Write access over CalDAV by Jaggob · Pull Request #7655 · nextcloud/deck

Jaggob · 2026-02-18T13:36:12Z

Resolves: Write access over CalDAV #2399
Target version: main

Summary

This PR adds CalDAV write support for Deck, enabling CalDAV clients to create, update, complete/uncomplete, and delete Deck cards.

It also introduces per-user CalDAV list mapping modes in Deck settings, so each user can choose how Deck lists are represented in CalDAV clients:

Default (existing behavior): list hierarchy via VTODO parent/child relationships (RELATED-TO)
One VCALENDAR per list
Single board calendar with list name in CATEGORIES
Single board calendar with list position mapped to PRIORITY

Additional changes include DAV hardening and compatibility improvements (notably for Thunderbird and Apple clients), plus backend cleanup/performance improvements in the CalDAV handling path.

Done in this PR

Added CalDAV write support for Deck cards (create/update/delete/complete)
Added per-user CalDAV list mapping modes in Deck settings
Implemented category sync (CATEGORIES) including Thunderbird interoperability
Added DAV hardening and compatibility fixes (including stale href handling)

Future TODO

Improve move semantics further for clients that still use create+delete behavior instead of true move semantics. At the current implementation moving cards with e. g. Thunderbird leads to Nextcloud saying cards have been deleted and created instead of moved (but aside from activity logs moving works fine)
Add CalDAV mapping for assignees
Add CalDAV mapping for file attachments
Improve Apple tag interoperability where Deck tags are currently not recognized as native Apple tags

Checklist

Code is properly formatted
Sign-off message is added to all commits
Tests (unit, integration, api and/or acceptance) are included
Documentation (manuals or wiki) has been updated or is not required

chatgpt-codex-connector

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 36747a6fd3

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

Open a pull request for review
Mark a draft as ready
Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

chatgpt-codex-connector · 2026-02-18T13:44:29Z

lib/DAV/DeckCalendarBackend.php

+					$currentBoardId = $this->getBoardIdForCard($currentCard);
+					if ($currentBoardId !== $expectedBoardId) {
+						// Ignore trailing delete from source calendar after a cross-board move.


Skip delete when card already moved within same board

In per-list-calendar mode, clients often move tasks as PUT to the destination calendar followed by DELETE on the source href. This guard only suppresses the trailing delete when the board changes, so a move between stacks in the same board falls through to cardService->delete() and removes the task that was just moved. This is a data-loss path for any client that preserves Deck UIDs during cross-calendar moves.

Useful? React with 👍 / 👎.

Fixed in 584dcf5.

deleteCalendarObject() now also guards against trailing source deletes when the card was moved to a different stack within the same board (not only cross-board moves).
So create+delete move flows in per-list-calendar mode no longer delete the just-moved task.

still needs a better move handling separately to model MOVE semantics more explicitly, since activity can still show create+delete instead of a single move event in some client flows.

chatgpt-codex-connector · 2026-02-18T13:44:29Z

lib/DAV/Calendar.php

+		$fallbackItem = $this->backend->findCalendarObjectByName(
+			$name,
+			$this->board->getId(),
+			$this->stack?->getId()
+		);


Avoid resolving deleted cards in createFile fallback lookup

createFile() uses getChildNode(..., false) before calling createCalendarObject, and this fallback lookup can return soft-deleted cards. That routes a PUT for card-<id>.ics into the update path instead of the create/restore path; updateCardFromCalendar() then calls cardService->find() (non-deleted) and fails. In practice, recreating/restoring a deleted card via CalDAV with the same href can return an error instead of restoring the task.

Useful? React with 👍 / 👎.

Fixed in 584dcf5.

This is a rather unlikely edge case for most clients, but: createFile() now resolves existing children with deleted fallback disabled, so soft-deleted cards are no longer routed into the regular update path by getChildNode(...).
This restores correct create/restore behavior for PUT requests on the same card-<id>.ics href.

Implement first working write path for Deck CalDAV objects. - allow DAV write privilege on Deck calendars - handle PUT on existing card/stack ICS objects and map VTODO fields to Deck services - add NC32 compatibility fixes in BoardMapper for empty orX() usage - add unit tests for calendar update mapping Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Follow-up fixes after real-world macOS Reminders tests. - convert COMPLETED timestamps to DateTime expected by Deck entities - provide calendar object owner/group to avoid DELETE scheduling crashes - add backend tests for delete path and COMPLETED-without-STATUS mapping Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

…bility Stabilize bidirectional task sync for Apple Reminders and Thunderbird. - implement createFile support with stack resolution and alias normalization - support delete and robust completed mapping (STATUS/COMPLETED/PERCENT-COMPLETE) - add UID/resource-name upsert logic to avoid duplicates on move-back - handle board-to-board moves by updating existing deck-card IDs - export richer VTODO metadata (DTSTAMP/CREATED/LAST-MODIFIED/PERCENT-COMPLETE) - add extensive unit tests for update/create/delete and fallback paths Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

…Labels" This reverts commit 3d0af5c. Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

- fix Deck settings CalDAV mode selector rendering - make ETag/last-modified depend on selected list mapping mode - map list priority as left=9, right=1 for Thunderbird/Apple Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

…ateFile Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Jaggob requested review from elzody, grnd-alt and luka-nextcloud as code owners February 18, 2026 13:36

Jaggob force-pushed the feature/cal-dav-write branch from 36747a6 to 31b37dd Compare February 18, 2026 13:42

chatgpt-codex-connector bot reviewed Feb 18, 2026

View reviewed changes

Jacob Bühler and others added 25 commits February 18, 2026 15:42

feat(caldav): map VTODO CATEGORIES to Deck labels

4a60d0c

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

fix(caldav): sync CATEGORIES with Deck labels for Thunderbird

8a36aa7

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

fix(deck): accept null offset in CardMapper findAll for stacks API

6b3279e

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

feat(caldav): add Apple Reminders tag mapping via X-APPLE-TAGS

52501d4

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

feat(caldav): add Apple tag fallback in DESCRIPTION via Deck-Labels

eea47cb

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Revert "feat(caldav): add Apple tag fallback in DESCRIPTION via Deck-…

163c92d

…Labels" This reverts commit 3d0af5c. Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

feat(caldav): add per-user list mapping modes for CalDAV

1b3a83b

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Refactor CalDAV update handling and remove experimental move reattach

46fdd6a

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Pass board context on delete and expose stable deck card id

6fac725

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Trigger CI

5574e74

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Stabilize CalDAV backend after review and CI feedback

84bfa95

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Harden CalDAV ACL and deleted-card lookup

5b80756

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Touch source board on cross-board card moves

b6a24e0

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Restore permissive CalDAV ACL for client move compatibility

f0f5bf5

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Fix CalDAV object name normalization for Thunderbird PUT/MULTIGET

ec53a1c

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Avoid PROPFIND failure on deck calendar children listing

73420ee

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Accept both card and deck-card names in CalDAV child lookup

7ed1309

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Fix CalDAV 412 on Thunderbird cross-board moves

e437983

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Harden CalDAV backend ACL and type handling

12a8211

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Decorate list VTODOs with category and priority

151eb81

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Harden CalDAV fallback handling and lightweight card lookups

6281cdd

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Jaggob added 11 commits February 18, 2026 15:42

perf(dav): reduce redundant lookups and serialization work

452fc61

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

fix(dav): avoid Thunderbird 404 on stale deck card hrefs

273d9d0

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

fix(dav): restrict placeholder resolution for write paths

482d109

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

fix(psalm): suppress unresolved Sabre symbols in DAV backend

faa776b

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

fix(frontend): guard optional OC.Files client bootstrap

8844852

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

test(dav): cover app-generated calendar URI normalization

12dec14

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

test(dav): cover in-progress status and Apple tags label sync

d5700ca

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

style(test): fix import ordering in dav backend tests

9faaef4

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

ci: use ubuntu-latest for fork pull-request workflows

875c711

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

chore(ci): drop workflow runner changes for upstream PR

c9333b7

Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

fix(dav): prevent trailing deletes on stack moves and restore via cre…

8f1393f

…ateFile Signed-off-by: Jaggob <37583151+Jaggob@users.noreply.github.com>

Jaggob force-pushed the feature/cal-dav-write branch from 584dcf5 to 8f1393f Compare February 18, 2026 14:43

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Write access over CalDAV#7655

Write access over CalDAV#7655
Jaggob wants to merge 36 commits intonextcloud:mainfrom
Jaggob:feature/cal-dav-write

Jaggob commented Feb 18, 2026

Uh oh!

chatgpt-codex-connector bot left a comment

Uh oh!

chatgpt-codex-connector bot Feb 18, 2026

Uh oh!

Jaggob Feb 18, 2026

Uh oh!

chatgpt-codex-connector bot Feb 18, 2026

Uh oh!

Jaggob Feb 18, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments

Conversation

Jaggob commented Feb 18, 2026

Summary

Done in this PR

Future TODO

Checklist

Uh oh!

chatgpt-codex-connector bot left a comment

Choose a reason for hiding this comment

💡 Codex Review

Uh oh!

chatgpt-codex-connector bot Feb 18, 2026

Choose a reason for hiding this comment

Uh oh!

Jaggob Feb 18, 2026

Choose a reason for hiding this comment

Uh oh!

chatgpt-codex-connector bot Feb 18, 2026

Choose a reason for hiding this comment

Uh oh!

Jaggob Feb 18, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Comments