feat: Notes Editor on a bundled Quill 2 instead of the remote TinyMCE

[barrulus]

Closes #1803. Supersedes #1799.

What

The Notes Editor now uses Quill 2, bundled with the app, instead of TinyMCE fetched at runtime from azgaar.github.io. Notes stay plain HTML strings in the .map file; the editor is only a view over them. Version 1.151.3 (patch: the notes format is unchanged).

Why

TinyMCE was loaded with a dynamic import() of a remote URL. When that load fails (Desktop App CSP, offline), Vite reports a missing chunk and the app shows the "New version released" prompt while the editor degrades to a bare contenteditable (#1660). #1799 patched the loader; this replaces the editor as discussed.

Editor	Loaded when the editor opens	Licence
TinyMCE 7 (before)	~1.5 MB over ~15 requests	GPL-2.0-or-later
Quill 2.0.3 (now)	209,500-byte notes-editor chunk (controller + Quill + deps) + 24,367 bytes CSS, bundled	BSD-3-Clause (deps MIT/BSD-3/Apache-2.0)

Bundling TinyMCE through npm, the other option, would fold a GPL-2.0-or-later library into the MIT build. Quill's BSD-3 avoids that question.

Behaviour

• Existing notes render as before until edited, with one exception: table cells now get a border in the hover box. On first edit Quill normalizes the markup: inline styles for alignment, size and font (so the hover box needs no editor CSS), <br> runs become paragraphs, and tables gain Quill's data-row cell attributes and a border style.
• Notes with markup Quill cannot hold (the dungeon marker's <iframe>, a legacy <hr>) open in a raw HTML textarea automatically; a button below the editor switches any note to HTML mode and back.
• Toolbar: undo/redo, bold/italic/underline/strike, colours, alignment, size, lists, link, image from a local file, blockquote, clear formatting. Table menu: insert 3×3, add/delete rows and columns. Fullscreen toggle.
• Dropped from the old toolbar: font family picker, indent/outdent, media embed, horizontal rule, special characters, print, word count, auto-linking of typed URLs.

Notes for review

• public/libs/tinymce (4.7 MB) is deleted. Every Desktop build already blocks the remote load through its CSP (that is Spurious "New version released" dialog when adding a note in the Electron desktop client #1660), so the desktop is unaffected. Self-hosted copies and forks pinned between 1.123.2 and 1.151.2 load TinyMCE from the deployed copy of that folder at runtime; once this deploys they fall back to the plain editor until they update.
• Desktop CSP unchanged: the editor is a normal 'self' chunk now.
• Not run: the Electron app itself. Unit tests (jsdom) cover the HTML round trip and the raw-mode check; the Playwright spec runs against the preview build.
• The representable check parses into a <template> element rather than a text/html document so a leading <script> or <style> cannot slip past it.
• src/test-setup.ts gained a guarded jsdom Range.getBoundingClientRect/getClientRects shim because Quill's focus path calls them and jsdom never implements them.

[netlify]

✅ Deploy Preview for afmg ready!

Name	Link
🔨 Latest commit	5f095e7
🔍 Latest deploy log	https://app.netlify.com/projects/afmg/deploys/6a9c9056bad9e10008a4f1fd
😎 Deploy Preview	https://deploy-preview-1807--afmg.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.

[Avengium]

The first message says:
Dropped from the old toolbar: font family picker, indent/outdent, media embed, horizontal rule, special characters, print, word count, auto-linking of typed URLs.

Do you know if some people use this?
For example: font family picker and special characters could be useful for places with other alphabets. For example Cyrillic.

I don't know if people with other alphabets are affected.

And, on another topic, sone of the dropped features are interesting.

[barrulus]

Good question, and worth checking rather than assuming, so I did.

The font family and size pickers were not actually reaching anyone. The toolbar config asks for fontselect and fontsizeselect, which are TinyMCE 5 names; TinyMCE 6 renamed them to fontfamily and fontsize. Of the 27 button names in that config, those two are the only ones absent from the bundled TinyMCE build, and the theme's response to an unknown name is console.warn("Ignoring the '<name>' toolbar button"). So they have silently done nothing since the library was upgraded. This PR does add a working size picker, so size control is better than before, not worse.

On other alphabets: typing Cyrillic depends on your keyboard layout, not the editor toolbar, and the note box sets no font family, so notes render in the page font either way. The special characters grid would not have helped there in any case: it holds 288 characters, of which 51 are Greek and none are Cyrillic. It is currency signs, accented Latin, maths, arrows and punctuation.

What is genuinely dropped: the symbol grid, horizontal rule, media embed, print, word count, indent/outdent, and auto-linking of typed URLs. Auto-linking is the one I would expect to be missed most. Anything with markup Quill cannot represent can still be edited through the HTML mode button, and if any of these are wanted back they are small additions on top of Quill: a font picker mainly needs someone to decide the font list, since the underlying format already round-trips any value.

[Azgaar]

Will update an merge to branch