Masked email: delivery through masks (ME-4, ME-5, ME-6, ME-7, ME-9, ME-10)

A live mask accepts mail at RCPT TO and delivers to its owner, with an X-Masked-Email header naming it. A disabled mask files straight to Trash, past the owner's Sieve script. Deleted and expired masks are refused like unknown addresses, without being cached as unknown. Mail moves lastMessageAt and turns a pending mask enabled. Sub-addresses on a mask work.
2026-09-18 16:22:50 -07:00
parent 3b052a57da
commit 60d1d8b84a
4 changed files with 177 additions and 9 deletions
@@ -293,6 +293,29 @@ impl Server {

                    Ok(Some(result))
                } else {
+                    // inbuxa: ME-4, ME-6: a live masked address reaches its
+                    // owner; a refused one isn't cached, as it can come back
+                    if let Some(domain) = self.domain_by_id(domain_id).await?
+                        && let Some(name) = domain.names.first()
+                    {
+                        use inbuxa_features::masked_email::ops::{Lookup, lookup};
+                        match lookup(
+                            &self.core.storage.data,
+                            self.registry(),
+                            &format!("{local_part}@{name}"),
+                        )
+                        .await?
+                        {
+                            Lookup::Accepts(mask) => {
+                                return Ok(Some(EmailCache::Account(
+                                    mask.object.account_id.document_id(),
+                                )));
+                            }
+                            Lookup::Refuses => return Ok(None),
+                            Lookup::Unknown => {}
+                        }
+                    }
+
                    // Cache negative result
                    emails_negative.insert(
                        EmailAddress::new(local_part, domain_id),