@bobfrankston/rmfmail 1.2.263 → 1.2.270

package/client/app.js

@@ -1060,9 +1060,8 @@ async function openCompose(mode, overrideMsg, overrideAccountId) {
     // bootstraps (200-500 ms for TinyMCE, less for Quill); by then the IPC
     // round-trip has resolved. Earlier code awaited getAccounts FIRST,
     // adding the IPC latency to the perceived Ctrl+N → editor-visible time.
-    // We post `compose-init-ready` to the iframe once init is in
-    // sessionStorage so compose.ts's IIFE can read synchronously without
-    // polling.
+    // handOffComposeInit() below does the actual handoff (parent stash +
+    // `compose-init` postMessage + sessionStorage + heartbeat).
     const accountsP = getAccounts();
     const msg = current?.message;
     // Title bar text needs the subject from msg (no IPC dependency) — build
@@ -1308,6 +1307,31 @@ async function openCompose(mode, overrideMsg, overrideAccountId) {
         }
         frame = showComposeOverlay(composeTitle);
     }
+    handOffComposeInit(frame, init);
+}
+/**
+ * Hand a compose init payload to the compose iframe.
+ *
+ * THIS IS THE ONLY SUPPORTED WAY to seed a compose overlay — every entry
+ * point (Ctrl+N, reply, mailto, Windows Share, Android share, edit-draft)
+ * must go through it. It runs four handoffs at once because under WebView2's
+ * custom-protocol host no single one is reliable:
+ *
+ *   1. `window.__mailxComposeInits[key]` — a parent-window stash the
+ *      same-origin iframe reads synchronously via window.parent. Most
+ *      reliable, and the only race-free one.
+ *   2. `compose-init` postMessage carrying the payload.
+ *   3. sessionStorage (the original mechanism).
+ *   4. A 100 ms heartbeat for 3 s, plus a re-post on iframe `load`.
+ *
+ * The belt-and-braces is not paranoia: sessionStorage AND postMessage have
+ * each failed in production (Bob 2026-05-24, replyAll opened with empty
+ * fields), which is why the stash exists. The mailto / share / Android-share
+ * / edit-draft paths were still on the old sessionStorage-only handoff and
+ * so kept reproducing that same empty-compose bug — clicking a mailto link
+ * in another app opened compose with nothing filled in (Bob 2026-08-19).
+ */
+function handOffComposeInit(frame, init) {
     const initJson = JSON.stringify(init);
     try {
         sessionStorage.setItem("composeInit", initJson);
@@ -2360,8 +2384,10 @@ document.getElementById("rail-inbox")?.addEventListener("click", () => {
     inbox?.click();
 });
 document.getElementById("rail-unified")?.addEventListener("click", () => {
-    const unified = document.querySelector('.folder-tree .all-inboxes')
-        || document.getElementById("ft-all-inboxes");
+    // The || document.getElementById("ft-all-inboxes") fallback was dropped
+    // 2026-08-19: no HTML declares that id and nothing creates it, so the
+    // querySelector was always the only live path.
+    const unified = document.querySelector('.folder-tree .all-inboxes');
     unified?.click();
 });
 document.getElementById("rail-contacts")?.addEventListener("click", async () => {
@@ -2655,8 +2681,7 @@ document.addEventListener("mailx-share-intent", ((e) => {
     if (Array.isArray(detail.attachments) && detail.attachments.length) {
         init.attachments = detail.attachments.filter((a) => a?.filename && a?.dataBase64);
     }
-    sessionStorage.setItem("composeInit", JSON.stringify(init));
-    showComposeOverlay(init.subject || "Compose");
+    handOffComposeInit(showComposeOverlay(init.subject || "Compose"), init);
 }));
 // ── Search ──
 let searchTimeout;
@@ -3111,13 +3136,10 @@ window.addEventListener("message", (e) => {
         }
         return;
     }
-    if (e.data?.type === "openLink" && e.data.url) {
-        const api = window.mailxapi;
-        if (api?.openExternal)
-            api.openExternal(e.data.url);
-        else
-            window.open(e.data.url, "_blank", "noopener,noreferrer");
-    }
+    // (removed 2026-08-19, dead-code audit) An "openLink" postMessage
+    // handler lived here. Nothing has posted that type since the preview
+    // iframe moved to "linkClick" — it was unreachable. Link opening is
+    // handled by the "linkClick" branch below.
     if (e.data?.type === "linkClick" && e.data.url) {
         const url = e.data.url;
         console.log(`[android-link] parent got linkClick → ${url}`);
@@ -3145,10 +3167,11 @@ window.addEventListener("message", (e) => {
         catch { /* diagnostic only */ }
         return;
     }
-    if (e.data?.type === "previewToggleFullscreen") {
-        toggleFullscreenPreview();
-        return;
-    }
+    // (removed 2026-08-19, dead-code audit) A "previewToggleFullscreen"
+    // postMessage handler lived here, fed by an iframe-level dblclick that
+    // was itself removed for hijacking word-selection. Nothing has posted
+    // the type since; the chrome dblclick handler is the only entry into
+    // fullscreen-preview.
     if (e.data?.type === "previewContextMenu") {
         // Translate iframe-relative coords to viewport. Find the iframe whose
         // contentWindow matches the source so we map correctly even when
@@ -3165,91 +3188,15 @@ window.addEventListener("message", (e) => {
         showPreviewBodyMenu(x, y, String(e.data.selectedText || ""), e.source, String(e.data.linkUrl || "") || undefined, String(e.data.linkText || "") || undefined, String(e.data.imgSrc || "") || undefined);
         return;
     }
-    if (e.data?.type === "linkContextMenu") {
-        // C29: right-click in body iframe → Open / Save / Copy URL menu.
-        // Iframe's clientX/Y is relative to the iframe; translate to viewport.
-        let iframeRect = null;
-        for (const f of Array.from(document.querySelectorAll("iframe"))) {
-            if (f.contentWindow === e.source) {
-                iframeRect = f.getBoundingClientRect();
-                break;
-            }
-        }
-        const x = (iframeRect?.left || 0) + (e.data.x || 0);
-        const y = (iframeRect?.top || 0) + (e.data.y || 0);
-        const url = e.data.url || "";
-        // Find a sensible filename for the Save action.
-        const guessName = (() => {
-            try {
-                const u = new URL(url);
-                const last = u.pathname.split("/").pop() || "";
-                return last && last.includes(".") ? last : "";
-            }
-            catch {
-                return "";
-            }
-        })();
-        const items = [
-            { label: "Open in browser", action: () => {
-                    window.open(url, "_blank", "noopener,noreferrer");
-                } },
-            { label: guessName ? `Save "${guessName}"…` : "Save link as…", action: () => {
-                    // Trigger a download via anchor with download attr.
-                    const a = document.createElement("a");
-                    a.href = url;
-                    if (guessName)
-                        a.download = guessName;
-                    else
-                        a.download = "";
-                    a.style.display = "none";
-                    document.body.appendChild(a);
-                    a.click();
-                    setTimeout(() => a.remove(), 1000);
-                } },
-            { label: "Copy URL", action: async () => {
-                    try {
-                        await navigator.clipboard.writeText(url);
-                    }
-                    catch {
-                        prompt("URL:", url);
-                    }
-                } },
-            { label: "Copy link text", action: async () => {
-                    try {
-                        await navigator.clipboard.writeText(e.data.text || url);
-                    }
-                    catch {
-                        prompt("Text:", e.data.text || url);
-                    }
-                } },
-        ];
-        // Build a tiny inline menu (showContextMenu would do but it's in components/).
-        const menu = document.createElement("div");
-        menu.style.cssText = `position:fixed;z-index:2400;background:var(--color-bg);border:1px solid var(--color-border);border-radius:6px;box-shadow:0 4px 16px rgba(0,0,0,0.2);padding:4px 0;font-size:13px;min-width:180px;`;
-        menu.style.left = `${Math.min(x, window.innerWidth - 200)}px`;
-        menu.style.top = `${Math.min(y, window.innerHeight - 200)}px`;
-        // mousedown inside the menu must NOT reach the document-level
-        // dismiss handler — otherwise the menu is removed before click
-        // fires on the row and the action silently no-ops (user report
-        // 2026-04-24). Stop propagation at the menu root covers every row.
-        menu.addEventListener("mousedown", (ev) => ev.stopPropagation());
-        for (const it of items) {
-            const row = document.createElement("div");
-            row.textContent = it.label;
-            row.style.cssText = `padding:6px 12px;cursor:pointer;`;
-            row.addEventListener("mouseenter", () => row.style.background = "var(--color-bg-hover)");
-            row.addEventListener("mouseleave", () => row.style.background = "");
-            row.addEventListener("click", () => { menu.remove(); it.action(); });
-            menu.appendChild(row);
-        }
-        document.body.appendChild(menu);
-        const dismiss = () => { menu.remove(); document.removeEventListener("mousedown", dismiss); document.removeEventListener("keydown", dismiss); };
-        setTimeout(() => {
-            document.addEventListener("mousedown", dismiss);
-            document.addEventListener("keydown", dismiss);
-        }, 0);
-        return;
-    }
+    // (removed 2026-08-19) A second, dead link context menu used to live
+    // here — a "linkContextMenu" postMessage handler labelled "Copy URL",
+    // built when the preview iframe still posted that message type. Nothing
+    // has posted it since the viewer moved to showBodyContextMenu(), so it
+    // was unreachable code offering a different label ("Copy URL") for the
+    // same action the live menu calls "Copy link URL" — the kind of drift
+    // Bob spotted 2026-08-19 ("other menus have both copy link and copy
+    // url"). The live implementation is in components/message-viewer.ts;
+    // keep link-menu changes there and nowhere else.
     if (e.data?.type === "mailx-send-error") {
         // Send failed AFTER compose closed (fire-and-forget model). Surface in
         // the status bar so the user sees something instead of the silence.
@@ -3975,11 +3922,7 @@ async function openComposeFromMailto(m) {
         references: m.inReplyTo ? [m.inReplyTo] : [],
         accounts: accounts.map((a) => ({ id: a.id, name: a.name, email: a.email, signature: a.signature, sig: a.sig })),
     };
-    sessionStorage.setItem("composeInit", JSON.stringify(init));
-    try {
-        frame?.contentWindow?.postMessage({ type: "compose-init-ready" }, "*");
-    }
-    catch { /* */ }
+    handOffComposeInit(frame, init);
 }
 /** C46: open compose from a Windows Share sheet drop. Shared files become
  *  attachments; shared text/links become the body; a shared page title (or
@@ -4016,11 +3959,7 @@ async function openComposeFromShare(s) {
         attachments: s.attachments,
         accounts: accounts.map((a) => ({ id: a.id, name: a.name, email: a.email, signature: a.signature, sig: a.sig })),
     };
-    sessionStorage.setItem("composeInit", JSON.stringify(init));
-    try {
-        frame?.contentWindow?.postMessage({ type: "compose-init-ready" }, "*");
-    }
-    catch { /* */ }
+    handOffComposeInit(frame, init);
 }
 // ── Keyboard shortcuts ──
 // Capture-phase pre-handler: intercept WebView accelerator keys that would
@@ -4734,9 +4673,14 @@ document.addEventListener("keydown", (e) => {
         bd.remove();
         closed = true;
     }
-    const themeSub = document.getElementById("theme-submenu");
+    // Was getElementById("theme-submenu") — an id nothing declares, so Escape
+    // silently never closed the theme submenu (dead-code audit 2026-08-19).
+    // The real element is #theme-submenu-popout; also reset the toggle's
+    // aria-expanded so the button doesn't claim to be open.
+    const themeSub = document.getElementById("theme-submenu-popout");
     if (themeSub && !themeSub.hidden) {
         themeSub.hidden = true;
+        document.getElementById("theme-submenu-toggle")?.setAttribute("aria-expanded", "false");
         closed = true;
     }
     if (closed) {
@@ -6560,8 +6504,7 @@ document.addEventListener("mailx-popout-message", (async (e) => {
             if (loaded.length)
                 init.attachments = loaded;
         }
-        sessionStorage.setItem("composeInit", JSON.stringify(init));
-        showComposeOverlay(msg.subject ? `Edit: ${msg.subject}` : "Edit draft");
+        handOffComposeInit(showComposeOverlay(msg.subject ? `Edit: ${msg.subject}` : "Edit draft"), init);
         return;
     }
     // ONE read-only popout, not three. This handler used to build its own