@bobfrankston/rmfmail 1.2.105 → 1.2.108

package/client/lib/rmf-tiny.js

@@ -172,15 +172,28 @@ export async function createTinyMceEditor(container, opts = {}) {
                 const input = document.createElement("input");
                 input.type = "file";
                 input.accept = "image/*";
+                // MUST be connected to the document before .click() — WebView2
+                // (Chromium) silently refuses to open the OS file dialog for a
+                // DETACHED file input, so the Browse button in the Insert Image
+                // dialog did nothing while drag-drop (no input) and URL-source
+                // insert both worked (Bob 2026-07-06 "insert image is failing …
+                // but drag drop does work"). The compose Attach button never hit
+                // this because it uses a permanent #compose-file input. Hidden +
+                // removed after change so it leaves no DOM residue.
+                input.style.display = "none";
+                const cleanup = () => { input.remove(); };
                 input.onchange = () => {
                     const file = input.files && input.files[0];
-                    if (!file)
+                    if (!file) {
+                        cleanup();
                         return;
+                    }
                     const reader = new FileReader();
-                    reader.onload = () => cb(reader.result, { alt: file.name, title: file.name });
-                    reader.onerror = () => cb("");
+                    reader.onload = () => { cb(reader.result, { alt: file.name, title: file.name }); cleanup(); };
+                    reader.onerror = () => { cb(""); cleanup(); };
                     reader.readAsDataURL(file);
                 };
+                document.body.appendChild(input);
                 input.click();
             },
             // Right-click context menu DISABLED so WebView2's native menu
@@ -327,6 +340,31 @@ export async function createTinyMceEditor(container, opts = {}) {
                     applyZoom();
                     saveZoom();
                 };
+                // Don't spell-check URLs or email addresses (Bob 2026-07-06).
+                // WebView2's native spell-check underlines every token, so
+                // "gmail", "iecc", "https", path segments etc. all draw red
+                // squiggles inside links. The browser skips any subtree whose
+                // ancestor carries spellcheck="false", and autolink already
+                // wraps bare URLs + emails in <a> (as does mailto: / http
+                // linking), so tagging every link suppresses exactly the
+                // URL/email case while leaving prose checked. Idempotent —
+                // only touches links missing the attribute — so running it on
+                // every NodeChange is cheap. Also covers late-linked tokens the
+                // moment autolink converts them.
+                const suppressLinkSpellcheck = () => {
+                    try {
+                        const body = ed.getBody();
+                        if (!body)
+                            return;
+                        const links = body.querySelectorAll("a:not([spellcheck])");
+                        for (const a of links)
+                            a.setAttribute("spellcheck", "false");
+                    }
+                    catch { /* editor torn down mid-call — non-fatal */ }
+                };
+                ed.on("init", suppressLinkSpellcheck);
+                ed.on("SetContent", suppressLinkSpellcheck);
+                ed.on("NodeChange", suppressLinkSpellcheck);
                 // Custom "Insert code" — wraps the stock codesample plugin
                 // (keeps its Prism highlighting + edit-in-place) but adds a
                 // "Box it in" border checkbox so a snippet is visually

package/debug.md

@@ -79,3 +79,36 @@ log (`~/.rmfmail/logs/rmfmail-<date>.log`) for `[parse]`, `[parse-worker]`,
 Note: while a large first-sync is running the event loop is saturated and any
 endpoint can be slow — that saturation is itself a bug under investigation, not
 a debug-server limitation.
+
+## Popout window (🗗) headless testing
+
+`--debug-server` runs also log the popout server's per-launch token:
+
+```
+[popout] window server on http://127.0.0.1:<port> (loopback, token-gated)
+[popout] DEBUG token=<token> (logged because --debug-server)
+```
+
+With those you can exercise the whole native-popout path without clicking:
+
+```
+# The page the msger window loads (subject + toolbar + body iframe)
+curl "http://127.0.0.1:<port>/v?a=<acct>&u=<uid>&f=<folderId>&t=<token>"
+
+# Toolbar action → daemon → popoutAction event → main window opens editable
+# compose (reply/replyAll/forward/editAsNew) or flags/deletes
+curl -X POST -H "content-type: application/json" -d '{"action":"reply"}' \
+  "http://127.0.0.1:<port>/action?a=<acct>&u=<uid>&f=<folderId>&t=<token>"
+```
+
+Visual check without disturbing the desktop: msger render mode loads the same
+URL in a hidden window and writes a PNG —
+
+```
+node --input-type=module -e "import {showMessageBox} from '@bobfrankston/msger';
+await showMessageBox({url:'http://127.0.0.1:<port>/v?...&t=<token>',
+  size:{width:820,height:900}, render:'c:/temp/popout.png', renderDelay:800});"
+```
+
+Success signals in the log: `[popout] action <name> a=... u=...` on the daemon
+side, then `[client] compose-tick ... mode=reply ... compose visible`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@bobfrankston/rmfmail",
-  "version": "1.2.105",
+  "version": "1.2.108",
   "description": "Local-first email client with IMAP sync and standalone native app",
   "type": "module",
   "main": "bin/mailx.js",