@bobfrankston/mailx-types 0.1.13 → 0.1.15

package/contacts-config.d.ts

@@ -0,0 +1,27 @@
+/**
+ * Shared `contacts.jsonc` mutations — denylist + preferred.
+ *
+ * Pure logic with cloud I/O injected, so the desktop service
+ * (`mailx-service`, Node) and the Android service (`mailx-store-web`, in the
+ * WebView) run ONE implementation instead of each keeping its own copy.
+ * `web-service.ts` used to stub `addToDenylist` / `addPreferredContact` as
+ * `notImpl()`, which is why the phone's ⊘ / ★ buttons did nothing.
+ *
+ * Nothing here is platform-specific: it's a `cloudRead` → mutate → `cloudWrite`
+ * round-trip. Each caller passes its own platform's cloud functions.
+ */
+export type CloudReadFn = (filename: string) => Promise<string | null>;
+export type CloudWriteFn = (filename: string, content: string) => Promise<unknown>;
+export interface PreferredContactEntry {
+    name: string;
+    email: string;
+    source?: string;
+    organization?: string;
+}
+/** Append an email to `contacts.jsonc#denylist[]` — idempotent and
+ *  case-insensitive. Writes only when the entry is genuinely new. */
+export declare function addContactsDenylistEntry(email: string, cloudRead: CloudReadFn, cloudWrite: CloudWriteFn): Promise<void>;
+/** Append a preferred contact to `contacts.jsonc#preferred[]` — dedup by
+ *  source|email|name. Writes only when the entry is genuinely new. */
+export declare function addContactsPreferredEntry(entry: PreferredContactEntry, cloudRead: CloudReadFn, cloudWrite: CloudWriteFn): Promise<void>;
+//# sourceMappingURL=contacts-config.d.ts.map

package/contacts-config.js

@@ -0,0 +1,67 @@
+/**
+ * Shared `contacts.jsonc` mutations — denylist + preferred.
+ *
+ * Pure logic with cloud I/O injected, so the desktop service
+ * (`mailx-service`, Node) and the Android service (`mailx-store-web`, in the
+ * WebView) run ONE implementation instead of each keeping its own copy.
+ * `web-service.ts` used to stub `addToDenylist` / `addPreferredContact` as
+ * `notImpl()`, which is why the phone's ⊘ / ★ buttons did nothing.
+ *
+ * Nothing here is platform-specific: it's a `cloudRead` → mutate → `cloudWrite`
+ * round-trip. Each caller passes its own platform's cloud functions.
+ */
+/** Loose-parse a JSONC blob. The file mailx writes is plain JSON
+ *  (`JSON.stringify`), but a hand-edit may add `//` comments or trailing
+ *  commas — strip those and retry rather than losing the whole file. */
+function parseContactsConfig(raw) {
+    if (!raw)
+        return {};
+    try {
+        return JSON.parse(raw) || {};
+    }
+    catch { /* fall through to loose */ }
+    try {
+        const stripped = raw
+            .replace(/^\s*\/\/.*$/gm, "") // line comments
+            .replace(/,(\s*[}\]])/g, "$1"); // trailing commas
+        return JSON.parse(stripped) || {};
+    }
+    catch {
+        return {};
+    }
+}
+/** Append an email to `contacts.jsonc#denylist[]` — idempotent and
+ *  case-insensitive. Writes only when the entry is genuinely new. */
+export async function addContactsDenylistEntry(email, cloudRead, cloudWrite) {
+    const lower = (email || "").trim().toLowerCase();
+    if (!lower)
+        return;
+    const cfg = parseContactsConfig(await cloudRead("contacts.jsonc"));
+    if (!Array.isArray(cfg.denylist))
+        cfg.denylist = [];
+    if (cfg.denylist.some((e) => (e || "").toLowerCase() === lower))
+        return;
+    cfg.denylist.push(email);
+    await cloudWrite("contacts.jsonc", JSON.stringify(cfg, null, 2));
+}
+/** Append a preferred contact to `contacts.jsonc#preferred[]` — dedup by
+ *  source|email|name. Writes only when the entry is genuinely new. */
+export async function addContactsPreferredEntry(entry, cloudRead, cloudWrite) {
+    if (!entry?.email)
+        return;
+    const cfg = parseContactsConfig(await cloudRead("contacts.jsonc"));
+    if (!Array.isArray(cfg.preferred))
+        cfg.preferred = [];
+    const key = (s, e, n) => `${(s || "preferred").toLowerCase()}|${(e || "").toLowerCase()}|${(n || "").toLowerCase()}`;
+    const dupKey = key(entry.source || "", entry.email, entry.name || "");
+    if (cfg.preferred.some((e) => key(e?.source || "", e?.email || "", e?.name || "") === dupKey))
+        return;
+    const row = { name: entry.name || "", email: entry.email };
+    if (entry.source)
+        row.source = entry.source;
+    if (entry.organization)
+        row.organization = entry.organization;
+    cfg.preferred.push(row);
+    await cloudWrite("contacts.jsonc", JSON.stringify(cfg, null, 2));
+}
+//# sourceMappingURL=contacts-config.js.map

package/index.d.ts

@@ -5,6 +5,7 @@
  */
 export { CONTACT_RULES } from "./contact-rules.js";
 export type { MailxApi } from "./mailx-api.js";
+export { addContactsDenylistEntry, addContactsPreferredEntry, type PreferredContactEntry, type CloudReadFn, type CloudWriteFn, } from "./contacts-config.js";
 export { expandRecipients, splitRecipients, isAddressToken, extractAddress, } from "./groups.js";
 export type { GroupMap, RecipientToken, ExpansionResult } from "./groups.js";
 /** Supported authentication methods */

package/index.js

@@ -7,6 +7,8 @@
 // this barrel so a single source-of-truth (contact-rules.jsonc) drives
 // junk-contact filtering on every platform.
 export { CONTACT_RULES } from "./contact-rules.js";
+// Shared contacts.jsonc mutations — one implementation for desktop + Android.
+export { addContactsDenylistEntry, addContactsPreferredEntry, } from "./contacts-config.js";
 // Group-name expansion for recipient fields. Lets users type a group name
 // (e.g. "family") in To/Cc/Bcc and have it expand to the address list at
 // send time. Both desktop and Android send paths consume this expander
@@ -80,6 +82,21 @@ export function sanitizeHtml(html) {
         return `url("") /* blocked: ${url} */`;
     });
     clean = clean.replace(/<\/?form\b[^>]*>/gi, "");
+    // Strip every interactive form element. Even without the surrounding
+    // <form>, an <input type="password"> in an email body is dangerous —
+    // WebView2's password manager offers to autofill it, and the user
+    // might type a real password into what looks like an in-email control.
+    // Same for <textarea>, <select>/<option>, and <button>. Bob 2026-05-14:
+    // observed a phishing-shaped "CHANGE YOUR PASSWORD" email rendering
+    // with working input fields + the OS autofill chip. Replace with a
+    // visible "[blocked: input]" marker so the user sees something was
+    // stripped (a silent removal would hide the phishing attempt entirely
+    // — they'd think "this email is just text" when it actually tried to
+    // capture credentials).
+    clean = clean.replace(/<input\b[^>]*\/?>/gi, "[blocked: form input]");
+    clean = clean.replace(/<textarea\b[^>]*>[\s\S]*?<\/textarea>/gi, "[blocked: textarea]");
+    clean = clean.replace(/<select\b[^>]*>[\s\S]*?<\/select>/gi, "[blocked: select]");
+    clean = clean.replace(/<button\b[^>]*>([\s\S]*?)<\/button>/gi, "$1");
     clean = clean.replace(/<iframe\b[^>]*>[\s\S]*?<\/iframe>/gi, "");
     return { html: clean, hasRemoteContent };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/mailx-types",
-  "version": "0.1.13",
+  "version": "0.1.15",
   "type": "module",
   "main": "index.js",
   "types": "index.d.ts",