@bobfrankston/rmfmail 1.2.179 → 1.2.181

package/TODO.md

@@ -23,6 +23,7 @@ These items don't need user input — source-only changes, compile-verified befo
 | **10** | **C159 — Harper local grammar check** [M] | M | **Desktop SHIPPED v1.2.168** (2026-07-22): daemon-side Harper engine + `grammarLint` IPC, generic squiggle overlay + suggestion popup across ALL THREE editors, Settings toggle default ON, quoted chains + spelling lints skipped. **Remaining: Android** (host LocalLinter in android-bootstrap, harper.js dist in APK assets like sql.js, ~+18 MB) + per-rule config + userdict merge. Details: `docs/harper-integration.md`. |
 | **9** | **C158 — Android double-init after fold-triggered reload** [M] | M | 2026-07-22 13:07:49 logit trail: ONE page reload after unfolding produced TWO module loads, duplicate "bridge installed", duplicate GDrive lookups, and THREE "Starting OAuth flow" launches. Activity did NOT recreate (ConfigChanges already declared; no OnCreate in trail) — find what reloads the WebView on fold and make android-bootstrap init idempotent (single-flight guard on the module-level init, dedupe OAuth intent launches). |
 | **11** | **C160 — Attachment delete: Gmail + Android halves** [M] | M | Desktop IMAP shipped v1.2.173 (right-click chip → Delete one/all: verified local strip + append-confirm-then-delete server replace, .pre-strip.bak backup, UID rebind). Remaining: Gmail REST path (messages.insert + trash of original — changes message id, provider_id rebind) and Android (bridge method + web-service strip using its own parser). Strip helper lives in mailx-service (enumerateMimeLeafParts) — move to mailx-types when Android needs it. |
+| **12** | **C161 — `_rmfmail` IMAP folder for cross-machine state sync** [M] | M | Bob 2026-07-27: use a hidden `_rmfmail` folder on the mail server itself as a per-account sync channel for state that today rides on Google Drive or nowhere — reminder dismissals, per-machine prefs, read-position, contact edits for non-Google accounts. Advantages over Drive files: works for every IMAP account (no Google dependency), naturally per-account, versioned by APPEND, and reuses the existing connection/sync machinery. Shape: one message per state document with a stable `X-Rmfmail-State: <name>` header, save = delete-and-reappend (the draft-dedup pattern), merge semantics per document type (reminders already have per-key max merge in mailx-types). Design Qs: folder visibility (subscribe or not, hide from folder tree), conflict handling when two machines append concurrently, and whether reminders.jsonc migrates or dual-writes. First shipped consumer of the pattern: draft freshness probe (v1.2.180) already proves the search-by-header primitive. |
 | **5** | **C124 — mailto handler on macOS** (Linux ✅ 2026-07-08 v1.2.115) | S | Linux half shipped: `--register-mailto` on linux writes `~/.local/share/applications/rmfmail.desktop` (`MimeType=x-scheme-handler/mailto;`, quoted node+mailx.js Exec, bare `%u`), runs `xdg-mime default` + `update-desktop-database`; `--unregister-mailto` removes it. **Remaining: macOS** — real `.app` bundle (LaunchServices won't register a bare script) with `Info.plist` `CFBundleURLTypes` declaring `mailto` + a tiny launcher binary; `LSSetDefaultHandlerForURLScheme` programmatically sets the default. Rust `rmfmailto-src/` crate already portable — drop the Win32 imports and `cargo build --target x86_64-apple-darwin` produces the macOS launcher. Needs a Mac to build/verify. |
 | ~~7~~ | ~~**C154 — Audit Android bridge vs MailxApi contract**~~ — **DONE** (2026-07-08, v1.2.115). Bridge now has a generic contract-backstop: every service method not explicitly adapted gets a positional pass-through, so a missing method can never again fail as `parent bridge has no method "X"`. Wire-shape mismatches adapted explicitly (`readJsoncFile`/`writeJsoncFile`/`formatJsonc`/`readConfigHelp` → `{content}`/`{ok}`, `drainStoreSync`/`syncFolderNow` → `{ok}`). Contract gained the missing entries (`getMessageSource`, `copyMessages`, `syncFolderNow`, `cancelServerSearch`, `getReminderSound`, `getCalendars`, optional `popoutWindow`) with web-service stubs per the policy (reads → graceful default, writes/OS → notImpl). Bonus fixes: bridge `getMessages` was dropping sort/sortDir/search and `searchMessages` was dropping scope/accountId/folderId — Android sort toggles and scoped search silently didn't work. | S | |
 ~~done — C120 read transport diagnostics~~ shipped v1.0.583 (per-folder timeout error now includes `[conn#X r=YB w=ZB writes=N sinceLastRead=Tms]` snapshot for the doomed socket).

package/bin/mailx.js

@@ -328,6 +328,26 @@ function registerMailtoWindows(unregister) {
     lines.push("app on this PC\" to reach rmfmail.");
     return { ok: failed === 0, message: lines.join("\n") };
 }
+/** Cheap probe: is the mailto registration already in place AND pointing at
+ *  an up-to-date per-app launcher? Lets daemon startup skip the full
+ *  ~15-reg.exe-spawn registration pass on every boot. Stale cases that
+ *  return false: never registered, launcher missing, or the npm package
+ *  ships a newer rmfmailto.exe than the per-app copy (post-update). */
+function mailtoRegistrationCurrent() {
+    try {
+        const perApp = path.join(process.env.LOCALAPPDATA || "", "rmfmail", "bin", "rmfmailto.exe");
+        if (!fs.existsSync(perApp))
+            return false;
+        const pkgExe = path.join(import.meta.dirname, "rmfmailto.exe");
+        if (fs.existsSync(pkgExe) && fs.statSync(pkgExe).mtimeMs > fs.statSync(perApp).mtimeMs)
+            return false;
+        const out = execSync(`reg query "HKCU\\Software\\Classes\\rmfmail\\shell\\open\\command" /ve`, { stdio: ["pipe", "pipe", "pipe"] }).toString();
+        return out.toLowerCase().includes(perApp.toLowerCase());
+    }
+    catch {
+        return false;
+    }
+}
 if (hasFlag("register-mailto") || hasFlag("unregister-mailto")) {
     const unregister = hasFlag("unregister-mailto");
     // C124: Linux registration — a .desktop entry claiming the mailto:
@@ -2149,6 +2169,29 @@ RFC 5322 with CRLF line endings. Bodies are quoted-printable encoded (readable i
     // Linux/mac users still go through the CLI (xdg / TODO C124).
     if (process.platform === "win32") {
         svc.setMailtoRegisterFn(async () => registerMailtoWindows(false));
+        // Auto-register at daemon startup (Bob 2026-07-27: "that should be
+        // automatic"). Install-time is NOT a reliable hook — npm's
+        // allowScripts policy skips this package's install scripts, so a
+        // postinstall registration would silently never run. Startup runs on
+        // every machine that actually launches the app, self-heals after
+        // updates (probe notices a newer packaged rmfmailto.exe), and the
+        // probe keeps already-registered boots to one reg.exe query.
+        // Deferred 5s so the registration pass never sits in the boot path.
+        // Registers rmfmail as an AVAILABLE mailto handler; Windows 11 still
+        // requires the one-time Default-apps pick (UserChoice hash — C46).
+        setTimeout(() => {
+            try {
+                if (mailtoRegistrationCurrent())
+                    return;
+                const r = registerMailtoWindows(false);
+                console.log(`  [mailto] startup auto-registration ${r.ok ? "completed" : "FAILED"}`);
+                if (!r.ok)
+                    console.log(r.message);
+            }
+            catch (e) {
+                console.error(`  [mailto] startup auto-registration failed: ${e?.message || e}`);
+            }
+        }, 5000);
     }
     svc.setPopupFn(async (opts) => {
         // Own WebView2 profile so a reminder popup can never share (and