feat: Add AI calendar invite editor

[mickn]

Summary

This adds an AI-powered calendar invite editor to the Calendar sidebar. From a scheduling email, Exo can extract the likely invite automatically, fill the editable fields, and let the user review everything before creating the Google Calendar event.

The extraction pulls out the title, guests, date, time, meeting type, location, notes, and target calendar. If calendar write permission is missing, the sidebar shows the re-authentication state directly in the invite flow.

Screenshots

All screenshots use demo data.

Changes

• Adds calendar invite extraction from the current email thread.
• Adds a reviewable invite editor in the Calendar sidebar.
• Supports editable guests, date/time, conference details, location, notes, and calendar selection.
• Handles missing Google Calendar write permission with an inline re-authentication prompt.
• Keeps demo mode non-live for the invite flow and PR screenshots.
• Keeps pre-PR agentic verification traces local instead of publishing transcripts to GitHub comments.

⚠️ Behavior change: Google Calendar write scope

This PR adds https://www.googleapis.com/auth/calendar.events to the OAuth scopes requested at sign-in (needed to create events / Google Meet conferences). Because the scope is new, existing accounts must re-authenticate before they can create invites — their current tokens only carry the read scope. The invite flow detects this and shows an inline "Re-authenticate" prompt rather than failing silently, but it is a one-time re-consent for every already-signed-in user. Read-only calendar viewing is unaffected in the interim.

Revision (timezone correctness + modal UX + Meet clarity)

A follow-up commit on this branch addresses review feedback and a timezone bug:

• Timezone correctness. Draft start/end are now floating wall-clock strings interpreted in the draft's own timezone (the representation Google's { dateTime, timeZone } consumes), instead of UTC instants. This removes a bug where editing a time converted it in the browser's zone but stamped it with the calendar's zone, shifting the event when the two differed. New src/shared/calendar-timezone.ts converts at the boundaries: explicit-offset times from the email (e.g. "2pm London") are normalized into the calendar zone; bare times fall back to the user's physical zone, then are expressed in the calendar zone. The extraction prompt now emits an offset only when the email states a zone, leaving conversions to code.
• Invite editor is now modal. While the editor is open, the sidebar tab bar and the calendar date navigation are hidden and the b tab-switch shortcut is suppressed, with an explicit Close (×) button in the header. Previously those controls stayed visible but were silently reverted, so they read as broken when clicked.
• Google Meet clarity. Selecting Google Meet now shows "A Google Meet link will be created and added to the invite" instead of an empty disabled field, and the Meet requestId is derived deterministically from the draft so a retried create reuses the same conference instead of minting a duplicate.

Validation

• npm run build
• npm run typecheck
• npm run lint
• npm exec -- playwright test --project=unit tests/unit/runtime-flags.spec.ts tests/unit/calendar-invite.spec.ts
• npm exec -- playwright test --project=e2e tests/e2e/calendar-invite.spec.ts
• npm run pre-pr -- --quick --no-inject --no-comment

Pre-PR verdict: PASS

• mode: full
• sha: 20bda0f
• generated: 2026-06-02T22:29:25.836Z

Phase	Status	Duration
eval:analyzer	✅ exit 0	14.0s
eval:features	✅ exit 0	28.7s
agentic-verify	✅ exit 0	70.8s
real-gmail:cached	✅ exit 0	2.3s

[mickn]

✅ Pre-PR verification — PASS

• mode: full
• sha: 20bda0f
• generated: 2026-06-02T22:29:27.438Z

Phase	Status	Duration
eval:analyzer	✅ exit 0	14.0s
eval:features	✅ exit 0	28.7s
agentic-verify	✅ exit 0	70.8s
real-gmail:cached	✅ exit 0	2.3s

Agentic verification — local report

Agentic verification wrote local artifacts. Their contents are not posted to GitHub because the verifier can inspect real mailbox/calendar data.

• Markdown: scripts/.agentic-runs/2026-06-02T22-28-12-955Z-verify-diff.md
• JSON: scripts/.agentic-runs/2026-06-02T22-28-12-955Z-verify-diff.json
• Trace: scripts/.agentic-runs/2026-06-02T22-28-12-955Z-verify-diff.log

_{This comment is upserted by npm run pre-pr. The CI gate reads the marker block in the PR description, not this comment.}

[devin-ai-integration]

Devin Review found 1 potential issue.

View 10 additional findings in Devin Review.

[greptile-apps]

Greptile Summary

This PR adds an AI-powered calendar invite editor to the sidebar: pressing i on a scheduling email triggers extraction of event details (title, guests, date/time, conference, location, notes, calendar) via the Anthropic API, opens a reviewable form inside the Calendar panel, and creates a Google Calendar event on confirmation. A new write OAuth scope (calendar.events) is added, with inline re-authentication when existing tokens lack it.

• New invite editor flow: global keyboard shortcut i dispatches a nonce-stamped calendarInviteRequest to the store; CalendarPanel detects it and calls calendar:extract-invite IPC, then calendar:create-invite after review. The editor is modal — the tab bar and b shortcut are suppressed while the editor is open.
• Timezone correctness: draft start/end are now floating wall-clock strings in the calendar timezone; timezone conversion happens at extraction boundaries using normalizeToCalendarWallClock and wallClockToInstant with a two-pass DST-aware fixed-point solver.
• Demo mode: event extraction is bypassed in favor of a deterministic demo draft; created events are stored in-memory in demoCreatedEvents and merged with sample events when the IPC is polled.

Confidence Score: 5/5

Safe to merge. The invite creation flow, timezone handling, and modal locking are all implemented correctly; every regression flagged in the previous review round has been addressed with dedicated tests.

The feature is well-scoped: LLM extraction, timezone conversion, multi-day event editing, re-authentication, and keyboard modal locking are each handled carefully and covered by unit and e2e tests. The only new finding is a demo-mode sort inconsistency caused by mixing UTC ISO strings with floating wall-clock strings, which has no effect on real event creation or real users.

src/main/ipc/calendar.ipc.ts — draftToDemoEvent stores floating wall-clock strings while sample events use UTC ISO strings, causing an incorrect lexicographic sort order in non-UTC environments (demo only).

Important Files Changed

Filename	Overview
src/extensions/mail-ext-calendar/src/renderer/CalendarPanel.tsx	Core of the feature: adds invite state machine (extracting → ready → creating), InviteEditor component, proposed-event preview block, and modal locking of date nav/tab bar. The previous-thread issues (double-trigger, multi-day end date collapse, stale invite lock, calendar list wipe) are all addressed.
src/main/ipc/calendar.ipc.ts	Adds calendar:extract-invite, calendar:create-invite, and calendar:get-invite-options IPC handlers. Demo mode has a sort inconsistency (sample events emit UTC ISO strings; demoCreatedEvents stores floating wall-clock strings), producing potentially incorrect overlap-column order in non-UTC environments. Real-event path is correct.
src/main/services/calendar-invite.ts	New service: LLM extraction with retry, timeout handling, structured-output JSON schema, and demo fallback draft. Prompt-injection guard via UNTRUSTED_DATA_INSTRUCTION, per-provider timeouts, and a deterministic Meet requestId via FNV-1a hash.
src/shared/calendar-timezone.ts	New module: floating wall-clock ↔ UTC instant conversions with DST-aware two-pass fixed-point. Handles midnight normalization, spring-forward gaps, and fall-back ambiguity with a well-commented residual caveat. Well tested.
src/shared/calendar-invite-editor.ts	Pure wall-clock arithmetic helpers: updateInviteStartDate preserves multi-day duration, updateInviteEndTime preserves end date, updateInviteStartTime shifts end to maintain duration. Addresses all previously flagged multi-day edge cases.
src/shared/calendar-invite.ts	Parsing, normalization, validation, and Google Calendar params building. Deterministic conferenceData requestId prevents duplicate Meet links on retry.
src/renderer/hooks/useKeyboardShortcuts.ts	Adds 'invite' keyboard mode that suppresses single-key thread shortcuts while the editor is open; Escape cancels the invite via the global handler rather than a second listener in CalendarPanel.
src/renderer/components/EmailPreviewSidebar.tsx	Hides tab bar while invite is pending, forces email tab on invite start (edge-triggered), and clears stale invite requests via isStaleInviteRequest when the user navigates to a different thread before CalendarPanel mounts.
src/extensions/mail-ext-calendar/src/google-calendar-client.ts	Adds insertCalendarEvent, getCalendarList now returns writable flag based on token scopes and access role, and hasCalendarWriteScope helper reuses the already-loaded OAuth client.
src/shared/calendar-date.ts	New utility: isoDateMatchesCalendarDate correctly handles timezone-aware comparison, replacing the old startsWith approach that broke for UTC-behind users.
tests/unit/calendar-invite-review-regressions.spec.ts	New regression test suite covering the six issues flagged in the previous review: UTC date matching, multi-day end-time preservation, multi-day duration preservation, stale request detection, midnight rollover, and duration-preserving start-time shift.

Sequence Diagram

%%{init: {'theme': 'neutral'}}%%
sequenceDiagram
    participant User
    participant KBShortcuts as useKeyboardShortcuts
    participant Store as AppStore
    participant Sidebar as EmailPreviewSidebar
    participant Panel as CalendarPanel
    participant IPC as calendar.ipc (main)
    participant GCal as Google Calendar API

    User->>KBShortcuts: press "i"
    KBShortcuts->>Store: startCalendarInvite(emailId, threadId)
    Store-->>Sidebar: calendarInviteRequest set → hide tab bar, force email tab
    Store-->>Panel: calendarInviteRequest triggers effect → startInvite(emailId)
    Panel->>IPC: calendar:extract-invite
    IPC->>GCal: getCalendarList (for options + writable flag)
    IPC-->>Panel: draft + calendars + requiresReauth

    alt requiresReauth
        Panel-->>User: Show re-auth prompt
        User->>Panel: click Re-authenticate
        Panel->>IPC: calendar:get-invite-options (after reauth)
        IPC-->>Panel: updated calendars
    end

    User->>Panel: review and edit draft fields
    User->>Panel: click Create and send
    Panel->>IPC: calendar:create-invite
    IPC->>GCal: events.insert (with conferenceDataVersion if Meet)
    GCal-->>IPC: created event
    IPC->>IPC: saveCalendarEvents + broadcastCalendarUpdated
    IPC-->>Panel: success
    Panel->>Store: clearCalendarInviteRequest()
    Store-->>Sidebar: unlock tab bar

Loading

%%{init: {'theme': 'base', 'themeVariables': {"darkMode": true, "background": "#0d1117", "primaryColor": "#21262d", "primaryTextColor": "#e6edf3", "primaryBorderColor": "#8b949e", "lineColor": "#8b949e", "textColor": "#e6edf3", "edgeLabelBackground": "#161b22", "actorBkg": "#21262d", "actorBorder": "#8b949e", "actorTextColor": "#e6edf3", "actorLineColor": "#8b949e", "signalColor": "#8b949e", "signalTextColor": "#e6edf3", "noteBkgColor": "#373320", "noteBorderColor": "#d4a72c", "noteTextColor": "#f0e6c0", "labelBoxBkgColor": "#21262d", "labelBoxBorderColor": "#8b949e", "labelTextColor": "#e6edf3", "loopTextColor": "#e6edf3", "activationBkgColor": "#30363d", "activationBorderColor": "#8b949e"}}}%%
sequenceDiagram
    participant User
    participant KBShortcuts as useKeyboardShortcuts
    participant Store as AppStore
    participant Sidebar as EmailPreviewSidebar
    participant Panel as CalendarPanel
    participant IPC as calendar.ipc (main)
    participant GCal as Google Calendar API

    User->>KBShortcuts: press "i"
    KBShortcuts->>Store: startCalendarInvite(emailId, threadId)
    Store-->>Sidebar: calendarInviteRequest set → hide tab bar, force email tab
    Store-->>Panel: calendarInviteRequest triggers effect → startInvite(emailId)
    Panel->>IPC: calendar:extract-invite
    IPC->>GCal: getCalendarList (for options + writable flag)
    IPC-->>Panel: draft + calendars + requiresReauth

    alt requiresReauth
        Panel-->>User: Show re-auth prompt
        User->>Panel: click Re-authenticate
        Panel->>IPC: calendar:get-invite-options (after reauth)
        IPC-->>Panel: updated calendars
    end

    User->>Panel: review and edit draft fields
    User->>Panel: click Create and send
    Panel->>IPC: calendar:create-invite
    IPC->>GCal: events.insert (with conferenceDataVersion if Meet)
    GCal-->>IPC: created event
    IPC->>IPC: saveCalendarEvents + broadcastCalendarUpdated
    IPC-->>Panel: success
    Panel->>Store: clearCalendarInviteRequest()
    Store-->>Sidebar: unlock tab bar

Loading

_{Reviews (13): Last reviewed commit: "Merge branch 'main' into codex/calendar-..." | Re-trigger Greptile}

[ankitvgupta]

very cool! yeah you can use /reviewloop to satisfy the bots but iv been meaning to do this for a while.

[ankitvgupta]

i like this feature but there are a bunch of changes in this PR that are unrelated to the feature so please move those to their own PRs.

[greptile-apps]

Want your agent to iterate on Greptile's feedback? Try greploops.

[mickn]

Code-review follow-up: now vs. deferred

A detailed review proposed shifting the invite extractor toward a "LLM as semantic judge over structured facts; deterministic code resolves/validates/blocks" architecture. The core thesis is right, and I split the response:

Landed in this PR (commit 4dd6b69) — in-scope

• Editor end-time blanking bug: changing the start date no longer wipes the end when the existing end has no parseable time (falls back to +30 min).
• Midnight-crossing end time: setting end ≤ start (e.g. 23:30 → 00:30) now rolls the end to the next day.
• Read-only default calendar: chooseDefaultCalendar no longer falls back to a non-writable calendars[0]; returns null so validation/re-auth handles it.
• Untrusted calendar names: the system prompt now marks calendar records as data, not instructions (shared/subscribed names are attacker-influenceable). The chosen calendarId was already re-validated server-side before any Google API call.
• temperature: 0 for deterministic extraction.

All covered by new unit tests (33 calendar unit tests pass).

Deferred to a follow-up (deliberately not in this PR, since it’s a new feature, not a fix)

A larger redesign that would change the schema, cost profile, and UX, and needs a golden eval set to validate:

• Three-stage pipeline: deterministic context builder → LLM semantic extraction → deterministic resolver/validator (+ optional verifier pass).
• intent / readiness fields and candidateSlots to represent unresolved/multi-slot/reschedule/cancel threads instead of forcing a single start/end.
• Candidate-ID selection for emails/URLs/phones so the model selects rather than reproducing exact strings (prevents subtly corrupted Zoom links / addresses).
• Move offset/timezone resolution fully into code (model emits timezoneText+IANA guess, not a computed +01:00); evaluate Temporal/Luxon.
• Validation-driven retry/repair (pass structured validation errors back), all-day/recurring support, smarter middle-out truncation that preserves candidate facts from all messages.

Net: the LLM should own semantic interpretation; exactness (timezones, exact strings, calendar IDs, validation) belongs in deterministic code. This PR moves further in that direction; the full pipeline is the next step.

[mickn]

fyi: all comments are resolved, and non-relevant changes moved out of this pr