@bobfrankston/rmfmail 1.2.322 → 1.2.323

package/.commitmsg

@@ -1,27 +1,17 @@
-Trust a sender via the relay that signs for it ("groundnews.email via amazonses.com")
+New event: the calendar picker is always there, and lists every calendar you can write to
 
-Bob 2026-09-10, Ground News: "another valid site. How do I approve it?"
-The banner read "This claims to be a sender you trust, but nothing proves
-it is" — groundnews.email is on his list, but Ground News sends through
-Amazon SES, the message is signed only as amazonses.com, and the domain
-publishes no DMARC record, so the sender can never be proved and the list
-was ignored, correctly, with no way forward. Trusting amazonses.com as an
-intermediary was not offered (no Sender: header) and would be too broad.
+Bob 2026-09-11: "the add appointment box should give me a choice of
+calendars." v1.2.318 hid the picker whenever Google reported fewer than
+two writable calendars — and his four are one owned calendar plus two
+holiday feeds and a shared one, so the row never appeared and read as a
+missing feature.
 
-New allowlist.jsonc `trustedSendersVia`: "‹sender domain› via ‹relay
-domain›" pairs. An entry counts only when the From domain matches AND the
-named relay's DKIM signature verified at the receiving server — a relay
-like SES lets a customer send only From identities it has verified, so
-the pair is evidence a forger's own relay account cannot supply, and a
-message without the relay's signature matches nothing. Never silences
-forgery evidence. The trusted-but-unproved caution now names the relay
-that signed and the action; the banner offers "Trust ‹sender› via
-‹relay›". trustSenderOrDomain type "via", TRUST_LIST_KEYS carries the
-key for desktop and Android; getAllowlist returns it.
-
-Tests: Ground News headers; pair silences only with that relay's
-signature (not unsigned, not another relay, not another From through the
-same relay); a phishing listing stays red. Verified on the live message:
-caution with the offer before, silent after. mailx-types 0.1.97,
-mailx-settings 0.1.89, mailx-store 0.1.124, mailx-service 0.1.38,
-mailx-store-web 0.1.117.
+The row is now always shown. With one writable calendar the dropdown is
+disabled and its tooltip says that this is the only calendar Google lets
+you add events to, that the others are read-only, and where to change
+that (Google Calendar, then Refresh). getCalendars returns EVERY
+calendar with `selected` as a flag instead of a filter: the sidebar
+still lists the selected ones, but a calendar the reader owns and has
+unticked in Google is still one a new event can go to. The daemon logs
+each calendar's role and selection at enumeration so "why only one" can
+be answered from the log. mailx-types 0.1.98, mailx-service 0.1.39.

package/.llm/trusted-lists.md

@@ -68,3 +68,4 @@ tests/trust.test.ts, .commitmsg, TODO.md C165, root version 1.2.311. Then rebuil
 - v1.2.321: signature block uses a 3cm <hr> instead of '-- ' (compose.ts sigBlock).
 - Bob confirmed 2026-09-10: 'quill worked' (v1.2.320 placeCaretAfterLink).
 - v1.2.322: trustedSendersVia ('sender via relay' pairs) — Ground News via amazonses.com. Banner offers 'Trust ‹sender› via ‹relay›' on the trusted-but-unproved caution; counts only when the relay DKIM-signed. 45/45 trust tests.
+- v1.2.323: New event picker always shown (disabled + explanatory tooltip when only one writable calendar); getCalendars returns all calendars with selected flag; daemon logs roles.

package/client/app.bundle.js

@@ -6791,7 +6791,7 @@ async function renderCalendarList() {
     if (list.length === 0) {
       host.innerHTML = "";
     } else {
-      const sorted = [...list].sort((a, b) => (a.primary ? 0 : 1) - (b.primary ? 0 : 1) || a.name.localeCompare(b.name));
+      const sorted = list.filter((c) => c.selected !== false).sort((a, b) => (a.primary ? 0 : 1) - (b.primary ? 0 : 1) || a.name.localeCompare(b.name));
       host.innerHTML = sorted.map((c) => `<label class="cal-side-cal-row" title="${escapeHtml6(c.name)} \u2014 untick to hide its events in this list. Which calendars are listed is set in Google Calendar: the ones selected there appear; use Refresh after changing it.">
                 <input type="checkbox" class="cal-side-cal-check" data-cal-id="${escapeHtml6(c.id)}" ${hiddenCalendars.has(c.id) ? "" : "checked"}>
                 ${calIconHtml(c)}
@@ -7245,7 +7245,11 @@ function openNewEventDialog() {
         opt.selected = true;
       calSelect.append(opt);
     }
-    calRow.hidden = writable.length < 2;
+    calRow.hidden = false;
+    calSelect.disabled = writable.length < 2;
+    if (writable.length < 2) {
+      calRow.title = writable.length ? `${writable[0].name} is the only calendar Google says you can add events to. The others are read-only (holidays, or shared without edit rights). To add or share a calendar, do that in Google Calendar and press Refresh.` : "Google reported no calendar you can add events to.";
+    }
   };
   if (calendarList.length)
     fillCalendars(calendarList);