@bobfrankston/rmfmail 1.0.674 → 1.0.676

package/client/app.js

@@ -40,6 +40,73 @@ function propagateAppName() {
 }
 propagateAppName();
 window.__btick && window.__btick("app.ts module body executing");
+// ── App-vs-browser policy: this is a desktop app, not a web page. ──
+// Block browser-default accelerators (Reload, Save Page, Print, View
+// Source, history navigation, …) and the right-click context menu so
+// mailx's keymap is the only way to do anything. F12 is preserved as
+// the developer-tools escape hatch (Bob 2026-05-11 explicitly).
+//
+// Capture-phase listener so we intercept BEFORE any inner widget can
+// observe the event — mailx's own keymap re-emits via specific element
+// handlers (Ctrl+N compose, Ctrl+R reply, etc.) which were never the
+// browser's accelerators in the first place.
+(function blockBrowserKeysAndMenu() {
+    const isBlockedKey = (e) => {
+        // Always-allow: F12 for DevTools, and any single non-modifier key
+        // (typing, arrow nav, Tab/Esc/Enter) which is the user typing.
+        if (e.key === "F12")
+            return false;
+        // Block reload paths: F5, Ctrl+R, Ctrl+Shift+R, Ctrl+F5.
+        if (e.key === "F5" || e.key === "F3")
+            return true;
+        if ((e.ctrlKey || e.metaKey) && (e.key === "r" || e.key === "R"))
+            return true;
+        // Browser accelerators bound to Ctrl-letter combos that mailx
+        // doesn't want to forward: P (print), S (save page), U (view
+        // source), J (downloads), L (focus address bar — n/a in WebView
+        // but harmless), G (find next). Note: O is "open file" in
+        // browsers — mailx uses Ctrl+O nowhere meaningful, so block.
+        if (e.ctrlKey || e.metaKey) {
+            const k = e.key.toLowerCase();
+            if (["p", "s", "u", "j", "l", "g", "o"].includes(k))
+                return true;
+        }
+        // Alt+Left / Alt+Right = browser back / forward. No use in mailx.
+        if (e.altKey && (e.key === "ArrowLeft" || e.key === "ArrowRight"))
+            return true;
+        // Backspace as nav-back when no input is focused — fires on some
+        // WebView builds. Only block when target isn't text-editable.
+        if (e.key === "Backspace") {
+            const t = e.target;
+            const editable = t && (t.tagName === "INPUT" || t.tagName === "TEXTAREA"
+                || t.isContentEditable);
+            if (!editable)
+                return true;
+        }
+        return false;
+    };
+    document.addEventListener("keydown", (e) => {
+        if (isBlockedKey(e)) {
+            e.preventDefault();
+            e.stopPropagation();
+        }
+    }, true);
+    // Right-click context menu — mailx has its own (showContextMenu) for
+    // specific surfaces. Default WebView menu is "Reload / Save As /
+    // View Source / Inspect" which doesn't belong in a desktop app.
+    // Individual handlers that DO want a context menu must
+    // `e.preventDefault()` themselves AFTER showing — this only
+    // suppresses the default browser one when nothing else handles.
+    document.addEventListener("contextmenu", (e) => {
+        // Allow contextmenu to bubble normally so mailx-internal handlers
+        // (folder-tree right-click, address-pill right-click, link
+        // right-click in preview) can react. We only kill it if it would
+        // otherwise show the browser default — i.e., no other handler
+        // called preventDefault.
+        if (!e.defaultPrevented)
+            e.preventDefault();
+    });
+})();
 let baseTitle = APP_NAME;
 let lastSeenCount = 0;
 let badgeCount = 0;