@bobfrankston/rmfmail 1.2.272 → 1.2.276

package/.commitmsg

@@ -0,0 +1,26 @@
+Preview hotkeys fired twice — Ctrl+F opened two compose windows
+
+A keydown in the message preview reached app.ts by TWO routes on desktop
+WebView2: the iframe's own inline script posts every keydown to the parent as
+`previewKey` (app.ts re-dispatches it), and installPreviewControls ALSO attached
+a contentDocument listener that re-dispatched a synthetic keydown of its own.
+The srcdoc document is same-origin, so both are live. One Ctrl+F therefore ran
+openCompose("forward") twice and opened two compose popouts — the second never
+finished loading and sat blank and "(Not Responding)" until it was killed (Bob
+2026-08-23, "Compose: Fwd: FirstCare Slide Deck (Not Responding)"; the log shows
+openCompose-entry mode=forward twice in the same millisecond, two popoutCompose
+windows, and the loaded one exiting while the blank duplicate survived). Ctrl+D
+and Ctrl+P doubled the same way.
+
+The inline forwarder is the mechanism that survives — it is the only one that
+works on Android WebView, where parent-side contentDocument listeners never
+fire. installPreviewControls keeps only what is genuinely iframe-local: zoom and
+Ctrl+A.
+
+Also: push the Windows taskbar overlay only when the unread count CHANGES.
+Windows holds the overlay icon until the next SetOverlayIcon, so the host cannot
+free the icon it just handed over; re-sending an identical badge every few
+seconds cost GDI objects for nothing and helped drive rmfmail.exe to the
+10,000-object per-process cap (measured at GDI=9995, with 3423
+"CreateIconIndirect failed: Not enough memory resources" in one day's log).
+msger 0.1.429 fixes the leak itself by freeing the retired icon.

package/client/android-bootstrap.bundle.js

@@ -2583,10 +2583,12 @@ __export(mailx_types_exports, {
   flaggedOf: () => flaggedOf,
   formatSender: () => formatSender,
   htmlToPlainText: () => htmlToPlainText,
+  inviteHasGoogleRsvp: () => inviteHasGoogleRsvp,
   isAddressToken: () => isAddressToken,
   isJunkPreviewText: () => isJunkPreviewText,
   mergeReminderStates: () => mergeReminderStates,
   normalizeReminderState: () => normalizeReminderState,
+  parseInvite: () => parseInvite,
   parseSearchQuery: () => parseSearchQuery,
   reminderStatesEqual: () => reminderStatesEqual,
   sanitizeHtml: () => sanitizeHtml,
@@ -2887,6 +2889,173 @@ function formatSender(addr) {
     return { text: address, claimed: null };
   return { text: `${name} <${address}>`, claimed: displayNameClaimsOtherAddress(name, address) };
 }
+function unfoldIcs(text) {
+  const raw = (text || "").replace(/\r\n/g, "\n").split("\n");
+  const out = [];
+  for (const line of raw) {
+    if (/^[ \t]/.test(line) && out.length)
+      out[out.length - 1] += line.slice(1);
+    else
+      out.push(line);
+  }
+  return out;
+}
+function unescapeIcs(v) {
+  return (v || "").replace(/\\n/gi, "\n").replace(/\\([;,\\])/g, "$1");
+}
+function splitIcsLine(line) {
+  let inQuote = false, colon = -1;
+  for (let i = 0; i < line.length; i++) {
+    const c = line[i];
+    if (c === '"')
+      inQuote = !inQuote;
+    else if (c === ":" && !inQuote) {
+      colon = i;
+      break;
+    }
+  }
+  if (colon < 0)
+    return null;
+  const namePart = line.slice(0, colon);
+  const value = line.slice(colon + 1);
+  const bits = namePart.split(";");
+  const key = (bits.shift() || "").toUpperCase();
+  const params = {};
+  for (const b of bits) {
+    const eq = b.indexOf("=");
+    if (eq < 0)
+      continue;
+    params[b.slice(0, eq).toUpperCase()] = b.slice(eq + 1).replace(/^"|"$/g, "");
+  }
+  return { key, params, value };
+}
+function icsDateToIso(v, isUtc) {
+  const m = (v || "").match(/^(\d{4})(\d{2})(\d{2})(?:T(\d{2})(\d{2})(\d{2})(Z)?)?$/);
+  if (!m)
+    return "";
+  const [, y, mo, d, hh, mm, ss, z] = m;
+  if (!hh)
+    return `${y}-${mo}-${d}`;
+  const base = `${y}-${mo}-${d}T${hh}:${mm}:${ss}`;
+  return z || isUtc ? base + "Z" : base;
+}
+function parseCalAddress(value, params) {
+  const email = (value || "").replace(/^mailto:/i, "").trim();
+  return { name: (params.CN || "").trim() || email, email };
+}
+function parseInvite(ics) {
+  if (!ics || !/BEGIN:VEVENT/i.test(ics))
+    return null;
+  const lines = unfoldIcs(ics);
+  const out = {
+    method: "",
+    uid: "",
+    sequence: 0,
+    summary: "",
+    description: "",
+    location: "",
+    start: "",
+    end: "",
+    tzid: "",
+    allDay: false,
+    organizer: { name: "", email: "" },
+    attendees: [],
+    rrule: "",
+    status: "",
+    fromGoogle: false
+  };
+  let inEvent = false;
+  let depthNonEvent = 0;
+  for (const line of lines) {
+    const up = line.toUpperCase();
+    if (up.startsWith("BEGIN:VEVENT")) {
+      inEvent = true;
+      continue;
+    }
+    if (up.startsWith("END:VEVENT")) {
+      inEvent = false;
+      continue;
+    }
+    if (!inEvent && (up.startsWith("BEGIN:VTIMEZONE") || up.startsWith("BEGIN:VALARM"))) {
+      depthNonEvent++;
+      continue;
+    }
+    if (up.startsWith("END:VTIMEZONE") || up.startsWith("END:VALARM")) {
+      if (depthNonEvent)
+        depthNonEvent--;
+      continue;
+    }
+    if (inEvent && up.startsWith("BEGIN:VALARM")) {
+      depthNonEvent++;
+      continue;
+    }
+    const p = splitIcsLine(line);
+    if (!p)
+      continue;
+    if (!inEvent) {
+      if (p.key === "METHOD")
+        out.method = p.value.trim().toUpperCase();
+      else if (p.key === "PRODID" && /google/i.test(p.value))
+        out.fromGoogle = true;
+      continue;
+    }
+    if (depthNonEvent)
+      continue;
+    switch (p.key) {
+      case "SUMMARY":
+        out.summary = unescapeIcs(p.value);
+        break;
+      case "DESCRIPTION":
+        out.description = unescapeIcs(p.value);
+        break;
+      case "LOCATION":
+        out.location = unescapeIcs(p.value);
+        break;
+      case "UID":
+        out.uid = p.value.trim();
+        break;
+      case "STATUS":
+        out.status = p.value.trim().toUpperCase();
+        break;
+      case "RRULE":
+        out.rrule = p.value.trim();
+        break;
+      case "SEQUENCE":
+        out.sequence = parseInt(p.value, 10) || 0;
+        break;
+      case "DTSTART":
+        out.start = icsDateToIso(p.value.trim(), false);
+        out.tzid = p.params.TZID || out.tzid;
+        out.allDay = (p.params.VALUE || "").toUpperCase() === "DATE" || !/T/.test(p.value);
+        break;
+      case "DTEND":
+        out.end = icsDateToIso(p.value.trim(), false);
+        out.tzid = out.tzid || p.params.TZID || "";
+        break;
+      case "ORGANIZER":
+        out.organizer = parseCalAddress(p.value, p.params);
+        break;
+      case "ATTENDEE": {
+        const a = parseCalAddress(p.value, p.params);
+        out.attendees.push({
+          name: a.name,
+          email: a.email,
+          status: (p.params.PARTSTAT || "NEEDS-ACTION").toUpperCase(),
+          rsvp: (p.params.RSVP || "").toUpperCase() === "TRUE"
+        });
+        break;
+      }
+    }
+  }
+  if (!out.summary && !out.start)
+    return null;
+  return out;
+}
+function inviteHasGoogleRsvp(bodyHtml) {
+  if (!bodyHtml)
+    return false;
+  return /calendar\.google\.com\/calendar\/event\?action=RESPOND/i.test(bodyHtml);
+}
 var _SEEN, _FLAGGED, _ANSWERED, _DRAFT, _DELETED, seenOf, flaggedOf, answeredOf, draftOf, deletedOf, setSeen, setFlagged, setAnswered, setDraft, toggleSeen, toggleFlagged;
 var init_mailx_types = __esm({
   "packages/mailx-types/index.js"() {
@@ -6403,6 +6572,20 @@ var WebMailxService = class _WebMailxService {
     await this.syncManager.updateFlagsLocal(accountId, uid, envelope?.folderId || 0, flags);
   }
   // ── Remote content allow-list ──
+  /** Read side of the shared allowlist, so the UI can ask whether a sender
+   *  has been vouched for. Mirrors MailxService.getAllowlist — the desktop
+   *  and Android halves must answer the same question the same way, or the
+   *  display-name warning would differ between them. */
+  async getAllowlist() {
+    const list = await loadAllowlist() || {};
+    return {
+      senders: list.senders || [],
+      domains: list.domains || [],
+      recipients: list.recipients || [],
+      flaggedSenders: list.flaggedSenders || [],
+      flaggedDomains: list.flaggedDomains || []
+    };
+  }
   async allowRemoteContent(type, value) {
     await updateAllowlist((list) => {
       if (type === "sender" && !list.senders.includes(value))
@@ -11868,6 +12051,7 @@ function installBridge() {
       await service.allowRemoteContent(type, value);
       return { ok: true };
     },
+    getAllowlist: () => service.getAllowlist(),
     flagSenderOrDomain: async (type, value) => {
       return await service.flagSenderOrDomain(type, value);
     },