@bobfrankston/rmfmail 1.2.272 → 1.2.276

package/client/app.bundle.js

@@ -56,6 +56,7 @@ __export(api_client_exports, {
   flagSenderOrDomain: () => flagSenderOrDomain,
   formatJsonc: () => formatJsonc,
   getAccounts: () => getAccounts,
+  getAllowlist: () => getAllowlist,
   getAttachment: () => getAttachment,
   getAutocompleteSettings: () => getAutocompleteSettings,
   getCalendarEvents: () => getCalendarEvents,
@@ -350,6 +351,9 @@ function addUserDictWords(words) {
 function removeUserDictWord(word) {
   return ipc().removeUserDictWord?.(word) ?? Promise.resolve([]);
 }
+function getAllowlist() {
+  return ipc().getAllowlist?.() ?? Promise.resolve({ senders: [], domains: [], recipients: [], flaggedSenders: [], flaggedDomains: [] });
+}
 function flagSenderOrDomain(type, value) {
   return ipc().flagSenderOrDomain?.(type, value) ?? Promise.resolve({ flagged: false });
 }
@@ -1310,6 +1314,61 @@ var init_message_state = __esm({
   }
 });
 
+// client/lib/approved-senders.js
+var approved_senders_exports = {};
+__export(approved_senders_exports, {
+  approvedCounts: () => approvedCounts,
+  isSenderApproved: () => isSenderApproved,
+  noteApprovedLocally: () => noteApprovedLocally,
+  refreshApprovedSenders: () => refreshApprovedSenders
+});
+async function refreshApprovedSenders() {
+  try {
+    const list = await getAllowlist();
+    senders = new Set((list.senders || []).map(norm));
+    domains = new Set((list.domains || []).map(norm));
+    loaded = true;
+  } catch (e) {
+    console.warn("[approved-senders] refresh failed:", e?.message || e);
+  }
+}
+function isSenderApproved(address) {
+  if (!loaded)
+    return false;
+  const a = norm(address);
+  if (!a)
+    return false;
+  if (senders.has(a))
+    return true;
+  const d = domainOf(a);
+  return !!d && domains.has(d);
+}
+function noteApprovedLocally(type, value) {
+  const v = norm(value);
+  if (!v)
+    return;
+  if (type === "sender")
+    senders.add(v);
+  else
+    domains.add(v);
+  loaded = true;
+}
+function approvedCounts() {
+  return { senders: senders.size, domains: domains.size, loaded };
+}
+var senders, domains, loaded, norm, domainOf;
+var init_approved_senders = __esm({
+  "client/lib/approved-senders.js"() {
+    "use strict";
+    init_api_client();
+    senders = /* @__PURE__ */ new Set();
+    domains = /* @__PURE__ */ new Set();
+    loaded = false;
+    norm = (s) => (s || "").trim().toLowerCase();
+    domainOf = (addr) => norm(addr).split("@").pop() || "";
+  }
+});
+
 // packages/mailx-types/contact-rules.js
 var init_contact_rules = __esm({
   "packages/mailx-types/contact-rules.js"() {
@@ -1408,6 +1467,11 @@ function formatSender(addr) {
     return { text: address, claimed: null };
   return { text: `${name} <${address}>`, claimed: displayNameClaimsOtherAddress(name, address) };
 }
+function inviteHasGoogleRsvp(bodyHtml) {
+  if (!bodyHtml)
+    return false;
+  return /calendar\.google\.com\/calendar\/event\?action=RESPOND/i.test(bodyHtml);
+}
 var _SEEN, _FLAGGED, _DRAFT, seenOf, flaggedOf, draftOf, setSeen, setFlagged;
 var init_mailx_types = __esm({
   "packages/mailx-types/index.js"() {
@@ -1429,6 +1493,100 @@ var init_mailx_types = __esm({
   }
 });
 
+// client/components/invite-card.js
+function formatWhen(inv) {
+  if (!inv.start)
+    return "";
+  if (inv.allDay) {
+    try {
+      const d = /* @__PURE__ */ new Date(inv.start + "T00:00:00");
+      return d.toLocaleDateString(void 0, { weekday: "long", year: "numeric", month: "long", day: "numeric" }) + " (all day)";
+    } catch {
+      return inv.start + " (all day)";
+    }
+  }
+  const instant = (() => {
+    if (/Z$/.test(inv.start))
+      return new Date(inv.start);
+    if (!inv.tzid)
+      return new Date(inv.start);
+    try {
+      const guess = /* @__PURE__ */ new Date(inv.start + "Z");
+      const asZone = new Date(guess.toLocaleString("en-US", { timeZone: inv.tzid }));
+      const asUtc = new Date(guess.toLocaleString("en-US", { timeZone: "UTC" }));
+      return new Date(guess.getTime() + (asUtc.getTime() - asZone.getTime()));
+    } catch {
+      return new Date(inv.start);
+    }
+  })();
+  if (isNaN(instant.getTime()))
+    return inv.start;
+  const localZone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+  const opts = {
+    weekday: "short",
+    month: "short",
+    day: "numeric",
+    hour: "numeric",
+    minute: "2-digit"
+  };
+  let out = instant.toLocaleString(void 0, opts);
+  if (inv.end && !/Z$/.test(inv.end)) {
+    try {
+      const endInstant = new Date(instant.getTime() + ((/* @__PURE__ */ new Date(inv.end + "Z")).getTime() - (/* @__PURE__ */ new Date(inv.start + "Z")).getTime()));
+      out += " \u2013 " + endInstant.toLocaleString(void 0, { hour: "numeric", minute: "2-digit" });
+    } catch {
+    }
+  }
+  if (inv.tzid && inv.tzid !== localZone) {
+    out += `  (sent as ${inv.start.slice(11, 16)} ${inv.tzid})`;
+  }
+  return out;
+}
+function buildInviteCard(inv, bodyHtml) {
+  if (!inv || !inv.summary && !inv.start)
+    return null;
+  const card = document.createElement("div");
+  card.className = "mv-invite";
+  if (inv.method === "CANCEL")
+    card.classList.add("mv-invite-cancelled");
+  const when = formatWhen(inv);
+  const isMeetLink = /^https?:/;
+  const googleHandles = inv.fromGoogle && inviteHasGoogleRsvp(bodyHtml);
+  const rows = [];
+  if (when)
+    rows.push(`<div class="mv-invite-when">${esc(when)}</div>`);
+  if (inv.location) {
+    rows.push(isMeetLink ? `<div class="mv-invite-row"><span class="mv-invite-label">Where</span><a href="${esc(inv.location)}" target="_blank" rel="noopener noreferrer">${esc(inv.location)}</a></div>` : `<div class="mv-invite-row"><span class="mv-invite-label">Where</span>${esc(inv.location)}</div>`);
+  }
+  if (inv.organizer.email) {
+    rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Organizer</span>${esc(inv.organizer.name)}${inv.organizer.name !== inv.organizer.email ? " &lt;" + esc(inv.organizer.email) + "&gt;" : ""}</div>`);
+  }
+  if (inv.attendees.length) {
+    const who = inv.attendees.map((a) => `${esc(a.name || a.email)} <span class="mv-invite-partstat">(${esc(PARTSTAT_LABEL[a.status] || a.status.toLowerCase())})</span>`).join(", ");
+    rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Guests</span>${who}</div>`);
+  }
+  if (inv.rrule)
+    rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Repeats</span><code>${esc(inv.rrule)}</code></div>`);
+  const badge = inv.method === "CANCEL" ? "Cancelled" : inv.method === "REPLY" ? "Reply" : inv.status === "TENTATIVE" ? "Tentative" : "Invitation";
+  card.innerHTML = `<div class="mv-invite-head"><span class="mv-invite-badge">${esc(badge)}</span><span class="mv-invite-summary">${esc(inv.summary || "(no title)")}</span></div>` + rows.join("") + (googleHandles ? `<div class="mv-invite-note">Respond with the Yes / No / Maybe buttons in the message below \u2014 they go straight to Google Calendar.</div>` : "");
+  return card;
+}
+var PARTSTAT_LABEL, esc;
+var init_invite_card = __esm({
+  "client/components/invite-card.js"() {
+    "use strict";
+    init_mailx_types();
+    PARTSTAT_LABEL = {
+      "ACCEPTED": "accepted",
+      "DECLINED": "declined",
+      "TENTATIVE": "maybe",
+      "NEEDS-ACTION": "no reply yet",
+      "DELEGATED": "delegated"
+    };
+    esc = (s) => (s || "").replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+  }
+});
+
 // client/components/address-book.js
 var address_book_exports = {};
 __export(address_book_exports, {
@@ -2302,19 +2460,6 @@ function installPreviewControls(iframe) {
       }
       if (e.ctrlKey && !e.altKey && !e.metaKey && (e.key === "a" || e.key === "A"))
         return;
-      const synth = new KeyboardEvent("keydown", {
-        key: e.key,
-        code: e.code,
-        ctrlKey: e.ctrlKey,
-        shiftKey: e.shiftKey,
-        altKey: e.altKey,
-        metaKey: e.metaKey,
-        bubbles: true,
-        cancelable: true
-      });
-      const allowDefault = document.dispatchEvent(synth);
-      if (!allowDefault)
-        e.preventDefault();
     });
     doc.addEventListener("wheel", (e) => {
       if (!e.ctrlKey)
@@ -2351,6 +2496,7 @@ function clearViewer() {
     headerEl.hidden = true;
   if (attEl)
     attEl.hidden = true;
+  document.getElementById("mv-invite")?.remove();
   setTimeout(() => {
     try {
       const stillPlaceholder = !!document.querySelector("#mv-body .mv-empty");
@@ -2610,6 +2756,16 @@ async function showMessage(accountId, uid, folderId, specialUse, isRetry = false
     fromEl.textContent = formatAddr(msg.from);
     setRecipientLine(toEl, msg.to, msg.cc, msg.deliveredTo);
     headerEl.querySelector(".mv-subject").textContent = msg.subject;
+    document.getElementById("mv-invite")?.remove();
+    try {
+      const card = buildInviteCard(msg.invite, String(msg.bodyHtml || ""));
+      if (card) {
+        card.id = "mv-invite";
+        headerEl.insertAdjacentElement("afterend", card);
+      }
+    } catch (e) {
+      console.warn("[viewer] invite card failed:", e?.message || e);
+    }
     document.dispatchEvent(new CustomEvent("mailx-message-shown", { detail: { accountId } }));
     for (const el of [fromEl, toEl]) {
       el.addEventListener("contextmenu", (e) => {
@@ -2693,6 +2849,36 @@ async function showMessage(accountId, uid, folderId, specialUse, isRetry = false
           items.push({ label: "", action: () => {
           }, separator: true });
         }
+        if (el === fromEl && msg.from?.address) {
+          const addr = String(msg.from.address);
+          const dom = addr.split("@").pop() || "";
+          const claimed = displayNameClaimsOtherAddress(String(msg.from.name || ""), addr);
+          if (claimed && !isSenderApproved(addr)) {
+            const approve = async (type, value) => {
+              noteApprovedLocally(type, value);
+              try {
+                await allowRemoteContent(type, value);
+                await refreshApprovedSenders();
+                document.dispatchEvent(new CustomEvent("mailx-allowlist-changed"));
+                const st = document.getElementById("status-sync");
+                if (st)
+                  st.textContent = `Marked valid: ${value}`;
+              } catch (e2) {
+                const st = document.getElementById("status-sync");
+                if (st) {
+                  st.textContent = `Couldn't save "${value}" to the allowlist \u2014 ${e2?.message || e2}`;
+                  st.style.color = "oklch(0.65 0.2 25)";
+                }
+                console.error("[allowlist] approve failed:", e2);
+              }
+            };
+            items.push({ label: `\u2713 Mark ${addr} as a valid sender`, action: () => void approve("sender", addr) });
+            if (dom)
+              items.push({ label: `\u2713 Trust all senders at ${dom}`, action: () => void approve("domain", dom) });
+            items.push({ label: "", action: () => {
+            }, separator: true });
+          }
+        }
         if (omitted > 0) {
           items.push({
             label: `\u2026 ${omitted} more recipients \u2014 copy the whole list`,
@@ -3282,7 +3468,7 @@ ${escapeText(reputationBlind)}"` : ""}>${reputationText}</div>` : "") + `<div cl
 }
 function formatAddr(addr) {
   const { text, claimed } = formatSender(addr);
-  if (!claimed)
+  if (!claimed || isSenderApproved(addr.address))
     return text;
   return `${text} \u2014 display name claims ${claimed}`;
 }
@@ -3891,11 +4077,11 @@ function buildPrintableDoc(m) {
   if (!m)
     return null;
   const fmt = (a) => a?.name ? `${a.name} <${a.address || ""}>` : a?.address || "";
-  const esc = escapeHtmlLocal;
-  const row = (label, value) => value ? `<div><strong>${label}:</strong> ${esc(value)}</div>` : "";
+  const esc2 = escapeHtmlLocal;
+  const row = (label, value) => value ? `<div><strong>${label}:</strong> ${esc2(value)}</div>` : "";
   const headerHtml = `<div style="font-family:system-ui,Segoe UI,sans-serif;font-size:11pt;border-bottom:1px solid #999;padding-bottom:8px;margin-bottom:14px;line-height:1.5;">` + row("From", fmt(m.from || {})) + row("To", (m.to || []).map(fmt).join(", ")) + (m.cc?.length ? row("Cc", m.cc.map(fmt).join(", ")) : "") + row("Subject", m.subject || "") + row("Date", m.date ? new Date(m.date).toLocaleString() : "") + `</div>`;
-  const bodyHtml = m.bodyHtml ? m.bodyHtml : `<pre style="white-space:pre-wrap;word-break:break-word;font-family:system-ui,sans-serif;">${esc(m.bodyText || "")}</pre>`;
-  return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>${esc(m.subject || "Message")}</title><style>@media print{body{margin:0;}}body{margin:16px;}img{max-width:100%;}</style></head><body>${headerHtml}${bodyHtml}</body></html>`;
+  const bodyHtml = m.bodyHtml ? m.bodyHtml : `<pre style="white-space:pre-wrap;word-break:break-word;font-family:system-ui,sans-serif;">${esc2(m.bodyText || "")}</pre>`;
+  return `<!DOCTYPE html><html><head><meta charset="utf-8"><title>${esc2(m.subject || "Message")}</title><style>@media print{body{margin:0;}}body{margin:16px;}img{max-width:100%;}</style></head><body>${headerHtml}${bodyHtml}</body></html>`;
 }
 function printCurrentMessage() {
   if (!currentMessage)
@@ -4107,6 +4293,8 @@ var init_message_viewer = __esm({
   "client/components/message-viewer.js"() {
     "use strict";
     init_api_client();
+    init_approved_senders();
+    init_invite_card();
     init_context_menu();
     init_message_state();
     init_message_list();
@@ -5530,6 +5718,7 @@ var init_message_list = __esm({
     init_folder_picker();
     init_fold_text();
     init_mailx_types();
+    init_approved_senders();
     currentSpecialUse = "";
     lastClickedRow = null;
     loading = false;
@@ -5644,7 +5833,7 @@ var init_message_list = __esm({
           from.textContent = msg.to.map((a) => a.name || a.address).join(", ");
         } else {
           const fromName2 = msg.from.name || msg.from.address;
-          const fromClaim = displayNameClaimsOtherAddress(msg.from.name || "", msg.from.address || "");
+          const fromClaim = isSenderApproved(msg.from.address || "") ? null : displayNameClaimsOtherAddress(msg.from.name || "", msg.from.address || "");
           from.textContent = fromClaim ? `${fromName2} \u2014 actually ${msg.from.address}` : fromName2;
           if (fromClaim) {
             from.classList.add("ml-from-spoofed");
@@ -7295,7 +7484,7 @@ async function collectDueAlarms(now) {
   }
   return items;
 }
-function formatWhen(ms) {
+function formatWhen2(ms) {
   if (!ms)
     return "";
   const d = new Date(ms);
@@ -7418,7 +7607,7 @@ async function firePopupForItem(item) {
   .actions button.action[data-btn="Delete"]:hover { background: #800; }
 </style></head><body>
   <div class="title"><span class="icon">${icon}</span>${escapeHtml7(item.title)}</div>
-  <div class="when">${escapeHtml7(formatWhen(item.whenMs))}</div>
+  <div class="when">${escapeHtml7(formatWhen2(item.whenMs))}</div>
   <div class="kind">${kindLabel}</div>
   <div class="row">
     <span class="row-label">Snooze:</span>
@@ -9170,6 +9359,7 @@ window.__btick && window.__btick("app.ts module body executing");
 var baseTitle = APP_NAME;
 var lastSeenCount = 0;
 var badgeCount = 0;
+var lastOverlayCount = -1;
 function updateBadge(count) {
   badgeCount = count;
   document.title = count > 0 ? `(${count}) ${baseTitle}` : baseTitle;
@@ -9206,7 +9396,8 @@ function updateBadge(count) {
   link.href = dataUrl;
   try {
     const hostApi = window.mailxapi;
-    if (hostApi?.setTaskbarOverlay) {
+    if (hostApi?.setTaskbarOverlay && count !== lastOverlayCount) {
+      lastOverlayCount = count;
       if (count > 0) {
         const bc = document.createElement("canvas");
         bc.width = 32;
@@ -9902,12 +10093,12 @@ async function openCompose(mode, overrideMsg, overrideAccountId) {
   }
   if (msg && (mode === "editAsNew" || mode === "forward") && Array.isArray(msg.attachments) && msg.attachments.length) {
     const msgAccountId = current?.accountId || accountId;
-    const loaded = [];
+    const loaded2 = [];
     for (const att of msg.attachments) {
       try {
         const data = await getAttachment(msgAccountId, msg.uid, att.id, msg.folderId);
         if (data?.content) {
-          loaded.push({
+          loaded2.push({
             filename: data.filename || att.filename || "attachment",
             mimeType: data.contentType || att.contentType || "application/octet-stream",
             dataBase64: data.content
@@ -9917,7 +10108,7 @@ async function openCompose(mode, overrideMsg, overrideAccountId) {
         console.error(`[compose] ${mode}: failed to load attachment ${att.id}: ${e?.message || e}`);
       }
     }
-    if (loaded.length) init.attachments = loaded;
+    if (loaded2.length) init.attachments = loaded2;
   }
   if (preferWindow && !frame) {
     try {
@@ -12379,6 +12570,19 @@ function applyThreadFilter() {
     console.error("pending mailto pickup failed:", e?.message || e);
   }
 })();
+(async () => {
+  try {
+    const { refreshApprovedSenders: refreshApprovedSenders2 } = await Promise.resolve().then(() => (init_approved_senders(), approved_senders_exports));
+    await refreshApprovedSenders2();
+    document.dispatchEvent(new CustomEvent("mailx-allowlist-changed"));
+  } catch (e) {
+    console.warn("approved-sender index load failed:", e?.message || e);
+  }
+})();
+document.addEventListener("mailx-allowlist-changed", () => {
+  void Promise.resolve().then(() => (init_message_list(), message_list_exports)).then((m) => m.reloadCurrentFolder?.()).catch(() => {
+  });
+});
 (async () => {
   try {
     const { consumePendingShare: consumePendingShare2 } = await Promise.resolve().then(() => (init_api_client(), api_client_exports));
@@ -12902,11 +13106,11 @@ function offsetToLineCol(src, pos) {
   return { pos, line, col };
 }
 function renderMarkdown(md) {
-  const esc = (s) => s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
+  const esc2 = (s) => s.replace(/[&<>"']/g, (c) => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" })[c]);
   const blocks = [];
   let src = md.replace(/```(\w*)\n([\s\S]*?)```/g, (_m, _lang, code) => {
     const i = blocks.length;
-    blocks.push(`<pre class="mailx-help-code"><code>${esc(code)}</code></pre>`);
+    blocks.push(`<pre class="mailx-help-code"><code>${esc2(code)}</code></pre>`);
     return `\0BLOCK${i}\0`;
   });
   const lines = src.split(/\r?\n/);
@@ -12926,7 +13130,7 @@ function renderMarkdown(md) {
     }
   };
   function inline(s) {
-    s = esc(s);
+    s = esc2(s);
     s = s.replace(/`([^`]+)`/g, (_m, c) => `<code>${c}</code>`);
     s = s.replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>");
     s = s.replace(/(^|[^*])\*([^*\n]+)\*/g, "$1<em>$2</em>");
@@ -13630,12 +13834,12 @@ document.addEventListener("mailx-popout-message", (async (e) => {
       draftId: msg.mailxDraftId || ""
     };
     if (Array.isArray(msg.attachments) && msg.attachments.length) {
-      const loaded = [];
+      const loaded2 = [];
       for (const att of msg.attachments) {
         try {
           const data = await getAttachment(accountId, msg.uid, att.id, msg.folderId);
           if (data?.content) {
-            loaded.push({
+            loaded2.push({
               filename: data.filename || att.filename || "attachment",
               mimeType: data.contentType || att.contentType || "application/octet-stream",
               dataBase64: data.content
@@ -13645,7 +13849,7 @@ document.addEventListener("mailx-popout-message", (async (e) => {
           console.error(`[compose] edit draft: failed to load attachment ${att.id} ("${att.filename}"): ${e2?.message || e2}`);
         }
       }
-      if (loaded.length) init.attachments = loaded;
+      if (loaded2.length) init.attachments = loaded2;
     }
     handOffComposeInit(showComposeOverlay(msg.subject ? `Edit: ${msg.subject}` : "Edit draft"), init);
     return;