@bobfrankston/rmfmail 1.2.323 → 1.2.325

package/client/app.ts

@@ -3532,8 +3532,20 @@ onWsEvent((event) => {
                     if (statusSync.textContent === `${event.filename} updated`) statusSync.textContent = "";
                 }, 8000);
             }
+            // 2026-09-13 17:20 EDT — Claude Code (Fable 5.1), at Bob's direction.
+            // The daemon now reconciles accounts.jsonc itself (new accounts are
+            // added live) and says whether a restart is still needed. The
+            // Restart banner was firing for the daemon's own repair of a
+            // crash-zeroed cache from the cloud copy, seconds after launch.
             if (event.filename && /accounts\.jsonc/i.test(String(event.filename))) {
-                showRestartForConfigBanner();
+                if (event.restartNeeded) {
+                    showRestartForConfigBanner();
+                } else if (event.detail && statusSync) {
+                    statusSync.textContent = String(event.detail);
+                    setTimeout(() => {
+                        if (statusSync.textContent === String(event.detail)) statusSync.textContent = "";
+                    }, 8000);
+                }
             }
             break;
         case "cloudError":

package/client/components/message-viewer.js

@@ -1991,10 +1991,20 @@ export async function showMessage(accountId, uid, folderId, specialUse, isRetry
             // list should be able to silence "this message is not what it says
             // it is", and there is nothing to trust when the identity is the
             // thing in doubt.
-            const spamOnly = trust.length === 1 && trust[0].id === "server-spam-verdict" && worst !== "danger";
+            // Offered whenever trusting the sender would clear EVERYTHING on
+            // the banner: the server's verdict, and since 2026-09-11 the
+            // redirector warning too (a proved sender vouches for its own
+            // links). Any other finding present, or a danger, and there is no
+            // button — no list silences those. The Toast receipt carried
+            // both a spam verdict and a redirector warning, so the old
+            // "exactly one finding" rule hid the button on the one message
+            // that needed it (Bob: "there should be a trust button").
+            const trustClearable = worst !== "danger"
+                && trust.every(f => f.id === "server-spam-verdict" || f.id === "redirector-link");
+            const senderProved = !!spam?.proved || trust.some(f => !!f.sender);
             const fromAddr = (msg.from?.address || "").toLowerCase();
             const fromDomain = fromAddr.split("@")[1] || "";
-            if (spamOnly && spam?.proved && fromAddr) {
+            if (trustClearable && senderProved && fromAddr) {
                 const actions = document.createElement("div");
                 actions.className = "mv-trust-actions";
                 // Name the sender in the label — a button that says "trust" with