components.SendBox.multiAction": "Mehrfachaktion",
+  "views.admin.Account.multiClearInbox": "Mehrere Posteingänge leeren",
+  "views.admin.Account.multiClearSentItems": "Mehrere gesendete Elemente leeren",
+  "views.admin.Account.multiDelete": "Mehrfach löschen",
+  "views.user.AddressManagement.name": "Name",
+  "views.index.AutoReply.name": "Name",
+  "views.admin.Account.name": "Name",
+  "views.admin.UserOauth2Settings.name": "Name",
+  "views.admin.UserAddressManagement.name": "Name",
+  "views.admin.Maintenance.sqlName": "Name",
+  "views.index.AccountSettings.newPassword": "Neues Passwort",
+  "views.admin.Account.newPassword": "Neues Passwort",
+  "components.MailBox.nextMail": "Weiter",
+  "views.index.SimpleIndex.nextPage": "Weiter",
+  "views.admin.AccountSettings.noLimitSendAddressList": "Adressliste ohne Guthabenlimit",
+  "views.index.SimpleIndex.noMails": "Keine E-Mails gefunden",
+  "views.admin.RoleAddressConfig.noRolesAvailable": "In der Systemkonfiguration sind keine Rollen verfügbar",
+  "views.index.SendMail.requestAccessTip": "Sendeberechtigung und Guthaben werden für jede E-Mail-Adresse separat verwaltet. Die aktuelle Adresse {address} hat kein verfügbares Guthaben. Fordere die Berechtigung für diese Adresse an oder kontaktiere den Administrator.",
+  "views.index.SendMail.requestSuccess": "Sendeberechtigung für die aktuelle Adresse angefordert",
+  "components.SendBox.emptySent": "Keine gesendeten E-Mails",
+  "views.admin.RoleAddressConfig.notConfigured": "Nicht konfiguriert (globale Einstellungen verwenden)",
+  "views.Admin.userOauth2Settings": "OAuth2-Einstellungen",
+  "views.admin.UserOauth2Settings.oauth2Type": "OAuth2-Typ",
+  "views.Header.ok": "OK",
+  "views.Admin.ok": "OK",
+  "views.index.AddressBar.ok": "OK",
+  "views.admin.SenderAccess.ok": "OK",
+  "views.common.Login.ok": "OK",
+  "views.admin.AccountSettings.create_address_subdomain_match_tip": "Wirkt sich nur auf die Domainvalidierung von /api/new_address und /admin/new_address aus. Beispiel: Wenn aktiviert, kann foo.example.com der Basisdomain example.com entsprechen.",
+  "components.AiExtractInfo.open": "Öffnen",
+  "views.index.AddressBar.linkWithAddressCredential": "Automatischen E-Mail-Anmeldelink öffnen",
+  "views.admin.CreateAccount.linkWithAddressCredential": "Automatischen E-Mail-Anmeldelink öffnen",
+  "views.index.SendMail.options": "Optionen",
+  "views.admin.SendMail.options": "Optionen",
+  "components.AiExtractInfo.otherLink": "Weiterer Link",
+  "views.user.UserSettings.passkeyCreated": "Passkey erfolgreich erstellt",
+  "views.user.UserSettings.passkey_name": "Passkey-Name",
+  "views.user.UserLogin.password": "Passwort",
+  "views.admin.UserManagement.password": "Passwort",
+  "views.common.Login.password": "Passwort",
+  "views.index.AccountSettings.passwordChanged": "Passwort erfolgreich geändert",
+  "views.common.Login.passwordLogin": "Passwortanmeldung",
+  "views.admin.Account.passwordResetSuccess": "Passwort erfolgreich zurückgesetzt",
+  "views.index.AccountSettings.passwordMismatch": "Passwörter stimmen nicht überein",
+  "views.index.SendMail.successSend": "Bitte den Postausgang prüfen. Falls es fehlschlägt, Guthaben prüfen oder später erneut versuchen.",
+  "views.admin.SendMail.successSend": "Bitte prüfe deinen Postausgang. Falls es fehlgeschlagen ist, versuche es später erneut.",
+  "views.user.UserLogin.pleaseCompleteTurnstile": "Bitte Turnstile abschließen",
+  "views.index.SimpleIndex.addressCredentialTip": "Bitte kopiere die E-Mail-Adresszugangsdaten. Du kannst sie zum Anmelden verwenden.",
+  "views.index.AddressBar.addressCredentialTip": "Bitte kopiere die E-Mail-Adresszugangsdaten. Du kannst sie verwenden, um dich bei deinem E-Mail-Konto anzumelden.",
+  "views.admin.Account.addressCredentialTip": "Bitte kopiere die E-Mail-Adresszugangsdaten. Du kannst sie verwenden, um dich bei deinem E-Mail-Konto anzumelden.",
+  "views.admin.CreateAccount.addressCredentialTip": "Bitte kopiere die E-Mail-Adresszugangsdaten. Du kannst sie verwenden, um dich bei deinem E-Mail-Konto anzumelden.",
+  "views.Admin.accessTip": "Bitte das Admin-Passwort eingeben",
+  "views.Header.accessTip": "Bitte das korrekte Zugangspasswort eingeben",
+  "views.admin.AccountSettings.address_block_list_placeholder": "Bitte die zu blockierenden Schlüsselwörter eingeben",
+  "views.user.UserSettings.renamePasskeyNamePlaceholder": "Bitte den neuen Passkey-Namen eingeben",
+  "views.user.UserSettings.passkeyNamePlaceholder": "Bitte den Passkey-Namen eingeben oder leer lassen, um einen zufälligen zu erzeugen",
+  "views.admin.CreateAccount.fillInAllFields": "Bitte alle Felder ausfüllen",
+  "views.admin.SendBox.queryTip": "Bitte die abzufragende Adresse eingeben; leer lassen für alle",
+  "views.user.UserLogin.pleaseInputCode": "Bitte den Code eingeben",
+  "views.admin.UserManagement.pleaseInput": "Bitte alle erforderlichen Informationen eingeben",
+  "views.user.UserLogin.pleaseInputEmail": "Bitte die E-Mail eingeben",
+  "views.user.UserLogin.pleaseInput": "Bitte E-Mail und Passwort eingeben",
+  "views.admin.Maintenance.tip": "Bitte die Tage eingeben",
+  "views.common.Login.getNewEmailTip1": "Bitte die gewünschte E-Mail-Adresse eingeben. Erlaubt sind nur:",
+  "views.common.Login.credentialInput": "Bitte die Zugangsdaten der Mailadresse eingeben",
+  "views.admin.SenderAccess.modalTip": "Bitte das Sendeguthaben eingeben",
+  "views.user.UserLogin.pleaseLogin": "Bitte anmelden",
+  "views.common.Login.pleaseGetNewEmail": "Bitte anmelden oder auf „Neue E-Mail erstellen“ klicken, um eine neue Adresse zu erhalten.",
+  "components.WebhookComponent.fillInDemoTip": "Bitte URL und weitere Einstellungen an deine Umgebung anpassen",
+  "components.SendBox.pleaseSelectMail": "Bitte eine E-Mail zum Anzeigen auswählen.",
+  "views.admin.Account.pleaseSelectAddress": "Bitte eine Adresse auswählen",
+  "components.MailBox.pleaseSelectMail": "Bitte eine E-Mail auswählen",
+  "views.admin.UserManagement.prefix": "Präfix",
+  "components.WebhookComponent.presets": "Voreinstellungen",
+  "views.index.SendMail.preview": "Vorschau",
+  "views.admin.SendMail.preview": "Vorschau",
+  "views.admin.UserOauth2Settings.iconPreview": "Vorschau",
+  "components.MailBox.prevMail": "Zurück",
+  "views.index.SimpleIndex.prevPage": "Zurück",
+  "components.MailBox.query": "Abfragen",
+  "views.user.UserMailBox.query": "Abfragen",
+  "views.Index.query": "Abfragen",
+  "views.admin.SendBox.query": "Abfragen",
+  "views.admin.Account.query": "Abfragen",
+  "views.admin.SenderAccess.query": "Abfragen",
+  "views.admin.UserManagement.query": "Abfragen",
+  "views.admin.Mails.query": "Abfragen",
+  "views.Admin.qucickSetup": "Schnelleinrichtung",
+  "views.index.SendMail.toMailEmpty": "Die Empfängeradresse ist leer",
+  "views.admin.SendMail.toMailEmpty": "Die Empfängeradresse ist leer",
+  "views.index.SendMail.toName": "Name und Adresse des Empfängers; Namen leer lassen, um die E-Mail-Adresse zu verwenden",
+  "views.admin.SendMail.toName": "Name und Adresse des Empfängers; Namen leer lassen, um die E-Mail-Adresse zu verwenden",
+  "components.MailBox.refresh": "Aktualisieren",
+  "components.Turnstile.refresh": "Aktualisieren",
+  "components.SendBox.refresh": "Aktualisieren",
+  "views.index.SimpleIndex.refreshMails": "Aktualisieren",
+  "components.MailBox.refreshAfter": "Aktualisieren in {msg} Sekunden",
+  "views.index.SimpleIndex.refreshAfter": "Aktualisieren in {msg} Sekunden",
+  "views.admin.AccountSettings.regex_too_long": "Regex-Muster zu lang (max. 200 Zeichen)",
+  "views.user.UserLogin.register": "Registrieren",
+  "views.user.UserSettings.renamePasskey": "Passkey umbenennen",
+  "views.admin.UserOauth2Settings.userEmailReplace": "Ersetzungsvorlage",
+  "components.MailBox.reply": "Antworten",
+  "components.MailContentRenderer.reply": "Antworten",
+  "views.index.SendMail.requestAccess": "Zugriff anfordern",
+  "views.user.UserLogin.resetPassword": "Zurücksetzen Passwort",
+  "views.admin.Account.resetPassword": "Zurücksetzen Passwort",
+  "views.admin.UserManagement.resetPassword": "Zurücksetzen Passwort",
+  "views.index.SendMail.rich text": "Rich Text",
+  "views.admin.SendMail.rich text": "Rich Text",
+  "views.common.Appearance.right": "rechts",
+  "views.admin.UserManagement.role": "Rolle",
+  "views.admin.RoleAddressConfig.role": "Rolle",
+  "views.Admin.roleAddressConfig": "Rollenbasierte Adresskonfiguration",
+  "views.admin.AccountSettings.rule_index": "Regel",
+  "views.Index.s3Attachment": "S3-Anhang",
+  "components.WebhookComponent.save": "Speichern",
+  "views.index.AutoReply.save": "Speichern",
+  "views.admin.AiExtractSettings.save": "Speichern",
+  "views.admin.UserOauth2Settings.save": "Speichern",
+  "views.admin.IpBlacklistSettings.save": "Speichern",
+  "views.admin.Telegram.save": "Speichern",
+  "views.admin.UserSettings.save": "Speichern",
+  "views.admin.RoleAddressConfig.save": "Speichern",
+  "views.admin.AccountSettings.save": "Speichern",
+  "views.admin.Maintenance.save": "Speichern",
+  "views.admin.Webhook.save": "Speichern",
+  "views.admin.Maintenance.saveSuccess": "Erfolgreich gespeichert",
+  "views.admin.UserOauth2Settings.successTip": "Erfolgreich gespeichert",
+  "views.admin.IpBlacklistSettings.successTip": "Erfolgreich gespeichert",
+  "views.admin.UserSettings.successTip": "Erfolgreich gespeichert",
+  "views.admin.AccountSettings.successTip": "Erfolgreich gespeichert",
+  "components.MailBox.saveToS3": "In S3 speichern",
+  "components.MailContentRenderer.saveToS3": "In S3 speichern",
+  "views.Index.saveToS3Success": "In S3 gespeichert",
+  "components.MailBox.selectAll": "Alles auf dieser Seite auswählen",
+  "components.SendBox.selectAll": "Alles auf dieser Seite auswählen",
+  "views.admin.Account.selectAll": "Alles auf dieser Seite auswählen",
+  "views.admin.AccountSettings.select_domain": "Domain auswählen",
+  "views.admin.Account.selectedItems": "Ausgewählt",
+  "views.index.SendMail.send": "Senden",
+  "views.admin.SendMail.send": "Senden",
+  "views.Index.sendbox": "Postausgang",
+  "views.Admin.sendBox": "Postausgang",
+  "views.user.AddressManagement.send_count": "Sendeanzahl",
+  "views.admin.Account.send_count": "Sendeanzahl",
+  "views.admin.UserAddressManagement.send_count": "Sendeanzahl",
+  "views.Index.sendmail": "E-Mail senden",
+  "views.Admin.sendMail": "E-Mail senden",
+  "views.index.SendMail.send_balance": "Sendeguthaben der aktuellen Adresse",
+  "views.admin.Statistics.sendMailCount": "Anzahl gesendeter E-Mails",
+  "views.admin.AccountSettings.send_mail_limit": "Sende-Limit",
+  "views.user.UserLogin.sendVerificationCode": "Bestätigungscode senden",
+  "views.Admin.senderAccess": "Sender-Zugriffssteuerung",
+  "views.admin.SendMail.fromMailEmpty": "Die Absenderadresse ist leer",
+  "views.index.AutoReply.sourcePrefix": "Absenderfilter",
+  "components.AiExtractInfo.serviceLink": "Servicelink",
+  "views.index.AutoReply.settings": "Einstellungen",
+  "views.index.AccountSettings.showAddressCredential": "Adresszugangsdaten anzeigen",
+  "components.MailBox.attachments": "Anhänge anzeigen",
+  "components.MailBox.showHtmlMail": "HTML-Mail anzeigen",
+  "components.MailContentRenderer.showHtmlMail": "HTML-Mail anzeigen",
+  "views.admin.Account.showCredential": "E-Mail-Adresszugangsdaten anzeigen",
+  "views.user.UserSettings.showPasskeyList": "Passkey-Liste anzeigen",
+  "components.MailBox.showTextMail": "Textmail anzeigen",
+  "components.MailContentRenderer.showTextMail": "Textmail anzeigen",
+  "views.Index.enterSimpleMode": "Einfacher Modus",
+  "components.MailContentRenderer.size": "Größe",
+  "views.admin.Account.source_meta": "Quelle",
+  "views.admin.AccountSettings.source_patterns": "Regex für Quelladresse (optional)",
+  "views.admin.Maintenance.sqlStatement": "SQL-Anweisung (nur DELETE)",
+  "views.user.UserOauth2Callback.stateNotMatch": "State stimmt nicht überein",
+  "views.Admin.statistics": "Statistiken",
+  "views.Header.status": "Status",
+  "views.admin.IpBlacklistSettings.enable_whitelist_tip": "Strenger Modus: Nur IPs aus der Freigabeliste dürfen auf limitierte APIs zugreifen. Alle anderen IPs werden abgewiesen.",
+  "views.index.AutoReply.subject": "Betreff",
+  "views.index.SendMail.subject": "Betreff",
+  "views.admin.SendMail.subject": "Betreff",
+  "views.index.SendMail.subjectEmpty": "Der Betreff ist leer",
+  "views.admin.SendMail.subjectEmpty": "Der Betreff ist leer",
+  "components.AiExtractInfo.subscriptionLink": "Abonnement-Link",
+  "views.user.AddressManagement.success": "Erfolg",
+  "views.index.TelegramAddress.success": "Erfolg",
+  "views.index.LocalAddress.success": "Erfolg",
+  "views.admin.UserAddressManagement.success": "Erfolg",
+  "components.WebhookComponent.successTip": "Erfolg",
+  "components.MailBox.success": "Erfolg",
+  "components.SendBox.success": "Erfolg",
+  "views.index.AccountSettings.success": "Erfolg",
+  "views.index.AutoReply.success": "Erfolg",
+  "views.admin.AiExtractSettings.successTip": "Erfolg",
+  "views.admin.Account.success": "Erfolg",
+  "views.admin.SenderAccess.success": "Erfolg",
+  "views.admin.UserManagement.success": "Erfolg",
+  "views.admin.Telegram.successTip": "Erfolg",
+  "views.admin.RoleAddressConfig.successTip": "Erfolg",
+  "views.admin.Webhook.successTip": "Erfolg",
+  "views.admin.CreateAccount.successTip": "Erfolgreich erstellt",
+  "views.admin.Telegram.globalMailPushListTip": "Unterstützt chat_id von Privat-/Gruppen-/Kanal-Chats. Sende deinem Bot eine Nachricht und rufe dann diesen Link auf, um die chat_id zu sehen: https://api.telegram.org/bot<Ersetze durch dein BOT TOKEN>/getUpdates",
+  "views.user.AddressManagement.targetUserEmail": "Zielbenutzer-E-Mail",
+  "views.admin.Telegram.telegramAllowList": "Telegram-Freigabeliste (Chat-ID manuell eingeben)",
+  "views.Admin.telegram": "Telegram-Bot",
+  "views.admin.Telegram.miniAppUrl": "Telegram Mini App URL",
+  "components.WebhookComponent.test": "Test",
+  "views.index.SendMail.text": "Text",
+  "views.admin.SendMail.text": "Text",
+  "views.user.UserSettings.passordTip": "Der Server erhält nur den Hash des Passworts und niemals das Klartext-Passwort. Daher kann er dein Passwort weder sehen noch wiederherstellen. Wenn der Administrator die E-Mail-Verifizierung aktiviert, kannst du es im Inkognito-Modus zurücksetzen.",
+  "views.index.LocalAddress.tip": "Diese Adressen werden in deinem Browser gespeichert und können verloren gehen, wenn du den Browser-Cache leerst.",
+  "views.admin.UserOauth2Settings.tip": "Drittanbieter-Login verwendet automatisch die E-Mail-Adresse des Benutzers zur Registrierung eines Kontos (dieselbe E-Mail gilt als dasselbe Konto). Das Konto entspricht dem regulär registrierten Konto, und das Passwort kann auch über „Passwort vergessen“ gesetzt werden.",
+  "views.admin.AccountSettings.send_mail_limit_tip": "Dies gilt für alle Sendekanäle. Verwende -1 für unbegrenzt und 0, um das Senden zu blockieren.",
+  "views.admin.AccountSettings.create_address_subdomain_match_note": "RANDOM_SUBDOMAIN_DOMAINS erlaubt bereits zufällige oder manuelle Subdomains für gelistete Basisdomains. Dieser Schalter erlaubt API-Aufrufern zusätzlich Subdomains unter anderen erlaubten Basisdomains.",
+  "views.index.SendMail.tooLarge": "Datei zu groß; bitte eine Datei unter 1 MB hochladen.",
+  "views.admin.SendMail.tooLarge": "Datei zu groß; bitte eine Datei unter 1 MB hochladen.",
+  "views.common.Appearance.top": "oben",
+  "views.user.AddressManagement.transferAddress": "Adresse übertragen",
+  "views.user.AddressManagement.transferAddressTip": "Wenn du diese Adresse an einen anderen Benutzer überträgst, wird sie aus deinem Konto entfernt und in dessen Konto verschoben. Möchtest du die Adresse wirklich übertragen?",
+  "views.common.Appearance.useSideMargin": "Seitliche Abstände links und rechts auf der Seite aktivieren",
+  "views.admin.AiExtractSettings.manualInputPrompt": "Eingeben und mit Enter hinzufügen",
+  "views.admin.UserOauth2Settings.manualInputPrompt": "Eingeben und mit Enter hinzufügen",
+  "views.admin.Telegram.manualInputPrompt": "Eingeben und mit Enter hinzufügen",
+  "views.admin.UserSettings.manualInputPrompt": "Eingeben und mit Enter hinzufügen",
+  "views.admin.AccountSettings.manualInputPrompt": "Eingeben und mit Enter hinzufügen",
+  "views.admin.Webhook.manualInputPrompt": "Eingeben und mit Enter hinzufügen",
+  "views.admin.IpBlacklistSettings.manualInputPrompt": "Muster eingeben und Enter drücken, um es hinzuzufügen",
+  "views.user.AddressManagement.unbindAddress": "Adressverknüpfung lösen",
+  "views.index.TelegramAddress.unbindMailAddress": "Mailadressverknüpfung lösen",
+  "views.index.LocalAddress.unbindMailAddress": "Mailadresszugangsdaten lösen",
+  "components.MailBox.unselectAll": "Auswahl aufheben",
+  "components.SendBox.unselectAll": "Auswahl aufheben",
+  "views.admin.Account.unselectAll": "Auswahl aufheben",
+  "views.admin.Account.updated_at": "Aktualisiert am",
+  "views.user.UserSettings.updated_at": "Aktualisiert am",
+  "components.WebhookComponent.urlMissing": "URL ist erforderlich",
+  "views.common.Appearance.useIframeShowMail": "HTML-Mail per iframe anzeigen",
+  "views.admin.CreateAccount.enableRandomSubdomain": "Zufällige Subdomain verwenden",
+  "views.common.Login.enableRandomSubdomain": "Zufällige Subdomain verwenden",
+  "views.admin.UserOauth2Settings.userEmailFormatTip": "Regex verwenden, um die E-Mail umzuwandeln. Beispiel: ^(.+)@old\\.com$ mit $1@new.com",
+  "views.common.Appearance.useSimpleIndex": "Einfachen Index verwenden",
+  "views.common.Appearance.useUTCDate": "UTC-Datum verwenden",
+  "views.Header.user": "Benutzer",
+  "views.Admin.user": "Benutzer",
+  "components.AddressSelect.userAddresses": "Benutzeradressen",
+  "views.Admin.loginViaUserAdmin": "Benutzer-Admin-Berechtigung",
+  "views.admin.Statistics.userCount": "Benutzeranzahl",
+  "views.admin.UserManagement.user_email": "Benutzer-E-Mail",
+  "views.index.AddressBar.userLogin": "Benutzeranmeldung",
+  "views.Admin.user_management": "Benutzerverwaltung",
+  "views.Admin.user_settings": "Benutzereinstellungen",
+  "views.User.user_settings": "Benutzereinstellungen",
+  "components.AiExtractInfo.authCode": "Bestätigungscode",
+  "views.user.UserLogin.verifyCode": "Bestätigungscode",
+  "views.user.UserLogin.verifyCodeSent": "Bestätigungscode gesendet, läuft ab in {timeout} Sekunden",
+  "views.admin.AccountSettings.verified_address_list": "Liste verifizierter Adressen (kann E-Mails über die interne cf-API senden)",
+  "views.admin.UserSettings.verifyMailSender": "Mail-Absender verifizieren",
+  "components.MailContentRenderer.attachments": "Anhänge anzeigen",
+  "views.admin.Account.viewMails": "E-Mails anzeigen",
+  "views.admin.Account.viewSendBox": "Postausgang anzeigen",
+  "views.user.UserLogin.waitforVerifyCode": "Warten {timeout} Sekunden",
+  "views.admin.Webhook.webhookAllowList": "Webhook-Freigabeliste (erlaubte Mailadresse eingeben und Enter drücken)",
+  "views.admin.Webhook.notEnabled": "Webhook ist nicht aktiviert",
+  "components.WebhookComponent.notEnabled": "Webhook ist für dich nicht aktiviert",
+  "views.Index.webhookSettings": "Webhook-Einstellungen",
+  "views.Admin.webhookSettings": "Webhook-Einstellungen",
+  "views.admin.AiExtractSettings.disabledTip": "Wenn deaktiviert, verarbeitet die KI-Extraktion alle E-Mail-Adressen",
+  "views.admin.AiExtractSettings.enableAllowListTip": "Wenn aktiviert, verarbeitet die KI-Extraktion nur E-Mails an Adressen auf der Freigabeliste",
+  "views.admin.CreateAccount.randomSubdomainTip": "Wenn aktiviert, verwendet die erstellte Adresse eine zufällige Subdomain. Nur für den Empfang empfohlen. Erfordert einen Wildcard-MX-DNS-Eintrag auf der Basisdomain — siehe die Dokumentation zu zufälligen Subdomains.",
+  "views.admin.CreateAccount.enableCustomSubdomain": "Benutzerdefinierte Subdomain verwenden",
+  "views.admin.CreateAccount.normalSubdomain": "Normale Domain",
+  "views.common.Login.enableCustomSubdomain": "Benutzerdefinierte Subdomain verwenden",
+  "views.common.Login.normalSubdomain": "Normale Domain",
+  "views.common.Login.randomSubdomainTip": "Wenn aktiviert, verwendet die erstellte Adresse eine zufällige Subdomain. Nur für den Empfang empfohlen. Erfordert einen Wildcard-MX-DNS-Eintrag auf der Basisdomain — siehe die Dokumentation zu zufälligen Subdomains.",
+  "views.admin.AiExtractSettings.allowListTip": "Der Platzhalter * passt auf beliebige Zeichen; z. B. passt *{'@'}example.com auf alle Adressen der Domain example.com",
+  "views.Admin.workerconfig": "Worker-Konfiguration",
+  "views.admin.AccountSettings.create_address_subdomain_match_env_locked": "Die Worker-Umgebungsvariable ENABLE_CREATE_ADDRESS_SUBDOMAIN_MATCH ist derzeit false. Der gespeicherte Admin-Schalter kann geändert werden, wird aber erst wirksam, wenn die Umgebungsvariable aktiviert oder entfernt wird.",
+  "views.common.Login.getNewEmailTip3": "Du kannst eine Domain aus der Dropdown-Liste auswählen.",
+  "views.admin.AccountSettings.tip": "Die folgenden Mehrfachauswahlwerte können manuell eingegeben und mit Enter hinzugefügt werden",
+  "components.MailBox.emptyInbox": "Dein Posteingang ist leer",
+  "views.index.SendMail.fromName": "Dein Name und deine Adresse; Namen leer lassen, um die E-Mail-Adresse zu verwenden",
+  "views.admin.SendMail.fromName": "Dein Name und deine Adresse; Namen leer lassen, um die E-Mail-Adresse zu verwenden",
+  "components.AddressCredentialModal.addressCredential": "Adresszugangsdaten",
+  "components.AddressCredentialModal.addressCredentialLabel": "Address JWT",
+  "components.AddressCredentialModal.addressPassword": "Adresspasswort",
+  "components.AddressCredentialModal.agentAccess": "AI Agent",
+  "components.AddressCredentialModal.agentAccessTip": "Verwende dieses Postfach in einem AI Agent mit dem Address JWT und den parsed-mail APIs.",
+  "components.AddressCredentialModal.agentConfig": "Agent-Konfiguration",
+  "components.AddressCredentialModal.agentSkill": "Agent skill",
+  "components.AddressCredentialModal.apiBase": "API-Basisadresse",
+  "components.AddressCredentialModal.autoLoginLink": "Auto-Login-Link",
+  "components.AddressCredentialModal.copyFailed": "Kopieren fehlgeschlagen",
+  "components.AddressCredentialModal.copySection": "Kopieren",
+  "components.AddressCredentialModal.copySuccess": "Kopiert",
+  "components.AddressCredentialModal.currentAddress": "Aktuelle Adresse",
+  "components.AddressCredentialModal.docs": "Dokumentation",
+  "components.AddressCredentialModal.imapHost": "IMAP-Host",
+  "components.AddressCredentialModal.imapPort": "IMAP-Port",
+  "components.AddressCredentialModal.password": "Passwort",
+  "components.AddressCredentialModal.plainOrProxyTls": "Klartext oder Proxy-TLS",
+  "components.AddressCredentialModal.security": "Sicherheit",
+  "components.AddressCredentialModal.smtpHost": "SMTP-Host",
+  "components.AddressCredentialModal.smtpImapAccess": "SMTP / IMAP",
+  "components.AddressCredentialModal.smtpImapTip": "Verwende diese Werte in Mail-Clients, nachdem der Administrator den SMTP/IMAP-Proxy konfiguriert hat. Als Passwort kannst du den hier angezeigten Address JWT oder ein vorhandenes Adresspasswort verwenden.",
+  "components.AddressCredentialModal.smtpPort": "SMTP-Port",
+  "components.AddressCredentialModal.starttls": "STARTTLS",
+  "components.AddressCredentialModal.tip": "Verwende diese Zugangsdaten nur mit Clients und Agents, denen du vertraust.",
+  "components.AddressCredentialModal.title": "Adresszugangsdaten & Verbindungsmethoden",
+  "components.AddressCredentialModal.username": "Benutzername",
+  "views.User.send_mail": "E-Mail senden",
+  "views.user.UserSendBox.noAddress": "Wähle eine verknüpfte E-Mail-Adresse aus",
+  "views.user.UserSendBox.sendbox": "Gesendet"
+}

frontend/src/i18n/locales/source/es.ts

@@ -0,0 +1,657 @@
+export const esMessages = {
+  "views.index.SendMail.balanceUnavailable": "No hay saldo de envío para esta dirección",
+  "views.index.SendMail.composeMail": "Redactar correo",
+  "views.index.SendMail.contentPlaceholder": "Escribe tu mensaje...",
+  "views.index.SendMail.draftSaved": "Borrador guardado en este navegador",
+  "views.index.SendMail.recipientAddress": "Dirección del destinatario",
+  "views.index.SendMail.recipientName": "Nombre del destinatario (opcional)",
+  "views.index.SendMail.senderAddress": "Dirección del remitente",
+  "views.index.SendMail.senderName": "Nombre del remitente (opcional)",
+  "views.admin.SendMail.adminComposeTip": "Enviar desde una dirección de correo configurada",
+  "views.admin.SendMail.composeMail": "Redactar correo",
+  "views.admin.SendMail.contentPlaceholder": "Escribe tu mensaje...",
+  "views.admin.SendMail.draftSaved": "Borrador guardado en este navegador",
+  "views.admin.SendMail.recipientAddress": "Dirección del destinatario",
+  "views.admin.SendMail.recipientName": "Nombre del destinatario (opcional)",
+  "views.admin.SendMail.senderAddress": "Dirección del remitente",
+  "views.admin.SendMail.senderName": "Nombre del remitente (opcional)",
+  "views.admin.DatabaseManager.current_database_size": "Tamaño actual de la base de datos",
+  "views.admin.DatabaseManager.free_plan": "Free",
+  "views.admin.DatabaseManager.paid_plan": "Workers Paid",
+  "views.admin.DatabaseManager.plan": "Plan de Workers",
+  "views.admin.DatabaseManager.plan_placeholder": "Selecciona tu plan de Cloudflare Workers",
+  "views.admin.DatabaseManager.planSaved": "Plan de Workers guardado",
+  "views.admin.DatabaseManager.single_database_limit": "Límite de capacidad de la base de datos",
+  "views.admin.DatabaseManager.storage_description": "Compara el tamaño actual de la base de datos con los límites de tu plan.",
+  "views.admin.DatabaseManager.storage_tip": "El uso se calcula con el tamaño actual de la base de datos y el límite del plan seleccionado.",
+  "views.admin.DatabaseManager.storage_title": "Capacidad de almacenamiento D1",
+  "views.admin.DatabaseManager.storage_usage": "Uso de capacidad",
+  "views.admin.DatabaseManager.unavailable": "No disponible",
+  "views.index.SimpleIndex.mailCount": "{current} / {total} correos",
+  "views.admin.Statistics.activeAddressCount30days": "Cantidad de direcciones activas en 30 días",
+  "views.admin.Statistics.activeAddressCount7days": "Cantidad de direcciones activas en 7 días",
+  "views.Index.about": "Acerca de",
+  "views.Admin.about": "Acerca de",
+  "views.Header.accessHeader": "Contraseña de acceso",
+  "views.Admin.account": "Cuenta",
+  "views.Index.accountSettings": "Configuración del correo",
+  "views.Admin.account_settings": "Configuración de la cuenta",
+  "views.index.SimpleIndex.accountSettings": "Configuración del correo",
+  "views.index.Attachment.action": "Acción",
+  "views.admin.SenderAccess.action": "Acción",
+  "views.user.UserSettings.actions": "Acciones",
+  "views.user.AddressManagement.actions": "Acciones",
+  "views.index.TelegramAddress.actions": "Acciones",
+  "views.admin.Account.actions": "Acciones",
+  "views.index.LocalAddress.actions": "Acciones",
+  "views.admin.UserManagement.actions": "Acciones",
+  "views.admin.AccountSettings.actions": "Acciones",
+  "views.admin.AccountSettings.add": "Añadir",
+  "views.admin.Maintenance.customSqlTip": "Añade sentencias SQL DELETE personalizadas para la limpieza programada. Solo se permite una sentencia DELETE por entrada.",
+  "views.admin.Maintenance.addCustomSql": "Añadir SQL personalizada",
+  "views.admin.UserOauth2Settings.addOauth2": "Añadir OAuth2",
+  "components.AddressSelect.address": "Dirección",
+  "views.user.AddressManagement.address": "Dirección",
+  "views.index.TelegramAddress.address": "Dirección",
+  "views.admin.SenderAccess.address": "Dirección",
+  "views.index.LocalAddress.address": "Dirección",
+  "views.admin.CreateAccount.address": "Dirección",
+  "views.admin.AiExtractSettings.allowList": "Lista blanca de direcciones (introduce una dirección y pulsa Enter; admite comodines)",
+  "views.admin.AccountSettings.send_address_block_list": "Palabras clave bloqueadas para enviar correo",
+  "views.admin.AccountSettings.address_block_list": "Palabras clave bloqueadas para usuarios (el administrador puede omitirlo)",
+  "views.index.SimpleIndex.addressCopied": "Dirección copiada correctamente",
+  "views.admin.Statistics.addressCount": "Cantidad de direcciones",
+  "views.admin.UserManagement.address_count": "Cantidad de direcciones",
+  "views.User.address_management": "Gestión de direcciones",
+  "views.admin.UserManagement.userAddressManagement": "Gestión de direcciones",
+  "views.index.AddressBar.addressPassword": "Contraseña de la dirección",
+  "views.admin.CreateAccount.addressPassword": "Contraseña de la dirección",
+  "views.Admin.adminAccount": "Administrador",
+  "views.Admin.accessHeader": "Contraseña de administrador",
+  "views.Admin.loginViaPassword": "Inicio de sesión de administrador con contraseña",
+  "views.admin.AiExtractSettings.title": "Configuración de extracción de correo con IA",
+  "views.Admin.aiExtractSettings": "Configuración de extracción con IA",
+  "views.admin.AccountSettings.match_all": "Todos",
+  "views.admin.AccountSettings.create_address_subdomain_match": "Permitir coincidencia por sufijo de subdominio al crear direcciones",
+  "views.admin.UserSettings.enableUserRegister": "Permitir registro de usuarios",
+  "views.admin.AccountSettings.match_any": "Cualquiera",
+  "views.Index.appearance": "Apariencia",
+  "views.Admin.appearance": "Apariencia",
+  "views.admin.IpBlacklistSettings.tip_scope": "Se aplica a: crear dirección, enviar correo, API externa de envío, registro de usuario y verificación de código",
+  "views.index.AccountSettings.clearInboxConfirm": "¿Seguro que quieres vaciar todos los correos de tu bandeja de entrada?",
+  "views.index.AccountSettings.clearSentItemsConfirm": "¿Seguro que quieres vaciar todos los correos enviados?",
+  "views.admin.Account.multiClearInboxTip": "¿Seguro que quieres vaciar la bandeja de entrada de las direcciones seleccionadas?",
+  "views.admin.Account.clearInboxTip": "¿Seguro que quieres vaciar la bandeja de entrada de este correo?",
+  "views.admin.Account.multiClearSentItemsTip": "¿Seguro que quieres vaciar los enviados de las direcciones seleccionadas?",
+  "views.admin.Account.clearSentItemsTip": "¿Seguro que quieres vaciar los enviados de este correo?",
+  "views.admin.Account.multiDeleteTip": "¿Seguro que quieres eliminar las direcciones seleccionadas?",
+  "views.index.Attachment.deleteConfirm": "¿Seguro que quieres eliminar este adjunto?",
+  "views.admin.Account.deleteTip": "¿Seguro que quieres eliminar este correo?",
+  "views.admin.SenderAccess.deleteTip": "¿Seguro que quieres eliminar esto?",
+  "views.index.AccountSettings.deleteAccountConfirm": "¿Seguro que quieres eliminar esta dirección de correo y todos sus correos? Esto no elimina tu cuenta de usuario.",
+  "views.index.AccountSettings.logoutConfirm": "¿Seguro que quieres cerrar la sesión de la dirección de correo actual?",
+  "components.MailBox.deleteMailTip": "¿Seguro que quieres eliminar el correo?",
+  "components.MailContentRenderer.deleteMailTip": "¿Seguro que quieres eliminar el correo?",
+  "components.SendBox.deleteMailTip": "¿Seguro que quieres eliminar el correo?",
+  "views.admin.AccountSettings.delete_rule_confirm": "¿Seguro que quieres eliminar esta regla?",
+  "views.admin.UserManagement.deleteUserTip": "¿Seguro que quieres eliminar este usuario?",
+  "views.Admin.logoutConfirmContent": "¿Seguro que quieres salir del panel de administración?",
+  "views.user.UserSettings.logoutConfirm": "¿Seguro que quieres cerrar sesión?",
+  "views.admin.IpBlacklistSettings.asn_blacklist": "Lista negra de organizaciones ASN",
+  "views.admin.IpBlacklistSettings.tip_asn": "Organización ASN: bloquear por ISP/proveedor. Coincidencia de texto sin distinción de mayúsculas o regex.",
+  "components.AiExtractInfo.authLink": "Enlace de autenticación",
+  "views.admin.Maintenance.autoCleanup": "Limpieza automática",
+  "components.MailBox.autoRefresh": "Actualización automática",
+  "components.MailBox.backToList": "Volver a la lista",
+  "views.common.Appearance.autoRefreshInterval": "Intervalo de actualización automática (s)",
+  "views.Index.auto_reply": "Respuesta automática",
+  "views.index.AutoReply.autoReply": "Respuesta automática",
+  "views.common.Login.autoGeneratedName": "Nombre generado automáticamente",
+  "views.admin.SenderAccess.balance": "Saldo",
+  "views.admin.Maintenance.basicCleanup": "Limpieza básica",
+  "views.user.AddressManagement.unbindAddressTip": "Antes de desvincular, cambia a esta dirección y guarda la credencial del correo.",
+  "views.index.TelegramAddress.bind": "Vincular",
+  "views.index.TelegramAddress.bindAddressSuccess": "Dirección vinculada correctamente",
+  "views.index.LocalAddress.bindAddressSuccess": "Dirección vinculada correctamente",
+  "views.User.bind_address": "Vincular dirección de correo",
+  "views.admin.IpBlacklistSettings.enable_tip": "Bloquear IP que coincidan con la lista negra para las API limitadas",
+  "views.admin.AccountSettings.fromBlockList": "Palabras bloqueadas para recibir correo",
+  "views.admin.AccountSettings.block_receive_unknow_address_email": "Bloquear correos para direcciones desconocidas",
+  "views.common.Appearance.bottom": "abajo",
+  "views.admin.IpBlacklistSettings.fingerprint_blacklist": "Lista negra de huella del navegador",
+  "views.admin.IpBlacklistSettings.tip_fingerprint": "Huella del navegador: bloquea por huella. Admite coincidencia exacta o regex.",
+  "views.admin.AccountSettings.cancel": "Cancelar",
+  "components.MailBox.cancelMultiAction": "Cancelar selección múltiple",
+  "components.SendBox.cancelMultiAction": "Cancelar selección múltiple",
+  "views.user.AddressManagement.changeMailAddress": "Cambiar dirección",
+  "views.index.TelegramAddress.changeMailAddress": "Cambiar dirección de correo",
+  "views.index.LocalAddress.changeMailAddress": "Cambiar dirección de correo",
+  "views.index.AccountSettings.changePassword": "Cambiar contraseña de la dirección",
+  "views.admin.UserManagement.changeRole": "Cambiar Rol",
+  "components.SendBox.showCode": "Cambiar vista del código original",
+  "views.admin.Telegram.status": "Ver estado",
+  "views.admin.AccountSettings.create_address_subdomain_match_follow_env_note": "Elegir \"Seguir variable de entorno\" elimina la anulación del administrador y vuelve al estado sin definir. El resultado efectivo sigue dependiendo de las variables del Worker y de las reglas de prioridad.",
+  "views.admin.Maintenance.cleanupNow": "Limpiar ahora",
+  "views.admin.Maintenance.cleanupSuccess": "Limpieza completada",
+  "views.admin.Maintenance.addressCreateLabel": "Limpiar las direcciones creadas hace más de n días",
+  "views.admin.Maintenance.emptyAddressLabel": "Limpiar las direcciones vacías de hace más de n días",
+  "views.admin.Maintenance.inactiveAddressLabel": "Limpiar las direcciones inactivas de hace más de n días",
+  "views.admin.Maintenance.mailBoxLabel": "Limpiar la bandeja de entrada de hace más de n días",
+  "views.admin.Maintenance.sendBoxLabel": "Limpiar la bandeja de salida de hace más de n días",
+  "views.admin.Maintenance.unboundAddressLabel": "Limpiar las direcciones no vinculadas de hace más de n días",
+  "views.admin.Maintenance.mailUnknowLabel": "Limpiar los correos con destinatario desconocido de hace más de n días",
+  "views.index.AccountSettings.clearInbox": "Vaciar bandeja de entrada",
+  "views.admin.Account.clearInbox": "Vaciar bandeja de entrada",
+  "views.index.AccountSettings.clearSentItems": "Vaciar enviados",
+  "views.admin.Account.clearSentItems": "Vaciar enviados",
+  "views.Header.title": "Cloudflare Correo Temporal",
+  "views.admin.DatabaseManager.code_db_version": "Versión de BD requerida por el código",
+  "views.user.UserOauth2Callback.codeNotFound": "código no encontrado",
+  "views.admin.AccountSettings.config": "Configuración",
+  "views.admin.RoleAddressConfig.roleConfigDesc": "Configura el número máximo de direcciones para cada rol. Los límites por rol tienen prioridad sobre la configuración global. Usa 0 para ilimitado.",
+  "views.Admin.confirm": "Confirmar",
+  "views.Admin.logoutConfirmTitle": "Confirmar cierre de sesión",
+  "views.index.AccountSettings.confirmPassword": "Confirmar contraseña",
+  "views.index.SendMail.content": "Contenido",
+  "views.admin.SendMail.content": "Contenido",
+  "views.index.SendMail.contentEmpty": "El contenido está vacío",
+  "views.admin.SendMail.contentEmpty": "El contenido está vacío",
+  "components.AddressSelect.copied": "Copiado",
+  "components.AiExtractInfo.copySuccess": "Copiado correctamente",
+  "components.AddressSelect.copy": "Copiar",
+  "views.index.SimpleIndex.copyAddress": "Copiar",
+  "components.AiExtractInfo.copyFailed": "Error al copiar",
+  "views.Footer.copyright": "Derechos de autor",
+  "views.Admin.account_create": "Crear cuenta",
+  "views.admin.CreateAccount.creatNewEmail": "Crear nuevo correo",
+  "views.common.Login.getNewEmail": "Crear nuevo correo",
+  "views.user.AddressManagement.create_or_bind": "Crear o vincular",
+  "views.index.LocalAddress.create_or_bind": "Crear o vincular",
+  "views.user.UserSettings.createPasskey": "Crear passkey",
+  "views.admin.UserManagement.createUser": "Crear usuario",
+  "views.user.UserSettings.created_at": "Creado el",
+  "views.admin.Account.created_at": "Creado el",
+  "views.admin.SenderAccess.created_at": "Creado el",
+  "views.admin.UserManagement.created_at": "Creado el",
+  "views.common.Login.credentialLogin": "Inicio de sesión con credencial",
+  "views.admin.DatabaseManager.current_db_version": "Versión actual de la BD",
+  "views.user.UserBar.currentUser": "Usuario actual",
+  "views.admin.UserManagement.roleDonotExist": "El rol actual no existe",
+  "views.admin.Maintenance.customSqlCleanup": "Limpieza SQL personalizada",
+  "views.admin.AccountSettings.send_mail_daily_limit": "Límite diario",
+  "views.admin.AccountSettings.send_mail_daily_limit_invalid": "El límite diario debe ser un entero mayor o igual que -1",
+  "views.admin.IpBlacklistSettings.tip_daily_limit": "Límite diario: restringe el número máximo de solicitudes por IP al día (1-1000000).",
+  "views.admin.IpBlacklistSettings.daily_request_limit": "Límite diario de solicitudes",
+  "views.Header.dark": "Oscuro",
+  "views.Admin.database": "Base de datos",
+  "views.admin.DatabaseManager.need_initialization_tip": "Es necesario inicializar la base de datos. Inicialízala primero.",
+  "views.admin.DatabaseManager.initializationSuccess": "Base de datos inicializada correctamente",
+  "views.admin.DatabaseManager.migrationSuccess": "Base de datos migrada correctamente",
+  "views.admin.DatabaseManager.need_migration_tip": "Es necesario migrar la base de datos. Realiza la migración primero.",
+  "components.MailBox.delete": "Eliminar",
+  "components.MailContentRenderer.delete": "Eliminar",
+  "components.SendBox.delete": "Eliminar",
+  "views.index.Attachment.delete": "Eliminar",
+  "views.admin.Account.delete": "Eliminar",
+  "views.admin.UserOauth2Settings.delete": "Eliminar",
+  "views.admin.SenderAccess.delete": "Eliminar",
+  "views.admin.UserManagement.delete": "Eliminar",
+  "views.admin.AccountSettings.delete_rule": "Eliminar",
+  "views.admin.Maintenance.deleteCustomSql": "Eliminar",
+  "views.index.AccountSettings.deleteAccount": "Eliminar dirección de correo",
+  "views.admin.Account.deleteAccount": "Eliminar cuenta",
+  "views.user.UserSettings.deletePasskey": "Eliminar passkey",
+  "views.admin.AccountSettings.delete_success": "Eliminado correctamente",
+  "views.admin.UserManagement.deleteUser": "Eliminar usuario",
+  "views.index.Attachment.deleteSuccess": "Eliminado correctamente",
+  "views.admin.SenderAccess.disable": "Deshabilitar",
+  "views.Admin.loginViaDisabledCheck": "Comprobación de contraseña deshabilitada",
+  "views.common.Appearance.preferShowTextMail": "Mostrar correo en texto por defecto",
+  "views.admin.AccountSettings.domain_list": "Lista de dominios (opcional)",
+  "views.admin.AccountSettings.source_patterns_tip": "La lista de dominios filtra por destinatario y la regex de origen por remitente. Ambas condiciones deben cumplirse para reenviar (lógica AND). Deja alguna vacía para omitirla.",
+  "views.admin.UserManagement.domains": "Dominios",
+  "views.index.Attachment.download": "Descargar",
+  "components.MailBox.downloadMail": "Descargar Correo",
+  "components.MailContentRenderer.downloadMail": "Descargar Correo",
+  "views.admin.Maintenance.sqlNamePlaceholder": "p. ej., limpiar registros antiguos",
+  "views.admin.Maintenance.sqlPlaceholder": "p. ej., DELETE FROM raw_mails WHERE source GLOB '*{'@'}example.com' AND created_at < datetime('now', '-3 day')",
+  "views.admin.AccountSettings.source_patterns_placeholder": "p. ej., gmail.com",
+  "views.admin.AccountSettings.forwarding_rule_warning": "Cada regla se ejecuta de forma independiente. La dirección de reenvío debe estar verificada.",
+  "views.index.SendMail.edit": "Editar",
+  "views.admin.SendMail.edit": "Editar",
+  "views.user.UserLogin.email": "Correo electrónico",
+  "views.admin.UserManagement.email": "Correo electrónico",
+  "views.common.Login.email": "Correo electrónico",
+  "views.common.Login.credential": "Credencial de dirección de correo",
+  "views.common.Login.emailPasswordRequired": "El correo y la contraseña son obligatorios",
+  "views.admin.UserSettings.emailCheckRegex": "Regex de verificación de correo (p. ej., ^[^.]+{'@'}.+$ para impedir puntos antes de {'@'})",
+  "views.admin.AccountSettings.email_forwarding_config": "Configuración de reenvío de correo",
+  "views.admin.UserOauth2Settings.userEmailFormat": "Patrón regex del correo",
+  "views.Admin.mails": "Correos",
+  "views.index.AutoReply.sourcePrefixPlaceholder": "Vacío=todos, prefijo o /regex/",
+  "components.WebhookComponent.enable": "Habilitar",
+  "views.admin.UserOauth2Settings.enable": "Habilitar",
+  "views.admin.SenderAccess.enable": "Habilitar",
+  "views.admin.Telegram.enable": "Habilitar",
+  "views.admin.UserSettings.enable": "Habilitar",
+  "views.admin.AiExtractSettings.enableAllowList": "Habilitar Lista blanca de direcciones",
+  "views.admin.Webhook.enableAllowList": "Habilitar lista de permitidos (restringe el acceso del webhook a usuarios específicos)",
+  "views.index.AutoReply.enableAutoReply": "Habilitar respuesta automática",
+  "views.admin.Maintenance.cronTip": "Para activar la limpieza por cron, configura [crons] en el worker. Consulta la documentación; 0 días significa limpiar todo.",
+  "views.admin.IpBlacklistSettings.enable_daily_limit": "Habilitar Límite diario de solicitudes",
+  "views.admin.UserSettings.enableEmailCheckRegex": "Habilitar regex de verificación de correo",
+  "views.admin.UserOauth2Settings.enableEmailFormat": "Habilitar formato de correo",
+  "views.admin.Telegram.enableGlobalMailPush": "Habilitar envío global de correos (introduce manualmente el Chat ID de Telegram)",
+  "views.admin.IpBlacklistSettings.enable_ip_blacklist": "Habilitar Lista negra de IP",
+  "views.admin.IpBlacklistSettings.enable_ip_whitelist": "Habilitar Lista blanca de IP (estricto)",
+  "views.admin.UserOauth2Settings.enableMailAllowList": "Habilitar lista blanca de direcciones de correo (editable manualmente)",
+  "views.admin.UserSettings.enableMailAllowList": "Habilitar lista blanca de direcciones de correo (editable manualmente)",
+  "views.admin.UserSettings.enableMailVerify": "Habilitar verificación de correo (la dirección remitente debe existir en el sistema, tener saldo y poder enviar normalmente)",
+  "views.admin.Telegram.enableTelegramAllowList": "Habilitar lista blanca de Telegram (introduce manualmente el Chat ID)",
+  "views.admin.IpBlacklistSettings.asn_blacklist_placeholder": "Introduce organización ASN (p. ej., Google, Amazon)",
+  "views.admin.IpBlacklistSettings.fingerprint_blacklist_placeholder": "Introduce el ID de huella (p. ej., a1b2c3d4e5f6g7h8)",
+  "views.admin.IpBlacklistSettings.daily_request_limit_placeholder": "Introduce el límite (p. ej., 1000)",
+  "views.admin.IpBlacklistSettings.ip_blacklist_placeholder": "Introduce el patrón (p. ej., 192.168.1 o ^10\\.0\\.0\\.5$)",
+  "views.common.Login.bindUserAddressError": "Error al vincular la dirección al usuario",
+  "views.admin.IpBlacklistSettings.ip_whitelist_placeholder": "IP exacta (p. ej., 1.2.3.4) o regex anclada (p. ej., ^192\\.168\\.1\\.\\d+$)",
+  "views.index.SimpleIndex.exitSimpleIndex": "Salir del modo simple",
+  "components.MailBox.keywordQueryTip": "Filtrar página actual",
+  "views.admin.AccountSettings.create_address_subdomain_match_follow_env": "Seguir variable de entorno",
+  "views.admin.AccountSettings.create_address_subdomain_match_force_disable": "Forzar deshabilitación",
+  "views.admin.AccountSettings.create_address_subdomain_match_force_enable": "Forzar habilitación",
+  "views.user.UserLogin.forgotPassword": "Olvidé mi contraseña",
+  "components.MailBox.forwardMail": "Reenviar",
+  "components.MailContentRenderer.forward": "Reenviar",
+  "views.admin.AccountSettings.forward_address": "Dirección de reenvío",
+  "views.admin.AccountSettings.forward_address_required": "La dirección de reenvío es obligatoria",
+  "views.admin.AccountSettings.forward_placeholder": "forward@example.com",
+  "components.MailContentRenderer.fullscreen": "Pantalla completa",
+  "views.common.Login.generateName": "Generar nombre aleatorio",
+  "views.admin.Telegram.globalMailPushList": "Lista global de chat ID para envío de correos",
+  "views.common.Appearance.globalTabplacement": "Posición global de pestañas",
+  "views.common.Login.help": "Ayuda",
+  "views.Header.home": "Inicio",
+  "views.index.SendMail.html": "HTML",
+  "views.admin.SendMail.html": "HTML",
+  "views.admin.UserOauth2Settings.icon": "Icono (SVG, asegúrate de que la fuente sea fiable)",
+  "views.admin.CreateAccount.enablePrefix": "Si se habilita el prefijo",
+  "views.common.AdminContact.adminContact": "Si necesitas ayuda, contacta con el administrador ({msg})",
+  "views.admin.Telegram.init": "Inicializar",
+  "views.admin.DatabaseManager.init": "Inicializar base de datos",
+  "views.admin.AccountSettings.regex_invalid": "Patrón regex no válido",
+  "views.Admin.ipBlacklistSettings": "Lista negra de IP",
+  "views.admin.IpBlacklistSettings.ip_blacklist": "Patrones de lista negra de IP",
+  "views.admin.IpBlacklistSettings.title": "Configuración de lista negra de IP",
+  "views.admin.IpBlacklistSettings.tip_ip": "Lista negra de IP: admite coincidencia por texto (p. ej., \"192.168.1\") o por regex (p. ej., \"^10\\.0\\.0\\.5$\").",
+  "views.admin.IpBlacklistSettings.whitelist_empty_warning": "La lista blanca de IP está activada, pero vacía. El servidor la ignorará para evitar bloquear el acceso. Añade al menos una entrada antes de activarla.",
+  "views.admin.IpBlacklistSettings.ip_whitelist": "Lista blanca de IP Patrones",
+  "views.admin.IpBlacklistSettings.tip_whitelist": "Lista blanca de IP: modo estricto. Las entradas simples deben coincidir exactamente con la IP (sin subcadenas). Usa regex ancladas (^...$) para rangos. Las IP permitidas omiten la comprobación de la lista negra.",
+  "views.admin.SenderAccess.is_enabled": "Habilitado",
+  "views.admin.Account.itemCount": "itemCount",
+  "views.admin.SenderAccess.itemCount": "itemCount",
+  "views.admin.UserManagement.itemCount": "itemCount",
+  "views.user.UserMailBox.addressQueryTip": "Déjalo vacío para consultar todas las direcciones",
+  "views.admin.Account.addressQueryTip": "Déjalo vacío para consultar todas las direcciones",
+  "views.admin.Mails.addressQueryTip": "Déjalo vacío para consultar todas las direcciones",
+  "views.common.Appearance.left": "izquierda",
+  "views.common.Login.getNewEmailTip2": "Si lo dejas vacío, se generará una dirección aleatoria.",
+  "views.Header.light": "Claro",
+  "views.admin.IpBlacklistSettings.enable_daily_limit_tip": "Limitar el número de solicitudes API por IP y día",
+  "components.AddressSelect.localAddresses": "Direcciones locales",
+  "views.common.Login.bindUserInfo": "Si ya has iniciado sesión, al entrar sin vincular correo o crear uno nuevo se vinculará al usuario actual",
+  "views.user.UserOauth2Callback.logging": "Iniciando sesión...",
+  "views.user.UserLogin.login": "Iniciar sesión",
+  "views.common.Login.login": "Iniciar sesión",
+  "views.common.Login.loginAndBind": "Iniciar sesión y vincular",
+  "views.Admin.loginMethod": "Método de inicio de sesión",
+  "views.user.UserBar.fetchUserSettingsError": "La contraseña de inicio de sesión es incorrecta o la cuenta no existe; también puede tratarse de un problema de red. Inténtalo de nuevo más tarde.",
+  "views.user.UserLogin.loginWith": "Iniciar sesión con {provider}",
+  "views.user.UserLogin.loginWithPasskey": "Iniciar sesión con passkey",
+  "views.user.UserSettings.logout": "Cerrar sesión",
+  "views.user.BindAddress.logout": "Cerrar sesión",
+  "views.Admin.logout": "Cerrar sesión",
+  "views.index.AccountSettings.logout": "Cerrar sesión de la dirección de correo actual",
+  "views.Admin.logoutSuccess": "Sesión cerrada correctamente",
+  "views.admin.UserOauth2Settings.mailAllowList": "Lista blanca de direcciones de correo",
+  "views.admin.UserSettings.mailAllowList": "Lista blanca de direcciones de correo",
+  "views.index.SimpleIndex.addressCredential": "Credencial de dirección de correo",
+  "views.index.AddressBar.addressCredential": "Credencial de dirección de correo",
+  "views.admin.Account.addressCredential": "Credencial de dirección de correo",
+  "views.admin.CreateAccount.addressCredential": "Credencial de dirección de correo",
+  "views.index.AddressBar.fetchAddressError": "La credencial del correo no es válida o la cuenta no existe; también puede ser un problema de red. Inténtalo más tarde.",
+  "views.Index.mailbox": "Bandeja de entrada",
+  "views.User.user_mail_box_tab": "Bandeja de entrada",
+  "views.user.AddressManagement.mail_count": "Cantidad de correos",
+  "views.admin.Account.mail_count": "Cantidad de correos",
+  "views.admin.Statistics.mailCount": "Cantidad de correos",
+  "views.admin.UserAddressManagement.mail_count": "Cantidad de correos",
+  "views.index.SimpleIndex.deleteSuccess": "Correo eliminado correctamente",
+  "views.user.UserLogin.cannotForgotPassword": "La verificación por correo o el registro está desactivado; no se puede restablecer la contraseña. Contacta con el administrador.",
+  "views.Admin.mailWebhook": "Webhook de correo",
+  "views.common.Appearance.mailboxSplitSize": "Ancho de la lista izquierda en la vista de buzón de dos columnas",
+  "views.common.Appearance.mailListView": "Vista de lista del buzón de ancho completo",
+  "views.common.Appearance.mailListPreviewLineClamp": "Líneas de vista previa del cuerpo",
+  "views.common.Appearance.off": "Desactivado",
+  "views.index.SimpleIndex.refreshSuccess": "Correos actualizados correctamente",
+  "views.Admin.unknow": "Correos con destinatario desconocido",
+  "views.Admin.maintenance": "Mantenimiento",
+  "views.index.AddressBar.addressManage": "Gestionar",
+  "views.admin.AccountSettings.source_match_mode": "Modo de coincidencia",
+  "views.admin.RoleAddressConfig.maxAddressCount": "Cantidad máxima de direcciones (0 = ilimitado)",
+  "views.admin.UserSettings.maxAddressCount": "Número máximo de direcciones que se pueden vincular (0 = ilimitado)",
+  "views.Header.menu": "Menú",
+  "views.admin.DatabaseManager.migration": "Migrar base de datos",
+  "views.admin.SenderAccess.modify": "Modificar",
+  "views.admin.AccountSettings.send_mail_monthly_limit": "Límite mensual",
+  "views.admin.AccountSettings.send_mail_monthly_limit_invalid": "El límite mensual debe ser un entero mayor o igual que -1",
+  "components.MailBox.multiAction": "Acción múltiple",
+  "components.SendBox.multiAction": "Acción múltiple",
+  "views.admin.Account.multiClearInbox": "Vaciar varias bandejas",
+  "views.admin.Account.multiClearSentItems": "Vaciar varios enviados",
+  "views.admin.Account.multiDelete": "Eliminar en lote",
+  "views.user.AddressManagement.name": "Nombre",
+  "views.index.AutoReply.name": "Nombre",
+  "views.admin.Account.name": "Nombre",
+  "views.admin.UserOauth2Settings.name": "Nombre",
+  "views.admin.UserAddressManagement.name": "Nombre",
+  "views.admin.Maintenance.sqlName": "Nombre",
+  "views.index.AccountSettings.newPassword": "Nueva contraseña",
+  "views.admin.Account.newPassword": "Nueva contraseña",
+  "components.MailBox.nextMail": "Siguiente",
+  "views.index.SimpleIndex.nextPage": "Siguiente",
+  "views.admin.AccountSettings.noLimitSendAddressList": "Lista de direcciones sin límite de saldo",
+  "views.index.SimpleIndex.noMails": "No se encontraron correos",
+  "views.admin.RoleAddressConfig.noRolesAvailable": "No hay roles disponibles en la configuración del sistema",
+  "views.index.SendMail.requestAccessTip": "El permiso y el saldo de envío se gestionan por separado para cada dirección. La dirección actual, {address}, no tiene saldo disponible. Solicita permiso para esta dirección o contacta con el administrador.",
+  "views.index.SendMail.requestSuccess": "Permiso de envío solicitado para la dirección actual",
+  "components.SendBox.emptySent": "No hay correos enviados",
+  "views.admin.RoleAddressConfig.notConfigured": "No configurado (usar configuración global)",
+  "views.Admin.userOauth2Settings": "Configuración de OAuth2",
+  "views.admin.UserOauth2Settings.oauth2Type": "Tipo de OAuth2",
+  "views.Header.ok": "Aceptar",
+  "views.Admin.ok": "Aceptar",
+  "views.index.AddressBar.ok": "Aceptar",
+  "views.admin.SenderAccess.ok": "Aceptar",
+  "views.common.Login.ok": "Aceptar",
+  "views.admin.AccountSettings.create_address_subdomain_match_tip": "Solo afecta la validación de dominio en /api/new_address y /admin/new_address. Ejemplo: activado, foo.example.com puede coincidir con example.com.",
+  "components.AiExtractInfo.open": "Abrir",
+  "views.index.AddressBar.linkWithAddressCredential": "Abrir enlace de inicio de sesión automático por correo",
+  "views.admin.CreateAccount.linkWithAddressCredential": "Abrir enlace de inicio de sesión automático por correo",
+  "views.index.SendMail.options": "Opciones",
+  "views.admin.SendMail.options": "Opciones",
+  "components.AiExtractInfo.otherLink": "Otro enlace",
+  "views.user.UserSettings.passkeyCreated": "Passkey creada correctamente",
+  "views.user.UserSettings.passkey_name": "Nombre de la passkey",
+  "views.user.UserLogin.password": "Contraseña",
+  "views.admin.UserManagement.password": "Contraseña",
+  "views.common.Login.password": "Contraseña",
+  "views.index.AccountSettings.passwordChanged": "Contraseña cambiada correctamente",
+  "views.common.Login.passwordLogin": "Inicio de sesión con contraseña",
+  "views.admin.Account.passwordResetSuccess": "Contraseña restablecida correctamente",
+  "views.index.AccountSettings.passwordMismatch": "Las contraseñas no coinciden",
+  "views.index.SendMail.successSend": "Revisa la bandeja de salida. Si falla, comprueba tu saldo o inténtalo más tarde.",
+  "views.admin.SendMail.successSend": "Revisa la bandeja de salida. Si falla, inténtalo de nuevo más tarde.",
+  "views.user.UserLogin.pleaseCompleteTurnstile": "Completa el turnstile",
+  "views.index.SimpleIndex.addressCredentialTip": "Copia la credencial de la dirección de correo; podrás usarla para iniciar sesión.",
+  "views.index.AddressBar.addressCredentialTip": "Copia la credencial de la dirección de correo; podrás usarla para iniciar sesión en tu cuenta de correo.",
+  "views.admin.Account.addressCredentialTip": "Copia la credencial de la dirección de correo; podrás usarla para iniciar sesión en tu cuenta de correo.",
+  "views.admin.CreateAccount.addressCredentialTip": "Copia la credencial de la dirección de correo; podrás usarla para iniciar sesión en tu cuenta de correo.",
+  "views.Admin.accessTip": "Introduce la contraseña de administrador",
+  "views.Header.accessTip": "Introduce la contraseña de acceso correcta",
+  "views.admin.AccountSettings.address_block_list_placeholder": "Introduce las palabras clave que quieres bloquear",
+  "views.user.UserSettings.renamePasskeyNamePlaceholder": "Introduce el nuevo nombre de la passkey",
+  "views.user.UserSettings.passkeyNamePlaceholder": "Introduce el nombre de la passkey o déjalo vacío para generarlo aleatoriamente",
+  "views.admin.CreateAccount.fillInAllFields": "Rellena todos los campos",
+  "views.admin.SendBox.queryTip": "Introduce la dirección a consultar; vacío para todas",
+  "views.user.UserLogin.pleaseInputCode": "Introduce el código",
+  "views.admin.UserManagement.pleaseInput": "Introduce la información completa",
+  "views.user.UserLogin.pleaseInputEmail": "Introduce el correo",
+  "views.user.UserLogin.pleaseInput": "Introduce el correo y la contraseña",
+  "views.admin.Maintenance.tip": "Introduce los días",
+  "views.common.Login.getNewEmailTip1": "Introduce el correo que quieres usar. Solo se permite: ",
+  "views.common.Login.credentialInput": "Introduce la credencial de la dirección de correo",
+  "views.admin.SenderAccess.modalTip": "Introduce el saldo de envío",
+  "views.user.UserLogin.pleaseLogin": "Inicia sesión",
+  "views.common.Login.pleaseGetNewEmail": "Inicia sesión o pulsa \"Crear nuevo correo\" para obtener una nueva dirección.",
+  "components.WebhookComponent.fillInDemoTip": "Modifica la URL y el resto de ajustes por los tuyos",
+  "components.SendBox.pleaseSelectMail": "Selecciona un correo para verlo.",
+  "views.admin.Account.pleaseSelectAddress": "Selecciona una dirección",
+  "components.MailBox.pleaseSelectMail": "Selecciona un correo",
+  "views.admin.UserManagement.prefix": "Prefijo",
+  "components.WebhookComponent.presets": "Plantillas",
+  "views.index.SendMail.preview": "Vista previa",
+  "views.admin.SendMail.preview": "Vista previa",
+  "views.admin.UserOauth2Settings.iconPreview": "Vista previa",
+  "components.MailBox.prevMail": "Anterior",
+  "views.index.SimpleIndex.prevPage": "Anterior",
+  "components.MailBox.query": "Consultar",
+  "views.user.UserMailBox.query": "Consultar",
+  "views.Index.query": "Consultar",
+  "views.admin.SendBox.query": "Consultar",
+  "views.admin.Account.query": "Consultar",
+  "views.admin.SenderAccess.query": "Consultar",
+  "views.admin.UserManagement.query": "Consultar",
+  "views.admin.Mails.query": "Consultar",
+  "views.Admin.qucickSetup": "Configuración rápida",
+  "views.index.SendMail.toMailEmpty": "La dirección del destinatario está vacía",
+  "views.admin.SendMail.toMailEmpty": "La dirección del destinatario está vacía",
+  "views.index.SendMail.toName": "Nombre y dirección del destinatario; deja el nombre vacío para usar el correo",
+  "views.admin.SendMail.toName": "Nombre y dirección del destinatario; deja el nombre vacío para usar el correo",
+  "components.MailBox.refresh": "Actualizar",
+  "components.Turnstile.refresh": "Actualizar",
+  "components.SendBox.refresh": "Actualizar",
+  "views.index.SimpleIndex.refreshMails": "Actualizar",
+  "components.MailBox.refreshAfter": "Actualizar en {msg} segundos",
+  "views.index.SimpleIndex.refreshAfter": "Actualizar en {msg} segundos",
+  "views.admin.AccountSettings.regex_too_long": "El patrón regex es demasiado largo (máx. 200 caracteres)",
+  "views.user.UserLogin.register": "Registrarse",
+  "views.user.UserSettings.renamePasskey": "Renombrar passkey",
+  "views.admin.UserOauth2Settings.userEmailReplace": "Plantilla de reemplazo",
+  "components.MailBox.reply": "Responder",
+  "components.MailContentRenderer.reply": "Responder",
+  "views.index.SendMail.requestAccess": "Solicitar acceso",
+  "views.user.UserLogin.resetPassword": "Restablecer Contraseña",
+  "views.admin.Account.resetPassword": "Restablecer Contraseña",
+  "views.admin.UserManagement.resetPassword": "Restablecer Contraseña",
+  "views.index.SendMail.rich text": "Texto enriquecido",
+  "views.admin.SendMail.rich text": "Texto enriquecido",
+  "views.common.Appearance.right": "derecha",
+  "views.admin.UserManagement.role": "Rol",
+  "views.admin.RoleAddressConfig.role": "Rol",
+  "views.Admin.roleAddressConfig": "Configuración de direcciones por rol",
+  "views.admin.AccountSettings.rule_index": "Regla",
+  "views.Index.s3Attachment": "Adjunto S3",
+  "components.WebhookComponent.save": "Guardar",
+  "views.index.AutoReply.save": "Guardar",
+  "views.admin.AiExtractSettings.save": "Guardar",
+  "views.admin.UserOauth2Settings.save": "Guardar",
+  "views.admin.IpBlacklistSettings.save": "Guardar",
+  "views.admin.Telegram.save": "Guardar",
+  "views.admin.UserSettings.save": "Guardar",
+  "views.admin.RoleAddressConfig.save": "Guardar",
+  "views.admin.AccountSettings.save": "Guardar",
+  "views.admin.Maintenance.save": "Guardar",
+  "views.admin.Webhook.save": "Guardar",
+  "views.admin.Maintenance.saveSuccess": "Guardado correctamente",
+  "views.admin.UserOauth2Settings.successTip": "Guardado correcto",
+  "views.admin.IpBlacklistSettings.successTip": "Guardado correcto",
+  "views.admin.UserSettings.successTip": "Guardado correcto",
+  "views.admin.AccountSettings.successTip": "Guardado correcto",
+  "components.MailBox.saveToS3": "Guardar en S3",
+  "components.MailContentRenderer.saveToS3": "Guardar en S3",
+  "views.Index.saveToS3Success": "guardado en S3 correctamente",
+  "components.MailBox.selectAll": "Seleccionar toda esta página",
+  "components.SendBox.selectAll": "Seleccionar toda esta página",
+  "views.admin.Account.selectAll": "Seleccionar toda esta página",
+  "views.admin.AccountSettings.select_domain": "Seleccionar dominio",
+  "views.admin.Account.selectedItems": "Seleccionado",
+  "views.index.SendMail.send": "Enviar",
+  "views.admin.SendMail.send": "Enviar",
+  "views.Index.sendbox": "Bandeja de salida",
+  "views.Admin.sendBox": "Bandeja de salida",
+  "views.user.AddressManagement.send_count": "Cantidad enviada",
+  "views.admin.Account.send_count": "Cantidad enviada",
+  "views.admin.UserAddressManagement.send_count": "Cantidad enviada",
+  "views.Index.sendmail": "Enviar correo",
+  "views.Admin.sendMail": "Enviar correo",
+  "views.index.SendMail.send_balance": "Saldo de envío de la dirección actual",
+  "views.admin.Statistics.sendMailCount": "Cantidad de correos enviados",
+  "views.admin.AccountSettings.send_mail_limit": "Límite de envío",
+  "views.user.UserLogin.sendVerificationCode": "Enviar código de verificación",
+  "views.Admin.senderAccess": "Control de permisos de envío",
+  "views.admin.SendMail.fromMailEmpty": "La dirección del remitente está vacía",
+  "views.index.AutoReply.sourcePrefix": "Filtro de remitente",
+  "components.AiExtractInfo.serviceLink": "Enlace del servicio",
+  "views.index.AutoReply.settings": "Configuración",
+  "views.index.AccountSettings.showAddressCredential": "Mostrar credencial de la dirección",
+  "components.MailBox.attachments": "Mostrar adjuntos",
+  "components.MailBox.showHtmlMail": "Mostrar correo HTML",
+  "components.MailContentRenderer.showHtmlMail": "Mostrar correo HTML",
+  "views.admin.Account.showCredential": "Mostrar credencial de la dirección de correo",
+  "views.user.UserSettings.showPasskeyList": "Mostrar lista de passkeys",
+  "components.MailBox.showTextMail": "Mostrar correo en texto",
+  "components.MailContentRenderer.showTextMail": "Mostrar correo en texto",
+  "views.Index.enterSimpleMode": "Modo simple",
+  "components.MailContentRenderer.size": "Tamaño",
+  "views.admin.Account.source_meta": "Origen",
+  "views.admin.AccountSettings.source_patterns": "Regex de dirección de origen (opcional)",
+  "views.admin.Maintenance.sqlStatement": "Sentencia SQL (solo DELETE)",
+  "views.user.UserOauth2Callback.stateNotMatch": "el estado no coincide",
+  "views.Admin.statistics": "Estadísticas",
+  "views.Header.status": "Estado",
+  "views.admin.IpBlacklistSettings.enable_whitelist_tip": "Modo estricto: solo las IP que coincidan con la lista blanca podrán acceder a las API con límite. Todas las demás serán rechazadas.",
+  "views.index.AutoReply.subject": "Asunto",
+  "views.index.SendMail.subject": "Asunto",
+  "views.admin.SendMail.subject": "Asunto",
+  "views.index.SendMail.subjectEmpty": "El asunto está vacío",
+  "views.admin.SendMail.subjectEmpty": "El asunto está vacío",
+  "components.AiExtractInfo.subscriptionLink": "Enlace de suscripción",
+  "views.user.AddressManagement.success": "éxito",
+  "views.index.TelegramAddress.success": "éxito",
+  "views.index.LocalAddress.success": "éxito",
+  "views.admin.UserAddressManagement.success": "éxito",
+  "components.WebhookComponent.successTip": "Correcto",
+  "components.MailBox.success": "Correcto",
+  "components.SendBox.success": "Correcto",
+  "views.index.AccountSettings.success": "Correcto",
+  "views.index.AutoReply.success": "Correcto",
+  "views.admin.AiExtractSettings.successTip": "Correcto",
+  "views.admin.Account.success": "Correcto",
+  "views.admin.SenderAccess.success": "Correcto",
+  "views.admin.UserManagement.success": "Correcto",
+  "views.admin.Telegram.successTip": "Correcto",
+  "views.admin.RoleAddressConfig.successTip": "Correcto",
+  "views.admin.Webhook.successTip": "Correcto",
+  "views.admin.CreateAccount.successTip": "Creado correctamente",
+  "views.admin.Telegram.globalMailPushListTip": "Admite chat_id de chat privado/grupo/canal. Envía un mensaje al bot y visita este enlace para ver el chat_id: https://api.telegram.org/bot<Reemplaza con tu BOT TOKEN>/getUpdates",
+  "views.user.AddressManagement.targetUserEmail": "Correo del usuario objetivo",
+  "views.admin.Telegram.telegramAllowList": "Lista blanca de Telegram (introduce manualmente el Chat ID)",
+  "views.Admin.telegram": "Bot de Telegram",
+  "views.admin.Telegram.miniAppUrl": "URL de la Mini App de Telegram",
+  "components.WebhookComponent.test": "Prueba",
+  "views.index.SendMail.text": "Texto",
+  "views.admin.SendMail.text": "Texto",
+  "views.user.UserSettings.passordTip": "El servidor solo recibe el hash de la contraseña, no la contraseña en texto claro, por lo que no puede verla ni recuperarla. Si el administrador activa la verificación por correo, puedes restablecerla en modo incógnito.",
+  "views.index.LocalAddress.tip": "Estas direcciones se guardan en tu navegador y podrían perderse si borras la caché.",
+  "views.admin.UserOauth2Settings.tip": "El inicio de sesión de terceros usará automáticamente el correo del usuario para registrar una cuenta (el mismo correo se considera la misma cuenta). También puedes establecer la contraseña con “olvidé mi contraseña”.",
+  "views.admin.AccountSettings.send_mail_limit_tip": "Se aplica a todos los canales de envío. Usa -1 para ilimitado y 0 para bloquear el envío.",
+  "views.admin.AccountSettings.create_address_subdomain_match_note": "RANDOM_SUBDOMAIN_DOMAINS ya permite subdominios aleatorios o manuales en los dominios base listados. Este interruptor permite además que la API especifique subdominios en otros dominios base permitidos.",
+  "views.index.SendMail.tooLarge": "Archivo demasiado grande; sube uno de menos de 1 MB.",
+  "views.admin.SendMail.tooLarge": "Archivo demasiado grande; sube uno de menos de 1 MB.",
+  "views.common.Appearance.top": "arriba",
+  "views.user.AddressManagement.transferAddress": "Transferir dirección",
+  "views.user.AddressManagement.transferAddressTip": "Transferir esta dirección a otro usuario la quitará de tu cuenta y la moverá a la suya. ¿Seguro que quieres transferirla?",
+  "views.common.Appearance.useSideMargin": "Activar márgenes laterales a la izquierda y a la derecha de la página",
+  "views.admin.AiExtractSettings.manualInputPrompt": "Escribe y pulsa Enter para añadir",
+  "views.admin.UserOauth2Settings.manualInputPrompt": "Escribe y pulsa Enter para añadir",
+  "views.admin.Telegram.manualInputPrompt": "Escribe y pulsa Enter para añadir",
+  "views.admin.UserSettings.manualInputPrompt": "Escribe y pulsa Enter para añadir",
+  "views.admin.AccountSettings.manualInputPrompt": "Escribe y pulsa Enter para añadir",
+  "views.admin.Webhook.manualInputPrompt": "Escribe y pulsa Enter para añadir",
+  "views.admin.IpBlacklistSettings.manualInputPrompt": "Escribe el patrón y pulsa Enter para añadir",
+  "views.user.AddressManagement.unbindAddress": "Desvincular dirección",
+  "views.index.TelegramAddress.unbindMailAddress": "Desvincular dirección de correo",
+  "views.index.LocalAddress.unbindMailAddress": "Desvincular credencial de dirección de correo",
+  "components.MailBox.unselectAll": "Deseleccionar todo",
+  "components.SendBox.unselectAll": "Deseleccionar todo",
+  "views.admin.Account.unselectAll": "Deseleccionar todo",
+  "views.admin.Account.updated_at": "Actualizado el",
+  "views.user.UserSettings.updated_at": "Actualizado el",
+  "components.WebhookComponent.urlMissing": "La URL es obligatoria",
+  "views.common.Appearance.useIframeShowMail": "Usar iframe para mostrar correo HTML",
+  "views.admin.CreateAccount.enableRandomSubdomain": "Usar subdominio aleatorio",
+  "views.common.Login.enableRandomSubdomain": "Usar subdominio aleatorio",
+  "views.admin.UserOauth2Settings.userEmailFormatTip": "Usa regex para transformar el correo. Ejemplo: ^(.+)@old\\.com$ con $1@new.com",
+  "views.common.Appearance.useSimpleIndex": "Usar índice simple",
+  "views.common.Appearance.useUTCDate": "Usar fecha UTC",
+  "views.Header.user": "Usuario",
+  "views.Admin.user": "Usuario",
+  "components.AddressSelect.userAddresses": "Direcciones del usuario",
+  "views.Admin.loginViaUserAdmin": "Permiso de administrador del usuario",
+  "views.admin.Statistics.userCount": "Cantidad de usuarios",
+  "views.admin.UserManagement.user_email": "Correo del usuario",
+  "views.index.AddressBar.userLogin": "Inicio de sesión de usuario",
+  "views.Admin.user_management": "Gestión de usuarios",
+  "views.Admin.user_settings": "Configuración de usuario",
+  "views.User.user_settings": "Configuración de usuario",
+  "components.AiExtractInfo.authCode": "Código de verificación",
+  "views.user.UserLogin.verifyCode": "Código de verificación",
+  "views.user.UserLogin.verifyCodeSent": "Código de verificación enviado, expira en {timeout} segundos",
+  "views.admin.AccountSettings.verified_address_list": "Lista de direcciones verificadas (puede enviar correo mediante la API interna de cf)",
+  "views.admin.UserSettings.verifyMailSender": "Verificar remitente de correo",
+  "components.MailContentRenderer.attachments": "Ver adjuntos",
+  "views.admin.Account.viewMails": "Ver correos",
+  "views.admin.Account.viewSendBox": "Ver bandeja de salida",
+  "views.user.UserLogin.waitforVerifyCode": "Espera {timeout} segundos",
+  "views.admin.Webhook.webhookAllowList": "Lista de permitidos de webhook (introduce el correo autorizado y pulsa Enter)",
+  "views.admin.Webhook.notEnabled": "El webhook no está habilitado",
+  "components.WebhookComponent.notEnabled": "El webhook no está habilitado para ti",
+  "views.Index.webhookSettings": "Configuración de webhook",
+  "views.Admin.webhookSettings": "Configuración de webhook",
+  "views.admin.AiExtractSettings.disabledTip": "Si está desactivado, la extracción IA procesará todas las direcciones",
+  "views.admin.AiExtractSettings.enableAllowListTip": "Si está activado, la extracción IA solo procesará correos enviados a direcciones permitidas",
+  "views.admin.CreateAccount.randomSubdomainTip": "Si está activado, la dirección creada usará un subdominio aleatorio. Recomendado solo para recibir. Requiere un registro MX comodín en el DNS del dominio base — consulta la documentación de subdominios aleatorios.",
+  "views.admin.CreateAccount.enableCustomSubdomain": "Usar subdominio personalizado",
+  "views.admin.CreateAccount.normalSubdomain": "Dominio normal",
+  "views.common.Login.enableCustomSubdomain": "Usar subdominio personalizado",
+  "views.common.Login.normalSubdomain": "Dominio normal",
+  "views.common.Login.randomSubdomainTip": "Si está activado, la dirección creada usará un subdominio aleatorio. Recomendado solo para recibir. Requiere un registro MX comodín en el DNS del dominio base — consulta la documentación de subdominios aleatorios.",
+  "views.admin.AiExtractSettings.allowListTip": "El comodín * coincide con cualquier carácter; p. ej., *{'@'}example.com coincide con todas las direcciones del dominio example.com",
+  "views.Admin.workerconfig": "Configuración del Worker",
+  "views.admin.AccountSettings.create_address_subdomain_match_env_locked": "La variable ENABLE_CREATE_ADDRESS_SUBDOMAIN_MATCH está en false. Puedes guardar el interruptor, pero no tendrá efecto hasta habilitar o quitar la variable.",
+  "views.common.Login.getNewEmailTip3": "Puedes elegir un dominio en la lista desplegable.",
+  "views.admin.AccountSettings.tip": "Puedes introducir manualmente los siguientes valores y pulsar Enter para añadirlos",
+  "components.MailBox.emptyInbox": "Tu bandeja de entrada está vacía",
+  "views.index.SendMail.fromName": "Tu nombre y dirección; deja el nombre vacío para usar el correo",
+  "views.admin.SendMail.fromName": "Tu nombre y dirección; deja el nombre vacío para usar el correo",
+  "components.AddressCredentialModal.addressCredential": "Credencial de dirección",
+  "components.AddressCredentialModal.addressCredentialLabel": "Address JWT",
+  "components.AddressCredentialModal.addressPassword": "Contraseña de la dirección",
+  "components.AddressCredentialModal.agentAccess": "AI Agent",
+  "components.AddressCredentialModal.agentAccessTip": "Usa este buzón desde un AI Agent con el Address JWT y las APIs parsed-mail.",
+  "components.AddressCredentialModal.agentConfig": "Configuración del agente",
+  "components.AddressCredentialModal.agentSkill": "Agent skill",
+  "components.AddressCredentialModal.apiBase": "Base de la API",
+  "components.AddressCredentialModal.autoLoginLink": "Enlace de inicio automático",
+  "components.AddressCredentialModal.copyFailed": "Error al copiar",
+  "components.AddressCredentialModal.copySection": "Copiar",
+  "components.AddressCredentialModal.copySuccess": "Copiado",
+  "components.AddressCredentialModal.currentAddress": "Dirección actual",
+  "components.AddressCredentialModal.docs": "Documentación",
+  "components.AddressCredentialModal.imapHost": "Host IMAP",
+  "components.AddressCredentialModal.imapPort": "Puerto IMAP",
+  "components.AddressCredentialModal.password": "Contraseña",
+  "components.AddressCredentialModal.plainOrProxyTls": "Texto plano o TLS del proxy",
+  "components.AddressCredentialModal.security": "Seguridad",
+  "components.AddressCredentialModal.smtpHost": "Host SMTP",
+  "components.AddressCredentialModal.smtpImapAccess": "SMTP / IMAP",
+  "components.AddressCredentialModal.smtpImapTip": "Usa estos valores en clientes de correo después de que el administrador configure el proxy SMTP/IMAP. Como contraseña puedes usar el Address JWT mostrado aquí o la contraseña de la dirección si la tienes.",
+  "components.AddressCredentialModal.smtpPort": "Puerto SMTP",
+  "components.AddressCredentialModal.starttls": "STARTTLS",
+  "components.AddressCredentialModal.tip": "Usa estas credenciales solo con clientes y agentes de confianza.",
+  "components.AddressCredentialModal.title": "Credenciales de dirección y métodos de conexión",
+  "components.AddressCredentialModal.username": "Usuario",
+  "views.User.send_mail": "Enviar correo",
+  "views.user.UserSendBox.noAddress": "Selecciona una dirección de correo vinculada",
+  "views.user.UserSendBox.sendbox": "Enviados"
+}

frontend/src/i18n/locales/source/ja.ts

@@ -0,0 +1,657 @@
+export const jaMessages = {
+  "views.index.SendMail.balanceUnavailable": "このアドレスには送信残高がありません",
+  "views.index.SendMail.composeMail": "メールを作成",
+  "views.index.SendMail.contentPlaceholder": "メッセージを入力...",
+  "views.index.SendMail.draftSaved": "下書きはこのブラウザーに保存されています",
+  "views.index.SendMail.recipientAddress": "宛先メールアドレス",
+  "views.index.SendMail.recipientName": "宛先名（任意）",
+  "views.index.SendMail.senderAddress": "送信元メールアドレス",
+  "views.index.SendMail.senderName": "送信者名（任意）",
+  "views.admin.SendMail.adminComposeTip": "設定済みのメールアドレスから送信",
+  "views.admin.SendMail.composeMail": "メールを作成",
+  "views.admin.SendMail.contentPlaceholder": "メッセージを入力...",
+  "views.admin.SendMail.draftSaved": "下書きはこのブラウザーに保存されています",
+  "views.admin.SendMail.recipientAddress": "宛先メールアドレス",
+  "views.admin.SendMail.recipientName": "宛先名（任意）",
+  "views.admin.SendMail.senderAddress": "送信元メールアドレス",
+  "views.admin.SendMail.senderName": "送信者名（任意）",
+  "views.admin.DatabaseManager.current_database_size": "現在のデータベースサイズ",
+  "views.admin.DatabaseManager.free_plan": "Free",
+  "views.admin.DatabaseManager.paid_plan": "Workers Paid",
+  "views.admin.DatabaseManager.plan": "Workers プラン",
+  "views.admin.DatabaseManager.plan_placeholder": "Cloudflare Workers プランを選択",
+  "views.admin.DatabaseManager.planSaved": "Workers プランを保存しました",
+  "views.admin.DatabaseManager.single_database_limit": "データベース容量上限",
+  "views.admin.DatabaseManager.storage_description": "現在のデータベースサイズとプラン上限を比較します。",
+  "views.admin.DatabaseManager.storage_tip": "使用率は現在のデータベースサイズと選択したプラン上限から計算されます。",
+  "views.admin.DatabaseManager.storage_title": "D1 ストレージ容量",
+  "views.admin.DatabaseManager.storage_usage": "容量使用率",
+  "views.admin.DatabaseManager.unavailable": "利用不可",
+  "views.index.SimpleIndex.mailCount": "{current} / {total} 件のメール",
+  "views.admin.Statistics.activeAddressCount30days": "30日間のアクティブなアドレス数",
+  "views.admin.Statistics.activeAddressCount7days": "7日間のアクティブなアドレス数",
+  "views.Index.about": "概要",
+  "views.Admin.about": "概要",
+  "views.Header.accessHeader": "アクセス用パスワード",
+  "views.Admin.account": "アカウント",
+  "views.Index.accountSettings": "メール設定",
+  "views.Admin.account_settings": "アカウント設定",
+  "views.index.SimpleIndex.accountSettings": "メール設定",
+  "views.index.Attachment.action": "操作",
+  "views.admin.SenderAccess.action": "操作",
+  "views.user.UserSettings.actions": "操作",
+  "views.user.AddressManagement.actions": "操作",
+  "views.index.TelegramAddress.actions": "操作",
+  "views.admin.Account.actions": "操作",
+  "views.index.LocalAddress.actions": "操作",
+  "views.admin.UserManagement.actions": "操作",
+  "views.admin.AccountSettings.actions": "操作",
+  "views.admin.AccountSettings.add": "追加",
+  "views.admin.Maintenance.customSqlTip": "定期クリーンアップ用にカスタム DELETE SQL を追加します。各項目には 1 つの DELETE 文のみ使用できます。",
+  "views.admin.Maintenance.addCustomSql": "カスタム SQL を追加",
+  "views.admin.UserOauth2Settings.addOauth2": "Oauth2 を追加",
+  "components.AddressSelect.address": "アドレス",
+  "views.user.AddressManagement.address": "アドレス",
+  "views.index.TelegramAddress.address": "アドレス",
+  "views.admin.SenderAccess.address": "アドレス",
+  "views.index.LocalAddress.address": "アドレス",
+  "views.admin.CreateAccount.address": "アドレス",
+  "views.admin.AiExtractSettings.allowList": "アドレス許可リスト (アドレスを入力して Enter。ワイルドカード対応)",
+  "views.admin.AccountSettings.send_address_block_list": "送信メール用のブロックキーワード",
+  "views.admin.AccountSettings.address_block_list": "ユーザー向けブロックキーワード (管理者はスキップ可能)",
+  "views.index.SimpleIndex.addressCopied": "アドレスをコピーしました",
+  "views.admin.Statistics.addressCount": "アドレス数",
+  "views.admin.UserManagement.address_count": "アドレス数",
+  "views.User.address_management": "アドレス管理",
+  "views.admin.UserManagement.userAddressManagement": "アドレス管理",
+  "views.index.AddressBar.addressPassword": "アドレスパスワード",
+  "views.admin.CreateAccount.addressPassword": "アドレスパスワード",
+  "views.Admin.adminAccount": "管理者",
+  "views.Admin.accessHeader": "管理者パスワード",
+  "views.Admin.loginViaPassword": "管理者パスワードでログイン",
+  "views.admin.AiExtractSettings.title": "AI メール抽出設定",
+  "views.Admin.aiExtractSettings": "AI抽出設定",
+  "views.admin.AccountSettings.match_all": "すべて",
+  "views.admin.AccountSettings.create_address_subdomain_match": "アドレス作成時にサブドメイン接尾辞一致を許可",
+  "views.admin.UserSettings.enableUserRegister": "ユーザー登録を許可",
+  "views.admin.AccountSettings.match_any": "いずれか",
+  "views.Index.appearance": "表示",
+  "views.Admin.appearance": "表示",
+  "views.admin.IpBlacklistSettings.tip_scope": "対象: アドレス作成、メール送信、外部送信 API、ユーザー登録、コード検証",
+  "views.index.AccountSettings.clearInboxConfirm": "受信箱のすべてのメールを削除してもよろしいですか？",
+  "views.index.AccountSettings.clearSentItemsConfirm": "送信済みメールをすべて削除してもよろしいですか？",
+  "views.admin.Account.multiClearInboxTip": "選択したアドレスの受信箱を削除してもよろしいですか？",
+  "views.admin.Account.clearInboxTip": "このメールアドレスの受信箱を削除してもよろしいですか？",
+  "views.admin.Account.multiClearSentItemsTip": "選択したアドレスの送信済みを削除してもよろしいですか？",
+  "views.admin.Account.clearSentItemsTip": "このメールアドレスの送信済みを削除してもよろしいですか？",
+  "views.admin.Account.multiDeleteTip": "選択したアドレスを削除してもよろしいですか？",
+  "views.index.Attachment.deleteConfirm": "この添付ファイルを削除してもよろしいですか？",
+  "views.admin.Account.deleteTip": "このメールを削除してもよろしいですか？",
+  "views.admin.SenderAccess.deleteTip": "これを削除してもよろしいですか？",
+  "views.index.AccountSettings.deleteAccountConfirm": "このメールアドレスと関連するすべてのメールを削除しますか？ユーザーアカウントは削除されません。",
+  "views.index.AccountSettings.logoutConfirm": "現在のメールアドレスからログアウトしますか？",
+  "components.MailBox.deleteMailTip": "メールを削除してもよろしいですか？",
+  "components.MailContentRenderer.deleteMailTip": "メールを削除してもよろしいですか？",
+  "components.SendBox.deleteMailTip": "メールを削除してもよろしいですか？",
+  "views.admin.AccountSettings.delete_rule_confirm": "このルールを削除してもよろしいですか？",
+  "views.admin.UserManagement.deleteUserTip": "このユーザーを削除してもよろしいですか？",
+  "views.Admin.logoutConfirmContent": "管理画面からログアウトしてもよろしいですか？",
+  "views.user.UserSettings.logoutConfirm": "ログアウトしてもよろしいですか？",
+  "views.admin.IpBlacklistSettings.asn_blacklist": "ASN組織ブラックリスト",
+  "views.admin.IpBlacklistSettings.tip_asn": "ASN 組織: ISP/プロバイダ単位でブロックします。大文字小文字を区別しないテキスト一致または正規表現に対応します。",
+  "components.AiExtractInfo.authLink": "認証リンク",
+  "views.admin.Maintenance.autoCleanup": "自動クリーンアップ",
+  "components.MailBox.autoRefresh": "自動更新",
+  "components.MailBox.backToList": "リストに戻る",
+  "views.common.Appearance.autoRefreshInterval": "自動更新間隔 (秒)",
+  "views.Index.auto_reply": "自動返信",
+  "views.index.AutoReply.autoReply": "自動返信",
+  "views.common.Login.autoGeneratedName": "自動生成名",
+  "views.admin.SenderAccess.balance": "残高",
+  "views.admin.Maintenance.basicCleanup": "基本クリーンアップ",
+  "views.user.AddressManagement.unbindAddressTip": "解除前にこのアドレスへ切り替え、メール資格情報を保存してください。",
+  "views.index.TelegramAddress.bind": "紐付け",
+  "views.index.TelegramAddress.bindAddressSuccess": "アドレスの紐付けに成功しました",
+  "views.index.LocalAddress.bindAddressSuccess": "アドレスの紐付けに成功しました",
+  "views.User.bind_address": "メールアドレスを紐付け",
+  "views.admin.IpBlacklistSettings.enable_tip": "ブラックリストに一致するIPによるレート制限APIへのアクセスをブロック",
+  "views.admin.AccountSettings.fromBlockList": "受信メールのブロックキーワード",
+  "views.admin.AccountSettings.block_receive_unknow_address_email": "未知アドレス宛メールの受信をブロック",
+  "views.common.Appearance.bottom": "下",
+  "views.admin.IpBlacklistSettings.fingerprint_blacklist": "ブラウザ指紋ブラックリスト",
+  "views.admin.IpBlacklistSettings.tip_fingerprint": "ブラウザ指紋: 指紋でブロックします。完全一致または正規表現に対応します。",
+  "views.admin.AccountSettings.cancel": "キャンセル",
+  "components.MailBox.cancelMultiAction": "複数選択をキャンセル",
+  "components.SendBox.cancelMultiAction": "複数選択をキャンセル",
+  "views.user.AddressManagement.changeMailAddress": "アドレスを変更",
+  "views.index.TelegramAddress.changeMailAddress": "メールアドレスを変更",
+  "views.index.LocalAddress.changeMailAddress": "メールアドレスを変更",
+  "views.index.AccountSettings.changePassword": "アドレスパスワードを変更",
+  "views.admin.UserManagement.changeRole": "ロールを変更",
+  "components.SendBox.showCode": "元のコード表示を切り替え",
+  "views.admin.Telegram.status": "ステータスを確認",
+  "views.admin.AccountSettings.create_address_subdomain_match_follow_env_note": "「環境変数に従う」を選ぶと、管理者による上書きが解除され、未設定状態に戻ります。実際の動作は引き続き Worker の環境変数と優先順位ルールで決まります。",
+  "views.admin.Maintenance.cleanupNow": "今すぐクリーンアップ",
+  "views.admin.Maintenance.cleanupSuccess": "クリーンアップ成功",
+  "views.admin.Maintenance.addressCreateLabel": "n 日より前に作成されたアドレスを削除",
+  "views.admin.Maintenance.emptyAddressLabel": "n 日より前の空アドレスを削除",
+  "views.admin.Maintenance.inactiveAddressLabel": "n 日より前の非アクティブなアドレスを削除",
+  "views.admin.Maintenance.mailBoxLabel": "n 日より前の受信箱を削除",
+  "views.admin.Maintenance.sendBoxLabel": "n 日より前の送信箱を削除",
+  "views.admin.Maintenance.unboundAddressLabel": "n 日より前の未紐付けアドレスを削除",
+  "views.admin.Maintenance.mailUnknowLabel": "n 日より前の受信者不明メールを削除",
+  "views.index.AccountSettings.clearInbox": "受信箱を削除",
+  "views.admin.Account.clearInbox": "受信箱を削除",
+  "views.index.AccountSettings.clearSentItems": "送信済みを削除",
+  "views.admin.Account.clearSentItems": "送信済みを削除",
+  "views.Header.title": "Cloudflare 一時メール",
+  "views.admin.DatabaseManager.code_db_version": "コードが必要とするDBバージョン",
+  "views.user.UserOauth2Callback.codeNotFound": "コードが見つかりません",
+  "views.admin.AccountSettings.config": "設定",
+  "views.admin.RoleAddressConfig.roleConfigDesc": "各ユーザーロールごとの最大アドレス数を設定します。ロール別制限は全体設定より優先されます。0 は無制限です。",
+  "views.Admin.confirm": "確認",
+  "views.Admin.logoutConfirmTitle": "ログアウトを確認",
+  "views.index.AccountSettings.confirmPassword": "パスワードを確認",
+  "views.index.SendMail.content": "内容",
+  "views.admin.SendMail.content": "内容",
+  "views.index.SendMail.contentEmpty": "内容が空です",
+  "views.admin.SendMail.contentEmpty": "内容が空です",
+  "components.AddressSelect.copied": "コピーしました",
+  "components.AiExtractInfo.copySuccess": "正常にコピーしました",
+  "components.AddressSelect.copy": "コピー",
+  "views.index.SimpleIndex.copyAddress": "コピー",
+  "components.AiExtractInfo.copyFailed": "コピーに失敗しました",
+  "views.Footer.copyright": "著作権",
+  "views.Admin.account_create": "アカウントを作成",
+  "views.admin.CreateAccount.creatNewEmail": "新しいメールを作成",
+  "views.common.Login.getNewEmail": "新しいメールを作成",
+  "views.user.AddressManagement.create_or_bind": "作成または紐付け",
+  "views.index.LocalAddress.create_or_bind": "作成または紐付け",
+  "views.user.UserSettings.createPasskey": "パスキーを作成",
+  "views.admin.UserManagement.createUser": "ユーザーを作成",
+  "views.user.UserSettings.created_at": "作成日時",
+  "views.admin.Account.created_at": "作成日時",
+  "views.admin.SenderAccess.created_at": "作成日時",
+  "views.admin.UserManagement.created_at": "作成日時",
+  "views.common.Login.credentialLogin": "資格情報でログイン",
+  "views.admin.DatabaseManager.current_db_version": "現在のDBバージョン",
+  "views.user.UserBar.currentUser": "現在のログインユーザー",
+  "views.admin.UserManagement.roleDonotExist": "現在のロールは存在しません",
+  "views.admin.Maintenance.customSqlCleanup": "カスタムSQLクリーンアップ",
+  "views.admin.AccountSettings.send_mail_daily_limit": "日次上限",
+  "views.admin.AccountSettings.send_mail_daily_limit_invalid": "日次上限は -1 以上の整数である必要があります",
+  "views.admin.IpBlacklistSettings.tip_daily_limit": "日次上限: IP ごとの 1 日あたり最大リクエスト数を制限します (1-1000000)。",
+  "views.admin.IpBlacklistSettings.daily_request_limit": "1日のリクエスト上限",
+  "views.Header.dark": "ダーク",
+  "views.Admin.database": "データベース",
+  "views.admin.DatabaseManager.need_initialization_tip": "データベースの初期化が必要です。先に初期化してください。",
+  "views.admin.DatabaseManager.initializationSuccess": "データベースを初期化しました",
+  "views.admin.DatabaseManager.migrationSuccess": "データベースを移行しました",
+  "views.admin.DatabaseManager.need_migration_tip": "データベースの移行が必要です。先に移行してください。",
+  "components.MailBox.delete": "削除",
+  "components.MailContentRenderer.delete": "削除",
+  "components.SendBox.delete": "削除",
+  "views.index.Attachment.delete": "削除",
+  "views.admin.Account.delete": "削除",
+  "views.admin.UserOauth2Settings.delete": "削除",
+  "views.admin.SenderAccess.delete": "削除",
+  "views.admin.UserManagement.delete": "削除",
+  "views.admin.AccountSettings.delete_rule": "削除",
+  "views.admin.Maintenance.deleteCustomSql": "削除",
+  "views.index.AccountSettings.deleteAccount": "メールアドレスを削除",
+  "views.admin.Account.deleteAccount": "アカウントを削除",
+  "views.user.UserSettings.deletePasskey": "Passkeyを削除",
+  "views.admin.AccountSettings.delete_success": "削除しました",
+  "views.admin.UserManagement.deleteUser": "ユーザーを削除",
+  "views.index.Attachment.deleteSuccess": "正常に削除しました",
+  "views.admin.SenderAccess.disable": "無効化",
+  "views.Admin.loginViaDisabledCheck": "パスワードチェックを無効化",
+  "views.common.Appearance.preferShowTextMail": "既定でテキストメールを表示",
+  "views.admin.AccountSettings.domain_list": "ドメイン一覧（任意）",
+  "views.admin.AccountSettings.source_patterns_tip": "ドメイン一覧は受信先アドレスで、送信元正規表現は送信者アドレスでフィルタします。転送には両方の条件を満たす必要があります（AND）。どちらかを空欄にするとその条件は無視されます。",
+  "views.admin.UserManagement.domains": "ドメイン",
+  "views.index.Attachment.download": "ダウンロード",
+  "components.MailBox.downloadMail": "メールをダウンロード",
+  "components.MailContentRenderer.downloadMail": "メールをダウンロード",
+  "views.admin.Maintenance.sqlNamePlaceholder": "例: 古いログを削除",
+  "views.admin.Maintenance.sqlPlaceholder": "例: DELETE FROM raw_mails WHERE source GLOB '*{'@'}example.com' AND created_at < datetime('now', '-3 day')",
+  "views.admin.AccountSettings.source_patterns_placeholder": "例: gmail.com",
+  "views.admin.AccountSettings.forwarding_rule_warning": "各ルールは個別に実行されます。転送先アドレスは検証済みである必要があります。",
+  "views.index.SendMail.edit": "編集",
+  "views.admin.SendMail.edit": "編集",
+  "views.user.UserLogin.email": "メール",
+  "views.admin.UserManagement.email": "メール",
+  "views.common.Login.email": "メール",
+  "views.common.Login.credential": "メールアドレス資格情報",
+  "views.common.Login.emailPasswordRequired": "メールアドレスとパスワードは必須です",
+  "views.admin.UserSettings.emailCheckRegex": "メール検査用正規表現 (例: ^[^.]+{'@'}.+$ で {'@'} の前のドットを禁止)",
+  "views.admin.AccountSettings.email_forwarding_config": "メール転送設定",
+  "views.admin.UserOauth2Settings.userEmailFormat": "メール正規表現パターン",
+  "views.Admin.mails": "メール",
+  "views.index.AutoReply.sourcePrefixPlaceholder": "空欄=すべて、前方一致、または /regex/",
+  "components.WebhookComponent.enable": "有効化",
+  "views.admin.UserOauth2Settings.enable": "有効化",
+  "views.admin.SenderAccess.enable": "有効化",
+  "views.admin.Telegram.enable": "有効化",
+  "views.admin.UserSettings.enable": "有効化",
+  "views.admin.AiExtractSettings.enableAllowList": "アドレス許可リストを有効化",
+  "views.admin.Webhook.enableAllowList": "許可リストを有効化 (Webhook へのアクセスを特定ユーザーに制限)",
+  "views.index.AutoReply.enableAutoReply": "自動返信を有効化",
+  "views.admin.Maintenance.cronTip": "cron クリーンアップを有効にするには worker の [crons] を設定してください。詳細はドキュメントを参照してください。0 日はすべて削除を意味します。",
+  "views.admin.IpBlacklistSettings.enable_daily_limit": "1日のリクエスト上限を有効化",
+  "views.admin.UserSettings.enableEmailCheckRegex": "メール検査用正規表現を有効化",
+  "views.admin.UserOauth2Settings.enableEmailFormat": "メール形式チェックを有効化",
+  "views.admin.Telegram.enableGlobalMailPush": "グローバルメール通知を有効化 (Telegram の Chat ID を手動入力)",
+  "views.admin.IpBlacklistSettings.enable_ip_blacklist": "IPブラックリストを有効化",
+  "views.admin.IpBlacklistSettings.enable_ip_whitelist": "IPホワイトリストを有効化（厳格）",
+  "views.admin.UserOauth2Settings.enableMailAllowList": "メールアドレス許可リストを有効化 (手動入力可)",
+  "views.admin.UserSettings.enableMailAllowList": "メールアドレス許可リストを有効化 (手動入力可)",
+  "views.admin.UserSettings.enableMailVerify": "メール検証を有効化 (送信元アドレスはシステム内に存在し、残高があり、正常に送信できる必要があります)",
+  "views.admin.Telegram.enableTelegramAllowList": "Telegram 許可リストを有効化 (Chat ID を手動入力)",
+  "views.admin.IpBlacklistSettings.asn_blacklist_placeholder": "ASN組織を入力してください（例: Google, Amazon）",
+  "views.admin.IpBlacklistSettings.fingerprint_blacklist_placeholder": "フィンガープリントIDを入力してください（例: a1b2c3d4e5f6g7h8）",
+  "views.admin.IpBlacklistSettings.daily_request_limit_placeholder": "上限を入力してください（例: 1000）",
+  "views.admin.IpBlacklistSettings.ip_blacklist_placeholder": "パターンを入力してください（例: 192.168.1 または ^10\\.0\\.0\\.5$）",
+  "views.common.Login.bindUserAddressError": "メールアドレスをユーザーに紐付ける際にエラーが発生しました",
+  "views.admin.IpBlacklistSettings.ip_whitelist_placeholder": "完全一致IP（例: 1.2.3.4）またはアンカー付き正規表現（例: ^192\\.168\\.1\\.\\d+$）",
+  "views.index.SimpleIndex.exitSimpleIndex": "シンプルモードを終了",
+  "components.MailBox.keywordQueryTip": "現在のページを絞り込む",
+  "views.admin.AccountSettings.create_address_subdomain_match_follow_env": "環境変数に従う",
+  "views.admin.AccountSettings.create_address_subdomain_match_force_disable": "強制的に無効化",
+  "views.admin.AccountSettings.create_address_subdomain_match_force_enable": "強制的に有効化",
+  "views.user.UserLogin.forgotPassword": "パスワードを忘れた",
+  "components.MailBox.forwardMail": "転送",
+  "components.MailContentRenderer.forward": "転送",
+  "views.admin.AccountSettings.forward_address": "転送先アドレス",
+  "views.admin.AccountSettings.forward_address_required": "転送先アドレスは必須です",
+  "views.admin.AccountSettings.forward_placeholder": "forward@example.com",
+  "components.MailContentRenderer.fullscreen": "全画面",
+  "views.common.Login.generateName": "ランダム名を生成",
+  "views.admin.Telegram.globalMailPushList": "グローバルメール通知 Chat ID 一覧",
+  "views.common.Appearance.globalTabplacement": "全体タブ位置",
+  "views.common.Login.help": "ヘルプ",
+  "views.Header.home": "ホーム",
+  "views.index.SendMail.html": "HTML",
+  "views.admin.SendMail.html": "HTML",
+  "views.admin.UserOauth2Settings.icon": "アイコン (SVG、信頼できるソースのみ使用してください)",
+  "views.admin.CreateAccount.enablePrefix": "プレフィックスを有効化する場合",
+  "views.common.AdminContact.adminContact": "支援が必要な場合は管理者 ({msg}) に連絡してください",
+  "views.admin.Telegram.init": "初期化",
+  "views.admin.DatabaseManager.init": "データベースを初期化",
+  "views.admin.AccountSettings.regex_invalid": "無効な正規表現です",
+  "views.Admin.ipBlacklistSettings": "IPブラックリスト",
+  "views.admin.IpBlacklistSettings.ip_blacklist": "IPブラックリスト パターン",
+  "views.admin.IpBlacklistSettings.title": "IPブラックリスト 設定",
+  "views.admin.IpBlacklistSettings.tip_ip": "IP ブラックリスト: テキスト一致 (例: \"192.168.1\") または正規表現 (例: \"^10\\.0\\.0\\.5$\") に対応します。",
+  "views.admin.IpBlacklistSettings.whitelist_empty_warning": "IP ホワイトリストは有効ですが一覧が空です。ロックアウト防止のためサーバーはこの設定を無視します。有効化する前に少なくとも 1 件追加してください。",
+  "views.admin.IpBlacklistSettings.ip_whitelist": "IPホワイトリスト パターン",
+  "views.admin.IpBlacklistSettings.tip_whitelist": "IP ホワイトリスト: 厳格な許可リストです。通常の項目は完全一致の IP である必要があります (部分一致不可)。範囲指定にはアンカー付き正規表現 (^...$) を使用してください。許可された IP はブラックリスト判定をスキップします。",
+  "views.admin.SenderAccess.is_enabled": "有効",
+  "views.admin.Account.itemCount": "itemCount",
+  "views.admin.SenderAccess.itemCount": "itemCount",
+  "views.admin.UserManagement.itemCount": "itemCount",
+  "views.user.UserMailBox.addressQueryTip": "空欄で全アドレスを検索します",
+  "views.admin.Account.addressQueryTip": "空欄で全アドレスを検索します",
+  "views.admin.Mails.addressQueryTip": "空欄で全アドレスを検索します",
+  "views.common.Appearance.left": "左",
+  "views.common.Login.getNewEmailTip2": "空欄のままにするとランダムなメールアドレスが生成されます。",
+  "views.Header.light": "ライト",
+  "views.admin.IpBlacklistSettings.enable_daily_limit_tip": "IP ごとの 1 日あたり API リクエスト数を制限",
+  "components.AddressSelect.localAddresses": "ローカルアドレス",
+  "views.common.Login.bindUserInfo": "ログイン済みユーザーは、未紐付けのままログインまたは新規作成すると現在のユーザーに紐付きます",
+  "views.user.UserOauth2Callback.logging": "ログイン中...",
+  "views.user.UserLogin.login": "ログイン",
+  "views.common.Login.login": "ログイン",
+  "views.common.Login.loginAndBind": "ログインして紐付け",
+  "views.Admin.loginMethod": "ログイン方法",
+  "views.user.UserBar.fetchUserSettingsError": "ログイン用パスワードが無効か、アカウントが存在しません。ネットワーク接続の問題の可能性もあるため、後でもう一度お試しください。",
+  "views.user.UserLogin.loginWith": "{provider}でログイン",
+  "views.user.UserLogin.loginWithPasskey": "パスキーでログイン",
+  "views.user.UserSettings.logout": "ログアウト",
+  "views.user.BindAddress.logout": "ログアウト",
+  "views.Admin.logout": "ログアウト",
+  "views.index.AccountSettings.logout": "現在のメールアドレスからログアウト",
+  "views.Admin.logoutSuccess": "ログアウトしました",
+  "views.admin.UserOauth2Settings.mailAllowList": "メールアドレス許可リスト",
+  "views.admin.UserSettings.mailAllowList": "メールアドレス許可リスト",
+  "views.index.SimpleIndex.addressCredential": "メールアドレス資格情報",
+  "views.index.AddressBar.addressCredential": "メールアドレス資格情報",
+  "views.admin.Account.addressCredential": "メールアドレス資格情報",
+  "views.admin.CreateAccount.addressCredential": "メールアドレス資格情報",
+  "views.index.AddressBar.fetchAddressError": "メール資格情報が無効かアカウントが存在しません。ネットワークの問題の可能性もあります。後でもう一度お試しください。",
+  "views.Index.mailbox": "受信箱",
+  "views.User.user_mail_box_tab": "受信箱",
+  "views.user.AddressManagement.mail_count": "メール数",
+  "views.admin.Account.mail_count": "メール数",
+  "views.admin.Statistics.mailCount": "メール数",
+  "views.admin.UserAddressManagement.mail_count": "メール数",
+  "views.index.SimpleIndex.deleteSuccess": "メールを削除しました",
+  "views.user.UserLogin.cannotForgotPassword": "メール検証または登録が無効のため、パスワードを再設定できません。管理者へ連絡してください。",
+  "views.Admin.mailWebhook": "メールWebhook",
+  "views.common.Appearance.mailboxSplitSize": "メールボックス2カラム表示の左側リスト幅",
+  "views.common.Appearance.mailListView": "メールボックス全幅リスト表示",
+  "views.common.Appearance.mailListPreviewLineClamp": "本文プレビュー行数",
+  "views.common.Appearance.off": "オフ",
+  "views.index.SimpleIndex.refreshSuccess": "メールを更新しました",
+  "views.Admin.unknow": "受信者不明のメール",
+  "views.Admin.maintenance": "メンテナンス",
+  "views.index.AddressBar.addressManage": "管理",
+  "views.admin.AccountSettings.source_match_mode": "一致モード",
+  "views.admin.RoleAddressConfig.maxAddressCount": "最大アドレス数 (0 = 無制限)",
+  "views.admin.UserSettings.maxAddressCount": "紐付け可能なメールアドレスの最大数（0 = 無制限）",
+  "views.Header.menu": "メニュー",
+  "views.admin.DatabaseManager.migration": "データベースを移行",
+  "views.admin.SenderAccess.modify": "変更",
+  "views.admin.AccountSettings.send_mail_monthly_limit": "月次上限",
+  "views.admin.AccountSettings.send_mail_monthly_limit_invalid": "月次上限は -1 以上の整数である必要があります",
+  "components.MailBox.multiAction": "複数操作",
+  "components.SendBox.multiAction": "複数操作",
+  "views.admin.Account.multiClearInbox": "受信箱を一括削除",
+  "views.admin.Account.multiClearSentItems": "送信済みを一括削除",
+  "views.admin.Account.multiDelete": "一括削除",
+  "views.user.AddressManagement.name": "名前",
+  "views.index.AutoReply.name": "名前",
+  "views.admin.Account.name": "名前",
+  "views.admin.UserOauth2Settings.name": "名前",
+  "views.admin.UserAddressManagement.name": "名前",
+  "views.admin.Maintenance.sqlName": "名前",
+  "views.index.AccountSettings.newPassword": "新しいパスワード",
+  "views.admin.Account.newPassword": "新しいパスワード",
+  "components.MailBox.nextMail": "次へ",
+  "views.index.SimpleIndex.nextPage": "次へ",
+  "views.admin.AccountSettings.noLimitSendAddressList": "残高無制限の送信アドレス一覧",
+  "views.index.SimpleIndex.noMails": "メールが見つかりません",
+  "views.admin.RoleAddressConfig.noRolesAvailable": "システム設定に利用可能なロールがありません",
+  "views.index.SendMail.requestAccessTip": "送信権限と残高はメールアドレスごとに管理されます。現在のアドレス {address} には利用可能な残高がありません。このアドレスの権限を申請するか、管理者に連絡してください。",
+  "views.index.SendMail.requestSuccess": "現在のアドレスの送信権限を申請しました",
+  "components.SendBox.emptySent": "送信済みメールはありません",
+  "views.admin.RoleAddressConfig.notConfigured": "未設定 (全体設定を使用)",
+  "views.Admin.userOauth2Settings": "OAuth2設定",
+  "views.admin.UserOauth2Settings.oauth2Type": "OAuth2タイプ",
+  "views.Header.ok": "OK",
+  "views.Admin.ok": "OK",
+  "views.index.AddressBar.ok": "OK",
+  "views.admin.SenderAccess.ok": "OK",
+  "views.common.Login.ok": "OK",
+  "views.admin.AccountSettings.create_address_subdomain_match_tip": "/api/new_address と /admin/new_address のドメイン検証にのみ影響します。例: 有効時は foo.example.com が example.com に一致できます。",
+  "components.AiExtractInfo.open": "開く",
+  "views.index.AddressBar.linkWithAddressCredential": "メールの自動ログインリンクを開く",
+  "views.admin.CreateAccount.linkWithAddressCredential": "メールの自動ログインリンクを開く",
+  "views.index.SendMail.options": "オプション",
+  "views.admin.SendMail.options": "オプション",
+  "components.AiExtractInfo.otherLink": "その他のリンク",
+  "views.user.UserSettings.passkeyCreated": "Passkey を作成しました",
+  "views.user.UserSettings.passkey_name": "Passkey 名",
+  "views.user.UserLogin.password": "パスワード",
+  "views.admin.UserManagement.password": "パスワード",
+  "views.common.Login.password": "パスワード",
+  "views.index.AccountSettings.passwordChanged": "パスワードを変更しました",
+  "views.common.Login.passwordLogin": "パスワードログイン",
+  "views.admin.Account.passwordResetSuccess": "パスワードをリセットしました",
+  "views.index.AccountSettings.passwordMismatch": "パスワードが一致しません",
+  "views.index.SendMail.successSend": "送信箱を確認してください。失敗した場合は残高を確認するか、後でもう一度お試しください。",
+  "views.admin.SendMail.successSend": "送信箱を確認してください。失敗した場合は、しばらくしてから再試行してください。",
+  "views.user.UserLogin.pleaseCompleteTurnstile": "Turnstile を完了してください",
+  "views.index.SimpleIndex.addressCredentialTip": "メールアドレス資格情報をコピーしてください。この情報でログインできます。",
+  "views.index.AddressBar.addressCredentialTip": "メールアドレス資格情報をコピーしてください。この情報でメールアカウントにログインできます。",
+  "views.admin.Account.addressCredentialTip": "メールアドレス資格情報をコピーしてください。この情報でメールアカウントにログインできます。",
+  "views.admin.CreateAccount.addressCredentialTip": "メールアドレス資格情報をコピーしてください。この情報でメールアカウントにログインできます。",
+  "views.Admin.accessTip": "管理者パスワードを入力してください",
+  "views.Header.accessTip": "正しいアクセス用パスワードを入力してください",
+  "views.admin.AccountSettings.address_block_list_placeholder": "ブロックしたいキーワードを入力してください",
+  "views.user.UserSettings.renamePasskeyNamePlaceholder": "新しい Passkey 名を入力してください",
+  "views.user.UserSettings.passkeyNamePlaceholder": "Passkey 名を入力するか、空欄でランダム生成してください",
+  "views.admin.CreateAccount.fillInAllFields": "すべての項目を入力してください",
+  "views.admin.SendBox.queryTip": "検索するアドレスを入力してください。空欄で全件検索します",
+  "views.user.UserLogin.pleaseInputCode": "コードを入力してください",
+  "views.admin.UserManagement.pleaseInput": "必要な情報をすべて入力してください",
+  "views.user.UserLogin.pleaseInputEmail": "メールを入力してください",
+  "views.user.UserLogin.pleaseInput": "メールアドレスとパスワードを入力してください",
+  "views.admin.Maintenance.tip": "日数を入力してください",
+  "views.common.Login.getNewEmailTip1": "使用したいメールアドレスを入力してください。使用可能: ",
+  "views.common.Login.credentialInput": "メールアドレス資格情報を入力してください",
+  "views.admin.SenderAccess.modalTip": "送信残高を入力してください",
+  "views.user.UserLogin.pleaseLogin": "ログインしてください",
+  "views.common.Login.pleaseGetNewEmail": "ログインするか、「新しいメールを作成」をクリックして新しいアドレスを取得してください。",
+  "components.WebhookComponent.fillInDemoTip": "URL とその他設定を自分のものに変更してください",
+  "components.SendBox.pleaseSelectMail": "表示するメールを選択してください。",
+  "views.admin.Account.pleaseSelectAddress": "アドレスを選択してください",
+  "components.MailBox.pleaseSelectMail": "メールを選択してください",
+  "views.admin.UserManagement.prefix": "プレフィックス",
+  "components.WebhookComponent.presets": "プリセット",
+  "views.index.SendMail.preview": "プレビュー",
+  "views.admin.SendMail.preview": "プレビュー",
+  "views.admin.UserOauth2Settings.iconPreview": "プレビュー",
+  "components.MailBox.prevMail": "前へ",
+  "views.index.SimpleIndex.prevPage": "前へ",
+  "components.MailBox.query": "検索",
+  "views.user.UserMailBox.query": "検索",
+  "views.Index.query": "検索",
+  "views.admin.SendBox.query": "検索",
+  "views.admin.Account.query": "検索",
+  "views.admin.SenderAccess.query": "検索",
+  "views.admin.UserManagement.query": "検索",
+  "views.admin.Mails.query": "検索",
+  "views.Admin.qucickSetup": "クイック設定",
+  "views.index.SendMail.toMailEmpty": "受信者アドレスが空です",
+  "views.admin.SendMail.toMailEmpty": "受信者アドレスが空です",
+  "views.index.SendMail.toName": "受信者名とアドレス。名前を空欄にするとメールアドレスを使用します",
+  "views.admin.SendMail.toName": "受信者名とアドレス。名前を空欄にするとメールアドレスを使用します",
+  "components.MailBox.refresh": "更新",
+  "components.Turnstile.refresh": "更新",
+  "components.SendBox.refresh": "更新",
+  "views.index.SimpleIndex.refreshMails": "更新",
+  "components.MailBox.refreshAfter": "あと {msg} 秒で更新",
+  "views.index.SimpleIndex.refreshAfter": "あと {msg} 秒で更新",
+  "views.admin.AccountSettings.regex_too_long": "正規表現が長すぎます（最大 200 文字）",
+  "views.user.UserLogin.register": "登録",
+  "views.user.UserSettings.renamePasskey": "Passkeyを名前変更",
+  "views.admin.UserOauth2Settings.userEmailReplace": "置換テンプレート",
+  "components.MailBox.reply": "返信",
+  "components.MailContentRenderer.reply": "返信",
+  "views.index.SendMail.requestAccess": "アクセスを申請",
+  "views.user.UserLogin.resetPassword": "パスワードをリセット",
+  "views.admin.Account.resetPassword": "パスワードをリセット",
+  "views.admin.UserManagement.resetPassword": "パスワードをリセット",
+  "views.index.SendMail.rich text": "リッチテキスト",
+  "views.admin.SendMail.rich text": "リッチテキスト",
+  "views.common.Appearance.right": "右",
+  "views.admin.UserManagement.role": "ロール",
+  "views.admin.RoleAddressConfig.role": "ロール",
+  "views.Admin.roleAddressConfig": "ロール別アドレス設定",
+  "views.admin.AccountSettings.rule_index": "ルール",
+  "views.Index.s3Attachment": "S3添付ファイル",
+  "components.WebhookComponent.save": "保存",
+  "views.index.AutoReply.save": "保存",
+  "views.admin.AiExtractSettings.save": "保存",
+  "views.admin.UserOauth2Settings.save": "保存",
+  "views.admin.IpBlacklistSettings.save": "保存",
+  "views.admin.Telegram.save": "保存",
+  "views.admin.UserSettings.save": "保存",
+  "views.admin.RoleAddressConfig.save": "保存",
+  "views.admin.AccountSettings.save": "保存",
+  "views.admin.Maintenance.save": "保存",
+  "views.admin.Webhook.save": "保存",
+  "views.admin.Maintenance.saveSuccess": "保存しました",
+  "views.admin.UserOauth2Settings.successTip": "保存しました",
+  "views.admin.IpBlacklistSettings.successTip": "保存しました",
+  "views.admin.UserSettings.successTip": "保存しました",
+  "views.admin.AccountSettings.successTip": "保存しました",
+  "components.MailBox.saveToS3": "S3 に保存",
+  "components.MailContentRenderer.saveToS3": "S3 に保存",
+  "views.Index.saveToS3Success": "S3 への保存に成功しました",
+  "components.MailBox.selectAll": "このページをすべて選択",
+  "components.SendBox.selectAll": "このページをすべて選択",
+  "views.admin.Account.selectAll": "このページをすべて選択",
+  "views.admin.AccountSettings.select_domain": "ドメインを選択",
+  "views.admin.Account.selectedItems": "選択済み",
+  "views.index.SendMail.send": "送信",
+  "views.admin.SendMail.send": "送信",
+  "views.Index.sendbox": "送信箱",
+  "views.Admin.sendBox": "送信箱",
+  "views.user.AddressManagement.send_count": "送信数",
+  "views.admin.Account.send_count": "送信数",
+  "views.admin.UserAddressManagement.send_count": "送信数",
+  "views.Index.sendmail": "メール送信",
+  "views.Admin.sendMail": "メール送信",
+  "views.index.SendMail.send_balance": "現在のアドレスの送信残高",
+  "views.admin.Statistics.sendMailCount": "送信メール数",
+  "views.admin.AccountSettings.send_mail_limit": "送信上限",
+  "views.user.UserLogin.sendVerificationCode": "認証コードを送信",
+  "views.Admin.senderAccess": "送信権限管理",
+  "views.admin.SendMail.fromMailEmpty": "送信元アドレスが空です",
+  "views.index.AutoReply.sourcePrefix": "送信者フィルター",
+  "components.AiExtractInfo.serviceLink": "サービスリンク",
+  "views.index.AutoReply.settings": "設定",
+  "views.index.AccountSettings.showAddressCredential": "アドレス資格情報を表示",
+  "components.MailBox.attachments": "添付ファイルを表示",
+  "components.MailBox.showHtmlMail": "HTMLメールを表示",
+  "components.MailContentRenderer.showHtmlMail": "HTMLメールを表示",
+  "views.admin.Account.showCredential": "メールアドレス資格情報を表示",
+  "views.user.UserSettings.showPasskeyList": "Passkey 一覧を表示",
+  "components.MailBox.showTextMail": "テキストメールを表示",
+  "components.MailContentRenderer.showTextMail": "テキストメールを表示",
+  "views.Index.enterSimpleMode": "シンプルモード",
+  "components.MailContentRenderer.size": "サイズ",
+  "views.admin.Account.source_meta": "送信元",
+  "views.admin.AccountSettings.source_patterns": "送信元アドレス正規表現 (任意)",
+  "views.admin.Maintenance.sqlStatement": "SQL文 (DELETEのみ)",
+  "views.user.UserOauth2Callback.stateNotMatch": "state が一致しません",
+  "views.Admin.statistics": "統計",
+  "views.Header.status": "ステータス",
+  "views.admin.IpBlacklistSettings.enable_whitelist_tip": "厳格モード: ホワイトリストに一致する IP のみがレート制限対象 API にアクセスできます。それ以外の IP はすべて拒否されます。",
+  "views.index.AutoReply.subject": "件名",
+  "views.index.SendMail.subject": "件名",
+  "views.admin.SendMail.subject": "件名",
+  "views.index.SendMail.subjectEmpty": "件名が空です",
+  "views.admin.SendMail.subjectEmpty": "件名が空です",
+  "components.AiExtractInfo.subscriptionLink": "購読リンク",
+  "views.user.AddressManagement.success": "成功",
+  "views.index.TelegramAddress.success": "成功",
+  "views.index.LocalAddress.success": "成功",
+  "views.admin.UserAddressManagement.success": "成功",
+  "components.WebhookComponent.successTip": "成功",
+  "components.MailBox.success": "成功",
+  "components.SendBox.success": "成功",
+  "views.index.AccountSettings.success": "成功",
+  "views.index.AutoReply.success": "成功",
+  "views.admin.AiExtractSettings.successTip": "成功",
+  "views.admin.Account.success": "成功",
+  "views.admin.SenderAccess.success": "成功",
+  "views.admin.UserManagement.success": "成功",
+  "views.admin.Telegram.successTip": "成功",
+  "views.admin.RoleAddressConfig.successTip": "成功",
+  "views.admin.Webhook.successTip": "成功",
+  "views.admin.CreateAccount.successTip": "作成に成功",
+  "views.admin.Telegram.globalMailPushListTip": "個人/グループ/チャンネルの chat_id をサポートします。ボットへメッセージ送信後、このリンクで chat_id を確認できます: https://api.telegram.org/bot<あなたの BOT TOKEN に置換>/getUpdates",
+  "views.user.AddressManagement.targetUserEmail": "対象ユーザーのメール",
+  "views.admin.Telegram.telegramAllowList": "Telegram 許可リスト (Chat ID を手動入力)",
+  "views.Admin.telegram": "Telegramボット",
+  "views.admin.Telegram.miniAppUrl": "Telegram Mini App URL",
+  "components.WebhookComponent.test": "テスト",
+  "views.index.SendMail.text": "テキスト",
+  "views.admin.SendMail.text": "テキスト",
+  "views.user.UserSettings.passordTip": "サーバーはパスワードのハッシュ値のみ受け取り、平文は受け取りません。そのためパスワードを閲覧・復元できません。管理者がメール検証を有効にしている場合はシークレットモードで再設定できます。",
+  "views.index.LocalAddress.tip": "これらのアドレスはブラウザに保存されており、キャッシュを消すと失われる可能性があります。",
+  "views.admin.UserOauth2Settings.tip": "サードパーティログインではユーザーのメールアドレスで自動的にアカウント登録されます（同じメールは同一アカウントとして扱われます）。「パスワードを忘れた」からパスワード設定も可能です。",
+  "views.admin.AccountSettings.send_mail_limit_tip": "すべての送信チャネルに適用されます。-1 は無制限、0 は送信禁止です。",
+  "views.admin.AccountSettings.create_address_subdomain_match_note": "RANDOM_SUBDOMAIN_DOMAINS に列挙したベースドメインでは、ランダムまたは手動のサブドメインを利用できます。この設定は、他の許可済みベースドメインでも API からサブドメインを指定できるようにします。",
+  "views.index.SendMail.tooLarge": "ファイルが大きすぎます。1MB 未満のファイルをアップロードしてください。",
+  "views.admin.SendMail.tooLarge": "ファイルが大きすぎます。1MB 未満のファイルをアップロードしてください。",
+  "views.common.Appearance.top": "上",
+  "views.user.AddressManagement.transferAddress": "アドレスを移行",
+  "views.user.AddressManagement.transferAddressTip": "別のユーザーへアドレスを移行すると、そのアドレスはあなたのアカウントから削除され、相手のアカウントへ移されます。本当に移行しますか？",
+  "views.common.Appearance.useSideMargin": "ページ左右の余白を有効にする",
+  "views.admin.AiExtractSettings.manualInputPrompt": "入力して Enter で追加",
+  "views.admin.UserOauth2Settings.manualInputPrompt": "入力して Enter で追加",
+  "views.admin.Telegram.manualInputPrompt": "入力して Enter で追加",
+  "views.admin.UserSettings.manualInputPrompt": "入力して Enter で追加",
+  "views.admin.AccountSettings.manualInputPrompt": "入力して Enter で追加",
+  "views.admin.Webhook.manualInputPrompt": "入力して Enter で追加",
+  "views.admin.IpBlacklistSettings.manualInputPrompt": "パターンを入力して Enter で追加",
+  "views.user.AddressManagement.unbindAddress": "アドレスの紐付けを解除",
+  "views.index.TelegramAddress.unbindMailAddress": "メールアドレスの紐付けを解除",
+  "views.index.LocalAddress.unbindMailAddress": "メールアドレス資格情報の紐付けを解除",
+  "components.MailBox.unselectAll": "すべての選択を解除",
+  "components.SendBox.unselectAll": "すべての選択を解除",
+  "views.admin.Account.unselectAll": "すべての選択を解除",
+  "views.admin.Account.updated_at": "更新日時",
+  "views.user.UserSettings.updated_at": "更新日時",
+  "components.WebhookComponent.urlMissing": "URL は必須です",
+  "views.common.Appearance.useIframeShowMail": "iframe で HTML メールを表示",
+  "views.admin.CreateAccount.enableRandomSubdomain": "ランダムサブドメインを使用",
+  "views.common.Login.enableRandomSubdomain": "ランダムサブドメインを使用",
+  "views.admin.UserOauth2Settings.userEmailFormatTip": "正規表現でメールを変換します。例: ^(.+)@old\\.com$ と $1@new.com",
+  "views.common.Appearance.useSimpleIndex": "シンプルインデックスを使う",
+  "views.common.Appearance.useUTCDate": "UTC 日時を使う",
+  "views.Header.user": "ユーザー",
+  "views.Admin.user": "ユーザー",
+  "components.AddressSelect.userAddresses": "ユーザーのアドレス",
+  "views.Admin.loginViaUserAdmin": "ユーザー管理者権限",
+  "views.admin.Statistics.userCount": "ユーザー数",
+  "views.admin.UserManagement.user_email": "ユーザーメール",
+  "views.index.AddressBar.userLogin": "ユーザーログイン",
+  "views.Admin.user_management": "ユーザー管理",
+  "views.Admin.user_settings": "ユーザー設定",
+  "views.User.user_settings": "ユーザー設定",
+  "components.AiExtractInfo.authCode": "認証コード",
+  "views.user.UserLogin.verifyCode": "認証コード",
+  "views.user.UserLogin.verifyCodeSent": "認証コードを送信しました, 有効期限 {timeout} 秒",
+  "views.admin.AccountSettings.verified_address_list": "検証済みアドレス一覧 (cf internal api でメール送信可能)",
+  "views.admin.UserSettings.verifyMailSender": "メール送信元を検証",
+  "components.MailContentRenderer.attachments": "添付ファイルを表示",
+  "views.admin.Account.viewMails": "メールを表示",
+  "views.admin.Account.viewSendBox": "送信箱を表示",
+  "views.user.UserLogin.waitforVerifyCode": "待機 {timeout} 秒",
+  "views.admin.Webhook.webhookAllowList": "Webhook 許可リスト (利用を許可するメールアドレスを入力して Enter)",
+  "views.admin.Webhook.notEnabled": "Webhook は有効ではありません",
+  "components.WebhookComponent.notEnabled": "あなたには Webhook が有効ではありません",
+  "views.Index.webhookSettings": "Webhook設定",
+  "views.Admin.webhookSettings": "Webhook設定",
+  "views.admin.AiExtractSettings.disabledTip": "無効時は AI 抽出がすべてのメールアドレスを処理します",
+  "views.admin.AiExtractSettings.enableAllowListTip": "有効時は AI 抽出は許可リストのアドレス宛メールのみ処理します",
+  "views.admin.CreateAccount.randomSubdomainTip": "有効時は作成されるアドレスがランダムなサブドメインを使用します。受信専用として推奨されます。ベースドメインの DNS にワイルドカード MX レコードの設定が必要です — ランダムサブドメインのドキュメントを参照してください。",
+  "views.admin.CreateAccount.enableCustomSubdomain": "カスタムサブドメインを使用",
+  "views.admin.CreateAccount.normalSubdomain": "通常ドメイン",
+  "views.common.Login.enableCustomSubdomain": "カスタムサブドメインを使用",
+  "views.common.Login.normalSubdomain": "通常ドメイン",
+  "views.common.Login.randomSubdomainTip": "有効時は作成されるアドレスがランダムなサブドメインを使用します。受信専用として推奨されます。ベースドメインの DNS にワイルドカード MX レコードの設定が必要です — ランダムサブドメインのドキュメントを参照してください。",
+  "views.admin.AiExtractSettings.allowListTip": "ワイルドカード * は任意の文字に一致します。例: *{'@'}example.com は example.com ドメイン配下のすべてのアドレスに一致します",
+  "views.Admin.workerconfig": "Worker設定",
+  "views.admin.AccountSettings.create_address_subdomain_match_env_locked": "Worker 環境変数 ENABLE_CREATE_ADDRESS_SUBDOMAIN_MATCH は現在 false です。管理画面のスイッチは保存できますが、env を有効化または削除するまで反映されません。",
+  "views.common.Login.getNewEmailTip3": "ドロップダウン一覧からドメインを選択できます。",
+  "views.admin.AccountSettings.tip": "以下の複数選択項目は手動入力して Enter で追加できます",
+  "components.MailBox.emptyInbox": "受信箱は空です",
+  "views.index.SendMail.fromName": "あなたの名前とアドレス。名前を空欄にするとメールアドレスを使用します",
+  "views.admin.SendMail.fromName": "あなたの名前とアドレス。名前を空欄にするとメールアドレスを使用します",
+  "components.AddressCredentialModal.addressCredential": "アドレス認証情報",
+  "components.AddressCredentialModal.addressCredentialLabel": "Address JWT",
+  "components.AddressCredentialModal.addressPassword": "アドレスパスワード",
+  "components.AddressCredentialModal.agentAccess": "AI Agent",
+  "components.AddressCredentialModal.agentAccessTip": "AI Agent から Address JWT と parsed-mail API を使ってこのメールボックスを利用できます。",
+  "components.AddressCredentialModal.agentConfig": "Agent 設定",
+  "components.AddressCredentialModal.agentSkill": "Agent skill",
+  "components.AddressCredentialModal.apiBase": "API ベース",
+  "components.AddressCredentialModal.autoLoginLink": "自動ログインリンク",
+  "components.AddressCredentialModal.copyFailed": "コピーに失敗しました",
+  "components.AddressCredentialModal.copySection": "コピー",
+  "components.AddressCredentialModal.copySuccess": "コピーしました",
+  "components.AddressCredentialModal.currentAddress": "現在のアドレス",
+  "components.AddressCredentialModal.docs": "ドキュメント",
+  "components.AddressCredentialModal.imapHost": "IMAP ホスト",
+  "components.AddressCredentialModal.imapPort": "IMAP ポート",
+  "components.AddressCredentialModal.password": "パスワード",
+  "components.AddressCredentialModal.plainOrProxyTls": "平文またはプロキシ側 TLS",
+  "components.AddressCredentialModal.security": "セキュリティ",
+  "components.AddressCredentialModal.smtpHost": "SMTP ホスト",
+  "components.AddressCredentialModal.smtpImapAccess": "SMTP / IMAP",
+  "components.AddressCredentialModal.smtpImapTip": "管理者が SMTP/IMAP プロキシを設定した後、メールクライアントでこれらの値を使用できます。パスワードにはここに表示される Address JWT、または手元にあるアドレスパスワードを使用できます。",
+  "components.AddressCredentialModal.smtpPort": "SMTP ポート",
+  "components.AddressCredentialModal.starttls": "STARTTLS",
+  "components.AddressCredentialModal.tip": "これらの認証情報は信頼できるクライアントと Agent でのみ使用してください。",
+  "components.AddressCredentialModal.title": "アドレス認証情報と接続方法",
+  "components.AddressCredentialModal.username": "ユーザー名",
+  "views.User.send_mail": "メール送信",
+  "views.user.UserSendBox.noAddress": "紐付け済みのメールアドレスを選択してください",
+  "views.user.UserSendBox.sendbox": "送信済み"
+}

frontend/src/i18n/locales/source/ptBR.ts

@@ -0,0 +1,657 @@
+export const ptBRMessages = {
+  "views.index.SendMail.balanceUnavailable": "Sem saldo de envio para este endereço",
+  "views.index.SendMail.composeMail": "Escrever e-mail",
+  "views.index.SendMail.contentPlaceholder": "Escreva sua mensagem...",
+  "views.index.SendMail.draftSaved": "Rascunho salvo neste navegador",
+  "views.index.SendMail.recipientAddress": "Endereço do destinatário",
+  "views.index.SendMail.recipientName": "Nome do destinatário (opcional)",
+  "views.index.SendMail.senderAddress": "Endereço do remetente",
+  "views.index.SendMail.senderName": "Nome do remetente (opcional)",
+  "views.admin.SendMail.adminComposeTip": "Enviar usando um endereço de e-mail configurado",
+  "views.admin.SendMail.composeMail": "Escrever e-mail",
+  "views.admin.SendMail.contentPlaceholder": "Escreva sua mensagem...",
+  "views.admin.SendMail.draftSaved": "Rascunho salvo neste navegador",
+  "views.admin.SendMail.recipientAddress": "Endereço do destinatário",
+  "views.admin.SendMail.recipientName": "Nome do destinatário (opcional)",
+  "views.admin.SendMail.senderAddress": "Endereço do remetente",
+  "views.admin.SendMail.senderName": "Nome do remetente (opcional)",
+  "views.admin.DatabaseManager.current_database_size": "Tamanho atual do banco de dados",
+  "views.admin.DatabaseManager.free_plan": "Free",
+  "views.admin.DatabaseManager.paid_plan": "Workers Paid",
+  "views.admin.DatabaseManager.plan": "Plano do Workers",
+  "views.admin.DatabaseManager.plan_placeholder": "Selecione seu plano do Cloudflare Workers",
+  "views.admin.DatabaseManager.planSaved": "Plano do Workers salvo",
+  "views.admin.DatabaseManager.single_database_limit": "Limite de capacidade do banco de dados",
+  "views.admin.DatabaseManager.storage_description": "Compare o tamanho atual do banco de dados com os limites do seu plano.",
+  "views.admin.DatabaseManager.storage_tip": "O uso é calculado com o tamanho atual do banco de dados e o limite do plano selecionado.",
+  "views.admin.DatabaseManager.storage_title": "Capacidade de armazenamento D1",
+  "views.admin.DatabaseManager.storage_usage": "Uso da capacidade",
+  "views.admin.DatabaseManager.unavailable": "Indisponível",
+  "views.index.SimpleIndex.mailCount": "{current} / {total} e-mails",
+  "views.admin.Statistics.activeAddressCount30days": "Quantidade de endereços ativos em 30 dias",
+  "views.admin.Statistics.activeAddressCount7days": "Quantidade de endereços ativos em 7 dias",
+  "views.Index.about": "Sobre",
+  "views.Admin.about": "Sobre",
+  "views.Header.accessHeader": "Senha de acesso",
+  "views.Admin.account": "Conta",
+  "views.Index.accountSettings": "Configurações de e-mail",
+  "views.Admin.account_settings": "Configurações da conta",
+  "views.index.SimpleIndex.accountSettings": "Configurações de e-mail",
+  "views.index.Attachment.action": "Ação",
+  "views.admin.SenderAccess.action": "Ação",
+  "views.user.UserSettings.actions": "Ações",
+  "views.user.AddressManagement.actions": "Ações",
+  "views.index.TelegramAddress.actions": "Ações",
+  "views.admin.Account.actions": "Ações",
+  "views.index.LocalAddress.actions": "Ações",
+  "views.admin.UserManagement.actions": "Ações",
+  "views.admin.AccountSettings.actions": "Ações",
+  "views.admin.AccountSettings.add": "Adicionar",
+  "views.admin.Maintenance.customSqlTip": "Adicione instruções SQL DELETE personalizadas para a limpeza agendada. Apenas uma instrução DELETE é permitida por item.",
+  "views.admin.Maintenance.addCustomSql": "Adicionar SQL personalizada",
+  "views.admin.UserOauth2Settings.addOauth2": "Adicionar OAuth2",
+  "components.AddressSelect.address": "Endereço",
+  "views.user.AddressManagement.address": "Endereço",
+  "views.index.TelegramAddress.address": "Endereço",
+  "views.admin.SenderAccess.address": "Endereço",
+  "views.index.LocalAddress.address": "Endereço",
+  "views.admin.CreateAccount.address": "Endereço",
+  "views.admin.AiExtractSettings.allowList": "Lista branca de endereços (digite o endereço e pressione Enter; suporta curingas)",
+  "views.admin.AccountSettings.send_address_block_list": "Palavras-chave bloqueadas para envio de e-mail",
+  "views.admin.AccountSettings.address_block_list": "Palavras-chave bloqueadas para usuários (o administrador pode ignorar)",
+  "views.index.SimpleIndex.addressCopied": "Endereço copiado com sucesso",
+  "views.admin.Statistics.addressCount": "Quantidade de endereços",
+  "views.admin.UserManagement.address_count": "Quantidade de endereços",
+  "views.User.address_management": "Gerenciamento de endereços",
+  "views.admin.UserManagement.userAddressManagement": "Gerenciamento de endereços",
+  "views.index.AddressBar.addressPassword": "Senha do endereço",
+  "views.admin.CreateAccount.addressPassword": "Senha do endereço",
+  "views.Admin.adminAccount": "Administrador",
+  "views.Admin.accessHeader": "Senha de administrador",
+  "views.Admin.loginViaPassword": "Entrar como administrador com senha",
+  "views.admin.AiExtractSettings.title": "Configurações de extração de e-mail por IA",
+  "views.Admin.aiExtractSettings": "Configurações de extração por IA",
+  "views.admin.AccountSettings.match_all": "Todos",
+  "views.admin.AccountSettings.create_address_subdomain_match": "Permitir correspondência por sufixo de subdomínio ao criar endereços",
+  "views.admin.UserSettings.enableUserRegister": "Permitir cadastro de usuários",
+  "views.admin.AccountSettings.match_any": "Qualquer",
+  "views.Index.appearance": "Aparência",
+  "views.Admin.appearance": "Aparência",
+  "views.admin.IpBlacklistSettings.tip_scope": "Aplica-se a: criar endereço, enviar e-mail, API externa de envio, cadastro de usuário e verificação de código",
+  "views.index.AccountSettings.clearInboxConfirm": "Tem certeza de que deseja limpar todos os e-mails da sua caixa de entrada?",
+  "views.index.AccountSettings.clearSentItemsConfirm": "Tem certeza de que deseja limpar todos os e-mails enviados?",
+  "views.admin.Account.multiClearInboxTip": "Tem certeza de que deseja limpar a caixa de entrada dos endereços selecionados?",
+  "views.admin.Account.clearInboxTip": "Tem certeza de que deseja limpar a caixa de entrada deste e-mail?",
+  "views.admin.Account.multiClearSentItemsTip": "Tem certeza de que deseja limpar os itens enviados dos endereços selecionados?",
+  "views.admin.Account.clearSentItemsTip": "Tem certeza de que deseja limpar os itens enviados deste e-mail?",
+  "views.admin.Account.multiDeleteTip": "Tem certeza de que deseja excluir os endereços selecionados?",
+  "views.index.Attachment.deleteConfirm": "Tem certeza de que deseja excluir este anexo?",
+  "views.admin.Account.deleteTip": "Tem certeza de que deseja excluir este e-mail?",
+  "views.admin.SenderAccess.deleteTip": "Tem certeza de que deseja excluir isto?",
+  "views.index.AccountSettings.deleteAccountConfirm": "Tem certeza de que deseja excluir este endereço de e-mail e todas as mensagens dele? Isso não exclui sua conta de usuário.",
+  "views.index.AccountSettings.logoutConfirm": "Tem certeza de que deseja sair do endereço de e-mail atual?",
+  "components.MailBox.deleteMailTip": "Tem certeza de que deseja excluir o e-mail?",
+  "components.MailContentRenderer.deleteMailTip": "Tem certeza de que deseja excluir o e-mail?",
+  "components.SendBox.deleteMailTip": "Tem certeza de que deseja excluir o e-mail?",
+  "views.admin.AccountSettings.delete_rule_confirm": "Tem certeza de que deseja excluir esta regra?",
+  "views.admin.UserManagement.deleteUserTip": "Tem certeza de que deseja excluir este usuário?",
+  "views.Admin.logoutConfirmContent": "Tem certeza de que deseja sair do painel de administração?",
+  "views.user.UserSettings.logoutConfirm": "Tem certeza de que deseja sair?",
+  "views.admin.IpBlacklistSettings.asn_blacklist": "Lista negra de organizações ASN",
+  "views.admin.IpBlacklistSettings.tip_asn": "Organização ASN: bloquear por ISP/provedor. Correspondência de texto sem diferenciar maiúsculas ou regex.",
+  "components.AiExtractInfo.authLink": "Link de autenticação",
+  "views.admin.Maintenance.autoCleanup": "Limpeza automática",
+  "components.MailBox.autoRefresh": "Atualização automática",
+  "components.MailBox.backToList": "Voltar para a lista",
+  "views.common.Appearance.autoRefreshInterval": "Intervalo de atualização automática (s)",
+  "views.Index.auto_reply": "Resposta automática",
+  "views.index.AutoReply.autoReply": "Resposta automática",
+  "views.common.Login.autoGeneratedName": "Nome gerado automaticamente",
+  "views.admin.SenderAccess.balance": "Saldo",
+  "views.admin.Maintenance.basicCleanup": "Limpeza básica",
+  "views.user.AddressManagement.unbindAddressTip": "Antes de desvincular, mude para este endereço e salve a credencial do e-mail.",
+  "views.index.TelegramAddress.bind": "Vincular",
+  "views.index.TelegramAddress.bindAddressSuccess": "Endereço vinculado com sucesso",
+  "views.index.LocalAddress.bindAddressSuccess": "Endereço vinculado com sucesso",
+  "views.User.bind_address": "Vincular endereço de e-mail",
+  "views.admin.IpBlacklistSettings.enable_tip": "Bloquear IPs que correspondam à lista negra nas APIs com limite",
+  "views.admin.AccountSettings.fromBlockList": "Palavras bloqueadas para receber e-mail",
+  "views.admin.AccountSettings.block_receive_unknow_address_email": "Bloquear recebimento de e-mails para endereços desconhecidos",
+  "views.common.Appearance.bottom": "base",
+  "views.admin.IpBlacklistSettings.fingerprint_blacklist": "Lista negra de impressão digital do navegador",
+  "views.admin.IpBlacklistSettings.tip_fingerprint": "Impressão digital do navegador: bloqueia por impressão. Suporta correspondência exata ou regex.",
+  "views.admin.AccountSettings.cancel": "Cancelar",
+  "components.MailBox.cancelMultiAction": "Cancelar múltipla seleção",
+  "components.SendBox.cancelMultiAction": "Cancelar múltipla seleção",
+  "views.user.AddressManagement.changeMailAddress": "Alterar endereço",
+  "views.index.TelegramAddress.changeMailAddress": "Alterar endereço de e-mail",
+  "views.index.LocalAddress.changeMailAddress": "Alterar endereço de e-mail",
+  "views.index.AccountSettings.changePassword": "Alterar senha do endereço",
+  "views.admin.UserManagement.changeRole": "Alterar Função",
+  "components.SendBox.showCode": "Alternar visualização do código original",
+  "views.admin.Telegram.status": "Ver status",
+  "views.admin.AccountSettings.create_address_subdomain_match_follow_env_note": "Escolher \"Seguir variável de ambiente\" remove a sobrescrita do administrador e retorna ao estado não definido. O resultado efetivo continua sendo controlado pelas variáveis do Worker e pelas regras de precedência.",
+  "views.admin.Maintenance.cleanupNow": "Limpar agora",
+  "views.admin.Maintenance.cleanupSuccess": "Limpeza concluída",
+  "views.admin.Maintenance.addressCreateLabel": "Limpar os endereços criados há mais de n dias",
+  "views.admin.Maintenance.emptyAddressLabel": "Limpar os endereços vazios de mais de n dias",
+  "views.admin.Maintenance.inactiveAddressLabel": "Limpar os endereços inativos de mais de n dias",
+  "views.admin.Maintenance.mailBoxLabel": "Limpar a caixa de entrada de mais de n dias",
+  "views.admin.Maintenance.sendBoxLabel": "Limpar a caixa de saída de mais de n dias",
+  "views.admin.Maintenance.unboundAddressLabel": "Limpar os endereços desvinculados de mais de n dias",
+  "views.admin.Maintenance.mailUnknowLabel": "Limpar os e-mails com destinatário desconhecido de mais de n dias",
+  "views.index.AccountSettings.clearInbox": "Limpar caixa de entrada",
+  "views.admin.Account.clearInbox": "Limpar caixa de entrada",
+  "views.index.AccountSettings.clearSentItems": "Limpar itens enviados",
+  "views.admin.Account.clearSentItems": "Limpar itens enviados",
+  "views.Header.title": "Cloudflare E-mail Temporário",
+  "views.admin.DatabaseManager.code_db_version": "Versão do banco exigida pelo código",
+  "views.user.UserOauth2Callback.codeNotFound": "código não encontrado",
+  "views.admin.AccountSettings.config": "Configuração",
+  "views.admin.RoleAddressConfig.roleConfigDesc": "Configure a quantidade máxima de endereços para cada função. Os limites por função têm prioridade sobre a configuração global. Use 0 para ilimitado.",
+  "views.Admin.confirm": "Confirmar",
+  "views.Admin.logoutConfirmTitle": "Confirmar saída",
+  "views.index.AccountSettings.confirmPassword": "Confirmar senha",
+  "views.index.SendMail.content": "Conteúdo",
+  "views.admin.SendMail.content": "Conteúdo",
+  "views.index.SendMail.contentEmpty": "O conteúdo está vazio",
+  "views.admin.SendMail.contentEmpty": "O conteúdo está vazio",
+  "components.AddressSelect.copied": "Copiado",
+  "components.AiExtractInfo.copySuccess": "Copiado com sucesso",
+  "components.AddressSelect.copy": "Copiar",
+  "views.index.SimpleIndex.copyAddress": "Copiar",
+  "components.AiExtractInfo.copyFailed": "Falha ao copiar",
+  "views.Footer.copyright": "Direitos autorais",
+  "views.Admin.account_create": "Criar conta",
+  "views.admin.CreateAccount.creatNewEmail": "Criar novo e-mail",
+  "views.common.Login.getNewEmail": "Criar novo e-mail",
+  "views.user.AddressManagement.create_or_bind": "Criar ou vincular",
+  "views.index.LocalAddress.create_or_bind": "Criar ou vincular",
+  "views.user.UserSettings.createPasskey": "Criar passkey",
+  "views.admin.UserManagement.createUser": "Criar usuário",
+  "views.user.UserSettings.created_at": "Criado em",
+  "views.admin.Account.created_at": "Criado em",
+  "views.admin.SenderAccess.created_at": "Criado em",
+  "views.admin.UserManagement.created_at": "Criado em",
+  "views.common.Login.credentialLogin": "Login com credencial",
+  "views.admin.DatabaseManager.current_db_version": "Versão atual do banco",
+  "views.user.UserBar.currentUser": "Usuário atual",
+  "views.admin.UserManagement.roleDonotExist": "A função atual não existe",
+  "views.admin.Maintenance.customSqlCleanup": "Limpeza SQL personalizada",
+  "views.admin.AccountSettings.send_mail_daily_limit": "Limite diário",
+  "views.admin.AccountSettings.send_mail_daily_limit_invalid": "O limite diário deve ser um inteiro maior ou igual a -1",
+  "views.admin.IpBlacklistSettings.tip_daily_limit": "Limite diário: restringe o número máximo de requisições por IP por dia (1-1000000).",
+  "views.admin.IpBlacklistSettings.daily_request_limit": "Limite diário de solicitações",
+  "views.Header.dark": "Escuro",
+  "views.Admin.database": "Banco de dados",
+  "views.admin.DatabaseManager.need_initialization_tip": "É necessário inicializar o banco de dados. Faça a inicialização primeiro.",
+  "views.admin.DatabaseManager.initializationSuccess": "Banco de dados inicializado com sucesso",
+  "views.admin.DatabaseManager.migrationSuccess": "Banco de dados migrado com sucesso",
+  "views.admin.DatabaseManager.need_migration_tip": "É necessário migrar o banco de dados. Execute a migração primeiro.",
+  "components.MailBox.delete": "Excluir",
+  "components.MailContentRenderer.delete": "Excluir",
+  "components.SendBox.delete": "Excluir",
+  "views.index.Attachment.delete": "Excluir",
+  "views.admin.Account.delete": "Excluir",
+  "views.admin.UserOauth2Settings.delete": "Excluir",
+  "views.admin.SenderAccess.delete": "Excluir",
+  "views.admin.UserManagement.delete": "Excluir",
+  "views.admin.AccountSettings.delete_rule": "Excluir",
+  "views.admin.Maintenance.deleteCustomSql": "Excluir",
+  "views.index.AccountSettings.deleteAccount": "Excluir endereço de e-mail",
+  "views.admin.Account.deleteAccount": "Excluir conta",
+  "views.user.UserSettings.deletePasskey": "Excluir passkey",
+  "views.admin.AccountSettings.delete_success": "Excluído com sucesso",
+  "views.admin.UserManagement.deleteUser": "Excluir usuário",
+  "views.index.Attachment.deleteSuccess": "Excluído com sucesso",
+  "views.admin.SenderAccess.disable": "Desativar",
+  "views.Admin.loginViaDisabledCheck": "Verificação de senha desativada",
+  "views.common.Appearance.preferShowTextMail": "Exibir e-mail em texto por padrão",
+  "views.admin.AccountSettings.domain_list": "Lista de domínios (opcional)",
+  "views.admin.AccountSettings.source_patterns_tip": "A lista de domínios filtra pelo destinatário e o regex de origem filtra pelo remetente. Ambas as condições precisam corresponder para encaminhar (lógica AND). Deixe qualquer uma vazia para ignorá-la.",
+  "views.admin.UserManagement.domains": "Domínios",
+  "views.index.Attachment.download": "Baixar",
+  "components.MailBox.downloadMail": "Baixar E-mail",
+  "components.MailContentRenderer.downloadMail": "Baixar E-mail",
+  "views.admin.Maintenance.sqlNamePlaceholder": "ex.: limpar logs antigos",
+  "views.admin.Maintenance.sqlPlaceholder": "ex.: DELETE FROM raw_mails WHERE source GLOB '*{'@'}example.com' AND created_at < datetime('now', '-3 day')",
+  "views.admin.AccountSettings.source_patterns_placeholder": "ex.: gmail.com",
+  "views.admin.AccountSettings.forwarding_rule_warning": "Cada regra é executada de forma independente. O endereço de encaminhamento deve ser verificado.",
+  "views.index.SendMail.edit": "Editar",
+  "views.admin.SendMail.edit": "Editar",
+  "views.user.UserLogin.email": "E-mail",
+  "views.admin.UserManagement.email": "E-mail",
+  "views.common.Login.email": "E-mail",
+  "views.common.Login.credential": "Credencial do endereço de e-mail",
+  "views.common.Login.emailPasswordRequired": "E-mail e senha são obrigatórios",
+  "views.admin.UserSettings.emailCheckRegex": "Regex de verificação de e-mail (ex.: ^[^.]+{'@'}.+$ para impedir pontos antes de {'@'})",
+  "views.admin.AccountSettings.email_forwarding_config": "Configuração de encaminhamento de e-mail",
+  "views.admin.UserOauth2Settings.userEmailFormat": "Padrão regex de e-mail",
+  "views.Admin.mails": "E-mails",
+  "views.index.AutoReply.sourcePrefixPlaceholder": "Vazio=todos, prefixo ou /regex/",
+  "components.WebhookComponent.enable": "Ativar",
+  "views.admin.UserOauth2Settings.enable": "Ativar",
+  "views.admin.SenderAccess.enable": "Ativar",
+  "views.admin.Telegram.enable": "Ativar",
+  "views.admin.UserSettings.enable": "Ativar",
+  "views.admin.AiExtractSettings.enableAllowList": "Ativar Lista branca de endereços",
+  "views.admin.Webhook.enableAllowList": "Ativar lista de permissão (restringir o acesso ao webhook a usuários específicos)",
+  "views.index.AutoReply.enableAutoReply": "Ativar resposta automática",
+  "views.admin.Maintenance.cronTip": "Para ativar a limpeza por cron, configure [crons] no worker. Consulte a documentação; 0 dias significa limpar tudo.",
+  "views.admin.IpBlacklistSettings.enable_daily_limit": "Ativar limite diário de solicitações",
+  "views.admin.UserSettings.enableEmailCheckRegex": "Ativar regex de verificação de e-mail",
+  "views.admin.UserOauth2Settings.enableEmailFormat": "Ativar formato de e-mail",
+  "views.admin.Telegram.enableGlobalMailPush": "Ativar envio global de e-mails (informar manualmente o Chat ID do Telegram)",
+  "views.admin.IpBlacklistSettings.enable_ip_blacklist": "Ativar Lista negra de IP",
+  "views.admin.IpBlacklistSettings.enable_ip_whitelist": "Ativar Lista branca de IP (estrito)",
+  "views.admin.UserOauth2Settings.enableMailAllowList": "Ativar lista branca de endereços de e-mail (editável manualmente)",
+  "views.admin.UserSettings.enableMailAllowList": "Ativar lista branca de endereços de e-mail (editável manualmente)",
+  "views.admin.UserSettings.enableMailVerify": "Habilitar verificação de e-mail (o endereço remetente deve existir no sistema, ter saldo e poder enviar normalmente)",
+  "views.admin.Telegram.enableTelegramAllowList": "Ativar lista branca do Telegram (informar manualmente o Chat ID)",
+  "views.admin.IpBlacklistSettings.asn_blacklist_placeholder": "Informe a organização ASN (ex.: Google, Amazon)",
+  "views.admin.IpBlacklistSettings.fingerprint_blacklist_placeholder": "Informe o ID da impressão (ex.: a1b2c3d4e5f6g7h8)",
+  "views.admin.IpBlacklistSettings.daily_request_limit_placeholder": "Informe o limite (ex.: 1000)",
+  "views.admin.IpBlacklistSettings.ip_blacklist_placeholder": "Informe o padrão (ex.: 192.168.1 ou ^10\\.0\\.0\\.5$)",
+  "views.common.Login.bindUserAddressError": "Erro ao vincular o endereço ao usuário",
+  "views.admin.IpBlacklistSettings.ip_whitelist_placeholder": "IP exato (ex.: 1.2.3.4) ou regex ancorada (ex.: ^192\\.168\\.1\\.\\d+$)",
+  "views.index.SimpleIndex.exitSimpleIndex": "Sair do modo simples",
+  "components.MailBox.keywordQueryTip": "Filtrar página atual",
+  "views.admin.AccountSettings.create_address_subdomain_match_follow_env": "Seguir variável de ambiente",
+  "views.admin.AccountSettings.create_address_subdomain_match_force_disable": "Forçar desativação",
+  "views.admin.AccountSettings.create_address_subdomain_match_force_enable": "Forçar ativação",
+  "views.user.UserLogin.forgotPassword": "Esqueci a senha",
+  "components.MailBox.forwardMail": "Encaminhar",
+  "components.MailContentRenderer.forward": "Encaminhar",
+  "views.admin.AccountSettings.forward_address": "Endereço de encaminhamento",
+  "views.admin.AccountSettings.forward_address_required": "O endereço de encaminhamento é obrigatório",
+  "views.admin.AccountSettings.forward_placeholder": "forward@example.com",
+  "components.MailContentRenderer.fullscreen": "Tela cheia",
+  "views.common.Login.generateName": "Gerar nome aleatório",
+  "views.admin.Telegram.globalMailPushList": "Lista global de chat ID para envio de e-mails",
+  "views.common.Appearance.globalTabplacement": "Posição global das abas",
+  "views.common.Login.help": "Ajuda",
+  "views.Header.home": "Início",
+  "views.index.SendMail.html": "HTML",
+  "views.admin.SendMail.html": "HTML",
+  "views.admin.UserOauth2Settings.icon": "Ícone (SVG, use apenas fonte confiável)",
+  "views.admin.CreateAccount.enablePrefix": "Se ativar o prefixo",
+  "views.common.AdminContact.adminContact": "Se precisar de ajuda, entre em contato com o administrador ({msg})",
+  "views.admin.Telegram.init": "Inicializar",
+  "views.admin.DatabaseManager.init": "Inicializar banco de dados",
+  "views.admin.AccountSettings.regex_invalid": "Padrão regex inválido",
+  "views.Admin.ipBlacklistSettings": "Lista negra de IP",
+  "views.admin.IpBlacklistSettings.ip_blacklist": "Padrões da lista negra de IP",
+  "views.admin.IpBlacklistSettings.title": "Configurações da lista negra de IP",
+  "views.admin.IpBlacklistSettings.tip_ip": "Lista negra de IP: aceita correspondência por texto (ex.: \"192.168.1\") ou regex (ex.: \"^10\\.0\\.0\\.5$\").",
+  "views.admin.IpBlacklistSettings.whitelist_empty_warning": "A lista branca de IP está ativada, mas está vazia. O servidor irá ignorá-la para evitar bloqueio de acesso. Adicione pelo menos uma entrada antes de ativar.",
+  "views.admin.IpBlacklistSettings.ip_whitelist": "Lista branca de IP Padrões",
+  "views.admin.IpBlacklistSettings.tip_whitelist": "Lista branca de IP: modo estrito. Entradas simples devem corresponder exatamente ao IP (sem substring). Use regex ancorada (^...$) para intervalos. IPs permitidos ignoram a verificação da lista negra.",
+  "views.admin.SenderAccess.is_enabled": "Ativado",
+  "views.admin.Account.itemCount": "itemCount",
+  "views.admin.SenderAccess.itemCount": "itemCount",
+  "views.admin.UserManagement.itemCount": "itemCount",
+  "views.user.UserMailBox.addressQueryTip": "Deixe em branco para consultar todos os endereços",
+  "views.admin.Account.addressQueryTip": "Deixe em branco para consultar todos os endereços",
+  "views.admin.Mails.addressQueryTip": "Deixe em branco para consultar todos os endereços",
+  "views.common.Appearance.left": "esquerda",
+  "views.common.Login.getNewEmailTip2": "Deixar em branco gerará um endereço de e-mail aleatório.",
+  "views.Header.light": "Claro",
+  "views.admin.IpBlacklistSettings.enable_daily_limit_tip": "Limitar o número de requisições de API por IP por dia",
+  "components.AddressSelect.localAddresses": "Endereços locais",
+  "views.common.Login.bindUserInfo": "Usuário logado: entrar sem vincular e-mail ou criar um novo endereço vinculará ao usuário atual",
+  "views.user.UserOauth2Callback.logging": "Entrando...",
+  "views.user.UserLogin.login": "Entrar",
+  "views.common.Login.login": "Entrar",
+  "views.common.Login.loginAndBind": "Entrar e vincular",
+  "views.Admin.loginMethod": "Método de login",
+  "views.user.UserBar.fetchUserSettingsError": "A senha de login é inválida ou a conta não existe; também pode ser um problema de conexão. Tente novamente mais tarde.",
+  "views.user.UserLogin.loginWith": "Entrar com {provider}",
+  "views.user.UserLogin.loginWithPasskey": "Entrar com passkey",
+  "views.user.UserSettings.logout": "Sair",
+  "views.user.BindAddress.logout": "Sair",
+  "views.Admin.logout": "Sair",
+  "views.index.AccountSettings.logout": "Sair do endereço de e-mail atual",
+  "views.Admin.logoutSuccess": "Logout realizado com sucesso",
+  "views.admin.UserOauth2Settings.mailAllowList": "Lista branca de endereços de e-mail",
+  "views.admin.UserSettings.mailAllowList": "Lista branca de endereços de e-mail",
+  "views.index.SimpleIndex.addressCredential": "Credencial do endereço de e-mail",
+  "views.index.AddressBar.addressCredential": "Credencial do endereço de e-mail",
+  "views.admin.Account.addressCredential": "Credencial do endereço de e-mail",
+  "views.admin.CreateAccount.addressCredential": "Credencial do endereço de e-mail",
+  "views.index.AddressBar.fetchAddressError": "A credencial do e-mail é inválida ou a conta não existe; também pode ser um problema de rede. Tente novamente mais tarde.",
+  "views.Index.mailbox": "Caixa de entrada",
+  "views.User.user_mail_box_tab": "Caixa de entrada",
+  "views.user.AddressManagement.mail_count": "Quantidade de e-mails",
+  "views.admin.Account.mail_count": "Quantidade de e-mails",
+  "views.admin.Statistics.mailCount": "Quantidade de e-mails",
+  "views.admin.UserAddressManagement.mail_count": "Quantidade de e-mails",
+  "views.index.SimpleIndex.deleteSuccess": "E-mail excluído com sucesso",
+  "views.user.UserLogin.cannotForgotPassword": "A verificação por e-mail ou o registro está desativado; não é possível redefinir a senha. Entre em contato com o administrador.",
+  "views.Admin.mailWebhook": "Webhook de e-mail",
+  "views.common.Appearance.mailboxSplitSize": "Largura da lista esquerda na visualização de duas colunas da caixa de correio",
+  "views.common.Appearance.mailListView": "Visualização de lista da caixa de correio em largura total",
+  "views.common.Appearance.mailListPreviewLineClamp": "Linhas da prévia do corpo",
+  "views.common.Appearance.off": "Desativado",
+  "views.index.SimpleIndex.refreshSuccess": "E-mails atualizados com sucesso",
+  "views.Admin.unknow": "E-mails com destinatário desconhecido",
+  "views.Admin.maintenance": "Manutenção",
+  "views.index.AddressBar.addressManage": "Gerenciar",
+  "views.admin.AccountSettings.source_match_mode": "Modo de correspondência",
+  "views.admin.RoleAddressConfig.maxAddressCount": "Quantidade máxima de endereços (0 = ilimitado)",
+  "views.admin.UserSettings.maxAddressCount": "Número máximo de endereços que podem ser vinculados (0 = ilimitado)",
+  "views.Header.menu": "Menu",
+  "views.admin.DatabaseManager.migration": "Migrar banco de dados",
+  "views.admin.SenderAccess.modify": "Modificar",
+  "views.admin.AccountSettings.send_mail_monthly_limit": "Limite mensal",
+  "views.admin.AccountSettings.send_mail_monthly_limit_invalid": "O limite mensal deve ser um inteiro maior ou igual a -1",
+  "components.MailBox.multiAction": "Ação múltipla",
+  "components.SendBox.multiAction": "Ação múltipla",
+  "views.admin.Account.multiClearInbox": "Limpar várias caixas de entrada",
+  "views.admin.Account.multiClearSentItems": "Limpar vários itens enviados",
+  "views.admin.Account.multiDelete": "Excluir em lote",
+  "views.user.AddressManagement.name": "Nome",
+  "views.index.AutoReply.name": "Nome",
+  "views.admin.Account.name": "Nome",
+  "views.admin.UserOauth2Settings.name": "Nome",
+  "views.admin.UserAddressManagement.name": "Nome",
+  "views.admin.Maintenance.sqlName": "Nome",
+  "views.index.AccountSettings.newPassword": "Nova senha",
+  "views.admin.Account.newPassword": "Nova senha",
+  "components.MailBox.nextMail": "Próximo",
+  "views.index.SimpleIndex.nextPage": "Próximo",
+  "views.admin.AccountSettings.noLimitSendAddressList": "Lista de endereços sem limite de saldo",
+  "views.index.SimpleIndex.noMails": "Nenhum e-mail encontrado",
+  "views.admin.RoleAddressConfig.noRolesAvailable": "Nenhuma função disponível na configuração do sistema",
+  "views.index.SendMail.requestAccessTip": "A permissão e o saldo de envio são gerenciados separadamente para cada endereço. O endereço atual, {address}, não tem saldo disponível. Solicite permissão para este endereço ou fale com o administrador.",
+  "views.index.SendMail.requestSuccess": "Permissão de envio solicitada para o endereço atual",
+  "components.SendBox.emptySent": "Nenhum e-mail enviado",
+  "views.admin.RoleAddressConfig.notConfigured": "Não configurado (usar configurações globais)",
+  "views.Admin.userOauth2Settings": "Configurações de OAuth2",
+  "views.admin.UserOauth2Settings.oauth2Type": "Tipo de OAuth2",
+  "views.Header.ok": "OK",
+  "views.Admin.ok": "OK",
+  "views.index.AddressBar.ok": "OK",
+  "views.admin.SenderAccess.ok": "OK",
+  "views.common.Login.ok": "OK",
+  "views.admin.AccountSettings.create_address_subdomain_match_tip": "Afeta apenas a validação de domínio em /api/new_address e /admin/new_address. Exemplo: com isso ativado, foo.example.com pode corresponder a example.com.",
+  "components.AiExtractInfo.open": "Abrir",
+  "views.index.AddressBar.linkWithAddressCredential": "Abrir link de login automático por e-mail",
+  "views.admin.CreateAccount.linkWithAddressCredential": "Abrir link de login automático por e-mail",
+  "views.index.SendMail.options": "Opções",
+  "views.admin.SendMail.options": "Opções",
+  "components.AiExtractInfo.otherLink": "Outro link",
+  "views.user.UserSettings.passkeyCreated": "Passkey criada com sucesso",
+  "views.user.UserSettings.passkey_name": "Nome da passkey",
+  "views.user.UserLogin.password": "Senha",
+  "views.admin.UserManagement.password": "Senha",
+  "views.common.Login.password": "Senha",
+  "views.index.AccountSettings.passwordChanged": "Senha alterada com sucesso",
+  "views.common.Login.passwordLogin": "Login com senha",
+  "views.admin.Account.passwordResetSuccess": "Senha redefinida com sucesso",
+  "views.index.AccountSettings.passwordMismatch": "As senhas não coincidem",
+  "views.index.SendMail.successSend": "Verifique a caixa de saída. Se falhar, confira seu saldo ou tente novamente mais tarde.",
+  "views.admin.SendMail.successSend": "Verifique sua caixa de saída. Se falhar, tente novamente mais tarde.",
+  "views.user.UserLogin.pleaseCompleteTurnstile": "Conclua o turnstile",
+  "views.index.SimpleIndex.addressCredentialTip": "Copie a credencial do endereço de e-mail; você poderá usá-la para fazer login.",
+  "views.index.AddressBar.addressCredentialTip": "Copie a credencial do endereço de e-mail; você poderá usá-la para entrar na sua conta de e-mail.",
+  "views.admin.Account.addressCredentialTip": "Copie a credencial do endereço de e-mail; você poderá usá-la para entrar na sua conta de e-mail.",
+  "views.admin.CreateAccount.addressCredentialTip": "Copie a credencial do endereço de e-mail; você poderá usá-la para entrar na sua conta de e-mail.",
+  "views.Admin.accessTip": "Digite a senha de administrador",
+  "views.Header.accessTip": "Informe a senha de acesso correta",
+  "views.admin.AccountSettings.address_block_list_placeholder": "Informe as palavras-chave que deseja bloquear",
+  "views.user.UserSettings.renamePasskeyNamePlaceholder": "Informe o novo nome da passkey",
+  "views.user.UserSettings.passkeyNamePlaceholder": "Informe o nome da passkey ou deixe em branco para gerar um aleatório",
+  "views.admin.CreateAccount.fillInAllFields": "Preencha todos os campos",
+  "views.admin.SendBox.queryTip": "Informe o endereço para consulta; deixe em branco para consultar todos",
+  "views.user.UserLogin.pleaseInputCode": "Informe o código",
+  "views.admin.UserManagement.pleaseInput": "Informe todas as informações",
+  "views.user.UserLogin.pleaseInputEmail": "Informe o e-mail",
+  "views.user.UserLogin.pleaseInput": "Informe e-mail e senha",
+  "views.admin.Maintenance.tip": "Informe os dias",
+  "views.common.Login.getNewEmailTip1": "Informe o e-mail que deseja usar. Permitido apenas: ",
+  "views.common.Login.credentialInput": "Digite a credencial do endereço de e-mail",
+  "views.admin.SenderAccess.modalTip": "Informe o saldo de envio",
+  "views.user.UserLogin.pleaseLogin": "Faça login",
+  "views.common.Login.pleaseGetNewEmail": "Faça login ou clique em \"Criar novo e-mail\" para obter um novo endereço.",
+  "components.WebhookComponent.fillInDemoTip": "Altere a URL e as demais configurações para as suas",
+  "components.SendBox.pleaseSelectMail": "Selecione um e-mail para visualizar.",
+  "views.admin.Account.pleaseSelectAddress": "Selecione um endereço",
+  "components.MailBox.pleaseSelectMail": "Selecione um e-mail",
+  "views.admin.UserManagement.prefix": "Prefixo",
+  "components.WebhookComponent.presets": "Modelos",
+  "views.index.SendMail.preview": "Pré-visualização",
+  "views.admin.SendMail.preview": "Pré-visualização",
+  "views.admin.UserOauth2Settings.iconPreview": "Pré-visualização",
+  "components.MailBox.prevMail": "Anterior",
+  "views.index.SimpleIndex.prevPage": "Anterior",
+  "components.MailBox.query": "Consultar",
+  "views.user.UserMailBox.query": "Consultar",
+  "views.Index.query": "Consultar",
+  "views.admin.SendBox.query": "Consultar",
+  "views.admin.Account.query": "Consultar",
+  "views.admin.SenderAccess.query": "Consultar",
+  "views.admin.UserManagement.query": "Consultar",
+  "views.admin.Mails.query": "Consultar",
+  "views.Admin.qucickSetup": "Configuração rápida",
+  "views.index.SendMail.toMailEmpty": "O endereço do destinatário está vazio",
+  "views.admin.SendMail.toMailEmpty": "O endereço do destinatário está vazio",
+  "views.index.SendMail.toName": "Nome e endereço do destinatário; deixe o nome em branco para usar o e-mail",
+  "views.admin.SendMail.toName": "Nome e endereço do destinatário; deixe o nome em branco para usar o e-mail",
+  "components.MailBox.refresh": "Atualizar",
+  "components.Turnstile.refresh": "Atualizar",
+  "components.SendBox.refresh": "Atualizar",
+  "views.index.SimpleIndex.refreshMails": "Atualizar",
+  "components.MailBox.refreshAfter": "Atualizar em {msg} segundos",
+  "views.index.SimpleIndex.refreshAfter": "Atualizar em {msg} segundos",
+  "views.admin.AccountSettings.regex_too_long": "O padrão regex é muito longo (máx. 200 caracteres)",
+  "views.user.UserLogin.register": "Registrar",
+  "views.user.UserSettings.renamePasskey": "Renomear passkey",
+  "views.admin.UserOauth2Settings.userEmailReplace": "Modelo de substituição",
+  "components.MailBox.reply": "Responder",
+  "components.MailContentRenderer.reply": "Responder",
+  "views.index.SendMail.requestAccess": "Solicitar acesso",
+  "views.user.UserLogin.resetPassword": "Redefinir Senha",
+  "views.admin.Account.resetPassword": "Redefinir Senha",
+  "views.admin.UserManagement.resetPassword": "Redefinir Senha",
+  "views.index.SendMail.rich text": "Texto rico",
+  "views.admin.SendMail.rich text": "Texto rico",
+  "views.common.Appearance.right": "direita",
+  "views.admin.UserManagement.role": "Função",
+  "views.admin.RoleAddressConfig.role": "Função",
+  "views.Admin.roleAddressConfig": "Configuração de endereço por função",
+  "views.admin.AccountSettings.rule_index": "Regra",
+  "views.Index.s3Attachment": "Anexo S3",
+  "components.WebhookComponent.save": "Salvar",
+  "views.index.AutoReply.save": "Salvar",
+  "views.admin.AiExtractSettings.save": "Salvar",
+  "views.admin.UserOauth2Settings.save": "Salvar",
+  "views.admin.IpBlacklistSettings.save": "Salvar",
+  "views.admin.Telegram.save": "Salvar",
+  "views.admin.UserSettings.save": "Salvar",
+  "views.admin.RoleAddressConfig.save": "Salvar",
+  "views.admin.AccountSettings.save": "Salvar",
+  "views.admin.Maintenance.save": "Salvar",
+  "views.admin.Webhook.save": "Salvar",
+  "views.admin.Maintenance.saveSuccess": "Salvo com sucesso",
+  "views.admin.UserOauth2Settings.successTip": "Salvo com sucesso",
+  "views.admin.IpBlacklistSettings.successTip": "Salvo com sucesso",
+  "views.admin.UserSettings.successTip": "Salvo com sucesso",
+  "views.admin.AccountSettings.successTip": "Salvo com sucesso",
+  "components.MailBox.saveToS3": "Salvar no S3",
+  "components.MailContentRenderer.saveToS3": "Salvar no S3",
+  "views.Index.saveToS3Success": "salvo no S3 com sucesso",
+  "components.MailBox.selectAll": "Selecionar toda esta página",
+  "components.SendBox.selectAll": "Selecionar toda esta página",
+  "views.admin.Account.selectAll": "Selecionar toda esta página",
+  "views.admin.AccountSettings.select_domain": "Selecionar domínio",
+  "views.admin.Account.selectedItems": "Selecionado",
+  "views.index.SendMail.send": "Enviar",
+  "views.admin.SendMail.send": "Enviar",
+  "views.Index.sendbox": "Caixa de saída",
+  "views.Admin.sendBox": "Caixa de saída",
+  "views.user.AddressManagement.send_count": "Quantidade enviada",
+  "views.admin.Account.send_count": "Quantidade enviada",
+  "views.admin.UserAddressManagement.send_count": "Quantidade enviada",
+  "views.Index.sendmail": "Enviar e-mail",
+  "views.Admin.sendMail": "Enviar e-mail",
+  "views.index.SendMail.send_balance": "Saldo de envio do endereço atual",
+  "views.admin.Statistics.sendMailCount": "Quantidade de e-mails enviados",
+  "views.admin.AccountSettings.send_mail_limit": "Limite de envio",
+  "views.user.UserLogin.sendVerificationCode": "Enviar código de verificação",
+  "views.Admin.senderAccess": "Controle de acesso de envio",
+  "views.admin.SendMail.fromMailEmpty": "O endereço do remetente está vazio",
+  "views.index.AutoReply.sourcePrefix": "Filtro de remetente",
+  "components.AiExtractInfo.serviceLink": "Link do serviço",
+  "views.index.AutoReply.settings": "Configurações",
+  "views.index.AccountSettings.showAddressCredential": "Mostrar credencial do endereço",
+  "components.MailBox.attachments": "Mostrar anexos",
+  "components.MailBox.showHtmlMail": "Mostrar e-mail HTML",
+  "components.MailContentRenderer.showHtmlMail": "Mostrar e-mail HTML",
+  "views.admin.Account.showCredential": "Mostrar credencial do endereço de e-mail",
+  "views.user.UserSettings.showPasskeyList": "Mostrar lista de passkeys",
+  "components.MailBox.showTextMail": "Mostrar e-mail em texto",
+  "components.MailContentRenderer.showTextMail": "Mostrar e-mail em texto",
+  "views.Index.enterSimpleMode": "Modo simples",
+  "components.MailContentRenderer.size": "Tamanho",
+  "views.admin.Account.source_meta": "Origem",
+  "views.admin.AccountSettings.source_patterns": "Regex do endereço de origem (opcional)",
+  "views.admin.Maintenance.sqlStatement": "Comando SQL (somente DELETE)",
+  "views.user.UserOauth2Callback.stateNotMatch": "estado não corresponde",
+  "views.Admin.statistics": "Estatísticas",
+  "views.Header.status": "Status",
+  "views.admin.IpBlacklistSettings.enable_whitelist_tip": "Modo estrito: apenas IPs que corresponderem à lista branca poderão acessar APIs com limite. Todos os outros IPs serão negados.",
+  "views.index.AutoReply.subject": "Assunto",
+  "views.index.SendMail.subject": "Assunto",
+  "views.admin.SendMail.subject": "Assunto",
+  "views.index.SendMail.subjectEmpty": "O assunto está vazio",
+  "views.admin.SendMail.subjectEmpty": "O assunto está vazio",
+  "components.AiExtractInfo.subscriptionLink": "Link de assinatura",
+  "views.user.AddressManagement.success": "sucesso",
+  "views.index.TelegramAddress.success": "sucesso",
+  "views.index.LocalAddress.success": "sucesso",
+  "views.admin.UserAddressManagement.success": "sucesso",
+  "components.WebhookComponent.successTip": "Sucesso",
+  "components.MailBox.success": "Sucesso",
+  "components.SendBox.success": "Sucesso",
+  "views.index.AccountSettings.success": "Sucesso",
+  "views.index.AutoReply.success": "Sucesso",
+  "views.admin.AiExtractSettings.successTip": "Sucesso",
+  "views.admin.Account.success": "Sucesso",
+  "views.admin.SenderAccess.success": "Sucesso",
+  "views.admin.UserManagement.success": "Sucesso",
+  "views.admin.Telegram.successTip": "Sucesso",
+  "views.admin.RoleAddressConfig.successTip": "Sucesso",
+  "views.admin.Webhook.successTip": "Sucesso",
+  "views.admin.CreateAccount.successTip": "Criado com sucesso",
+  "views.admin.Telegram.globalMailPushListTip": "Suporta chat_id de conversa privada/grupo/canal. Envie uma mensagem ao bot e acesse este link para ver o chat_id: https://api.telegram.org/bot<Substitua pelo seu BOT TOKEN>/getUpdates",
+  "views.user.AddressManagement.targetUserEmail": "E-mail do usuário de destino",
+  "views.admin.Telegram.telegramAllowList": "Lista branca do Telegram (informar manualmente o Chat ID)",
+  "views.Admin.telegram": "Bot do Telegram",
+  "views.admin.Telegram.miniAppUrl": "URL do Mini App do Telegram",
+  "components.WebhookComponent.test": "Teste",
+  "views.index.SendMail.text": "Texto",
+  "views.admin.SendMail.text": "Texto",
+  "views.user.UserSettings.passordTip": "O servidor recebe apenas o hash da senha, nunca a senha em texto puro, portanto não pode vê-la nem recuperá-la. Se o administrador ativar a verificação por e-mail, você poderá redefini-la no modo anônimo.",
+  "views.index.LocalAddress.tip": "Esses endereços ficam armazenados no navegador e podem ser perdidos se você limpar o cache.",
+  "views.admin.UserOauth2Settings.tip": "O login de terceiros usará automaticamente o e-mail do usuário para registrar uma conta (o mesmo e-mail será considerado a mesma conta). Você também pode definir a senha via “esqueci minha senha”.",
+  "views.admin.AccountSettings.send_mail_limit_tip": "Aplica-se a todos os canais de envio. Use -1 para ilimitado e 0 para bloquear o envio.",
+  "views.admin.AccountSettings.create_address_subdomain_match_note": "RANDOM_SUBDOMAIN_DOMAINS já permite subdomínios aleatórios ou manuais nos domínios base listados. Esta opção também permite que a API informe subdomínios em outros domínios base permitidos.",
+  "views.index.SendMail.tooLarge": "Arquivo muito grande; envie um arquivo menor que 1 MB.",
+  "views.admin.SendMail.tooLarge": "Arquivo muito grande; envie um arquivo menor que 1 MB.",
+  "views.common.Appearance.top": "topo",
+  "views.user.AddressManagement.transferAddress": "Transferir endereço",
+  "views.user.AddressManagement.transferAddressTip": "Transferir este endereço para outro usuário irá removê-lo da sua conta e movê-lo para a conta dele. Tem certeza de que deseja transferi-lo?",
+  "views.common.Appearance.useSideMargin": "Ativar margens laterais à esquerda e à direita da página",
+  "views.admin.AiExtractSettings.manualInputPrompt": "Digite e pressione Enter para adicionar",
+  "views.admin.UserOauth2Settings.manualInputPrompt": "Digite e pressione Enter para adicionar",
+  "views.admin.Telegram.manualInputPrompt": "Digite e pressione Enter para adicionar",
+  "views.admin.UserSettings.manualInputPrompt": "Digite e pressione Enter para adicionar",
+  "views.admin.AccountSettings.manualInputPrompt": "Digite e pressione Enter para adicionar",
+  "views.admin.Webhook.manualInputPrompt": "Digite e pressione Enter para adicionar",
+  "views.admin.IpBlacklistSettings.manualInputPrompt": "Digite o padrão e pressione Enter para adicionar",
+  "views.user.AddressManagement.unbindAddress": "Desvincular endereço",
+  "views.index.TelegramAddress.unbindMailAddress": "Desvincular endereço de e-mail",
+  "views.index.LocalAddress.unbindMailAddress": "Desvincular credencial do endereço de e-mail",
+  "components.MailBox.unselectAll": "Desmarcar tudo",
+  "components.SendBox.unselectAll": "Desmarcar tudo",
+  "views.admin.Account.unselectAll": "Desmarcar tudo",
+  "views.admin.Account.updated_at": "Atualizado em",
+  "views.user.UserSettings.updated_at": "Atualizado em",
+  "components.WebhookComponent.urlMissing": "URL é obrigatória",
+  "views.common.Appearance.useIframeShowMail": "Usar iframe para mostrar e-mail HTML",
+  "views.admin.CreateAccount.enableRandomSubdomain": "Usar subdomínio aleatório",
+  "views.common.Login.enableRandomSubdomain": "Usar subdomínio aleatório",
+  "views.admin.UserOauth2Settings.userEmailFormatTip": "Use regex para transformar o e-mail. Exemplo: ^(.+)@old\\.com$ com $1@new.com",
+  "views.common.Appearance.useSimpleIndex": "Usar índice simples",
+  "views.common.Appearance.useUTCDate": "Usar data UTC",
+  "views.Header.user": "Usuário",
+  "views.Admin.user": "Usuário",
+  "components.AddressSelect.userAddresses": "Endereços do usuário",
+  "views.Admin.loginViaUserAdmin": "Permissão de administrador do usuário",
+  "views.admin.Statistics.userCount": "Quantidade de usuários",
+  "views.admin.UserManagement.user_email": "E-mail do usuário",
+  "views.index.AddressBar.userLogin": "Login do usuário",
+  "views.Admin.user_management": "Gerenciamento de usuários",
+  "views.Admin.user_settings": "Configurações do usuário",
+  "views.User.user_settings": "Configurações do usuário",
+  "components.AiExtractInfo.authCode": "Código de verificação",
+  "views.user.UserLogin.verifyCode": "Código de verificação",
+  "views.user.UserLogin.verifyCodeSent": "Código de verificação enviado, expira em {timeout} segundos",
+  "views.admin.AccountSettings.verified_address_list": "Lista de endereços verificados (pode enviar e-mail pela API interna do cf)",
+  "views.admin.UserSettings.verifyMailSender": "Verificar remetente do e-mail",
+  "components.MailContentRenderer.attachments": "Ver anexos",
+  "views.admin.Account.viewMails": "Ver e-mails",
+  "views.admin.Account.viewSendBox": "Ver caixa de saída",
+  "views.user.UserLogin.waitforVerifyCode": "Aguarde {timeout} segundos",
+  "views.admin.Webhook.webhookAllowList": "Lista de permissão do webhook (digite o e-mail autorizado e pressione Enter)",
+  "views.admin.Webhook.notEnabled": "O webhook não está habilitado",
+  "components.WebhookComponent.notEnabled": "O webhook não está habilitado para você",
+  "views.Index.webhookSettings": "Configurações de webhook",
+  "views.Admin.webhookSettings": "Configurações de webhook",
+  "views.admin.AiExtractSettings.disabledTip": "Quando desativado, a extração por IA processará todos os endereços",
+  "views.admin.AiExtractSettings.enableAllowListTip": "Quando ativado, a extração por IA só processará e-mails enviados aos endereços permitidos",
+  "views.admin.CreateAccount.randomSubdomainTip": "Quando ativado, o endereço criado usará um subdomínio aleatório. Recomendado apenas para recebimento. Requer um registro MX curinga no DNS do domínio base — consulte a documentação de subdomínios aleatórios.",
+  "views.admin.CreateAccount.enableCustomSubdomain": "Usar subdomínio personalizado",
+  "views.admin.CreateAccount.normalSubdomain": "Domínio normal",
+  "views.common.Login.enableCustomSubdomain": "Usar subdomínio personalizado",
+  "views.common.Login.normalSubdomain": "Domínio normal",
+  "views.common.Login.randomSubdomainTip": "Quando ativado, o endereço criado usará um subdomínio aleatório. Recomendado apenas para recebimento. Requer um registro MX curinga no DNS do domínio base — consulte a documentação de subdomínios aleatórios.",
+  "views.admin.AiExtractSettings.allowListTip": "O curinga * corresponde a quaisquer caracteres; ex.: *{'@'}example.com corresponde a todos os endereços do domínio example.com",
+  "views.Admin.workerconfig": "Configuração do Worker",
+  "views.admin.AccountSettings.create_address_subdomain_match_env_locked": "A variável ENABLE_CREATE_ADDRESS_SUBDOMAIN_MATCH está em false. O botão salvo pode ser alterado, mas só terá efeito quando a variável for ativada ou removida.",
+  "views.common.Login.getNewEmailTip3": "Você pode escolher um domínio na lista suspensa.",
+  "views.admin.AccountSettings.tip": "Você pode inserir manualmente os seguintes valores e pressionar Enter para adicioná-los",
+  "components.MailBox.emptyInbox": "Sua caixa de entrada está vazia",
+  "views.index.SendMail.fromName": "Seu nome e endereço; deixe o nome em branco para usar o e-mail",
+  "views.admin.SendMail.fromName": "Seu nome e endereço; deixe o nome em branco para usar o e-mail",
+  "components.AddressCredentialModal.addressCredential": "Credencial do endereço",
+  "components.AddressCredentialModal.addressCredentialLabel": "Address JWT",
+  "components.AddressCredentialModal.addressPassword": "Senha do endereço",
+  "components.AddressCredentialModal.agentAccess": "AI Agent",
+  "components.AddressCredentialModal.agentAccessTip": "Use esta caixa de entrada em um AI Agent com o Address JWT e as APIs parsed-mail.",
+  "components.AddressCredentialModal.agentConfig": "Configuração do Agent",
+  "components.AddressCredentialModal.agentSkill": "Agent skill",
+  "components.AddressCredentialModal.apiBase": "Base da API",
+  "components.AddressCredentialModal.autoLoginLink": "Link de login automático",
+  "components.AddressCredentialModal.copyFailed": "Falha ao copiar",
+  "components.AddressCredentialModal.copySection": "Copiar",
+  "components.AddressCredentialModal.copySuccess": "Copiado",
+  "components.AddressCredentialModal.currentAddress": "Endereço atual",
+  "components.AddressCredentialModal.docs": "Documentação",
+  "components.AddressCredentialModal.imapHost": "Host IMAP",
+  "components.AddressCredentialModal.imapPort": "Porta IMAP",
+  "components.AddressCredentialModal.password": "Senha",
+  "components.AddressCredentialModal.plainOrProxyTls": "Texto puro ou TLS do proxy",
+  "components.AddressCredentialModal.security": "Segurança",
+  "components.AddressCredentialModal.smtpHost": "Host SMTP",
+  "components.AddressCredentialModal.smtpImapAccess": "SMTP / IMAP",
+  "components.AddressCredentialModal.smtpImapTip": "Use estes valores em clientes de e-mail depois que o administrador configurar o proxy SMTP/IMAP. Como senha, use o Address JWT mostrado aqui ou a senha do endereço quando você a tiver.",
+  "components.AddressCredentialModal.smtpPort": "Porta SMTP",
+  "components.AddressCredentialModal.starttls": "STARTTLS",
+  "components.AddressCredentialModal.tip": "Use estas credenciais somente com clientes e agents confiáveis.",
+  "components.AddressCredentialModal.title": "Credenciais do endereço e métodos de conexão",
+  "components.AddressCredentialModal.username": "Nome de usuário",
+  "views.User.send_mail": "Enviar e-mail",
+  "views.user.UserSendBox.noAddress": "Selecione um endereço de e-mail vinculado",
+  "views.user.UserSendBox.sendbox": "Enviados"
+}