Isolate email from main window

.cargo/config.toml

@@ -0,0 +1,2 @@
+[target.x86_64-pc-windows-gnu]
+linker = "x86_64-w64-mingw32-gcc"

.gitignore

@@ -32,3 +32,5 @@ target
 **/gen/schemas
 
 TODO_plan.md
+
+graphify-out/

Cargo.toml

@@ -2,7 +2,16 @@
 members = [
   "src-tauri",
   "crates/html_transpiler",
+  "crates/email_network",
+  "crates/email_webview",
 ]
 resolver = "2"
 
 default-members = ["src-tauri"]
+
+[profile.release]
+lto = "fat"
+codegen-units = 1
+strip = true
+opt-level = "s"
+panic = "abort"

TODO.md

@@ -255,25 +255,25 @@
     - [ ] 26.8 - UI: Detect dates in emails and suggest "Add to Calendar"
 
 - [ ] 27 - Isolated Webview with Watchdog
-    - [ ] 27.1 - Rust: Replace iframe with native Tauri Child Webview for email rendering
-    - [ ] 27.2 - UI: Create placeholder div in MessageViewBody for Child Webview positioning
-    - [ ] 27.3 - Rust: Position Child Webview as overlay aligned to the React placeholder bounds
-    - [ ] 27.4 - Rust: Serve email HTML to Child Webview via existing `postail://` protocol handler
-    - [ ] 27.5 - ACL: Create `email-webview` capability with zero permissions (deny all IPC)
-    - [ ] 27.6 - ACL: Whitelist only `email_heartbeat` command for the email webview window
-    - [ ] 27.7 - Rust: `email_heartbeat` command — accept token, rate-limit, update last-seen timestamp
-    - [ ] 27.8 - Rust: Inject heartbeat initialization script into Child Webview on creation
-    - [ ] 27.9 - JS: Heartbeat loop in injected script — invoke `email_heartbeat` every 100ms
-    - [ ] 27.10 - Rust: Watchdog task — spawn tokio task monitoring heartbeat timestamps per webview
-    - [ ] 27.11 - Rust: Extract Child Webview renderer PID after creation (platform-specific)
-    - [ ] 27.12 - Rust: Adaptive timeout — dynamically adjust watchdog threshold to avoid false positives
-    - [ ] 27.13 - Rust: Freeze process — SIGSTOP (Linux) / SuspendThread (Windows) on timeout
-    - [ ] 27.14 - Rust: Resume process — SIGCONT (Linux) / ResumeThread (Windows) on user request
-    - [ ] 27.15 - Rust: Optional per-process resource limits (memory/CPU) via /proc (Linux) / Job Objects (Windows)
-    - [ ] 27.16 - Rust: Emit `email_webview_frozen` event to frontend on freeze
-    - [ ] 27.17 - UI: `EmailFreezeNotice` component — overlay with freeze info, resume/keep-frozen buttons
-    - [ ] 27.18 - UI: Listen for `email_webview_frozen` in MessageView and show EmailFreezeNotice
-    - [ ] 27.19 - Rust: Emit `email_webview_resumed` event after successful resume
-    - [ ] 27.20 - UI: Handle resume event — hide notice, reset watchdog state display
-    - [ ] 27.21 - Rust: Cleanup — destroy Child Webview and kill process on message navigation
+    - [x] 27.1 - Rust: Replace iframe with native Tauri Child Webview for email rendering
+    - [x] 27.2 - UI: Create placeholder div in MessageViewBody for Child Webview positioning
+    - [x] 27.3 - Rust: Position Child Webview as overlay aligned to the React placeholder bounds
+    - [x] 27.4 - Rust: Serve email HTML to Child Webview via existing `postail://` protocol handler
+    - [x] 27.5 - ACL: Create `email-webview` capability with zero permissions (deny all IPC)
+    - [x] 27.6 - ACL: Whitelist only `email_heartbeat` command for the email webview window
+    - [x] 27.7 - Rust: `email_heartbeat` command — accept token, rate-limit, update last-seen timestamp
+    - [x] 27.8 - Rust: Inject heartbeat initialization script into Child Webview on creation
+    - [x] 27.9 - JS: Heartbeat loop in injected script — invoke `email_heartbeat` every 100ms
+    - [x] 27.10 - Rust: Watchdog task — spawn tokio task monitoring heartbeat timestamps per webview
+    - [x] 27.11 - Rust: Extract Child Webview renderer PID after creation (platform-specific)
+    - [x] 27.12 - Rust: Adaptive timeout — dynamically adjust watchdog threshold to avoid false positives
+    - [x] 27.13 - Rust: Freeze process — SIGSTOP (Linux) / SuspendThread (Windows) on timeout
+    - [x] 27.14 - Rust: Resume process — SIGCONT (Linux) / ResumeThread (Windows) on user request
+    - [x] 27.15 - Rust: Optional per-process resource limits (memory/CPU) via /proc (Linux) / Job Objects (Windows)
+    - [x] 27.16 - Rust: Emit `email_webview_frozen` event to frontend on freeze
+    - [x] 27.17 - UI: `EmailFreezeNotice` component — overlay with freeze info, resume/keep-frozen buttons
+    - [x] 27.18 - UI: Listen for `email_webview_frozen` in MessageView and show EmailFreezeNotice
+    - [x] 27.19 - Rust: Emit `email_webview_resumed` event after successful resume
+    - [x] 27.20 - UI: Handle resume event — hide notice, reset watchdog state display
+    - [x] 27.21 - Rust: Cleanup — destroy Child Webview and kill process on message navigation
     - [ ] 27.22 - Integration: End-to-end test with heavy HTML email triggering freeze/resume cycle

crates/email_network/Cargo.toml

@@ -0,0 +1,26 @@
+[package]
+name = "email_network"
+version = "0.1.0"
+edition = "2021"
+description = "Network layer for Postail"
+authors = ["FixeQD"]
+
+[dependencies]
+base64 = "0.22"
+futures = "0.3.31"
+hex = "0.4"
+indexmap = { version = "2", features = ["serde"] }
+kuchikiki = "0.8.8-speedreader"
+rand = { version = "0.9", features = ["small_rng"] }
+reqwest = { version = "0.13", default-features = false, features = [
+    "json",
+    "form",
+    "http2",
+    "native-tls",
+] }
+serde = { version = "1", features = ["derive"] }
+serde_json = "1"
+sha2 = "0.10"
+thiserror = "2"
+tokio = { version = "1", features = ["full"] }
+tracing = "0.1"

crates/email_network/src/error.rs

@@ -0,0 +1,40 @@
+use thiserror::Error;
+
+#[derive(Debug, Error)]
+pub enum NetworkError {
+    #[error("request failed: {0}")]
+    Request(#[from] reqwest::Error),
+
+    #[error("server returned {status} for {url}")]
+    BadStatus { status: u16, url: String },
+
+    #[error("resource at {url} exceeds size limit ({size} bytes)")]
+    TooLarge { url: String, size: usize },
+}
+
+impl From<NetworkError> for String {
+    fn from(err: NetworkError) -> Self {
+        err.to_string()
+    }
+}
+
+#[derive(Debug, Error)]
+pub enum CacheError {
+    #[error("encryption failed: {0}")]
+    Encryption(String),
+
+    #[error("decryption failed: {0}")]
+    Decryption(String),
+
+    #[error("io error: {0}")]
+    Io(#[from] std::io::Error),
+
+    #[error("metadata serialization failed: {0}")]
+    Metadata(String),
+}
+
+impl From<CacheError> for String {
+    fn from(err: CacheError) -> Self {
+        err.to_string()
+    }
+}

crates/email_network/src/lib.rs

@@ -0,0 +1,2 @@
+pub mod error;
+pub mod network;