@bobfrankston/rmfmail 1.2.312 → 1.2.313

package/client/components/message-viewer.js

@@ -1516,24 +1516,37 @@ export async function showMessage(accountId, uid, folderId, specialUse, isRetry
                     // Offered from the chip's own advice, which is the only
                     // thing an unflagged list post shows; the banner has its
                     // own button.
+                    //
+                    // Offered on every proved post, trusted or not: the write
+                    // is a toggle, and once the list is trusted the chip and
+                    // banner are gone, so this menu is the only place an
+                    // approval can be undone without editing allowlist.jsonc
+                    // by hand (Bob 2026-09-09: "how would I undo an approval").
                     const listSpam = msg.spamScore;
-                    if (listSpam?.listProved && listSpam.listId && !listSpam.listTrusted) {
+                    if (listSpam?.listProved && listSpam.listId) {
                         const listId = listSpam.listId;
+                        const untrust = !!listSpam.listTrusted;
                         items.push({
-                            label: `✓ Trust the ${listId} mailing list`,
+                            label: untrust ? `✗ Stop trusting the ${listId} mailing list` : `✓ Trust the ${listId} mailing list`,
                             action: async () => {
                                 const st = document.getElementById("status-sync");
                                 try {
-                                    // The action only ever ADDS, so anything but
-                                    // `trusted: true` means the write did not land.
+                                    // A toggle: the answer says which way it went,
+                                    // and it must match what was asked for — a
+                                    // mismatch means the write did not land.
                                     const res = await trustSenderOrDomain("list", listId);
-                                    if (!res?.trusted)
+                                    if (!res || !!res.trusted === untrust)
                                         throw new Error("the list did not save");
-                                    listSpam.listTrusted = true;
-                                    document.querySelector(".mv-spamscore")?.remove();
-                                    document.querySelector(".mv-trust")?.remove();
+                                    listSpam.listTrusted = res.trusted;
+                                    if (res.trusted) {
+                                        document.querySelector(".mv-spamscore")?.remove();
+                                        document.querySelector(".mv-spamscore-action")?.remove();
+                                        document.querySelector(".mv-trust")?.remove();
+                                    }
                                     if (st)
-                                        st.textContent = `Trusting the ${listId} mailing list`;
+                                        st.textContent = res.trusted
+                                            ? `Trusting the ${listId} mailing list`
+                                            : `No longer trusting the ${listId} mailing list — reopen the message to see its score again`;
                                 }
                                 catch (e) {
                                     // The reader chose an action and must know whether it took.
@@ -1910,6 +1923,39 @@ export async function showMessage(accountId, uid, folderId, specialUse, isRetry
                     : "");
             chip.textContent = `spam score ${spam.score} of ${spam.threshold}`;
             bodyEl.appendChild(chip);
+            // The action beside the warning it answers (Bob 2026-09-09: "it
+            // would be nice to have an [approve this list] on the red warning
+            // banner"). An unflagged list post has no banner — the chip IS
+            // the warning — so the button sits next to it. Same write as the
+            // From-menu item and the banner button: trustedLists by List-Id.
+            if (spam.listProved && spam.listId && !spam.listTrusted) {
+                const listId = spam.listId;
+                const b = document.createElement("button");
+                b.className = "mv-trust-action mv-spamscore-action";
+                b.textContent = `Trust the ${listId} list`;
+                b.title = `Delivered by the ${listId} mailing list, which your server proved sent it. Trusting the list hides this score on every post the list delivers.`;
+                b.addEventListener("click", async () => {
+                    b.disabled = true;
+                    try {
+                        // Only ever ADDS, so anything but `trusted: true` means
+                        // the write did not land — never hide the chip on a
+                        // failed save.
+                        const res = await trustSenderOrDomain("list", listId);
+                        if (!res?.trusted)
+                            throw new Error("the list did not save");
+                        spam.listTrusted = true;
+                        chip.remove();
+                        b.remove();
+                        document.querySelector(".mv-trust")?.remove();
+                    }
+                    catch (e) {
+                        // The reader pressed a button and must know whether it took.
+                        b.disabled = false;
+                        b.textContent = `Could not save: ${e?.message || e}`;
+                    }
+                });
+                bodyEl.appendChild(b);
+            }
         }
         const trust = (msg.trust || []);
         if (trust.length) {