feat(mail): add governed JMAP mailbox sync and search

2026-08-22 17:09:05 +02:00
parent fd808336bc
commit 1cbf4acaf4
29 changed files with 2481 additions and 183 deletions
@@ -592,6 +592,23 @@ class MailProfilePolicyHelperTests(unittest.TestCase):
        self.assertEqual(policy.blacklist_patterns["smtp_hosts"], ["*.blocked.example"])
        self.assertFalse(policy.allow_lower_level_limits["blacklist.smtp_hosts"])

+    def test_jmap_hostname_policy_has_independent_deny_and_lower_scope_lock(self):
+        policy = EffectiveMailProfilePolicy()
+        _merge_policy(
+            policy,
+            {
+                "blacklist": {"jmap_hosts": ["*.blocked.example"]},
+                "allow_lower_level_limits": {"blacklist.jmap_hosts": False},
+            },
+            source="system",
+        )
+
+        allowed, reason = policy.value_allowed("jmap_hosts", "mail.blocked.example")
+
+        self.assertFalse(allowed)
+        self.assertIn("jmap_hosts", reason or "")
+        self.assertFalse(policy.allow_lower_level_limits["blacklist.jmap_hosts"])
+
    def test_parent_lock_violations_are_reported_per_field(self):
        violations = _policy_parent_lock_violations(
            {