Add encrypted envelope recipient state

webui/src/api/postbox.ts

@@ -86,6 +86,24 @@ export type PostboxMessage = {
   key_epoch: number;
   ciphertext_ref?: string | null;
   signed_manifest_ref?: string | null;
+  wrapped_keys: Array<{
+    recipient_type: string;
+    recipient_id: string;
+    key_epoch: number;
+    wrapped_key_ref: string;
+    algorithm?: string | null;
+    metadata: Record<string, unknown>;
+  }>;
+  external_recipient_tokens: Array<{
+    token_id: string;
+    state: "pending" | "available" | "fetched" | "expired" | "revoked";
+    expires_at?: string | null;
+    one_time: boolean;
+    key_fetched_at?: string | null;
+    revoked_at?: string | null;
+    assurance_profile?: string | null;
+    metadata: Record<string, unknown>;
+  }>;
   participants: PostboxParticipant[];
   attachments: PostboxAttachment[];
   metadata: Record<string, unknown>;

webui/src/features/postbox/PostboxPage.tsx

@@ -999,7 +999,7 @@ function MessageDetail({
           resetKey={`${message.id}:${message.availability}`}
         >
           {message.availability === "withdrawn"
-            ? "This message was withdrawn. Its audit metadata remains visible, but its content and actions are unavailable."
+            ? "This message was withdrawn. Future access is blocked and audit metadata remains visible. Plaintext already decrypted, copied, exported, or printed cannot be retracted."
             : "This message has expired. Its audit metadata remains visible, but its content and actions are unavailable."}
         </DismissibleAlert>
       ) : null}
@@ -1026,6 +1026,12 @@ function MessageDetail({
           <div><dt>Address</dt><dd>{postbox?.address || "Not loaded"}</dd></div>
           <div><dt>Producer</dt><dd>{producerLabel(message)}</dd></div>
           <div><dt>Encryption profile</dt><dd>{message.encryption_profile} · epoch {message.key_epoch}</dd></div>
+          {message.wrapped_keys.length ? (
+            <div><dt>Key envelopes</dt><dd>{message.wrapped_keys.length}</dd></div>
+          ) : null}
+          {message.external_recipient_tokens.length ? (
+            <div><dt>External grants</dt><dd>{message.external_recipient_tokens.length}</dd></div>
+          ) : null}
         </dl>
       </section>
       <section className="postbox-body">