rails-mailer-sandbox 0.2.0

checksums.yaml

@@ -0,0 +1,7 @@
+---
+SHA256:
+  metadata.gz: 8b3769b564df7ce2bf2278546029a59a92ad70ceec2e074ab4550abecbd4055e
+  data.tar.gz: ac6f6d14a1e60deadfc5388c42426d0d79e942fe3ba65986199391589c4be47d
+SHA512:
+  metadata.gz: 8744e34ffdf4cade29d895b9279c1f38aefd55e0beea7d50ef74387d5418b278c011116b9b16c1ccc70bb15cc7840bb8e5d0aad2e8ae51c8dff8e2aca3eea761
+  data.tar.gz: ba697866c07972be8adafcae6de50690cd0c653d3f44f24583ab0e77587070ce84e740f1ce3f6f4777aa55f2b531d152819c0c5032c9f766f0d83dbce67cffe3

data/CONTRIBUTING.md

@@ -0,0 +1,43 @@
+# Contributing to Rails Mailer Sandbox
+
+Bug reports, fixes, tests, documentation, and focused feature proposals are welcome.
+
+## Report Bugs
+
+Open GitHub issue with:
+
+- Rails, Ruby, Rack, and gem versions
+- Minimal reproduction steps
+- Expected and actual behavior
+- Relevant exception and backtrace
+- Browser name and version for Web UI bugs
+
+Never include real email addresses, credentials, tokens, or captured production email.
+
+## Development Setup
+
+```bash
+git clone https://github.com/azmi2409/rails-mailer-sandbox.git
+cd rails-mailer-sandbox
+bundle install
+ruby -Ilib test/rails_mailer_sandbox_test.rb
+```
+
+## Changes
+
+- Keep changes focused and backward compatible after public release.
+- Add or update tests for behavior changes.
+- Preserve Ruby 3.0 compatibility.
+- Avoid new runtime dependencies unless standard library or current dependencies cannot solve need.
+- Keep Web UI dependency-free, responsive, and accessible.
+- Never weaken HTML preview sandbox or filesystem path checks.
+
+## Pull Requests
+
+1. Create branch from `main`.
+2. Make focused change with test coverage.
+3. Run `ruby -Ilib test/rails_mailer_sandbox_test.rb`.
+4. Run `gem build rails-mailer-sandbox.gemspec`.
+5. Open pull request describing problem, solution, and verification.
+
+By contributing, you agree your contribution is licensed under project MIT license.

data/MIT-LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Developer
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

data/README.md

@@ -0,0 +1,83 @@
+# Rails Mailer Sandbox
+
+Development email sandbox for Rails. Captures Action Mailer deliveries, stores original
+`.eml` messages on disk, and exposes a Mailtrap-inspired Web UI inside your Rails app.
+
+## Features
+
+- Persistent MIME message storage across Rails restarts
+- Search by subject, sender, recipient, or body preview
+- HTML, plain-text, and raw-source views
+- Desktop, tablet, and mobile preview widths
+- From, To, Cc, Bcc, date, and message-size details
+- Attachment downloads
+- Automatic inbox refresh
+- Individual and bulk deletion
+- Sandboxed HTML previews with remote resources and scripts blocked
+- Filesystem locking and atomic writes for Rails and background workers
+- No database or external service
+
+## Installation
+
+Add gem to development group:
+
+```ruby
+group :development do
+  gem "rails-mailer-sandbox", github: "azmi2409/rails-mailer-sandbox"
+end
+```
+
+Then run:
+
+```bash
+bundle install
+bundle exec rake rails_mailer_sandbox:setup
+```
+
+Restart Rails and open <http://localhost:3000/rails_mailer_sandbox>.
+
+Setup creates `config/initializers/rails_mailer_sandbox.rb`, configures Action Mailer,
+and mounts Web UI. Repeating task is safe. Existing edited initializer is never overwritten.
+
+## Manual Setup
+
+Configure `config/environments/development.rb`:
+
+```ruby
+config.action_mailer.delivery_method = :rails_mailer_sandbox
+config.action_mailer.perform_deliveries = true
+config.action_mailer.raise_delivery_errors = true
+```
+
+Mount Web UI in `config/routes.rb`:
+
+```ruby
+mount RailsMailerSandbox::Server.new => "/rails_mailer_sandbox" if Rails.env.development?
+```
+
+## Storage
+
+Default path: `Rails.root/tmp/rails_mailer_sandbox`.
+
+Override path in initializer:
+
+```ruby
+RailsMailerSandbox.storage_path = Rails.root.join("storage", "development_mail")
+```
+
+Keep custom storage outside version control. Rails `tmp:clear` removes default inbox.
+Local filesystem storage suits development on one host. It does not target large archives
+or distributed deployments.
+
+## Development
+
+```bash
+ruby -Ilib test/rails_mailer_sandbox_test.rb
+gem build rails-mailer-sandbox.gemspec
+```
+
+See [CONTRIBUTING.md](CONTRIBUTING.md) before opening pull request.
+
+## License
+
+[MIT](MIT-LICENSE)

data/lib/rails-mailer-sandbox.rb

@@ -0,0 +1,3 @@
+# frozen_string_literal: true
+
+require_relative "rails_mailer_sandbox"

data/lib/rails_mailer_sandbox/setup.rb

@@ -0,0 +1,32 @@
+# frozen_string_literal: true
+
+require "fileutils"
+
+module RailsMailerSandbox
+  module Setup
+    def self.run(root)
+      root = File.expand_path(root)
+      raise "Not a Rails application: #{root}" unless File.file?(File.join(root, "config/application.rb"))
+      path = File.join(root, "config/initializers/rails_mailer_sandbox.rb")
+      content = <<~RUBY
+        # Generated by rails_mailer_sandbox:setup. Development only.
+        if Rails.env.development?
+          Rails.application.config.action_mailer.delivery_method = :rails_mailer_sandbox
+          Rails.application.config.action_mailer.perform_deliveries = true
+          Rails.application.config.action_mailer.raise_delivery_errors = true
+          RailsMailerSandbox.storage_path = Rails.root.join("tmp", "rails_mailer_sandbox")
+
+          Rails.application.routes.append do
+            mount RailsMailerSandbox::Server.new => "/rails_mailer_sandbox"
+          end
+        end
+      RUBY
+      FileUtils.mkdir_p(File.dirname(path))
+      begin
+        File.open(path, File::WRONLY | File::CREAT | File::EXCL, 0o644) { |file| file.write(content) }
+      rescue Errno::EEXIST
+        raise "Existing #{path} differs; review manually." unless File.read(path) == content
+      end
+    end
+  end
+end

data/lib/rails_mailer_sandbox.rb

@@ -0,0 +1,438 @@
+# frozen_string_literal: true
+
+require "cgi"
+require "json"
+require "rack"
+require "securerandom"
+require "time"
+require "date"
+require "fileutils"
+require "mail"
+
+module RailsMailerSandbox
+  VERSION = "0.2.0"
+
+  class << self
+    attr_writer :storage_path
+
+    def storage_path
+      @storage_path || File.join(defined?(Rails) && Rails.respond_to?(:root) && Rails.root ? Rails.root.to_s : Dir.pwd, "tmp", "rails_mailer_sandbox")
+    end
+  end
+
+  class Message
+    attr_reader :id, :from, :to, :cc, :bcc, :subject, :date, :text_part,
+                :html_part, :raw_source, :attachments
+
+    def initialize(mail, id: SecureRandom.uuid)
+      @id = id
+      @date = mail.date || Time.now
+      @from = Array(mail.from)
+      @to = Array(mail.to)
+      @cc = Array(mail.cc)
+      @bcc = Array(mail.bcc)
+      @subject = mail.subject.to_s
+      @attachments = []
+      extract_parts(mail)
+      @raw_source = mail.to_s
+      @raw_source = "Bcc: #{@bcc.join(', ').gsub(/[\r\n]/, '')}\r\n#{@raw_source}" unless @bcc.empty? || @raw_source.match?(/^Bcc:/i)
+    end
+
+    def recipients
+      to + cc + bcc
+    end
+
+    def preview
+      text_part.to_s.gsub(/\s+/, " ").strip[0, 140]
+    end
+
+    def size
+      raw_source.bytesize
+    end
+
+    def matches?(query)
+      query.empty? || [subject, *from, *recipients, preview].any? { |value| value.downcase.include?(query) }
+    end
+
+    private
+
+    def extract_parts(mail)
+      parts = mail.multipart? ? mail.all_parts : [mail]
+      parts.each do |part|
+        if part.respond_to?(:attachment?) && part.attachment?
+          @attachments << {
+            filename: part.filename.to_s,
+            content_type: part.mime_type.to_s,
+            body: part.body.decoded
+          }
+        elsif part.mime_type == "text/html" && !@html_part
+          @html_part = part.body.decoded
+        elsif part.mime_type == "text/plain" && !@text_part
+          @text_part = part.body.decoded
+        end
+      end
+      @text_part ||= @html_part&.gsub(/<[^>]*>/, " ")&.gsub(/\s+/, " ")&.strip
+      @html_part ||= "<pre style=\"white-space:pre-wrap\">#{CGI.escapeHTML(@text_part.to_s)}</pre>"
+    end
+  end
+
+  class Storage
+    class << self
+      def add(mail)
+        message = Message.new(mail)
+        locked do |directory|
+          temporary = File.join(directory, ".#{message.id}.tmp")
+          begin
+            File.open(temporary, "wb", 0o600) do |file|
+              file.write(message.raw_source)
+              file.flush
+              file.fsync
+            end
+            File.rename(temporary, File.join(directory, "#{message.id}.eml"))
+          ensure
+            File.delete(temporary) if File.exist?(temporary)
+          end
+        end
+        message
+      end
+
+      def all
+        locked do |directory|
+          Dir.glob(File.join(directory, "*.eml")).sort_by { |path| [File.mtime(path), path] }.reverse.map do |path|
+            Message.new(Mail.read(path), id: File.basename(path, ".eml"))
+          end
+        end
+      end
+
+      def find(id)
+        return unless valid_id?(id)
+        locked do |directory|
+          path = File.join(directory, "#{id}.eml")
+          Message.new(Mail.read(path), id: id) if File.file?(path)
+        end
+      end
+
+      def delete(id)
+        return unless valid_id?(id)
+        locked do |directory|
+          path = File.join(directory, "#{id}.eml")
+          File.delete(path) if File.file?(path)
+        end
+      end
+
+      def clear
+        locked { |directory| Dir.glob(File.join(directory, "*.eml")).each { |path| File.delete(path) } }
+      end
+
+      def count
+        locked { |directory| Dir.glob(File.join(directory, "*.eml")).size }
+      end
+
+      private
+
+      def valid_id?(id)
+        id.is_a?(String) && id.match?(/\A[0-9a-f]{8}(?:-[0-9a-f]{4}){3}-[0-9a-f]{12}\z/)
+      end
+
+      # ponytail: Local filesystem inbox. Use a database adapter for large inboxes or multi-host deployments.
+      def locked
+        directory = File.expand_path(RailsMailerSandbox.storage_path)
+        FileUtils.mkdir_p(directory, mode: 0o700)
+        File.open(File.join(directory, ".lock"), File::RDWR | File::CREAT, 0o600) do |lock|
+          lock.flock(File::LOCK_EX)
+          yield directory
+        ensure
+          lock.flock(File::LOCK_UN)
+        end
+      end
+    end
+  end
+
+  class DeliveryMethod
+    attr_accessor :settings
+
+    def initialize(values = {})
+      @settings = values
+    end
+
+    def deliver!(mail)
+      Storage.add(mail)
+    end
+  end
+
+  class Server
+    SECURITY_HEADERS = {
+      "content-security-policy" => "default-src 'self'; style-src 'unsafe-inline'; script-src 'unsafe-inline'; frame-src 'self'; img-src 'self' data:; object-src 'none'; base-uri 'none'; frame-ancestors 'self'",
+      "referrer-policy" => "no-referrer",
+      "x-content-type-options" => "nosniff",
+      "x-frame-options" => "SAMEORIGIN"
+    }.freeze
+
+    def call(env)
+      request = Rack::Request.new(env)
+      response = route(request)
+      response[1] = SECURITY_HEADERS.merge(response[1])
+      response
+    rescue StandardError => error
+      warn "RailsMailerSandbox: #{error.class}: #{error.message}"
+      [500, SECURITY_HEADERS.merge("content-type" => "text/plain; charset=utf-8"), ["Rails Mailer Sandbox error"]]
+    end
+
+    private
+
+    def route(request)
+      path = request.path_info
+      method = request.request_method
+      if method == "POST" && (request.get_header("HTTP_SEC_FETCH_SITE") == "cross-site" ||
+          (request.get_header("HTTP_ORIGIN") && request.get_header("HTTP_ORIGIN") != request.base_url))
+        return [403, { "content-type" => "text/plain" }, ["Forbidden"]]
+      end
+
+      return render_index(request) if method == "GET" && ["", "/"].include?(path)
+      return render_messages_json if method == "GET" && path == "/messages.json"
+      return render_part(Regexp.last_match(1), :html_part, "text/html; charset=utf-8") if method == "GET" && path =~ %r{\A/messages/([^/]+)/html\z}
+      return render_part(Regexp.last_match(1), :raw_source, "text/plain; charset=utf-8") if method == "GET" && path =~ %r{\A/messages/([^/]+)/raw\z}
+      return render_attachment(Regexp.last_match(1), Regexp.last_match(2).to_i) if method == "GET" && path =~ %r{\A/messages/([^/]+)/attachment/(\d+)\z}
+      return mutate(request) { Storage.clear } if method == "POST" && path == "/clear"
+      return mutate(request) { Storage.delete(Regexp.last_match(1)) } if method == "POST" && path =~ %r{\A/messages/([^/]+)/delete\z}
+
+      [404, { "content-type" => "text/plain; charset=utf-8" }, ["Not Found"]]
+    end
+
+    def mutate(request)
+      yield
+      [303, { "location" => "#{base_path(request)}/" }, []]
+    end
+
+    def render_part(id, field, content_type)
+      message = Storage.find(id)
+      return not_found unless message
+
+      headers = { "content-type" => content_type }
+      headers["content-security-policy"] = "sandbox; default-src 'none'; img-src data:; style-src 'unsafe-inline'; font-src data:; base-uri 'none'; form-action 'none'" if field == :html_part
+      [200, headers, [message.public_send(field).to_s]]
+    end
+
+    def render_attachment(id, index)
+      attachment = Storage.find(id)&.attachments&.[](index)
+      return not_found unless attachment
+
+      filename = attachment[:filename].encode("US-ASCII", invalid: :replace, undef: :replace).gsub(/[\x00-\x1f\x7f"\\]/, "_")
+      type = attachment[:content_type].match?(/\A[-\w.+]+\/[-\w.+]+\z/) ? attachment[:content_type] : "application/octet-stream"
+      [200, {
+        "content-type" => type,
+        "content-disposition" => %(attachment; filename="#{filename}"),
+        "content-length" => attachment[:body].bytesize.to_s
+      }, [attachment[:body]]]
+    end
+
+    def render_messages_json
+      payload = Storage.all.map do |message|
+        { id: message.id, subject: message.subject, from: message.from, to: message.to, date: message.date.iso8601 }
+      end
+      [200, { "content-type" => "application/json; charset=utf-8", "cache-control" => "no-store" }, [JSON.generate(payload)]]
+    end
+
+    def render_index(request)
+      query = request.params.fetch("q", "").to_s.strip.downcase
+      messages = Storage.all.select { |message| message.matches?(query) }
+      selected = messages.find { |message| message.id == request.params["id"] }
+      base = base_path(request)
+      [200, { "content-type" => "text/html; charset=utf-8", "cache-control" => "no-store" }, [page(messages, selected, query, base)]]
+    end
+
+    def page(messages, selected, query, base)
+      <<~HTML
+        <!doctype html>
+        <html lang="en">
+        <head>
+          <meta charset="utf-8">
+          <meta name="viewport" content="width=device-width, initial-scale=1">
+          <title>Rails Mailer Sandbox</title>
+          <style>#{styles}</style>
+        </head>
+        <body data-count="#{Storage.count}">
+          <aside class="rail">
+            <div class="brand"><span class="brand-mark">R</span><span>Rails Mailer Sandbox</span></div>
+            <nav><a class="nav-active" href="#{base}"><span>▣</span> Email Testing</a></nav>
+            <div class="rail-foot">Development only<br><strong>v#{VERSION}</strong></div>
+          </aside>
+          <section class="inbox #{selected ? "has-selection" : ""}">
+            <header class="inbox-head">
+              <div><span class="eyebrow">MY INBOX</span><h1>Captured emails <b>#{Storage.count}</b></h1></div>
+              <form method="post" action="#{base}/clear" onsubmit="return confirm('Delete all captured emails?')">
+                <button class="icon-button danger" title="Clear inbox" aria-label="Clear inbox">⌫</button>
+              </form>
+            </header>
+            <form class="search" method="get" action="#{base}">
+              <span>⌕</span><input type="search" name="q" value="#{h(query)}" placeholder="Search subject, sender, recipient..." aria-label="Search emails">
+            </form>
+            <div class="list" id="message-list">
+              #{message_list(messages, selected, query, base)}
+            </div>
+          </section>
+          <main class="viewer">
+            #{selected ? message_view(selected, base) : empty_state(query)}
+          </main>
+          <script>#{scripts(base)}</script>
+        </body>
+        </html>
+      HTML
+    end
+
+    def message_list(messages, selected, query, base)
+      return %(<div class="empty-list"><strong>No emails found</strong><span>#{query.empty? ? "Send an email from your app." : "Try another search."}</span></div>) if messages.empty?
+
+      messages.map do |message|
+        params = "?id=#{Rack::Utils.escape(message.id)}"
+        params += "&q=#{Rack::Utils.escape(query)}" unless query.empty?
+        <<~HTML
+          <a class="message #{"active" if message == selected}" href="#{base}#{params}">
+            <span class="avatar">#{h(initials(message.from.first))}</span>
+            <span class="message-copy">
+              <span class="message-line"><strong>#{h(message.from.first || "Unknown sender")}</strong><time>#{h(short_time(message.date))}</time></span>
+              <span class="subject">#{h(message.subject.empty? ? "(no subject)" : message.subject)}</span>
+              <span class="preview">#{h(message.preview)}</span>
+              <span class="recipient">to #{h(message.to.join(", "))}</span>
+            </span>
+          </a>
+        HTML
+      end.join
+    end
+
+    def message_view(message, base)
+      <<~HTML
+        <header class="viewer-head">
+          <a class="back" href="#{base}" aria-label="Back to inbox">‹</a>
+          <div class="title-block"><span class="eyebrow">MESSAGE PREVIEW</span><h2>#{h(message.subject.empty? ? "(no subject)" : message.subject)}</h2></div>
+          <form method="post" action="#{base}/messages/#{message.id}/delete" onsubmit="return confirm('Delete this email?')">
+            <button class="delete-button">Delete</button>
+          </form>
+        </header>
+        <section class="envelope">
+          <span class="avatar large">#{h(initials(message.from.first))}</span>
+          <div class="envelope-main">
+            <strong>#{h(message.from.join(", "))}</strong>
+            <button class="details-toggle" type="button" aria-expanded="false" onclick="toggleDetails(this)">to #{h(message.to.join(", "))}⌄</button>
+            <div class="details" hidden>
+              #{detail_row("From", message.from)}#{detail_row("To", message.to)}#{detail_row("Cc", message.cc)}#{detail_row("Bcc", message.bcc)}
+              <div><dt>Date</dt><dd>#{h(message.date.to_s)}</dd></div><div><dt>Size</dt><dd>#{human_size(message.size)}</dd></div>
+            </div>
+          </div>
+          <time>#{h(message.date.strftime("%b %-d, %Y, %H:%M"))}</time>
+        </section>
+        #{attachments(message, base)}
+        <nav class="tabs" aria-label="Message format">
+          <button class="tab active" data-pane="html">HTML</button>
+          <button class="tab" data-pane="text">Text</button>
+          <button class="tab" data-pane="raw">Raw</button>
+          <span class="spacer"></span>
+          <button class="viewport active" data-width="100%" title="Desktop preview">▰</button>
+          <button class="viewport" data-width="768px" title="Tablet preview">▯</button>
+          <button class="viewport" data-width="390px" title="Mobile preview">▯</button>
+        </nav>
+        <section class="preview-area">
+          <div class="pane active" id="pane-html"><iframe title="Email HTML preview" sandbox="allow-popups" src="#{base}/messages/#{message.id}/html"></iframe></div>
+          <pre class="pane source" id="pane-text">#{h(message.text_part.to_s)}</pre>
+          <pre class="pane source" id="pane-raw">#{h(message.raw_source.to_s)}</pre>
+        </section>
+      HTML
+    end
+
+    def attachments(message, base)
+      return "" if message.attachments.empty?
+
+      links = message.attachments.each_with_index.map do |attachment, index|
+        %(<a href="#{base}/messages/#{message.id}/attachment/#{index}"><span>⇩</span>#{h(attachment[:filename])}<small>#{human_size(attachment[:body].bytesize)}</small></a>)
+      end.join
+      %(<section class="attachments"><strong>#{message.attachments.size} attachment#{"s" unless message.attachments.size == 1}</strong><div>#{links}</div></section>)
+    end
+
+    def empty_state(query)
+      title = query.empty? ? "Inbox ready" : "No matching messages"
+      copy = query.empty? ? "Emails sent through ActionMailer appear here instantly." : "Clear search or send another test email."
+      %(<div class="empty-view"><span>✉</span><h2>#{title}</h2><p>#{copy}</p></div>)
+    end
+
+    def detail_row(label, values)
+      return "" if values.empty?
+      %(<div><dt>#{label}</dt><dd>#{h(values.join(", "))}</dd></div>)
+    end
+
+    def h(value)
+      CGI.escapeHTML(value.to_s)
+    end
+
+    def initials(address)
+      address.to_s.split(/[@._-]/).first(2).map { |part| part[0] }.join.upcase
+    end
+
+    def short_time(date)
+      date.to_date == Time.now.to_date ? date.strftime("%H:%M") : date.strftime("%b %-d")
+    end
+
+    def human_size(bytes)
+      return "#{bytes} B" if bytes < 1024
+      return format("%.1f KB", bytes / 1024.0) if bytes < 1_048_576
+      format("%.1f MB", bytes / 1_048_576.0)
+    end
+
+    def base_path(request)
+      request.script_name.sub(%r{/$}, "")
+    end
+
+    def not_found
+      [404, { "content-type" => "text/plain; charset=utf-8" }, ["Not Found"]]
+    end
+
+    def scripts(base)
+      <<~JS
+        function toggleDetails(button) {
+          const details = button.nextElementSibling;
+          details.hidden = !details.hidden;
+          button.setAttribute('aria-expanded', String(!details.hidden));
+        }
+        document.querySelectorAll('.tab').forEach((button) => button.addEventListener('click', () => {
+          document.querySelectorAll('.tab,.pane').forEach((node) => node.classList.remove('active'));
+          button.classList.add('active');
+          document.getElementById('pane-' + button.dataset.pane).classList.add('active');
+        }));
+        document.querySelectorAll('.viewport').forEach((button) => button.addEventListener('click', () => {
+          document.querySelectorAll('.viewport').forEach((node) => node.classList.remove('active'));
+          button.classList.add('active');
+          document.querySelector('iframe').style.maxWidth = button.dataset.width;
+        }));
+        setInterval(async () => {
+          if (document.querySelector('input[name=q]').value) return;
+          try {
+            const response = await fetch('#{base}/messages.json', { headers: { accept: 'application/json' } });
+            const messages = await response.json();
+            if (messages.length !== Number(document.body.dataset.count)) location.reload();
+          } catch (_) {}
+        }, 3000);
+      JS
+    end
+
+    def styles
+      <<~CSS
+        :root{--ink:#17223b;--muted:#718096;--line:#e6e9f0;--purple:#6757d9;--purple-soft:#f0edff;--surface:#fff;--canvas:#f6f7fb}*{box-sizing:border-box}html,body{height:100%;margin:0}body{display:grid;grid-template-columns:216px 390px minmax(0,1fr);overflow:hidden;color:var(--ink);background:var(--canvas);font:14px Inter,-apple-system,BlinkMacSystemFont,"Segoe UI",sans-serif}button,input{font:inherit}.rail{display:flex;flex-direction:column;padding:24px 16px;background:#17152b;color:#cac8dc}.brand{display:flex;align-items:center;gap:11px;padding:0 10px 28px;color:#fff;font-size:16px;font-weight:750}.brand-mark{display:grid;width:30px;height:30px;place-items:center;border-radius:9px;background:linear-gradient(145deg,#8b7cf6,#5b4bc5);box-shadow:0 7px 18px #0a0919}.rail nav a{display:flex;align-items:center;gap:11px;padding:11px 12px;border-radius:8px;color:#aaa8be;text-decoration:none}.rail nav a.nav-active{color:#fff;background:#2b2846}.rail-foot{margin-top:auto;padding:12px;color:#7f7b99;font-size:11px;line-height:1.7}.rail-foot strong{color:#aaa8be}.inbox{display:flex;min-width:0;flex-direction:column;border-right:1px solid var(--line);background:var(--surface)}.inbox-head,.viewer-head{display:flex;min-height:90px;align-items:center;justify-content:space-between;padding:18px 22px;border-bottom:1px solid var(--line)}.eyebrow{color:#949aad;font-size:10px;font-weight:800;letter-spacing:.12em}.inbox h1{margin:5px 0 0;font-size:19px}.inbox h1 b{display:inline-grid;min-width:22px;height:22px;place-items:center;margin-left:5px;border-radius:20px;background:var(--purple-soft);color:var(--purple);font-size:11px}.icon-button,.delete-button{border:1px solid var(--line);border-radius:7px;background:#fff;color:#7d8495;cursor:pointer}.icon-button{width:34px;height:34px}.danger:hover,.delete-button:hover{border-color:#f4b8bd;color:#c43d4d;background:#fff7f8}.search{display:flex;align-items:center;gap:8px;margin:14px 16px;padding:9px 12px;border:1px solid var(--line);border-radius:7px;background:#f8f9fc;color:#9399a8}.search:focus-within{border-color:#a49aec;box-shadow:0 0 0 3px var(--purple-soft)}.search input{width:100%;border:0;outline:0;background:transparent;color:var(--ink)}.list{overflow:auto}.message{display:flex;gap:12px;padding:15px 16px;border-top:1px solid #f0f1f5;color:inherit;text-decoration:none}.message:hover{background:#fafaff}.message.active{background:var(--purple-soft);box-shadow:inset 3px 0 var(--purple)}.avatar{display:grid;width:36px;height:36px;flex:0 0 auto;place-items:center;border-radius:50%;background:#e6e2ff;color:#5c4fc3;font-size:11px;font-weight:800}.avatar.large{width:42px;height:42px}.message-copy{min-width:0;flex:1}.message-line{display:flex;justify-content:space-between;gap:8px}.message-line strong,.subject,.preview,.recipient{display:block;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}.message-line strong{font-size:13px}.message-line time,.recipient{color:#9ba1af;font-size:11px}.subject{margin-top:4px;font-weight:650}.preview{margin-top:4px;color:#767e90;font-size:12px}.recipient{margin-top:5px}.empty-list,.empty-view{display:flex;align-items:center;justify-content:center;flex-direction:column;color:var(--muted)}.empty-list{gap:6px;padding:60px 16px}.empty-list span{font-size:12px}.viewer{display:flex;min-width:0;flex-direction:column;overflow:hidden}.viewer-head{background:#fff}.title-block{min-width:0;flex:1}.viewer-head h2{overflow:hidden;margin:5px 25px 0 0;text-overflow:ellipsis;white-space:nowrap;font-size:20px}.delete-button{padding:8px 13px}.back{display:none;color:var(--ink);font-size:32px;text-decoration:none}.envelope{display:flex;align-items:flex-start;gap:12px;padding:17px 24px;border-bottom:1px solid var(--line);background:#fff}.envelope-main{min-width:0;flex:1}.envelope-main>strong{display:block}.details-toggle{padding:3px 0;border:0;background:none;color:var(--muted);cursor:pointer}.envelope>time{color:#969cab;font-size:11px}.details{max-width:650px;margin-top:10px;padding:10px 12px;border-radius:7px;background:#f7f8fb;font-size:12px}.details div{display:grid;grid-template-columns:50px 1fr;padding:3px}.details dt{color:var(--muted)}.details dd{overflow-wrap:anywhere;margin:0}.attachments{padding:12px 24px;border-bottom:1px solid var(--line);background:#fff;font-size:12px}.attachments>div{display:flex;flex-wrap:wrap;gap:7px;margin-top:8px}.attachments a{display:flex;align-items:center;gap:6px;padding:7px 10px;border:1px solid var(--line);border-radius:6px;color:var(--ink);text-decoration:none}.attachments a:hover{border-color:#b8b0ed;background:var(--purple-soft)}.attachments small{color:var(--muted)}.tabs{display:flex;align-items:center;height:48px;padding:0 20px;border-bottom:1px solid var(--line);background:#fff}.tab,.viewport{height:100%;padding:0 13px;border:0;border-bottom:2px solid transparent;background:none;color:#7d8495;cursor:pointer}.tab.active{border-color:var(--purple);color:var(--purple);font-weight:700}.spacer{flex:1}.viewport{height:31px;padding:0 8px;border-radius:5px}.viewport.active{background:var(--purple-soft);color:var(--purple)}.preview-area{min-height:0;flex:1;overflow:hidden;padding:18px;background:#eef0f5}.pane{display:none;width:100%;height:100%;margin:0}.pane.active{display:block}.pane iframe{display:block;width:100%;height:100%;margin:auto;border:1px solid #dfe2e9;border-radius:4px;background:#fff;box-shadow:0 5px 20px #28345112;transition:max-width .2s}.source{overflow:auto;padding:20px;border:1px solid var(--line);border-radius:5px;background:#fff;white-space:pre-wrap;word-break:break-word;font:12px/1.55 ui-monospace,SFMono-Regular,Menlo,monospace}.empty-view{height:100%}.empty-view>span{display:grid;width:72px;height:72px;place-items:center;border-radius:50%;background:var(--purple-soft);color:var(--purple);font-size:30px}.empty-view h2{margin:20px 0 6px}.empty-view p{margin:0}.empty-view .back{display:none}@media(max-width:900px){body{grid-template-columns:72px 330px minmax(0,1fr)}.rail{padding:24px 10px}.brand span:last-child,.rail nav a{font-size:0}.brand{padding:0 10px 28px}.rail nav a span{font-size:16px}.rail-foot{display:none}}@media(max-width:680px){body{display:block}.rail{display:none}.inbox{height:100%;border:0}.inbox.has-selection{display:none}.viewer{height:100%}.viewer-head{min-height:72px;padding:12px 15px}.back{display:block;margin-right:12px}.envelope{padding:14px 16px}.envelope>time{display:none}.tabs{padding:0 8px}.viewport{display:none}.preview-area{padding:8px}.title-block .eyebrow{display:none}.viewer-head h2{margin-top:0;font-size:16px}}
+      CSS
+    end
+  end
+end
+
+if defined?(Rails::Railtie)
+  module RailsMailerSandbox
+    class Railtie < Rails::Railtie
+      rake_tasks do
+        load File.expand_path("tasks/rails_mailer_sandbox.rake", __dir__)
+      end
+
+      initializer "rails_mailer_sandbox.add_delivery_method" do
+        ActiveSupport.on_load(:action_mailer) do
+          ActionMailer::Base.add_delivery_method :rails_mailer_sandbox, RailsMailerSandbox::DeliveryMethod
+        end
+      end
+    end
+  end
+end

data/lib/tasks/rails_mailer_sandbox.rake

@@ -0,0 +1,9 @@
+require_relative "../rails_mailer_sandbox/setup"
+
+namespace :rails_mailer_sandbox do
+  desc "Configure development email capture and mount Rails Mailer Sandbox UI"
+  task :setup do
+    RailsMailerSandbox::Setup.run(Rails.root)
+    puts "Rails Mailer Sandbox ready. Restart Rails, then open /rails_mailer_sandbox."
+  end
+end

metadata

@@ -0,0 +1,76 @@
+--- !ruby/object:Gem::Specification
+name: rails-mailer-sandbox
+version: !ruby/object:Gem::Version
+  version: 0.2.0
+platform: ruby
+authors:
+- azmimuwahid
+bindir: bin
+cert_chain: []
+date: 1980-01-02 00:00:00.000000000 Z
+dependencies:
+- !ruby/object:Gem::Dependency
+  name: rack
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.0'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - ">="
+      - !ruby/object:Gem::Version
+        version: '2.0'
+- !ruby/object:Gem::Dependency
+  name: mail
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.8'
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: '2.8'
+description: Intercepts ActionMailer emails in development and provides mountable
+  Web UI to preview them.
+email:
+- azmimuwahid@gmail.com
+executables: []
+extensions: []
+extra_rdoc_files: []
+files:
+- CONTRIBUTING.md
+- MIT-LICENSE
+- README.md
+- lib/rails-mailer-sandbox.rb
+- lib/rails_mailer_sandbox.rb
+- lib/rails_mailer_sandbox/setup.rb
+- lib/tasks/rails_mailer_sandbox.rake
+homepage: https://github.com/azmi2409/rails-mailer-sandbox
+licenses:
+- MIT
+metadata: {}
+rdoc_options: []
+require_paths:
+- lib
+required_ruby_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: 3.0.0
+required_rubygems_version: !ruby/object:Gem::Requirement
+  requirements:
+  - - ">="
+    - !ruby/object:Gem::Version
+      version: '0'
+requirements: []
+rubygems_version: 4.0.4
+specification_version: 4
+summary: Local email sandbox with Web UI for Rails development
+test_files: []