@remit/web-client 0.0.181 → 0.0.183

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@remit/web-client",
-  "version": "0.0.181",
+  "version": "0.0.183",
   "type": "module",
   "description": "Remit web client, published as composable primitives — the app shell, auth shells, and runtime config. A distributor imports what it composes and bundles it.",
   "exports": {
@@ -85,8 +85,6 @@
     "@aws-amplify/ui-react": "^6",
     "aws-rum-web": "^3",
     "better-auth": "^1.6.23",
-    "clsx": "^2",
-    "dompurify": "^3.4.7",
     "i18next": "^24",
     "i18next-browser-languagedetector": "^8",
     "i18next-http-backend": "^3.0.6",
@@ -94,36 +92,22 @@
     "p-map": "*",
     "react-hook-form": "*",
     "react-i18next": "^15",
-    "tailwind-merge": "^2",
     "vaul": "^1.1.2",
     "zod": "^3"
   },
   "devDependencies": {
-    "@aws-sdk/client-dynamodb": "*",
-    "@aws-sdk/client-sqs": "*",
-    "@aws-sdk/lib-dynamodb": "*",
-    "@playwright/test": "1.58.2",
-    "@remit/drizzle-service": "*",
-    "@remit/electrodb-entities": "*",
-    "@remit/secrets-service": "*",
     "@remit/test-dom": "*",
     "@storybook/react-vite": "^9",
     "@tailwindcss/vite": "^4",
     "@tanstack/router-generator": "^1",
     "@tanstack/router-plugin": "^1",
     "@types/jsdom": "^28.0.3",
-    "@types/nodemailer": "*",
-    "@types/pngjs": "^6.0.5",
     "@vitejs/plugin-react": "^4",
     "dictionary-en": "4.0.0",
     "dictionary-en-gb": "3.0.0",
     "dictionary-nl": "2.0.0",
-    "electrodb": "*",
     "esbuild": "*",
-    "expect-env": "*",
     "jsdom": "^29.1.1",
-    "nodemailer": "^9.0.3",
-    "pngjs": "^5",
     "react": "^19",
     "react-dom": "^19.2.4",
     "tailwindcss": "^4",

package/src/hooks/useIntelligenceData.test.ts

@@ -344,6 +344,26 @@ describe("buildAuthenticityIntel", () => {
 			assert.match(result.summary, /only looks like/);
 		});
 
+		test("a display name spelling a foreign address names the domain it cannot come from", () => {
+			const result = buildAuthenticityIntel(
+				makeThread({
+					fromEmail: "aramirez@secresaludguaviare.gov.co",
+					fromName: "matthijs@ischen.nl",
+					authenticity: {
+						fromDomain: "secresaludguaviare.gov.co",
+						dkimDomain: "secresaludguaviare.gov.co",
+						dkimMismatch: false,
+						displayNameCorrespondence: "ForeignAddress",
+						offDomainLinkDomains: [],
+					},
+				} as Partial<RemitImapThreadMessageResponse>),
+				0,
+			);
+			assert.equal(result.verdict, "caution");
+			assert.match(result.summary, /"matthijs@ischen\.nl"/);
+			assert.match(result.summary, /secresaludguaviare\.gov\.co/);
+		});
+
 		test("stays verified when the comparisons agreed", () => {
 			const result = buildAuthenticityIntel(
 				makeThread({

package/src/hooks/useIntelligenceData.ts

@@ -167,6 +167,10 @@ function describeSenderMismatch(
 			clauses.push(
 				`The name it shows, "${claimedBrand}", only looks like ${auth.fromDomain}.`,
 			);
+		} else if (correspondence === DisplayNameCorrespondence.ForeignAddress) {
+			clauses.push(
+				`The name it shows, "${claimedBrand}", is an address ${auth.fromDomain} cannot send from.`,
+			);
 		}
 	}