@bobfrankston/rmfmail 1.2.315 → 1.2.317

package/.commitmsg

@@ -1,17 +1,37 @@
-Self-spoof: the From domain's own SPF or DKIM pass is proof, DMARC verdict or not
+Calendar sidebar: New event saves here, the list follows the date, Refresh pulls
 
-Follow-up to v1.2.314 (which vetoed the self-spoof finding on a DMARC pass).
-The AMW list (berglist.com) publishes no DMARC policy, so its posts carry
-no dmarc= verdict at all — but iecc.com recorded spf=pass for
-amw-bounces@berglist.com and dkim=pass d=berglist.com, which is the very
-evidence DMARC would have aligned on. The dkim=fail beside them was the
-gmail.com author signature the list broke, and the post was red as a spoof
-of the list's own address (Delivered-To). New alignedPass() in trust.ts:
-a verified signature for the From domain, or an SPF pass for an envelope at
-the From domain, computed as DMARC's relaxed alignment; a forger's pass for
-their own domain clears nothing (tested).
+Four from Bob 2026-09-10, all in the calendar sidebar.
 
-Store, last 120 days, messages whose From is their own Delivered-To: 977;
-self-spoof findings 35 before v1.2.314, 20 after it, 15 now. The 15 that
-remain are the sextortion, "failed to deliver", NDA-review and
-document-share phishes the check exists for. mailx-types 0.1.91.
+"Add an event puts me into Google Calendar. It should just save the event
+because I can easily edit it later." The New event dialog now saves each
+extracted event as a local row through createCalendarEvent — the IPC and
+the store-sync push to Google existed since the two-way cache and nothing
+called them — and the sidebar shows it at once; Google gets it from the
+queue. The status line names what was saved. "Create as text" (AI parse
+failed) becomes an all-day event today titled with the text. Wall-clock
+times in a named zone are converted properly (wallClockToMs), so a "9am
+Kuala Lumpur" invite stays 9am there. buildGoogleEventUrl, the authuser
+work from v1.2.316 and the post-create refresh timers are gone with the
+page they served.
+
+"It is still showing me yesterday's calendar." The view date was fixed
+when the module loaded and never moved. It now follows the calendar date
+unless the reader has stepped to another day with ‹ › (Today clears
+that), and re-renders at local midnight.
+
+"Still showing…" had a second cause: the Refresh button said "from
+Google" and only re-read local rows — the daemon's 5-minute throttle made
+it a no-op most of the time. It now calls refreshCalendarNow (v1.2.316)
+and reports when nothing was pulled and why. The window's focus does the
+same, so an edit made in Google Calendar shows on coming back to rmfmail.
+
+"How do I edit the calendar list? Perhaps more tooltip help would be
+useful?" Every control in the sidebar header now says what it does and
+what it does not: the calendar rows say that unticking hides a calendar
+here while the list itself is the calendars selected in Google Calendar;
+the ‹ › buttons say the list then stays on that day; New event says it
+saves and how to edit. Event rows: click opens the event in Google
+Calendar to edit; a just-saved row says it is syncing and cannot be
+opened there yet; right-click offers Edit "‹title›" in Google Calendar
+and Delete "‹title›" (local-first, queued to Google), with confirmAt at
+the pointer.

package/.llm/trusted-lists.md

@@ -51,3 +51,14 @@ tests/trust.test.ts, .commitmsg, TODO.md C165, root version 1.2.311. Then rebuil
 - [x] tests pass (tests/trust.test.ts 40/40)
 - [x] docs/TODO/.commitmsg/versions (v1.2.312)
 - [x] rebuild.cmd — v1.2.312 (feature) + v1.2.313 (chip button + undo toggle) published, APKs built. Restart the app to pick up.
+
+## 2026-09-10 — New event dialog (three items, publishing as one version)
+- Spelling: main-window contextmenu handler (client/app.ts) now leaves the native menu on TEXTAREA / text INPUT — Chromium spelling suggestions live only there.
+- Google account: buildGoogleEventUrl adds authuser=<primary calendar email> (getPrimaryAccount("calendar")).
+- Immediate update: refreshCalendarNow IPC (6 edits) + armPostCreateRefresh() in calendar-sidebar.ts (focus + 45s/2m/5m). Service floor 20s.
+- Status: compiled, bundles built, rebuild.cmd next, then restart.
+- v1.2.316 published (spelling native menu, authuser, refreshCalendarNow). Superseded same morning:
+  New event now SAVES locally via createCalendarEvent (existing IPC + store-sync push, never called before);
+  buildGoogleEventUrl/authuser/post-create timers removed. viewPinned + followToday + midnight rollover.
+  Refresh button + window focus call refreshCalendarNow. Tooltips on all sidebar controls; event rows:
+  click = edit in Google, right-click = Delete "<title>" (deleteCalendarEvent). Publishing as v1.2.317.

package/client/android-bootstrap.bundle.js

@@ -7819,6 +7819,9 @@ var WebMailxService = class _WebMailxService {
   async getCalendarEvents(_fromMs, _toMs) {
     return [];
   }
+  async refreshCalendarNow() {
+    return { ok: false, reason: "no calendar on Android" };
+  }
   async getCalendars() {
     return [];
   }