Roadmap: account-level Rules tab done (full criteria/action editor)

Author: chrisholloway5

planupdate.md

@@ -113,7 +113,7 @@ The full two-track roadmap is below: **Track A** (Control Panel) then **Track B*
 |---|---|---|---|
 | 1 | ✅ **IP-range full policy editor** (done, commit 9743096) | `IInterfaceSecurityRange` | Tabbed `IPRangeDialog` (General/Connections/Relaying/Require auth/Protection): RequireSMTPAuth per direction, EnableSpamProtection, EnableAntiVirus, Expires+ExpiresTime, Priority. Wired via Properties button + double-click. Live-validated. |
 | 2 | ✅ **TCP/IP port → SSL certificate binding** (done, commit 9743096) | `IInterfaceTCPIPPort.SSLCertificateID` | `TcpIpPortDialog` picks from `Settings.SSLCertificates`; Certificate column added to grid. Live-validated. |
-| 3 | ✅ **Rules editor parity** (done, commit 139bd91) | `IInterfaceRule/RuleCriteria/RuleActions` | Selectable criteria/action grids; per-item **edit** dialogs (`RuleCriteriaDialog`, `RuleActionDialog`) with all 10 action types parameterized (delete, forward+abort-spam, reply, move-to-folder, run-script, stop, set-header, send-using-route, create-copy, bind-to-IP) and predefined-field/custom-header criteria; per-item **remove**; action **move up/down**; **AND/OR** match mode (`UseAND`). Live-validated end-to-end. *(Account-level Rules tab still TODO.)* |
+| 3 | ✅ **Rules editor parity** (done, commits 139bd91 + fd3a27b account-level) | `IInterfaceRule/RuleCriteria/RuleActions` | Selectable criteria/action grids; per-item **edit** dialogs (`RuleCriteriaDialog`, `RuleActionDialog`) with all 10 action types parameterized (delete, forward+abort-spam, reply, move-to-folder, run-script, stop, set-header, send-using-route, create-copy, bind-to-IP) and predefined-field/custom-header criteria; per-item **remove**; action **move up/down**; **AND/OR** match mode (`UseAND`). Reusable `RulesView` (rule-source provider) now also powers the **account Rules tab** (hides server-only route/bind actions). Live-validated end-to-end (global + account). |
 | 4 | ✅ **Route Addresses tab** (done, commit 88ae5bf) | `Route.Addresses` | AllAddresses toggle (already present) + per-address list editor (Add/Remove, persists via `Addresses.Add()/Save()/DeleteByDBID`). Live-validated end-to-end. |
 | 5 | **Status page** | `Application.Status`, `Application.Version` | New `StatusView`: Server / Status / Delivery-queue tabs (version, DB, uptime, session + spam/virus counters) — full `ucStatus` parity. |
 | 6 | ✅ **TOTP 2FA login** (done, commit e9e5051) | `Services/Totp.cs`, `TotpSetupDialog`, `TotpPromptDialog` | RFC 6238 setup (secret + otpauth URI) + login prompt gate in `OnConnected`. Reads the same HKLM `AdminTotpSecret` (machine-scope DPAPI via crypt32) as Administrator, so existing 2FA carries over. Live-validated end-to-end (DPAPI round-trip, prompt, code acceptance → dashboard). |