@bobfrankston/rmfmail 1.2.136 → 1.2.139

package/bin/mailx.js

@@ -1830,10 +1830,31 @@ async function main() {
             const d = new Date();
             return `${pad2(d.getHours())}:${pad2(d.getMinutes())}:${pad2(d.getSeconds())}.${pad3(d.getMilliseconds())}`;
         };
-        const logPath = path.join(logDir, `rmfmail-${localDate()}.log`);
-        const logStream = fs.createWriteStream(logPath, { flags: "a" });
-        console.log = (...a) => { logStream.write(`${ts()} ${a.join(" ")}\n`); };
-        console.error = (...a) => { logStream.write(`${ts()} ERROR ${a.join(" ")}\n`); };
+        // Day-aware stream: recompute the filename on every write and swap
+        // the stream at midnight. The old code resolved the path ONCE at
+        // boot, so a daemon that ran past midnight kept appending to the
+        // boot-day file forever — while the sync worker's lines (written
+        // through its own channel) landed in the new day's file. Result: the
+        // morning of 2026-07-14 had ALL main-thread diagnostics ([ipc],
+        // [client], [popout]) hiding in rmfmail-2026-07-13.log and the
+        // current file showing only [w] worker lines — which made the
+        // popout-send data-loss incident look untraceable (S68).
+        let logDate = localDate();
+        let logStream = fs.createWriteStream(path.join(logDir, `rmfmail-${logDate}.log`), { flags: "a" });
+        const logWrite = (line) => {
+            const d = localDate();
+            if (d !== logDate) {
+                try {
+                    logStream.end();
+                }
+                catch { /* old handle already dead */ }
+                logDate = d;
+                logStream = fs.createWriteStream(path.join(logDir, `rmfmail-${d}.log`), { flags: "a" });
+            }
+            logStream.write(line);
+        };
+        console.log = (...a) => { logWrite(`${ts()} ${a.join(" ")}\n`); };
+        console.error = (...a) => { logWrite(`${ts()} ERROR ${a.join(" ")}\n`); };
         // Redirect daemon's process.stderr to the log too. msger forwards its
         // Rust child's stderr to our process.stderr; in daemon mode that's
         // stdio:"ignore" → /dev/null, which buries diagnostics like
@@ -1843,7 +1864,7 @@ async function main() {
         process.stderr.write = ((chunk, ...rest) => {
             try {
                 const s = typeof chunk === "string" ? chunk : chunk.toString();
-                logStream.write(`${ts()} STDERR ${s}${s.endsWith("\n") ? "" : "\n"}`);
+                logWrite(`${ts()} STDERR ${s}${s.endsWith("\n") ? "" : "\n"}`);
             }
             catch { /* ignore — best-effort logging */ }
             return origStderrWrite(chunk, ...rest);
@@ -1858,7 +1879,7 @@ async function main() {
     // for nothing — each was independent. Same for node-tcp-transport
     // and mailx-store/file-store.js further down; folded in here so the
     // resolution + module-init cost happens once, in parallel.
-    const [{ MailxDB, prewarmParseWorker, storeBus, Store }, { ImapManager }, { MailxService, spawnSyncWorker }, { dispatch }, { loadSettings, loadAccountsAsync, loadAllowlistAsync, getConfigDir, getStorageInfo, getStorePath }, { NodeTcpTransport }, { FileMessageStore },] = await Promise.all([
+    const [{ MailxDB, prewarmParseWorker, storeBus, Store }, { ImapManager }, { MailxService, spawnSyncWorker }, { dispatch, setDebugEvalSink }, { loadSettings, loadAccountsAsync, loadAllowlistAsync, getConfigDir, getStorageInfo, getStorePath }, { NodeTcpTransport }, { FileMessageStore },] = await Promise.all([
         import("@bobfrankston/mailx-store"),
         import("@bobfrankston/mailx-imap"),
         import("@bobfrankston/mailx-service"),
@@ -2089,7 +2110,10 @@ RFC 5322 with CRLF line endings. Bodies are quoted-printable encoded (readable i
     // see memory: feedback_cross_platform_strong_rule). Remove on
     // resolution so the file doesn't accumulate stale PIDs.
     svc.setPopupFn(async (opts) => {
-        const h = showMessageBoxEx(opts);
+        // Own WebView2 profile so a reminder popup can never share (and
+        // crash) the main window's browser process — see S67 note on the
+        // popout windows below. Service-supplied opts may override.
+        const h = showMessageBoxEx({ profile: "popout", ...opts });
         if (typeof h.pid === "number")
             addChildPid(h.pid);
         try {
@@ -2116,6 +2140,41 @@ RFC 5322 with CRLF line endings. Bodies are quoted-printable encoded (readable i
             const { ports } = await import("@bobfrankston/miscinfo");
             const dbgApp = express();
             dbgApp.use(express.json({ limit: "25mb" }));
+            // Live-page eval: POST /api/eval {code} → daemon pushes a
+            // `debugEval` event to the main window → app.ts runs the code and
+            // answers via the `debugEvalResult` action → we reply here. The
+            // expression may be async (it's wrapped in `(async () => (…))()`),
+            // must evaluate as an EXPRESSION, and should return JSON-able
+            // data. Lets an agent inspect the real DOM (elementFromPoint,
+            // computed styles, scroll geometry) without devtools. Registered
+            // BEFORE the generic /api router so it isn't shadowed.
+            const pendingEvals = new Map();
+            setDebugEvalSink((id, result, error) => {
+                const p = pendingEvals.get(id);
+                if (!p)
+                    return;
+                pendingEvals.delete(id);
+                clearTimeout(p.timer);
+                p.finish(error ? { error } : { result });
+            });
+            dbgApp.post("/api/eval", (req, res) => {
+                const code = req.body?.code;
+                if (typeof code !== "string" || !code.trim()) {
+                    res.status(400).json({ error: "body must be { code: string } — a JS expression" });
+                    return;
+                }
+                if (!sendToClient) {
+                    res.status(503).json({ error: "main window not connected yet" });
+                    return;
+                }
+                const id = `ev-${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+                const timer = setTimeout(() => {
+                    pendingEvals.delete(id);
+                    res.status(504).json({ error: "eval timeout (10s) — window busy, or client bundle predates debugEval" });
+                }, 10_000);
+                pendingEvals.set(id, { finish: (v) => res.json(v), timer });
+                sendToClient({ _event: "debugEval", type: "debugEval", id, code });
+            });
             dbgApp.use("/api", createApiRouter(store, imapManager));
             // Port: `--debug-server=<n>` / `--debug-server <n>` if given,
             // else the reserved `ports.rmfmaildbg` from miscinfo (the named
@@ -2205,6 +2264,13 @@ RFC 5322 with CRLF line endings. Bodies are quoted-printable encoded (readable i
                 // window shows unactivated BEHIND the focused main window
                 // and reads as "nothing opened" (Bob 2026-07-09).
                 focusOnCreate: true,
+                // Own WebView2 profile: a window sharing the main window's
+                // user-data dir shares its browser process, and a crash
+                // there blacks out the MAIN window permanently (S67,
+                // 2026-07-14 + 2026-07-15: BROWSER_PROCESS_EXITED during
+                // popout spawn). One shared "popout" profile for all
+                // secondary windows — decoupled from main, bounded disk.
+                profile: "popout",
             });
             popoutWindows.set(key, h);
             if (typeof h.pid === "number")
@@ -2239,6 +2305,8 @@ RFC 5322 with CRLF line endings. Bodies are quoted-printable encoded (readable i
                     // Same as the message popout: the daemon is background,
                     // so an unactivated window lands behind the main window.
                     focusOnCreate: true,
+                    // Own profile — same S67 rationale as the message popout.
+                    profile: "popout",
                     // App entries on the NATIVE right-click menu (native stays
                     // so spellcheck suggestions survive). compose.ts maps ids
                     // to editor commands via window.__msgerContextCommand.
@@ -2294,6 +2362,10 @@ RFC 5322 with CRLF line endings. Bodies are quoted-printable encoded (readable i
                 aumid: "com.frankston.rmfmail",
                 escapeCloses: false,
                 focusOnCreate: true,
+                // Own profile — same S67 rationale as the message popout.
+                // Note: localStorage view prefs won't be shared with the
+                // main window; preferences.jsonc (the real store) is.
+                profile: "popout",
             });
             popoutWindows.set(key, h);
             if (typeof h.pid === "number")