@bobfrankston/rmfmail 1.2.274 → 1.2.277

package/client/app.ts

@@ -156,6 +156,9 @@ propagateAppName();
 let baseTitle = APP_NAME;
 let lastSeenCount = 0;
 let badgeCount = 0;
+/** Last count pushed to the Windows taskbar overlay, so an unchanged count
+ *  is not re-pushed. -1 = nothing pushed yet. See updateBadge. */
+let lastOverlayCount = -1;
 
 function updateBadge(count: number): void {
     badgeCount = count;
@@ -211,7 +214,19 @@ function updateBadge(count: number): void {
         // taskbar for the whole life of this feature (Bob 2026-05-28 "are you
         // able to show the number of new messages").
         const hostApi: any = (window as any).mailxapi;
-        if (hostApi?.setTaskbarOverlay) {
+        // Push ONLY when the number actually changes. Windows keeps the
+        // overlay icon alive until the next SetOverlayIcon, so the host
+        // cannot free the icon it just handed over — each push costs the
+        // host process one HICON plus the two bitmaps inside it, and the
+        // unread-count refresh fires every few seconds. That reached the
+        // 10,000-object per-process GDI cap in about a day, after which the
+        // host logged "CreateIconIndirect failed: Not enough memory
+        // resources" on every tick and could create no further GDI objects
+        // (Bob 2026-08-23, measured: rmfmail.exe at GDI=9995). msger now
+        // frees the PREVIOUS icon so the leak is bounded either way; this
+        // just stops the pointless churn (Claude Code 2026-08-23).
+        if (hostApi?.setTaskbarOverlay && count !== lastOverlayCount) {
+            lastOverlayCount = count;
             if (count > 0) {
                 // BADGE-ONLY overlay. SetOverlayIcon composites the supplied
                 // icon onto the bottom-right corner of the taskbar button —
@@ -5655,6 +5670,65 @@ document.getElementById("opt-compose-font-size")?.addEventListener("change", (e)
     }).catch(() => {});
 });
 
+// TinyMCE UI-language picker. The options are whatever language packs
+// build-tinymce.js actually copied next to the script (langs/index.json), so
+// the menu can never offer a pack that would 404 at editor init — TinyMCE
+// raises a visible error notification for a missing langs/<code>.js.
+//
+// These translate the editor CHROME only. Content, the spellcheck dictionary
+// and Harper are untouched and stay English, which is why the control sits
+// under Editor rather than anywhere that reads as a global language setting.
+//
+// TinyMCE itself has no detection — "Auto" is ours, resolving the browser's
+// ordered language list against the shipped packs. The Auto row names what it
+// currently resolves to so the choice is not a guess. (Claude Code 2026-08-23)
+const optEditorLanguage = document.getElementById("opt-editor-language") as HTMLSelectElement;
+if (optEditorLanguage) {
+    (async () => {
+        const scriptUrl = localStorage.getItem("mailx-tinymce-cdn") || "lib/tinymce/tinymce.min.js";
+        const { availableLanguages, resolveLanguage, languageLabel, LANGUAGE_AUTO, LANGUAGE_ENGLISH } =
+            await import("./lib/tinymce-langs.js");
+        const available = await availableLanguages(scriptUrl);
+        const autoPick = resolveLanguage(LANGUAGE_AUTO, available);
+        const add = (value: string, text: string) => {
+            const o = document.createElement("option");
+            o.value = value;
+            o.textContent = text;
+            optEditorLanguage.appendChild(o);
+        };
+        add(LANGUAGE_AUTO, `Auto — ${languageLabel(autoPick)}`);
+        add(LANGUAGE_ENGLISH, languageLabel(LANGUAGE_ENGLISH));
+        for (const code of [...available].sort((a, b) => languageLabel(a).localeCompare(languageLabel(b)))) {
+            add(code, `${languageLabel(code)} (${code})`);
+        }
+        if (!available.length) {
+            optEditorLanguage.disabled = true;
+            optEditorLanguage.title = "No language packs found next to tinymce.min.js — English only";
+        }
+        let current = LANGUAGE_AUTO;
+        try { current = localStorage.getItem("mailx-editor-language") || LANGUAGE_AUTO; } catch { /* */ }
+        try {
+            const settings: any = await getSettings();
+            if (typeof settings?.ui?.editorLanguage === "string" && settings.ui.editorLanguage) current = settings.ui.editorLanguage;
+        } catch { /* cache value stands */ }
+        optEditorLanguage.value = current;
+        // A pinned pack that is no longer shipped would leave the select on
+        // nothing at all; say so rather than showing a blank control.
+        if (!optEditorLanguage.value) optEditorLanguage.value = LANGUAGE_AUTO;
+    })().catch((e: any) => console.error("[settings] editor-language menu failed:", e?.message || e));
+
+    optEditorLanguage.addEventListener("change", () => {
+        const value = optEditorLanguage.value;
+        // Synchronous cache write for the same reason as saveEditorSetting:
+        // compose reads it at module load, so the next compose-open is right.
+        try { localStorage.setItem("mailx-editor-language", value); } catch { /* private mode */ }
+        getSettings().then((settings: any) => {
+            settings.ui = { ...settings.ui, editorLanguage: value };
+            saveSettings(settings);
+        }).catch((e: any) => console.error("[settings] editor language save failed:", e?.message || e));
+    });
+}
+
 // Save editor choice to server settings
 function saveEditorSetting(editor: string): void {
     // Update the localStorage cache SYNCHRONOUSLY. compose.ts reads

package/client/components/invite-card.js

@@ -0,0 +1,107 @@
+import { inviteHasGoogleRsvp } from "@bobfrankston/mailx-types";
+const PARTSTAT_LABEL = {
+    "ACCEPTED": "accepted",
+    "DECLINED": "declined",
+    "TENTATIVE": "maybe",
+    "NEEDS-ACTION": "no reply yet",
+    "DELEGATED": "delegated",
+};
+/** Format the event's span. An invite states wall-clock plus a zone; showing
+ *  it in the reader's zone is the useful reading, but when the two differ the
+ *  original is shown too — a 08:00 America/Los_Angeles meeting read as 11:00
+ *  local is exactly where people mis-book. */
+function formatWhen(inv) {
+    if (!inv.start)
+        return "";
+    if (inv.allDay) {
+        try {
+            const d = new Date(inv.start + "T00:00:00");
+            return d.toLocaleDateString(undefined, { weekday: "long", year: "numeric", month: "long", day: "numeric" }) + " (all day)";
+        }
+        catch {
+            return inv.start + " (all day)";
+        }
+    }
+    // A zoned wall-clock has no offset, so Date would read it as LOCAL time.
+    // Resolve it through the stated zone to get the real instant.
+    const instant = (() => {
+        if (/Z$/.test(inv.start))
+            return new Date(inv.start);
+        if (!inv.tzid)
+            return new Date(inv.start);
+        try {
+            // Probe: what does this wall-clock read as in the stated zone?
+            const guess = new Date(inv.start + "Z");
+            const asZone = new Date(guess.toLocaleString("en-US", { timeZone: inv.tzid }));
+            const asUtc = new Date(guess.toLocaleString("en-US", { timeZone: "UTC" }));
+            return new Date(guess.getTime() + (asUtc.getTime() - asZone.getTime()));
+        }
+        catch {
+            return new Date(inv.start);
+        }
+    })();
+    if (isNaN(instant.getTime()))
+        return inv.start;
+    const localZone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    const opts = {
+        weekday: "short", month: "short", day: "numeric",
+        hour: "numeric", minute: "2-digit",
+    };
+    let out = instant.toLocaleString(undefined, opts);
+    if (inv.end && !/Z$/.test(inv.end)) {
+        try {
+            const endInstant = new Date(instant.getTime() + (new Date(inv.end + "Z").getTime() - new Date(inv.start + "Z").getTime()));
+            out += " – " + endInstant.toLocaleString(undefined, { hour: "numeric", minute: "2-digit" });
+        }
+        catch { /* single-point event */ }
+    }
+    if (inv.tzid && inv.tzid !== localZone) {
+        out += `  (sent as ${inv.start.slice(11, 16)} ${inv.tzid})`;
+    }
+    return out;
+}
+const esc = (s) => (s || "").replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" }[c]));
+/** Build the card, or null when there is nothing worth showing. */
+export function buildInviteCard(inv, bodyHtml) {
+    if (!inv || (!inv.summary && !inv.start))
+        return null;
+    const card = document.createElement("div");
+    card.className = "mv-invite";
+    if (inv.method === "CANCEL")
+        card.classList.add("mv-invite-cancelled");
+    const when = formatWhen(inv);
+    const isMeetLink = /^https?:/; //i.test(inv.location);
+    const googleHandles = inv.fromGoogle && inviteHasGoogleRsvp(bodyHtml);
+    const rows = [];
+    if (when)
+        rows.push(`<div class="mv-invite-when">${esc(when)}</div>`);
+    if (inv.location) {
+        rows.push(isMeetLink
+            ? `<div class="mv-invite-row"><span class="mv-invite-label">Where</span><a href="${esc(inv.location)}" target="_blank" rel="noopener noreferrer">${esc(inv.location)}</a></div>`
+            : `<div class="mv-invite-row"><span class="mv-invite-label">Where</span>${esc(inv.location)}</div>`);
+    }
+    if (inv.organizer.email) {
+        rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Organizer</span>${esc(inv.organizer.name)}${inv.organizer.name !== inv.organizer.email ? " &lt;" + esc(inv.organizer.email) + "&gt;" : ""}</div>`);
+    }
+    if (inv.attendees.length) {
+        const who = inv.attendees
+            .map(a => `${esc(a.name || a.email)} <span class="mv-invite-partstat">(${esc(PARTSTAT_LABEL[a.status] || a.status.toLowerCase())})</span>`)
+            .join(", ");
+        rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Guests</span>${who}</div>`);
+    }
+    if (inv.rrule)
+        rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Repeats</span><code>${esc(inv.rrule)}</code></div>`);
+    const badge = inv.method === "CANCEL" ? "Cancelled"
+        : inv.method === "REPLY" ? "Reply"
+            : inv.status === "TENTATIVE" ? "Tentative"
+                : "Invitation";
+    card.innerHTML =
+        `<div class="mv-invite-head"><span class="mv-invite-badge">${esc(badge)}</span>` +
+            `<span class="mv-invite-summary">${esc(inv.summary || "(no title)")}</span></div>` +
+            rows.join("") +
+            (googleHandles
+                ? `<div class="mv-invite-note">Respond with the Yes / No / Maybe buttons in the message below — they go straight to Google Calendar.</div>`
+                : "");
+    return card;
+}
+//# sourceMappingURL=invite-card.js.map

package/client/components/invite-card.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"invite-card.js","sourceRoot":"","sources":["invite-card.ts"],"names":[],"mappings":"AAgBA,OAAO,EAAE,mBAAmB,EAAE,MAAM,2BAA2B,CAAC;AAEhE,MAAM,cAAc,GAA2B;IAC3C,UAAU,EAAE,UAAU;IACtB,UAAU,EAAE,UAAU;IACtB,WAAW,EAAE,OAAO;IACpB,cAAc,EAAE,cAAc;IAC9B,WAAW,EAAE,WAAW;CAC3B,CAAC;AAEF;;;8CAG8C;AAC9C,SAAS,UAAU,CAAC,GAAiB;IACjC,IAAI,CAAC,GAAG,CAAC,KAAK;QAAE,OAAO,EAAE,CAAC;IAC1B,IAAI,GAAG,CAAC,MAAM,EAAE,CAAC;QACb,IAAI,CAAC;YACD,MAAM,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,WAAW,CAAC,CAAC;YAC5C,OAAO,CAAC,CAAC,kBAAkB,CAAC,SAAS,EAAE,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,GAAG,YAAY,CAAC;QAC/H,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC;QAAC,CAAC;IAChD,CAAC;IACD,yEAAyE;IACzE,8DAA8D;IAC9D,MAAM,OAAO,GAAG,CAAC,GAAG,EAAE;QAClB,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;YAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACrD,IAAI,CAAC,GAAG,CAAC,IAAI;YAAE,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC;YACD,+DAA+D;YAC/D,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC;YACxC,MAAM,MAAM,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;YAC/E,MAAM,KAAK,GAAG,IAAI,IAAI,CAAC,KAAK,CAAC,cAAc,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC;YAC3E,OAAO,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,MAAM,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5E,CAAC;QAAC,MAAM,CAAC;YAAC,OAAO,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QAAC,CAAC;IAC3C,CAAC,CAAC,EAAE,CAAC;IACL,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QAAE,OAAO,GAAG,CAAC,KAAK,CAAC;IAE/C,MAAM,SAAS,GAAG,IAAI,CAAC,cAAc,EAAE,CAAC,eAAe,EAAE,CAAC,QAAQ,CAAC;IACnE,MAAM,IAAI,GAA+B;QACrC,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS;QAChD,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS;KACrC,CAAC;IACF,IAAI,GAAG,GAAG,OAAO,CAAC,cAAc,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,GAAG,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC;QACjC,IAAI,CAAC;YACD,MAAM,UAAU,GAAG,IAAI,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,GAAG,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,GAAG,CAAC,CAAC,OAAO,EAAE,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;YAC3H,GAAG,IAAI,KAAK,GAAG,UAAU,CAAC,cAAc,CAAC,SAAS,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,CAAC,CAAC;QAChG,CAAC;QAAC,MAAM,CAAC,CAAC,wBAAwB,CAAC,CAAC;IACxC,CAAC;IACD,IAAI,GAAG,CAAC,IAAI,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QACrC,GAAG,IAAI,cAAc,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,GAAG,CAAC,IAAI,GAAG,CAAC;IAChE,CAAC;IACD,OAAO,GAAG,CAAC;AACf,CAAC;AAED,MAAM,GAAG,GAAG,CAAC,CAAS,EAAU,EAAE,CAC9B,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC,CAAC,CAAE,CAAC,CAAC,CAAC;AAEtH,mEAAmE;AACnE,MAAM,UAAU,eAAe,CAAC,GAAoC,EAAE,QAAgB;IAClF,IAAI,CAAC,GAAG,IAAI,CAAC,CAAC,GAAG,CAAC,OAAO,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IAEtD,MAAM,IAAI,GAAG,QAAQ,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC;IAC3C,IAAI,CAAC,SAAS,GAAG,WAAW,CAAC;IAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ;QAAE,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAEvE,MAAM,IAAI,GAAG,UAAU,CAAC,GAAG,CAAC,CAAC;IAC7B,MAAM,UAAU,GAAG,UAAU,CAAA,CAAA,uBAAuB;IACpD,MAAM,aAAa,GAAG,GAAG,CAAC,UAAU,IAAI,mBAAmB,CAAC,QAAQ,CAAC,CAAC;IAEtE,MAAM,IAAI,GAAa,EAAE,CAAC;IAC1B,IAAI,IAAI;QAAE,IAAI,CAAC,IAAI,CAAC,+BAA+B,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACtE,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACf,IAAI,CAAC,IAAI,CAAC,UAAU;YAChB,CAAC,CAAC,iFAAiF,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,+CAA+C,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,YAAY;YAChL,CAAC,CAAC,wEAAwE,GAAG,CAAC,GAAG,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;IAC7G,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,CAAC,KAAK,EAAE,CAAC;QACtB,IAAI,CAAC,IAAI,CAAC,4EAA4E,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG,GAAG,CAAC,SAAS,CAAC,IAAI,KAAK,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,EAAE,QAAQ,CAAC,CAAC;IAC3N,CAAC;IACD,IAAI,GAAG,CAAC,SAAS,CAAC,MAAM,EAAE,CAAC;QACvB,MAAM,GAAG,GAAG,GAAG,CAAC,SAAS;aACpB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,CAAC,KAAK,CAAC,sCAAsC,GAAG,CAAC,cAAc,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC;aAC1I,IAAI,CAAC,IAAI,CAAC,CAAC;QAChB,IAAI,CAAC,IAAI,CAAC,yEAAyE,GAAG,QAAQ,CAAC,CAAC;IACpG,CAAC;IACD,IAAI,GAAG,CAAC,KAAK;QAAE,IAAI,CAAC,IAAI,CAAC,gFAAgF,GAAG,CAAC,GAAG,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC;IAExI,MAAM,KAAK,GAAG,GAAG,CAAC,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,WAAW;QAC/C,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,OAAO,CAAC,CAAC,CAAC,OAAO;YAClC,CAAC,CAAC,GAAG,CAAC,MAAM,KAAK,WAAW,CAAC,CAAC,CAAC,WAAW;gBAC1C,CAAC,CAAC,YAAY,CAAC;IAEnB,IAAI,CAAC,SAAS;QACV,6DAA6D,GAAG,CAAC,KAAK,CAAC,SAAS;YAChF,mCAAmC,GAAG,CAAC,GAAG,CAAC,OAAO,IAAI,YAAY,CAAC,eAAe;YAClF,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YACb,CAAC,aAAa;gBACV,CAAC,CAAC,yIAAyI;gBAC3I,CAAC,CAAC,EAAE,CAAC,CAAC;IAEd,OAAO,IAAI,CAAC;AAChB,CAAC"}

package/client/components/invite-card.ts

@@ -0,0 +1,119 @@
+/**
+ * Calendar-invite card.
+ *
+ * A message carrying a text/calendar part gets a summary rendered ABOVE the
+ * body — time in your zone, location, organizer, who has replied — instead of
+ * mailx handing invite.ics to whatever program happens to own .ics on this
+ * machine (Bob 2026-08-22 saw a bare console window and asked "is this RMF
+ * Mail?"; it was not, and the fact that it could have been is the problem).
+ *
+ * RSVP is deliberately NOT duplicated for Google invitations. Google's own
+ * HTML body carries working Yes / No / Maybe links
+ * (calendar.google.com/calendar/event?action=RESPOND&rst=1|2|3), and two
+ * responders racing to set PARTSTAT is worse than one. For those we show the
+ * summary and point at the buttons already in the message.
+ */
+import type { ParsedInvite } from "@bobfrankston/mailx-types";
+import { inviteHasGoogleRsvp } from "@bobfrankston/mailx-types";
+
+const PARTSTAT_LABEL: Record<string, string> = {
+    "ACCEPTED": "accepted",
+    "DECLINED": "declined",
+    "TENTATIVE": "maybe",
+    "NEEDS-ACTION": "no reply yet",
+    "DELEGATED": "delegated",
+};
+
+/** Format the event's span. An invite states wall-clock plus a zone; showing
+ *  it in the reader's zone is the useful reading, but when the two differ the
+ *  original is shown too — a 08:00 America/Los_Angeles meeting read as 11:00
+ *  local is exactly where people mis-book. */
+function formatWhen(inv: ParsedInvite): string {
+    if (!inv.start) return "";
+    if (inv.allDay) {
+        try {
+            const d = new Date(inv.start + "T00:00:00");
+            return d.toLocaleDateString(undefined, { weekday: "long", year: "numeric", month: "long", day: "numeric" }) + " (all day)";
+        } catch { return inv.start + " (all day)"; }
+    }
+    // A zoned wall-clock has no offset, so Date would read it as LOCAL time.
+    // Resolve it through the stated zone to get the real instant.
+    const instant = (() => {
+        if (/Z$/.test(inv.start)) return new Date(inv.start);
+        if (!inv.tzid) return new Date(inv.start);
+        try {
+            // Probe: what does this wall-clock read as in the stated zone?
+            const guess = new Date(inv.start + "Z");
+            const asZone = new Date(guess.toLocaleString("en-US", { timeZone: inv.tzid }));
+            const asUtc = new Date(guess.toLocaleString("en-US", { timeZone: "UTC" }));
+            return new Date(guess.getTime() + (asUtc.getTime() - asZone.getTime()));
+        } catch { return new Date(inv.start); }
+    })();
+    if (isNaN(instant.getTime())) return inv.start;
+
+    const localZone = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    const opts: Intl.DateTimeFormatOptions = {
+        weekday: "short", month: "short", day: "numeric",
+        hour: "numeric", minute: "2-digit",
+    };
+    let out = instant.toLocaleString(undefined, opts);
+    if (inv.end && !/Z$/.test(inv.end)) {
+        try {
+            const endInstant = new Date(instant.getTime() + (new Date(inv.end + "Z").getTime() - new Date(inv.start + "Z").getTime()));
+            out += " – " + endInstant.toLocaleString(undefined, { hour: "numeric", minute: "2-digit" });
+        } catch { /* single-point event */ }
+    }
+    if (inv.tzid && inv.tzid !== localZone) {
+        out += `  (sent as ${inv.start.slice(11, 16)} ${inv.tzid})`;
+    }
+    return out;
+}
+
+const esc = (s: string): string =>
+    (s || "").replace(/[&<>"']/g, c => ({ "&": "&amp;", "<": "&lt;", ">": "&gt;", '"': "&quot;", "'": "&#39;" }[c]!));
+
+/** Build the card, or null when there is nothing worth showing. */
+export function buildInviteCard(inv: ParsedInvite | null | undefined, bodyHtml: string): HTMLElement | null {
+    if (!inv || (!inv.summary && !inv.start)) return null;
+
+    const card = document.createElement("div");
+    card.className = "mv-invite";
+    if (inv.method === "CANCEL") card.classList.add("mv-invite-cancelled");
+
+    const when = formatWhen(inv);
+    const isMeetLink = /^https?:///i.test(inv.location);
+    const googleHandles = inv.fromGoogle && inviteHasGoogleRsvp(bodyHtml);
+
+    const rows: string[] = [];
+    if (when) rows.push(`<div class="mv-invite-when">${esc(when)}</div>`);
+    if (inv.location) {
+        rows.push(isMeetLink
+            ? `<div class="mv-invite-row"><span class="mv-invite-label">Where</span><a href="${esc(inv.location)}" target="_blank" rel="noopener noreferrer">${esc(inv.location)}</a></div>`
+            : `<div class="mv-invite-row"><span class="mv-invite-label">Where</span>${esc(inv.location)}</div>`);
+    }
+    if (inv.organizer.email) {
+        rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Organizer</span>${esc(inv.organizer.name)}${inv.organizer.name !== inv.organizer.email ? " &lt;" + esc(inv.organizer.email) + "&gt;" : ""}</div>`);
+    }
+    if (inv.attendees.length) {
+        const who = inv.attendees
+            .map(a => `${esc(a.name || a.email)} <span class="mv-invite-partstat">(${esc(PARTSTAT_LABEL[a.status] || a.status.toLowerCase())})</span>`)
+            .join(", ");
+        rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Guests</span>${who}</div>`);
+    }
+    if (inv.rrule) rows.push(`<div class="mv-invite-row"><span class="mv-invite-label">Repeats</span><code>${esc(inv.rrule)}</code></div>`);
+
+    const badge = inv.method === "CANCEL" ? "Cancelled"
+        : inv.method === "REPLY" ? "Reply"
+        : inv.status === "TENTATIVE" ? "Tentative"
+        : "Invitation";
+
+    card.innerHTML =
+        `<div class="mv-invite-head"><span class="mv-invite-badge">${esc(badge)}</span>` +
+        `<span class="mv-invite-summary">${esc(inv.summary || "(no title)")}</span></div>` +
+        rows.join("") +
+        (googleHandles
+            ? `<div class="mv-invite-note">Respond with the Yes / No / Maybe buttons in the message below — they go straight to Google Calendar.</div>`
+            : "");
+
+    return card;
+}

package/client/components/message-viewer.js

@@ -10,6 +10,7 @@
  */
 import { getMessage, updateFlags, allowRemoteContent, flagSenderOrDomain, getAttachment, openAttachment, getMessageSource, addContact, listContacts, upsertContact, unsubscribeOneClick, addPreferredContact, onEvent, subscribeStore } from "../lib/api-client.js";
 import { isSenderApproved, noteApprovedLocally, refreshApprovedSenders } from "../lib/approved-senders.js";
+import { buildInviteCard } from "./invite-card.js";
 import { showContextMenu } from "./context-menu.js";
 import { updateMessageFlags as stateUpdateFlags } from "../lib/message-state.js";
 import { setRowSeen } from "./message-list.js";
@@ -788,23 +789,27 @@ function installPreviewControls(iframe) {
             // the iframe selects exactly this document.
             if (e.ctrlKey && !e.altKey && !e.metaKey && (e.key === "a" || e.key === "A"))
                 return;
-            // Forward EVERY keydown to the parent — no duplicated hotkey list.
-            // If the parent's handler calls preventDefault (because it owns the
-            // shortcut), dispatchEvent returns false, and we preventDefault on
-            // the iframe side too so the browser doesn't ALSO act on it
-            // (Ctrl+N otherwise pops a new browser window in some hosts).
-            // Single source of truth = app.ts hotkey handlers. Plain typing in
-            // the email body — letters, etc. — propagates with no parent
-            // handler matching, so dispatchEvent returns true and the iframe
-            // event is left alone.
-            const synth = new KeyboardEvent("keydown", {
-                key: e.key, code: e.code,
-                ctrlKey: e.ctrlKey, shiftKey: e.shiftKey, altKey: e.altKey, metaKey: e.metaKey,
-                bubbles: true, cancelable: true,
-            });
-            const allowDefault = document.dispatchEvent(synth);
-            if (!allowDefault)
-                e.preventDefault();
+            // Everything else is FORWARDED BY THE IFRAME ITSELF — the inline
+            // script wrapHtmlBody installs posts every keydown to the parent
+            // as `previewKey`, and app.ts re-dispatches it on document. This
+            // listener must NOT forward as well.
+            //
+            // It used to, and both routes are live on desktop WebView2 (the
+            // srcdoc document is same-origin, so this contentDocument listener
+            // attaches, and the inline script runs too). One Ctrl+F in the
+            // preview therefore reached app.ts TWICE and opened TWO compose
+            // windows — one of which never finished loading and sat blank and
+            // "(Not Responding)" until it was killed (Bob 2026-08-23,
+            // "Compose: Fwd: FirstCare Slide Deck (Not Responding)"; daemon
+            // log shows openCompose-entry mode=forward twice in the same
+            // millisecond and two popoutCompose windows). Ctrl+D / Ctrl+P
+            // doubled the same way.
+            //
+            // The inline forwarder is the one that survives, because it is the
+            // only one that works on Android WebView, where parent-side
+            // contentDocument listeners never fire. Zoom and Ctrl+A stay here:
+            // they act on THIS document and the inline script deliberately
+            // skips them. (Claude Code 2026-08-23)
         });
         doc.addEventListener("wheel", (e) => {
             if (!e.ctrlKey)
@@ -864,6 +869,10 @@ export function clearViewer() {
         headerEl.hidden = true;
     if (attEl)
         attEl.hidden = true;
+    // The invite card is a SIBLING of the body (it sits after the header), so
+    // clearing bodyEl leaves it behind — a stale meeting hovering over "Select
+    // a message to read" is exactly the viewer-must-clear failure.
+    document.getElementById("mv-invite")?.remove();
     // Divergence watchdog: highlight and viewer are supposed to be one
     // thing. If a second after a clear some row still shows .selected while
     // the pane shows the placeholder, that's the "message selected but it's
@@ -1342,6 +1351,22 @@ export async function showMessage(accountId, uid, folderId, specialUse, isRetry
         fromEl.textContent = formatAddr(msg.from);
         setRecipientLine(toEl, msg.to, msg.cc, msg.deliveredTo);
         headerEl.querySelector(".mv-subject").textContent = msg.subject;
+        // Calendar invite card. Lives BETWEEN the header and the body as its
+        // own element, not inside .mv-body — the body's innerHTML is replaced
+        // wholesale on every render, which would take the card with it.
+        // Removed and rebuilt per message so a non-invite never inherits the
+        // previous one (the "viewer must clear" rule).
+        document.getElementById("mv-invite")?.remove();
+        try {
+            const card = buildInviteCard(msg.invite, String(msg.bodyHtml || ""));
+            if (card) {
+                card.id = "mv-invite";
+                headerEl.insertAdjacentElement("afterend", card);
+            }
+        }
+        catch (e) {
+            console.warn("[viewer] invite card failed:", e?.message || e);
+        }
         document.dispatchEvent(new CustomEvent("mailx-message-shown", { detail: { accountId } }));
         // Right-click on email addresses in header: copy name, copy address,
         // copy both, add to contacts, plus reply actions for the whole message.