npm - @novacraft-engineering/mailbox - Versions diffs - 0.4.20 → 0.4.22 - Mend

@novacraft-engineering/mailbox 0.4.20 → 0.4.22

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (3) hide show

package/app/mail/page.tsx CHANGED Viewed

@@ -663,6 +663,12 @@ function htmlToQuoteText(html: string | null, text: string | null): string {
  * imported without ids fall back to the names mail clients give such parts. Anything
  * larger, or not an image, is a real file.
  */
+// Some senders put the plain-text body straight into the HTML part. Rendered as markup its
+// line breaks are just whitespace and the message collapses into one paragraph, so a part
+// carrying no tags has to be treated as the text it actually is.
+const hasMarkup = (html: string | null | undefined): html is string =>
+  typeof html === 'string' && /<[a-z!/][^>]*>/i.test(html)
 const INLINE_IMAGE_MAX_BYTES = 150_000
 const INLINE_IMAGE_NAME = /^(image\d*|outlook-[\w-]+|blocked|[0-9a-f]{8}|[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12})\.(png|gif|jpe?g)$/i
 function inlineAttachmentNames(message: InboundEmail): Set<string> {
@@ -4978,7 +4984,7 @@ export default function DevMailPage() {
       img { max-width: 100%; }
     </style>`
     doc.open()
-    doc.write(`<!doctype html><html><head><meta charset="utf-8"><title>${escapeHtml(subject)}</title>${printCss}</head><body>${meta}${html ? stripOwnPixel(html) : `<pre style="font-family:Arial,sans-serif;white-space:pre-wrap;">${escapeHtml(text ?? '')}</pre>`}</body></html>`)
+    doc.write(`<!doctype html><html><head><meta charset="utf-8"><title>${escapeHtml(subject)}</title>${printCss}</head><body>${meta}${hasMarkup(html) ? stripOwnPixel(html) : `<pre style="font-family:Arial,sans-serif;white-space:pre-wrap;">${escapeHtml(text?.trim() || html || '')}</pre>`}</body></html>`)
     doc.close()
     frame.contentWindow?.focus()
     window.setTimeout(() => {
@@ -5881,13 +5887,14 @@ export default function DevMailPage() {
     if (readerMode === 'html') return <pre className={styles.readerSource}>{formatHtmlSource(message.html ?? '')}</pre>
     if (readerMode === 'raw') return <pre className={styles.readerSource}>{rawInboundMessage(message)}</pre>
     // preview
-    if (!message.html) {
-      const plain = splitQuotedText(message.text ?? '')
+    if (!hasMarkup(message.html)) {
+      const source = message.text?.trim() ? message.text : (message.html ?? '')
+      const plain = splitQuotedText(source)
       const textShown = quoteOpen.has(message.id)
       return (
         <>
-          {(textShown ? message.text : plain.head)
-            ? <pre className={styles.readerText}>{textShown ? message.text : plain.head}</pre>
+          {(textShown ? source : plain.head)
+            ? <pre className={styles.readerText}>{textShown ? source : plain.head}</pre>
             : renderBodylessAttachment(inboundAttachments[message.id] ?? []) ?? <pre className={styles.readerText}>(no content)</pre>}
           {plain.tail && renderQuoteLine(message.id, textShown)}
         </>
@@ -5936,7 +5943,7 @@ export default function DevMailPage() {
   const renderSentBody = (sent: SentEmail) => {
     const detail = detailCache[sent.id]
     if (!detail) return <div className={styles.threadPending}>Loading message…</div>
-    if (detail.html && detail.html.trim()) {
+    if (hasMarkup(detail.html)) {
       return (
         <iframe
           className={styles.threadFrame}
@@ -5952,8 +5959,9 @@ export default function DevMailPage() {
         />
       )
     }
-    return detail.text?.trim()
-      ? <pre className={styles.readerText}>{detail.text}</pre>
+    const plainSent = detail.text?.trim() ? detail.text : (detail.html ?? '').trim()
+    return plainSent
+      ? <pre className={styles.readerText}>{plainSent}</pre>
       : renderBodylessAttachment(detail.attachments ?? []) ?? <pre className={styles.readerText}>(no content)</pre>
   }

package/lib/mailbox.ts CHANGED Viewed

@@ -538,11 +538,16 @@ const THROWAWAY_TLDS_DEFAULT = new Set([
 ])
 /** The shape of an advance-fee approach. Counted, never single-word: one alone is innocent. */
+// Only wording that is odd in ordinary business correspondence belongs here. A single
+// generic term is not evidence of anything: an insurance broker writes "beneficiary" and
+// "bank draft" all day, a logistics firm writes "consignment", and every sales team sends
+// a "business proposal". Add them per deployment through MAIL_SCAM_PHRASES if a mailbox
+// genuinely never sees them.
 const SCAM_PHRASES_DEFAULT = [
-  'next of kin', 'sole beneficiary', 'beneficiary', 'late client', 'deceased client',
-  'unclaimed', 'inheritance', 'died without', 'without a will', 'fund transfer',
-  'business proposal', 'strictly confidential', 'bank draft', 'consignment',
-  'compensation fund', 'lottery', 'winning notification', 'atm card', 'western union',
+  'next of kin', 'sole beneficiary', 'late client', 'deceased client',
+  'inheritance', 'died without', 'without a will', 'unclaimed inheritance',
+  'winning notification', 'lottery winner', 'western union', 'atm card',
+  'transfer to your account immediately', 'strictly confidential and urgent',
 ]
 /** The registrable domain behind an address, for reputation to be keyed on. */

package/package.json CHANGED Viewed

@@ -1,6 +1,6 @@
 {
   "name": "@novacraft-engineering/mailbox",
-  "version": "0.4.20",
+  "version": "0.4.22",
   "description": "A shared webmail app: one codebase, one deployment per mailbox. Threads, a rich composer with signatures, attachments on S3-compatible storage, sharing links, full-text search, web push and PWA install.",
   "keywords": [
     "webmail",