622a71dcd6
WebCal is calcalist's own (src/webcal.rs), with Calendar::split_by_uid to turn one feed document into one file per UID. Shared crate::http and crate::secret came out of google/ so every leg uses them. CalDAV follows, behind a per-endpoint 'native' flag so it can run beside pimsync one collection at a time: src/caldav/client.rs speaks PROPFIND, sync-collection, calendar-multiget and conditional PUT/DELETE, and src/caldav/mod.rs is the pull/push pair. Radicale answers an initial sync-collection with no members, so a cursor is only stored alongside a complete read. doctor reports what a server advertises. skip_past (src/horizon.rs) takes a date, not a flag: a rolling 'before now' would retire events from the aggregate as they aged, deleting yesterday's events on every cycle. Pinned to a date, what is mirrored stays mirrored. On the real configuration it leaves 2600 of 3282 events behind. The filter sits above the prior-links lookup in mirror_source, which is what makes it safe: from there DeleteSource is unreachable, so excluding an event can never be read as the user having deleted its mirror. pimsync: CWD pinned so vstorage's relative unlink cannot reach the user's files; the dry-run workspace is removed by Drop rather than by a line every '?' stepped over. Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>
19 lines
876 B
Desktop File
19 lines
876 B
Desktop File
[Unit]
|
|
Description=Synchronise calendars with calcalist
|
|
|
|
[Service]
|
|
Type=oneshot
|
|
# The path the Nix install puts it at, which is also the one that guarantees a
|
|
# matching pimsync. A `cargo install` lands in %h/.cargo/bin instead; an
|
|
# absolute path is used either way because a user manager's PATH is not the
|
|
# login shell's and cannot be relied on to have found either.
|
|
ExecStart=%h/.nix-profile/bin/calcalist sync
|
|
NoNewPrivileges=true
|
|
|
|
# Deliberately no ProtectSystem, PrivateTmp or IPC sandboxing. Credentials come
|
|
# from commands like `secret-tool`, which need the session keyring over D-Bus,
|
|
# and those options break them in ways that surface as unexplained auth
|
|
# failures rather than as anything pointing at the sandbox.
|
|
|
|
# A cycle that could not reach an endpoint exits non-zero on purpose, so a
|
|
# lapsed token shows up as a failed unit rather than passing unnoticed.
|