@remit/web-client 0.0.132 → 0.0.134

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remit/web-client",
-  "version": "0.0.132",
+  "version": "0.0.134",
   "type": "module",
   "description": "Remit web client, published as composable primitives — the app shell, auth shells, and runtime config. A distributor imports what it composes and bundles it.",
   "exports": {
@@ -61,9 +61,6 @@
   },
   "dependencies": {
     "@hookform/resolvers": "*",
-    "@platejs/autoformat": "*",
-    "@platejs/basic-nodes": "*",
-    "@platejs/link": "*",
     "@remit/api-http-client": "*",
     "@remit/domain-enums": "*",
     "@remit/ui": "*",
@@ -82,7 +79,6 @@
     "i18next-http-backend": "^3.0.6",
     "lucide-react": "^0.468",
     "p-map": "*",
-    "platejs": "*",
     "react-hook-form": "*",
     "react-i18next": "^15",
     "tailwind-merge": "^2",

package/src/components/compose/ComposeBody.tsx

@@ -1,36 +1,22 @@
-import type { Value } from "platejs";
-import { Plate } from "platejs/react";
-import { PlateEditorContent, usePlateComposeEditor } from "./PlateEditor.js";
-import { PlateToolbar } from "./PlateToolbar.js";
+import { RichTextEditor, type RichTextValue } from "@remit/ui/rich-text";
 
 interface ComposeBodyProps {
-	value: Value;
-	onChange: (value: Value) => void;
+	initialHtml: string;
+	onChange: (value: RichTextValue) => void;
 	onSubmit?: () => void;
 	autoFocus?: boolean;
 }
 
 export const ComposeBody = ({
-	value,
+	initialHtml,
 	onChange,
 	onSubmit,
 	autoFocus,
-}: ComposeBodyProps) => {
-	const editor = usePlateComposeEditor(value);
-
-	return (
-		<Plate
-			editor={editor}
-			onValueChange={({ value: v }) => {
-				onChange(v);
-			}}
-		>
-			<PlateToolbar />
-			<PlateEditorContent
-				editor={editor}
-				onSubmit={onSubmit}
-				autoFocus={autoFocus}
-			/>
-		</Plate>
-	);
-};
+}: ComposeBodyProps) => (
+	<RichTextEditor
+		initialHtml={initialHtml}
+		onChange={onChange}
+		onSubmit={onSubmit}
+		autoFocus={autoFocus}
+	/>
+);

package/src/components/compose/ComposeForm.tsx

@@ -9,9 +9,15 @@ import type {
 	RemitImapAccountResponse,
 	RemitImapDescribeMessageResponse,
 } from "@remit/api-http-client/types.gen.ts";
-import { ComposeActionBar, ComposeFormShell, QuotedText } from "@remit/ui";
+import {
+	ComposeActionBar,
+	ComposeFormShell,
+	EMPTY_RICH_TEXT,
+	QuotedText,
+	type RichTextValue,
+	sanitizeQuotedHtml,
+} from "@remit/ui";
 import { useMutation, useQuery } from "@tanstack/react-query";
-import type { Value } from "platejs";
 import {
 	lazy,
 	Suspense,
@@ -23,10 +29,6 @@ import {
 import { useMessageBodyContent } from "../../hooks/useMessageBodyContent";
 import { useSaveDraft } from "../../hooks/useSaveDraft";
 import { useSignature } from "../../hooks/useSignature.js";
-import {
-	plateValueToHtml,
-	plateValueToText,
-} from "../../lib/plate-serializer.js";
 import { accountIsMissingSmtp } from "../settings/account-form-helpers.js";
 import { useErrorBanners } from "../ui/ErrorBannerProvider.js";
 import {
@@ -54,7 +56,6 @@ import type { ComposeMode } from "./ComposeProvider";
 import { useCompose } from "./ComposeProvider";
 import { FromSelector } from "./FromSelector";
 import { SubjectField } from "./SubjectField";
-import { sanitizeQuoteHtml } from "./sanitize-quote-html.js";
 
 interface ComposeFormProps {
 	mode: ComposeMode;
@@ -64,19 +65,22 @@ interface ComposeFormProps {
 	onAccountChange?: (account: RemitImapAccountResponse) => void;
 }
 
-const EMPTY_PARAGRAPH: Value = [{ type: "p", children: [{ text: "" }] }];
-
-const SIGNATURE_SEPARATOR: Value = [
-	{ type: "p", children: [{ text: "" }] },
-	{ type: "p", children: [{ text: "-- " }] },
-];
-
-const buildInitialBody = (signaturePlainText: string): Value => {
-	if (!signaturePlainText) return EMPTY_PARAGRAPH;
-	return [
-		...SIGNATURE_SEPARATOR,
-		{ type: "p", children: [{ text: signaturePlainText }] },
-	];
+const escapeHtml = (text: string): string =>
+	text
+		.replace(/&/g, "&")
+		.replace(/</g, "&lt;")
+		.replace(/>/g, "&gt;")
+		.replace(/"/g, "&quot;");
+
+const textToHtml = (text: string): string =>
+	text
+		.split("\n")
+		.map((line) => `<p>${escapeHtml(line)}</p>`)
+		.join("");
+
+const buildInitialHtml = (signaturePlainText: string): string => {
+	if (!signaturePlainText) return "";
+	return `<p></p><p>-- </p>${textToHtml(signaturePlainText)}`;
 };
 
 const buildReplySubject = (subject?: string): string => {
@@ -149,13 +153,13 @@ const isFormEmpty = (
 	ccAddresses: AddressEntry[],
 	bccAddresses: AddressEntry[],
 	subject: string,
-	body: Value,
+	body: RichTextValue,
 ): boolean =>
 	toAddresses.length === 0 &&
 	ccAddresses.length === 0 &&
 	bccAddresses.length === 0 &&
 	subject.trim() === "" &&
-	plateValueToText(body).trim() === "";
+	body.text.trim() === "";
 
 // ---------------------------------------------------------------------------
 // ComposeHeader — collapsed on mobile when the software keyboard is open
@@ -310,24 +314,41 @@ export const ComposeForm = ({
 	// changes while compose is already open). Without this, the previous draft's
 	// fields stay visible and the new draft never loads because draftLoaded
 	// remains true from the prior session (#536).
+	//
+	// A first autosave also sets the id, from nothing to the draft it just
+	// created. That is this session's own content arriving back, not a switch to
+	// somebody else's document, and blanking the form there would throw away
+	// whatever is being typed.
 	useEffect(() => {
-		if (prevOutboxMessageIdRef.current === outboxMessageId) return;
+		const previous = prevOutboxMessageIdRef.current;
+		if (previous === outboxMessageId) return;
 		prevOutboxMessageIdRef.current = outboxMessageId;
-		if (!outboxMessageId) return;
+		if (!outboxMessageId || previous === undefined) return;
 		setToAddresses([]);
 		setCcAddresses([]);
 		setBccAddresses([]);
 		setSubject("");
 		setShowCc(false);
 		setShowBcc(false);
-		setBody(EMPTY_PARAGRAPH);
+		setInitialHtml("");
+		setBody(EMPTY_RICH_TEXT);
+		setDocumentGeneration((generation) => generation + 1);
 		setDraftLoaded(false);
 	}, [outboxMessageId]);
 
 	const { signature } = useSignature(selectedAccountId);
-	const [body, setBody] = useState<Value>(() =>
-		buildInitialBody(signature.plainText),
+	// The editor reads its document once, so this is the document it opens on,
+	// not the live value, and it is remounted when the generation changes. Only
+	// loading a different document bumps that — remounting mid-compose would take
+	// the caret, the focus and the undo history with it.
+	const [documentGeneration, setDocumentGeneration] = useState(0);
+	const [initialHtml, setInitialHtml] = useState(() =>
+		buildInitialHtml(signature.plainText),
 	);
+	const [body, setBody] = useState<RichTextValue>(() => ({
+		html: buildInitialHtml(signature.plainText),
+		text: signature.plainText,
+	}));
 
 	const { data: draftData } = useQuery({
 		...outboxDetailOperationsGetOutboxMessageOptions({
@@ -361,8 +382,13 @@ export const ComposeForm = ({
 			setShowBcc(true);
 		}
 		if (draftData.subject) setSubject(draftData.subject);
-		if (draftData.textBody)
-			setBody([{ type: "p", children: [{ text: draftData.textBody }] }]);
+		// A draft stores what would have been sent, so a rich one reopens from its
+		// HTML. Only a draft that never had any falls back to its text.
+		const loadedHtml =
+			draftData.htmlBody || textToHtml(draftData.textBody ?? "");
+		setInitialHtml(loadedHtml);
+		setBody({ html: loadedHtml, text: draftData.textBody ?? "" });
+		setDocumentGeneration((generation) => generation + 1);
 		setSelectedAccountId(draftData.accountId);
 		setDraftLoaded(true);
 	}, [draftData, draftLoaded]);
@@ -398,16 +424,27 @@ export const ComposeForm = ({
 	const quotedText = sourceBody?.kind === "text" ? sourceBody.body : "";
 	const quotedHtml =
 		sourceBody?.kind === "html"
-			? sanitizeQuoteHtml(sourceBody.body)
+			? sanitizeQuotedHtml(sourceBody.body)
 			: undefined;
 
 	const senderName =
 		sourceMessage?.envelope.from[0]?.displayName ??
 		sourceMessage?.envelope.from[0]?.normalizedEmail;
 
+	// The draft this session just created holds what is already on screen, so
+	// there is nothing to read back — and reading it back would replace the
+	// document under the caret with the server's copy of it.
+	const adoptCreatedDraft = useCallback(
+		(createdId: string) => {
+			setDraftLoaded(true);
+			setOutboxMessageId(createdId);
+		},
+		[setOutboxMessageId],
+	);
+
 	const { saveStatus, saveError, saveDraft, stopAutoSave } = useSaveDraft({
 		outboxMessageId,
-		onDraftCreated: setOutboxMessageId,
+		onDraftCreated: adoptCreatedDraft,
 	});
 
 	// Auto-save runs on a debounce, so a failure has no inline call site to
@@ -475,8 +512,7 @@ export const ComposeForm = ({
 		if (isFormEmpty(toAddresses, ccAddresses, bccAddresses, subject, body))
 			return;
 
-		const textBody = plateValueToText(body);
-		const htmlBody = plateValueToHtml(body);
+		const { html: htmlBody, text: textBody } = body;
 
 		saveDraft({
 			accountId: selectedAccountId,
@@ -515,8 +551,7 @@ export const ComposeForm = ({
 		let createdThisAttempt = false;
 
 		if (!messageId) {
-			const textBody = plateValueToText(body);
-			const htmlBody = plateValueToHtml(body);
+			const { html: htmlBody, text: textBody } = body;
 
 			const outboxMessage = await createMutation
 				.mutateAsync({
@@ -665,7 +700,8 @@ export const ComposeForm = ({
 		>
 			<Suspense fallback={<ComposeBodyFallback />}>
 				<LazyComposeBody
-					value={body}
+					key={documentGeneration}
+					initialHtml={initialHtml}
 					onChange={setBody}
 					onSubmit={handleSend}
 					autoFocus={mode === "new"}

package/src/components/compose/MobileComposeSheet.tsx

@@ -27,7 +27,7 @@ const useIsDraftDirty = (): (() => boolean) => {
 		const subject =
 			document.querySelector<HTMLInputElement>("[data-subject-field]")?.value ??
 			"";
-		const editorEl = document.querySelector("[data-slate-editor]");
+		const editorEl = document.querySelector('[data-testid="compose-body"]');
 		const bodyText = editorEl?.textContent ?? "";
 		// Strip signature separator "-- " to avoid false positives
 		const cleaned = bodyText.replace(/--\s*/g, "").trim();

package/src/components/mail/IntelligencePane.render.test.ts

@@ -0,0 +1,134 @@
+/**
+ * The spam quick action stayed clickable throughout its own request (issue
+ * #648 review): the server dedupes message ids only within a single call, so
+ * two clicks fired two separate HTTP requests. For the undo direction this
+ * produced a wrong message — concurrent `notSpam` #2 reads
+ * `originalMailboxId` before #1 clears it, waits on #1's restore move, and
+ * can throw `MoveNotSettledError` on an undo that already succeeded. Wires
+ * the real `useReportSpam` hook to the real `IntelligencePanel` (the shape
+ * `IntelligencePane.tsx`'s `WiredPanel` uses) and clicks the real button
+ * twice to prove the fix: disabled while pending blocks the second request
+ * at the DOM level, not just in the hook.
+ */
+
+import assert from "node:assert/strict";
+import { afterEach, describe, it } from "node:test";
+import type { IntelligenceData } from "@remit/ui";
+import { IntelligencePanel } from "@remit/ui";
+import { createElement } from "react";
+import { useReportSpam } from "@/hooks/useReportSpam";
+import { createDomHarness, type DomHarness } from "@/test-support/dom";
+import { type HttpMock, mockFetch } from "@/test-support/http";
+
+const baseData: IntelligenceData = {
+	sender: {
+		name: "Alex Rivera",
+		email: "alex@example.com",
+		trust: "wellknown",
+		firstSeenLabel: "Jan 2025",
+	},
+	authenticity: {
+		verdict: "aligned",
+		fromDomain: "example.com",
+		dkimDomain: "example.com",
+		summary: "This message was signed by example.com.",
+	},
+	category: { value: "Personal" },
+	similar: [],
+};
+
+const ReportHarness = () => {
+	const { reportSpam, isReporting } = useReportSpam({ mailboxId: "mbx-inbox" });
+	return createElement(IntelligencePanel, {
+		data: baseData,
+		actions: { onReportSpam: () => reportSpam(["msg-1"]) },
+		reportSpamPending: isReporting,
+	});
+};
+
+const UndoHarness = () => {
+	const { notSpam, isRestoring } = useReportSpam({ mailboxId: "mbx-junk" });
+	return createElement(IntelligencePanel, {
+		data: baseData,
+		actions: { onNotSpam: () => notSpam(["msg-1"]) },
+		notSpamPending: isRestoring,
+	});
+};
+
+let harness: DomHarness | undefined;
+let http: HttpMock;
+
+const waitFor = async (
+	predicate: () => boolean,
+	timeoutMs = 2000,
+): Promise<void> => {
+	if (!harness) throw new Error("nothing mounted");
+	const deadline = Date.now() + timeoutMs;
+	while (!predicate()) {
+		if (Date.now() > deadline) {
+			throw new Error(
+				`waitFor: condition never became true within ${timeoutMs}ms`,
+			);
+		}
+		await harness.flush();
+		await harness.wait(5);
+	}
+};
+
+afterEach(() => {
+	harness?.close();
+	harness = undefined;
+	http.restore();
+});
+
+describe("the spam quick action disables itself for the duration of its own request (#648 review)", () => {
+	it("report direction: a second click while the report is in flight sends only one request", async () => {
+		let resolveRequest: (() => void) | undefined;
+		http = mockFetch(
+			() =>
+				new Promise((resolve) => {
+					resolveRequest = () => resolve({ successCount: 1, failureCount: 0 });
+				}),
+		);
+		harness = createDomHarness();
+		harness.renderApp(createElement(ReportHarness));
+
+		const button = harness.byText("button", "Report spam") as HTMLButtonElement;
+		harness.click(button);
+		await waitFor(() => button.textContent === "Reporting…");
+
+		assert.equal(button.disabled, true, "a control mid-request must disable");
+		harness.click(button);
+
+		assert.ok(resolveRequest, "the request never reached the mock");
+		resolveRequest?.();
+		await waitFor(() => button.textContent === "Report spam");
+
+		assert.equal(http.to("/messages/report-spam").length, 1);
+	});
+
+	it("undo direction: a second click while the undo is in flight sends only one request", async () => {
+		let resolveRequest: (() => void) | undefined;
+		http = mockFetch(
+			() =>
+				new Promise((resolve) => {
+					resolveRequest = () => resolve({ successCount: 1, failureCount: 0 });
+				}),
+		);
+		harness = createDomHarness();
+		harness.renderApp(createElement(UndoHarness));
+
+		const button = harness.byText("button", "Not spam") as HTMLButtonElement;
+		harness.click(button);
+		await waitFor(() => button.textContent === "Undoing…");
+
+		assert.equal(button.disabled, true, "a control mid-request must disable");
+		harness.click(button);
+
+		assert.ok(resolveRequest, "the request never reached the mock");
+		resolveRequest?.();
+		await waitFor(() => button.textContent === "Not spam");
+
+		assert.equal(http.to("/messages/not-spam").length, 1);
+	});
+});

package/src/hooks/useReportSpam.escalation.test.ts

@@ -0,0 +1,135 @@
+/**
+ * Closes the seam the existing #648-review tests each cover half of.
+ * `useReportSpam.integration.test.ts` builds a synthetic mutation via
+ * `mutationCache.build()` and never mounts the hook; `useReportSpam.render.
+ * test.ts` mounts the hook but under `createDomHarness`'s default
+ * `QueryClient`, which carries no global cache handlers. Neither exercises the
+ * JOIN: the real `useMutation` calls in `useReportSpam.ts`, under a
+ * `QueryClient` wired with the real `QueryCache`/`MutationCache` handlers from
+ * `lib/query-error-handler.ts` the way `shell/index.tsx` builds it, wrapped in
+ * the real `ErrorBannerProvider`. Deleting `meta: { softError: true }` from
+ * the real hook passes both existing tests — that is the bug that shipped
+ * twice and passed CI both times.
+ */
+
+import assert from "node:assert/strict";
+import { afterEach, describe, it } from "node:test";
+import { MutationCache, QueryCache, QueryClient } from "@tanstack/react-query";
+import { createElement, Fragment } from "react";
+import { FatalErrorOverlay } from "../components/ui/FatalErrorOverlay";
+import { __resetFatalError, subscribeFatalError } from "../lib/fatal-error";
+import {
+	handleMutationCacheError,
+	handleQueryCacheError,
+} from "../lib/query-error-handler";
+import { createDomHarness, type DomHarness } from "../test-support/dom";
+import { type HttpMock, httpError, mockFetch } from "../test-support/http";
+import { useReportSpam } from "./useReportSpam";
+
+let harness: DomHarness | undefined;
+let http: HttpMock;
+
+const mountHook = <T>(useHook: () => T): (() => T) => {
+	let value: T | undefined;
+	const Probe = () => {
+		value = useHook();
+		return null;
+	};
+	const queryClient = new QueryClient({
+		queryCache: new QueryCache({ onError: handleQueryCacheError }),
+		mutationCache: new MutationCache({ onError: handleMutationCacheError }),
+		defaultOptions: { mutations: { retry: false } },
+	});
+	harness = createDomHarness({ queryClient });
+	harness.renderApp(
+		createElement(
+			Fragment,
+			null,
+			createElement(FatalErrorOverlay),
+			createElement(Probe),
+		),
+	);
+	return () => {
+		if (value === undefined) throw new Error("hook did not render");
+		return value;
+	};
+};
+
+/** See `useReportSpam.render.test.ts` — the chain from a resolved fetch to a re-render crosses enough async boundaries that a fixed microtask count reads as flaky under load. */
+const waitFor = async (
+	predicate: () => boolean,
+	timeoutMs = 2000,
+): Promise<void> => {
+	if (!harness) throw new Error("nothing mounted");
+	const deadline = Date.now() + timeoutMs;
+	while (!predicate()) {
+		if (Date.now() > deadline) {
+			throw new Error(
+				`waitFor: condition never became true within ${timeoutMs}ms`,
+			);
+		}
+		await harness.flush();
+		await harness.wait(5);
+	}
+};
+
+const bannerAlerts = () =>
+	harness?.queryAll('[aria-label="Notifications"] [role="alert"]') ?? [];
+
+const fatalOverlay = () =>
+	harness?.query('[data-testid="fatal-error-overlay"]') ?? null;
+
+afterEach(() => {
+	harness?.close();
+	harness = undefined;
+	http.restore();
+	__resetFatalError();
+});
+
+describe("useReportSpam under the real global cache handlers (#648 review, the join both existing tests missed)", () => {
+	it("a per-message report failure banners once and never mounts the fatal overlay — report direction", async () => {
+		const fatalsSeen: string[] = [];
+		subscribeFatalError((fatal) => fatalsSeen.push(fatal.message));
+		http = mockFetch(() => ({ failureCount: 1 }));
+		const hook = mountHook(() => useReportSpam({ mailboxId: "mbx-inbox" }));
+
+		hook().reportSpam(["msg-1"]);
+		await waitFor(() => bannerAlerts().length > 0);
+
+		assert.equal(
+			fatalOverlay() !== null,
+			false,
+			"the fatal overlay must not mount",
+		);
+		assert.deepEqual(fatalsSeen, [], "no fatal error must be raised");
+		assert.equal(bannerAlerts().length, 1, "exactly one banner");
+	});
+
+	it("a per-message undo failure banners once and never mounts the fatal overlay — undo direction", async () => {
+		const fatalsSeen: string[] = [];
+		subscribeFatalError((fatal) => fatalsSeen.push(fatal.message));
+		http = mockFetch(() => ({ failureCount: 1 }));
+		const hook = mountHook(() => useReportSpam({ mailboxId: "mbx-junk" }));
+
+		hook().notSpam(["msg-1"]);
+		await waitFor(() => bannerAlerts().length > 0);
+
+		assert.equal(
+			fatalOverlay() !== null,
+			false,
+			"the fatal overlay must not mount",
+		);
+		assert.deepEqual(fatalsSeen, [], "no fatal error must be raised");
+		assert.equal(bannerAlerts().length, 1, "exactly one banner");
+	});
+
+	it("a genuine 500 from the same endpoint still escalates — meta.softError must not swallow the 5xx class", async () => {
+		http = mockFetch(() => httpError(500, "spam service is down"));
+		const hook = mountHook(() => useReportSpam({ mailboxId: "mbx-inbox" }));
+
+		hook().reportSpam(["msg-1"]);
+		await waitFor(() => fatalOverlay() !== null);
+
+		assert.ok(fatalOverlay(), "a 5xx must still reach the fatal overlay");
+	});
+});

package/src/test-support/dom.ts

@@ -46,6 +46,14 @@ export interface DomOptions {
 	/** Screen posture `matchMedia` answers against — jsdom has no device. */
 	orientation?: "portrait" | "landscape";
 	pointer?: "coarse" | "fine";
+	/**
+	 * Use this `QueryClient` instead of the harness's default retry-disabled
+	 * one — e.g. one wired with the real `QueryCache`/`MutationCache` error
+	 * handlers from `lib/query-error-handler.ts`, the way `shell/index.tsx`
+	 * builds it, so a test can exercise the real global escalation path
+	 * instead of just the per-mutation `onError`.
+	 */
+	queryClient?: QueryClient;
 }
 
 export const createDomHarness = (options: DomOptions = {}): DomHarness => {
@@ -64,12 +72,14 @@ export const createDomHarness = (options: DomOptions = {}): DomHarness => {
 	let root: Root | undefined = createRoot(container);
 	// No retries: a test asserting a failure should not have to wait out a
 	// backoff before it can see one.
-	const queryClient = new QueryClient({
-		defaultOptions: {
-			queries: { retry: false },
-			mutations: { retry: false },
-		},
-	});
+	const queryClient =
+		options.queryClient ??
+		new QueryClient({
+			defaultOptions: {
+				queries: { retry: false },
+				mutations: { retry: false },
+			},
+		});
 
 	const requireRoot = (): Root => {
 		if (!root) throw new Error("harness already unmounted");

package/src/components/compose/PlateEditor.tsx

@@ -1,86 +0,0 @@
-import { AutoformatPlugin } from "@platejs/autoformat";
-import {
-	BlockquotePlugin,
-	BoldPlugin,
-	ItalicPlugin,
-} from "@platejs/basic-nodes/react";
-import { LinkPlugin } from "@platejs/link/react";
-import type { Value } from "platejs";
-import { PlateContent, usePlateEditor } from "platejs/react";
-import { useEffect } from "react";
-
-export interface PlateEditorProps {
-	initialValue?: Value;
-	onChange?: (value: Value) => void;
-	onSubmit?: () => void;
-	autoFocus?: boolean;
-}
-
-const EMPTY_VALUE: Value = [{ type: "p", children: [{ text: "" }] }];
-
-export const COMPOSE_PLUGINS = [
-	BoldPlugin,
-	ItalicPlugin,
-	LinkPlugin,
-	BlockquotePlugin,
-	AutoformatPlugin.configure({
-		options: {
-			rules: [
-				{
-					match: "**",
-					mode: "mark" as const,
-					type: "bold",
-				},
-				{
-					match: "*",
-					mode: "mark" as const,
-					type: "italic",
-				},
-				{
-					match: "> ",
-					mode: "block" as const,
-					type: "blockquote",
-				},
-			],
-			enableUndoOnDelete: true,
-		},
-	}),
-];
-
-export const usePlateComposeEditor = (initialValue?: Value) =>
-	usePlateEditor({
-		plugins: COMPOSE_PLUGINS,
-		value: initialValue ?? EMPTY_VALUE,
-	});
-
-export const PlateEditorContent = ({
-	onSubmit,
-	autoFocus,
-	editor,
-}: Omit<PlateEditorProps, "initialValue" | "onChange"> & {
-	editor: ReturnType<typeof usePlateComposeEditor>;
-}) => {
-	useEffect(() => {
-		if (autoFocus) {
-			const timer = setTimeout(() => {
-				editor.tf.focus();
-			}, 0);
-			return () => clearTimeout(timer);
-		}
-	}, [autoFocus, editor]);
-
-	const handleKeyDown = (e: React.KeyboardEvent) => {
-		if ((e.metaKey || e.ctrlKey) && e.key === "Enter" && onSubmit) {
-			e.preventDefault();
-			onSubmit();
-		}
-	};
-
-	return (
-		<PlateContent
-			className="w-full px-3 py-2 bg-canvas text-sm outline-none min-h-[120px] [&_blockquote]:pl-3 [&_blockquote]:border-l-2 [&_blockquote]:border-fg-subtle/30 [&_blockquote]:text-fg-muted [&_a]:text-accent [&_a]:underline"
-			placeholder="Write your message..."
-			onKeyDown={handleKeyDown}
-		/>
-	);
-};

package/src/components/compose/PlateToolbar.tsx

@@ -1,110 +0,0 @@
-import {
-	BlockquotePlugin,
-	BoldPlugin,
-	ItalicPlugin,
-} from "@platejs/basic-nodes/react";
-import { insertLink } from "@platejs/link";
-import { Bold, Italic, Link, Quote, Redo2, Undo2 } from "lucide-react";
-import { useEditorRef, useEditorSelector } from "platejs/react";
-
-const ToolbarButton = ({
-	isActive,
-	onClick,
-	children,
-	title,
-}: {
-	isActive: boolean;
-	onClick: () => void;
-	children: React.ReactNode;
-	title: string;
-}) => (
-	<button
-		type="button"
-		onMouseDown={(e) => {
-			e.preventDefault();
-			onClick();
-		}}
-		title={title}
-		className={`p-1.5 rounded transition-colors ${
-			isActive
-				? "text-fg bg-accent-2-soft"
-				: "text-fg-muted hover:text-fg hover:bg-surface-raised"
-		}`}
-	>
-		{children}
-	</button>
-);
-
-export const PlateToolbar = () => {
-	const editor = useEditorRef();
-
-	const isBoldActive = useEditorSelector(
-		(editor) => !!editor.api.mark(BoldPlugin.key),
-		[],
-	);
-	const isItalicActive = useEditorSelector(
-		(editor) => !!editor.api.mark(ItalicPlugin.key),
-		[],
-	);
-	const isBlockquoteActive = useEditorSelector((editor) => {
-		const entry = editor.api.block();
-		return entry ? entry[0].type === BlockquotePlugin.key : false;
-	}, []);
-
-	const canUndo = useEditorSelector(
-		(editor) => editor.history.undos.length > 0,
-		[],
-	);
-	const canRedo = useEditorSelector(
-		(editor) => editor.history.redos.length > 0,
-		[],
-	);
-
-	return (
-		<div className="flex items-center gap-0.5 px-3 py-1 border-b border-line">
-			<ToolbarButton
-				isActive={isBoldActive}
-				onClick={() => editor.tf.toggleMark(BoldPlugin.key)}
-				title="Bold (Ctrl+B)"
-			>
-				<Bold className="size-4" />
-			</ToolbarButton>
-			<ToolbarButton
-				isActive={isItalicActive}
-				onClick={() => editor.tf.toggleMark(ItalicPlugin.key)}
-				title="Italic (Ctrl+I)"
-			>
-				<Italic className="size-4" />
-			</ToolbarButton>
-			<ToolbarButton
-				isActive={false}
-				onClick={() => insertLink(editor, { url: "" })}
-				title="Link (Ctrl+K)"
-			>
-				<Link className="size-4" />
-			</ToolbarButton>
-			<ToolbarButton
-				isActive={isBlockquoteActive}
-				onClick={() => editor.tf.toggleBlock(BlockquotePlugin.key)}
-				title="Blockquote"
-			>
-				<Quote className="size-4" />
-			</ToolbarButton>
-			<div className="mx-1.5 h-4 w-px bg-line" />
-			<ToolbarButton
-				isActive={false}
-				onClick={() => editor.undo()}
-				title="Undo (Ctrl+Z)"
-			>
-				<Undo2 className={`size-4 ${!canUndo ? "opacity-40" : ""}`} />
-			</ToolbarButton>
-			<ToolbarButton
-				isActive={false}
-				onClick={() => editor.redo()}
-				title="Redo (Ctrl+Y)"
-			>
-				<Redo2 className={`size-4 ${!canRedo ? "opacity-40" : ""}`} />
-			</ToolbarButton>
-		</div>
-	);
-};

package/src/components/compose/sanitize-quote-html.ts

@@ -1,47 +0,0 @@
-import DOMPurify from "dompurify";
-
-const QUOTE_ALLOWED_TAGS = [
-	"p",
-	"br",
-	"strong",
-	"b",
-	"em",
-	"i",
-	"a",
-	"blockquote",
-	"ul",
-	"ol",
-	"li",
-];
-
-const QUOTE_ALLOWED_ATTR = ["href"];
-
-/**
- * Quoted mail renders in the app's own document rather than in the reading
- * pane's sandboxed frame, so a link in it would otherwise navigate the app
- * window itself to wherever the sender points. Launched from a home screen
- * there is no address bar and no back button to return from that, so quoted
- * links leave for a separate context and take no handle on this one with them.
- *
- * Its own DOMPurify instance: the hook below must not reach the default
- * instance any other caller might use.
- */
-let purifier: ReturnType<typeof DOMPurify> | null = null;
-
-const quotePurifier = (): ReturnType<typeof DOMPurify> => {
-	if (purifier) return purifier;
-	const instance = DOMPurify();
-	instance.addHook("afterSanitizeAttributes", (node) => {
-		if (node.tagName !== "A") return;
-		node.setAttribute("target", "_blank");
-		node.setAttribute("rel", "noopener noreferrer nofollow");
-	});
-	purifier = instance;
-	return instance;
-};
-
-export const sanitizeQuoteHtml = (html: string): string =>
-	quotePurifier().sanitize(html, {
-		ALLOWED_TAGS: QUOTE_ALLOWED_TAGS,
-		ALLOWED_ATTR: QUOTE_ALLOWED_ATTR,
-	});

package/src/hooks/useReportSpam.integration.test.ts

@@ -1,93 +0,0 @@
-/**
- * Integration: prove a per-message report-spam/not-spam failure resolves to a
- * banner, never the full-screen fatal overlay, through the REAL global
- * `MutationCache` wiring (`lib/query-error-handler.ts`, wired on the
- * `QueryClient` in `shell/index.tsx`) — not just `ErrorBannerProvider`'s own
- * `isAlwaysFatal` check.
- *
- * That distinction is the whole point of this file. `ErrorBannerProvider.
- * pushError` refuses to banner an always-fatal error, but every mutation
- * ALSO reports to the MutationCache's global `onError`, independent of
- * whatever the per-mutation `onError` did — and `shouldEscalate` (what the
- * global handler calls) escalates by DEFAULT for any non-5xx that didn't opt
- * out via `meta.softError`. A test that only checked `isAlwaysFatal` passed
- * while the real app crashed to the fatal overlay on the same error: this is
- * exactly `query-escalation.integration.test.ts`'s pattern, applied to
- * `useReportSpam`'s own mutation shape (mutationFn + meta), because that is
- * the seam the earlier fix went through unexercised.
- */
-
-import assert from "node:assert/strict";
-import { afterEach, describe, it } from "node:test";
-import { MutationCache, QueryCache, QueryClient } from "@tanstack/react-query";
-import { __resetFatalError, subscribeFatalError } from "../lib/fatal-error";
-import {
-	handleMutationCacheError,
-	handleQueryCacheError,
-} from "../lib/query-error-handler";
-import { throwOnBulkFailure } from "./useReportSpam.js";
-
-afterEach(() => {
-	__resetFatalError();
-});
-
-const makeClient = () =>
-	new QueryClient({
-		queryCache: new QueryCache({ onError: handleQueryCacheError }),
-		mutationCache: new MutationCache({ onError: handleMutationCacheError }),
-		defaultOptions: { mutations: { retry: false } },
-	});
-
-/** The exact shape a failed report-spam/not-spam call resolves to on the wire (200, not a rejection) — see `throwOnBulkFailure`. */
-const failedBulkResult = () => ({
-	successCount: 0,
-	failureCount: 1,
-	failures: [
-		{
-			messageId: "9m2k7x4vqz1jd0tn3wf8b6y5c",
-			reason:
-				"Message 9m2k7x4vqz1jd0tn3wf8b6y5c's move to Junk has not settled yet; try again in a moment.",
-		},
-	],
-});
-
-describe("useReportSpam's mutations under the real MutationCache (#648 review)", () => {
-	it("with meta.softError, a per-message failure does NOT escalate to the fatal overlay (regression)", async () => {
-		const seen: string[] = [];
-		subscribeFatalError((fatal) => seen.push(fatal.message));
-		const client = makeClient();
-
-		const mutation = client.getMutationCache().build(client, {
-			mutationFn: async () => {
-				throwOnBulkFailure(failedBulkResult());
-			},
-			meta: { softError: true },
-		});
-		await mutation.execute(undefined).catch(() => {});
-
-		assert.deepEqual(
-			seen,
-			[],
-			"a designed, retryable per-message failure must not reach the fatal overlay",
-		);
-	});
-
-	it("without meta.softError, the same failure DOES escalate — proving the opt-out is load-bearing, not a no-op", async () => {
-		const seen: string[] = [];
-		subscribeFatalError((fatal) => seen.push(fatal.message));
-		const client = makeClient();
-
-		const mutation = client.getMutationCache().build(client, {
-			mutationFn: async () => {
-				throwOnBulkFailure(failedBulkResult());
-			},
-		});
-		await mutation.execute(undefined).catch(() => {});
-
-		assert.equal(
-			seen.length,
-			1,
-			"this asserts the failure mode the fix removes — a non-5xx with no softError opt-out escalates by default",
-		);
-	});
-});

package/src/lib/plate-serializer.ts

@@ -1,52 +0,0 @@
-import type { TElement, TText, Value } from "platejs";
-
-type PlateNode = TElement | TText;
-
-const isText = (node: PlateNode): node is TText =>
-	"text" in node && !("children" in node);
-
-const escapeHtml = (text: string): string =>
-	text
-		.replace(/&/g, "&")
-		.replace(/</g, "&lt;")
-		.replace(/>/g, "&gt;")
-		.replace(/"/g, "&quot;");
-
-const serializeTextNode = (node: TText): string => {
-	let html = escapeHtml(node.text);
-	if (node.bold) html = `<strong>${html}</strong>`;
-	if (node.italic) html = `<em>${html}</em>`;
-	return html;
-};
-
-const serializeElement = (node: TElement): string => {
-	const children = node.children
-		.map((child) =>
-			isText(child as PlateNode)
-				? serializeTextNode(child as TText)
-				: serializeElement(child as TElement),
-		)
-		.join("");
-
-	switch (node.type) {
-		case "blockquote":
-			return `<blockquote>${children}</blockquote>`;
-		case "a": {
-			const url = (node as TElement & { url?: string }).url ?? "";
-			return `<a href="${escapeHtml(url)}">${children}</a>`;
-		}
-		default:
-			return `<p>${children}</p>`;
-	}
-};
-
-export const plateValueToHtml = (value: Value): string =>
-	value.map(serializeElement).join("");
-
-const extractText = (node: PlateNode): string => {
-	if (isText(node)) return node.text;
-	return (node.children as PlateNode[]).map(extractText).join("");
-};
-
-export const plateValueToText = (value: Value): string =>
-	value.map(extractText).join("\n");