diff --git a/modules/mesh-mail-web/cmd/mesh-mail-web/accounts.go b/modules/mesh-mail-web/cmd/mesh-mail-web/accounts.go
new file mode 100644
index 00000000..0ab2cd79
--- /dev/null
+++ b/modules/mesh-mail-web/cmd/mesh-mail-web/accounts.go
@@ -0,0 +1,203 @@
+package main
+
+// The accounts and folder pages (novox/hq ADR 0440 §4, issue 1264): the accounts page lists every account
+// mail-store.accounts answers, each with its state and its folders' mail and unread counts; the folder page
+// lists one folder's mails, newest first, 50 a page, from mail-store.search, paged by the date of the last one
+// shown. Every page behind the sign-in (NewServer's own RequireSession wrapping); rendered only through
+// html/template, so nothing a mail carries is ever interpreted as markup.
+
+import (
+ "context"
+ "encoding/json"
+ "fmt"
+ "html/template"
+ "net/http"
+ "time"
+)
+
+// accountBucketValue and accountBucketFolder mirror mesh-mail's own AccountValue and AccountFolderValue
+// (modules/mesh-mail/cmd/mesh-mail/mirror.go, issue 1255) — copied, not imported: mesh-mail-web is its own Go
+// module, and the shape is mesh-mail's own to change. Only the fields this page reads are kept.
+type accountBucketValue struct {
+ State string `json:"state"`
+ Folders []accountBucketFolder `json:"folders"`
+}
+
+type accountBucketFolder struct {
+ Name string `json:"name"`
+ Mails int `json:"mails"`
+ Unread int `json:"unread"`
+}
+
+// accountsAnswer is mail-store.accounts' own answer (mesh-mail tools.go accountsTool), the fields this page
+// reads.
+type accountsAnswer struct {
+ Accounts []struct {
+ Account string `json:"account"`
+ Kind string `json:"kind"`
+ Address string `json:"address"`
+ State string `json:"state"`
+ Why string `json:"why"`
+ } `json:"accounts"`
+}
+
+// accountRow is one account's own line on the accounts page.
+type accountRow struct {
+ Name, Kind, Address, State, Why string
+ FoldersKnown bool
+ Folders []accountBucketFolder
+}
+
+var accountsTemplate = template.Must(template.New("accounts").Parse(`
+Mail accounts
+
+{{end}}
+`))
+
+// accountsTemplateData avoids the html/template range variable losing access to the account's own name inside
+// its nested range over folders (Go templates have no closures): each row carries its own name twice.
+type accountsTemplateData struct {
+ Accounts []accountRowWithName
+ Error string
+}
+
+type accountRowWithName struct {
+ accountRow
+ CurrentAccount string
+}
+
+// accountsPage is issue 1264/AC1-AC5: lists every account mail-store.accounts answers (never one it did not,
+// AC2), each with its folders' mail and unread counts read from mesh-mail's own account bucket — one Get per
+// account mail-store answered, never Keys() (AC2), and never failing the whole page when an account has no
+// key there yet (AC4). The only seats this page calls are mail-store.accounts and (the folder page, below)
+// mail-store.search (AC5).
+func (b *Bundle) accountsPage(w http.ResponseWriter, r *http.Request) {
+ ctx, cancel := context.WithTimeout(r.Context(), 20*time.Second)
+ defer cancel()
+ raw, err := b.accountsAsk(ctx)
+ if err != nil {
+ renderPage(w, accountsTemplate, accountsTemplateData{Error: "mail-store does not answer; try again shortly"})
+ return
+ }
+ var answer accountsAnswer
+ if err := json.Unmarshal(raw, &answer); err != nil {
+ renderPage(w, accountsTemplate, accountsTemplateData{Error: "mail-store's answer could not be read"})
+ return
+ }
+ rows := make([]accountRowWithName, 0, len(answer.Accounts))
+ for _, a := range answer.Accounts {
+ row := accountRow{Name: a.Account, Kind: a.Kind, Address: a.Address, State: a.State, Why: a.Why}
+ // 1264/AC2, AC4: read only this account's own key, never the bucket's whole list; a missing key (the
+ // account's keeper has not mirrored it yet) is not an error, just "not known yet".
+ entry, err := b.accountBucketGet(a.Account)
+ if err == nil && entry != nil {
+ var v accountBucketValue
+ if json.Unmarshal(entry.Value, &v) == nil {
+ row.Folders = v.Folders
+ row.FoldersKnown = true
+ }
+ }
+ rows = append(rows, accountRowWithName{accountRow: row, CurrentAccount: a.Account})
+ }
+ renderPage(w, accountsTemplate, accountsTemplateData{Accounts: rows})
+}
+
+// MostFolderResults is the folder and search pages' own page size (novox/hq ADR 0440 §4, issue 1264/AC3).
+const MostFolderResults = 50
+
+// searchResult is one mail as mail-store.search answers it (mesh-mail imap.go's metadata), the fields the
+// folder and search pages read.
+type searchResult struct {
+ Account string `json:"account"`
+ Folder string `json:"folder"`
+ UID int `json:"uid"`
+ Date string `json:"date"`
+ From []personResult `json:"from"`
+ To []personResult `json:"to"`
+ Subject string `json:"subject"`
+ Size int64 `json:"size"`
+ Flags []string `json:"flags"`
+}
+
+type personResult struct {
+ Name string `json:"name,omitempty"`
+ Address string `json:"address"`
+}
+
+// searchAnswer is mail-store.search's own answer shape for a plain (non group-by-sender) search.
+type searchAnswer struct {
+ Found []searchResult `json:"found"`
+}
+
+var folderTemplate = template.Must(template.New("folder").Parse(`
+{{.Folder}}
+