@ni-c/imap-mcp 0.2.0

package/dist/imap.js

@@ -0,0 +1,300 @@
+import { ImapFlow } from 'imapflow';
+import { missingConfigKeys, missingConfigMessage, } from './config.js';
+import { MailError, ToolInputError } from './errors.js';
+const defaultFactory = (config) => new ImapFlow({
+    host: config.host ?? '',
+    port: config.port,
+    secure: config.tls === 'implicit',
+    // Left unset, imapflow upgrades opportunistically — which means a
+    // downgrade attack succeeds silently. Both non-implicit modes say
+    // explicitly which one they meant.
+    doSTARTTLS: config.tls === 'starttls',
+    auth: { user: config.user ?? '', pass: config.password ?? '' },
+    // The library logs full IMAP traffic — message bodies included — to stdout
+    // by default. stdout is the MCP transport, so this is not optional.
+    logger: false,
+    // Scoped to this connection: NODE_TLS_REJECT_UNAUTHORIZED would disable
+    // certificate checking for the whole process, SMTP included.
+    tls: config.insecureTls ? { rejectUnauthorized: false } : {},
+});
+/** How long a single IMAP command may take before the call is abandoned. */
+const COMMAND_TIMEOUT_MS = 30_000;
+/**
+ * Connection manager around a single IMAP account.
+ *
+ * Reads take the mailbox lock read-only and use BODY.PEEK throughout, so
+ * fetching a message never changes what the human sees as unread. The only
+ * exception is deliberate and explicit: {@link tagSeen}, which writes the
+ * server's own bookkeeping keyword.
+ */
+export class ImapClient {
+    config;
+    factory;
+    connection;
+    connecting;
+    constructor(config, factory = defaultFactory) {
+        this.config = config;
+        this.factory = factory;
+    }
+    /** Credentials are checked per call, not at startup. */
+    assertConfigured() {
+        const missing = missingConfigKeys(this.config);
+        if (missing.length > 0) {
+            throw new Error(missingConfigMessage(missing));
+        }
+    }
+    async connection_() {
+        this.assertConfigured();
+        if (this.connection !== undefined)
+            return this.connection;
+        if (this.connecting !== undefined)
+            return this.connecting;
+        this.connecting = (async () => {
+            const client = this.factory(this.config.imap);
+            try {
+                await client.connect();
+            }
+            catch (error) {
+                this.connecting = undefined;
+                throw asMailError(error);
+            }
+            this.connection = client;
+            this.connecting = undefined;
+            return client;
+        })();
+        return this.connecting;
+    }
+    /**
+     * Runs `fn` with the mailbox open and the lock held.
+     *
+     * A dropped connection is retried exactly once: IMAP sessions are long-lived
+     * and idle ones get reaped by servers and NAT gateways alike, so the first
+     * call after a pause routinely fails for reasons that have nothing to do with
+     * the request.
+     */
+    async withMailbox(mailbox, readOnly, fn) {
+        const path = mailbox ?? this.config.imap.mailbox;
+        try {
+            return await this.run(path, readOnly, fn);
+        }
+        catch (error) {
+            if (!isConnectionError(error))
+                throw error;
+            this.forget();
+            return await this.run(path, readOnly, fn);
+        }
+    }
+    async run(path, readOnly, fn) {
+        const client = await this.connection_();
+        let lock;
+        try {
+            lock = await client.getMailboxLock(path, { readOnly });
+            // A NOOP before SEARCH: without it the server is free to keep reporting
+            // the mailbox as it looked when the connection was opened, and mail that
+            // arrived since then stays invisible.
+            await withTimeout(client.noop(), 'NOOP');
+            return await fn(client, path);
+        }
+        catch (error) {
+            throw asMailError(error);
+        }
+        finally {
+            lock?.release();
+        }
+    }
+    /** Runs `fn` without selecting a mailbox, for LIST/STATUS/CREATE style calls. */
+    async withConnection(fn) {
+        try {
+            return await fn(await this.connection_());
+        }
+        catch (error) {
+            if (!isConnectionError(error))
+                throw asMailError(error);
+            this.forget();
+            try {
+                return await fn(await this.connection_());
+            }
+            catch (retryError) {
+                throw asMailError(retryError);
+            }
+        }
+    }
+    forget() {
+        try {
+            this.connection?.close();
+        }
+        catch {
+            // Already gone; nothing to clean up.
+        }
+        this.connection = undefined;
+    }
+    async listMailboxes() {
+        return this.withConnection(async (client) => {
+            // statusQuery folds the per-folder counters into the same round trip, so
+            // list_mailboxes can answer "which folder, and how much is in it" at once.
+            const entries = await withTimeout(client.list({
+                statusQuery: { messages: true, unseen: true, uidNext: true },
+            }), 'LIST');
+            return entries.map((entry) => ({
+                path: entry.path,
+                name: entry.name,
+                delimiter: entry.delimiter,
+                specialUse: entry.specialUse,
+                subscribed: entry.subscribed,
+                selectable: !entry.flags.has('\\Noselect'),
+                messages: entry.status?.messages,
+                unseen: entry.status?.unseen,
+                uidNext: entry.status?.uidNext,
+            }));
+        });
+    }
+    /**
+     * Whether the account can store the bookkeeping keyword.
+     *
+     * `\*` in PERMANENTFLAGS means the server accepts arbitrary keywords. Some
+     * providers accept none at all, and there the new-mail tracking cannot work —
+     * better to say so than to tag silently into the void.
+     */
+    keywordSupported(permanentFlags) {
+        const keyword = this.config.imap.seenKeyword;
+        if (keyword === '')
+            return false;
+        return permanentFlags.has('\\*') || permanentFlags.has(keyword);
+    }
+    get seenKeyword() {
+        return this.config.imap.seenKeyword;
+    }
+    get defaultMailbox() {
+        return this.config.imap.mailbox;
+    }
+    get maxMessages() {
+        return this.config.imap.maxMessages;
+    }
+    get user() {
+        return this.config.imap.user;
+    }
+    /**
+     * Reads the threading headers of one message, for linking a draft into an
+     * existing conversation.
+     *
+     * Only the Message-ID and the References chain are taken; nothing the sender
+     * wrote as prose comes back from here.
+     */
+    async threadHeaders(mailbox, uid) {
+        return this.withMailbox(mailbox, true, async (connection) => {
+            for await (const message of connection.fetch([uid], { uid: true, envelope: true, headers: ['references', 'in-reply-to'] }, { uid: true })) {
+                const raw = message.headers?.toString('utf-8') ?? '';
+                const ids = raw.match(/<[^\s<>]{1,255}>/g) ?? [];
+                const messageId = message.envelope?.messageId;
+                const chain = [...ids, ...(messageId === undefined ? [] : [messageId])];
+                return {
+                    messageId,
+                    // Bounded: a long-running thread accumulates dozens of ids and each
+                    // one lengthens the header we are about to write.
+                    references: [...new Set(chain)].slice(-20),
+                };
+            }
+            throw new ToolInputError(`imap-mcp: no message with UID ${uid} in this mailbox.`);
+        });
+    }
+    async search(client, query) {
+        const found = await withTimeout(client.search(query, { uid: true }), 'SEARCH');
+        return found === false ? [] : found;
+    }
+    /** Envelope-level fetch, newest UID first. */
+    async fetchSummaries(client, uids) {
+        if (uids.length === 0)
+            return [];
+        const messages = [];
+        for await (const message of client.fetch(uids, {
+            uid: true,
+            envelope: true,
+            flags: true,
+            size: true,
+            internalDate: true,
+        }, { uid: true })) {
+            messages.push(message);
+        }
+        return messages.sort((a, b) => b.uid - a.uid);
+    }
+    /**
+     * Adds the bookkeeping keyword to the given UIDs.
+     *
+     * This is the one write the server performs on its own initiative, and it
+     * stays available under the default IMAP_READ_ONLY: without it `list_new_messages`
+     * would return the same mail forever. It touches no flag a human interacts
+     * with — `\Seen` in particular is left alone.
+     */
+    async tagSeen(client, uids) {
+        if (uids.length === 0 || this.config.imap.seenKeyword === '')
+            return;
+        await withTimeout(client.messageFlagsAdd(uids, [this.config.imap.seenKeyword], {
+            uid: true,
+        }), 'STORE');
+    }
+    async close() {
+        if (this.connection === undefined)
+            return;
+        try {
+            await this.connection.logout();
+        }
+        catch {
+            this.connection.close();
+        }
+        this.connection = undefined;
+    }
+}
+/** Rejects a promise that outlives the command timeout. */
+export async function withTimeout(promise, command, ms = COMMAND_TIMEOUT_MS) {
+    let timer;
+    try {
+        return await Promise.race([
+            promise,
+            new Promise((_resolve, reject) => {
+                timer = setTimeout(() => reject(new MailError(`IMAP ${command} timed out after ${ms / 1000} seconds`, 'ETIMEDOUT')), ms);
+            }),
+        ]);
+    }
+    finally {
+        if (timer !== undefined)
+            clearTimeout(timer);
+    }
+}
+const CONNECTION_ERROR_CODES = new Set([
+    'ECONNRESET',
+    'EPIPE',
+    'ETIMEDOUT',
+    'ECONNREFUSED',
+    'EHOSTUNREACH',
+    'ENOTCONN',
+    'NoConnection',
+]);
+function isConnectionError(error) {
+    if (error instanceof MailError) {
+        return error.code !== undefined && CONNECTION_ERROR_CODES.has(error.code);
+    }
+    const code = error?.code;
+    return typeof code === 'string' && CONNECTION_ERROR_CODES.has(code);
+}
+/**
+ * Normalises whatever imapflow threw into a {@link MailError}.
+ *
+ * Only the response text is carried over, never the whole error object: it
+ * holds the command that was sent, and for a LOGIN that means the password.
+ */
+export function asMailError(error) {
+    if (error instanceof MailError)
+        return error;
+    if (error instanceof ToolInputError)
+        throw error;
+    const source = error;
+    const message = typeof source?.message === 'string' ? source.message : String(error);
+    const code = typeof source?.code === 'string' ? source.code : undefined;
+    const responseText = typeof source?.responseText === 'string'
+        ? source.responseText
+        : typeof source?.response === 'string'
+            ? source.response
+            : '';
+    return new MailError(`IMAP error: ${message}`, code, responseText);
+}
+//# sourceMappingURL=imap.js.map

package/dist/imap.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"imap.js","sourceRoot":"","sources":["../src/imap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,UAAU,CAAC;AASpC,OAAO,EACL,iBAAiB,EACjB,oBAAoB,GAGrB,MAAM,aAAa,CAAC;AACrB,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AA4ExD,MAAM,cAAc,GAAsB,CAAC,MAAM,EAAE,EAAE,CACnD,IAAI,QAAQ,CAAC;IACX,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE;IACvB,IAAI,EAAE,MAAM,CAAC,IAAI;IACjB,MAAM,EAAE,MAAM,CAAC,GAAG,KAAK,UAAU;IACjC,kEAAkE;IAClE,kEAAkE;IAClE,mCAAmC;IACnC,UAAU,EAAE,MAAM,CAAC,GAAG,KAAK,UAAU;IACrC,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,IAAI,IAAI,EAAE,EAAE,IAAI,EAAE,MAAM,CAAC,QAAQ,IAAI,EAAE,EAAE;IAC9D,2EAA2E;IAC3E,oEAAoE;IACpE,MAAM,EAAE,KAAK;IACb,wEAAwE;IACxE,6DAA6D;IAC7D,GAAG,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,kBAAkB,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE;CAC7D,CAA8B,CAAC;AAElC,4EAA4E;AAC5E,MAAM,kBAAkB,GAAG,MAAM,CAAC;AAclC;;;;;;;GAOG;AACH,MAAM,OAAO,UAAU;IAKF;IACA;IALX,UAAU,CAA6B;IACvC,UAAU,CAAsC;IAExD,YACmB,MAAc,EACd,UAA6B,cAAc;QAD3C,WAAM,GAAN,MAAM,CAAQ;QACd,YAAO,GAAP,OAAO,CAAoC;IAC3D,CAAC;IAEJ,wDAAwD;IAChD,gBAAgB;QACtB,MAAM,OAAO,GAAG,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;QAC/C,IAAI,OAAO,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACvB,MAAM,IAAI,KAAK,CAAC,oBAAoB,CAAC,OAAO,CAAC,CAAC,CAAC;QACjD,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,WAAW;QACvB,IAAI,CAAC,gBAAgB,EAAE,CAAC;QACxB,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAC1D,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,UAAU,CAAC;QAE1D,IAAI,CAAC,UAAU,GAAG,CAAC,KAAK,IAAI,EAAE;YAC5B,MAAM,MAAM,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;YAC9C,IAAI,CAAC;gBACH,MAAM,MAAM,CAAC,OAAO,EAAE,CAAC;YACzB,CAAC;YAAC,OAAO,KAAK,EAAE,CAAC;gBACf,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;gBAC5B,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YAC3B,CAAC;YACD,IAAI,CAAC,UAAU,GAAG,MAAM,CAAC;YACzB,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;YAC5B,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC;QACL,OAAO,IAAI,CAAC,UAAU,CAAC;IACzB,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,WAAW,CACf,OAA2B,EAC3B,QAAiB,EACjB,EAAwD;QAExD,MAAM,IAAI,GAAG,OAAO,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;QACjD,IAAI,CAAC;YACH,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;gBAAE,MAAM,KAAK,CAAC;YAC3C,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,OAAO,MAAM,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,QAAQ,EAAE,EAAE,CAAC,CAAC;QAC5C,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,GAAG,CACf,IAAY,EACZ,QAAiB,EACjB,EAAwD;QAExD,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC;QACxC,IAAI,IAAqC,CAAC;QAC1C,IAAI,CAAC;YACH,IAAI,GAAG,MAAM,MAAM,CAAC,cAAc,CAAC,IAAI,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAC;YACvD,wEAAwE;YACxE,yEAAyE;YACzE,sCAAsC;YACtC,MAAM,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,MAAM,CAAC,CAAC;YACzC,OAAO,MAAM,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;QAChC,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;QAC3B,CAAC;gBAAS,CAAC;YACT,IAAI,EAAE,OAAO,EAAE,CAAC;QAClB,CAAC;IACH,CAAC;IAED,iFAAiF;IACjF,KAAK,CAAC,cAAc,CAClB,EAA0C;QAE1C,IAAI,CAAC;YACH,OAAO,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;QAC5C,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,CAAC,iBAAiB,CAAC,KAAK,CAAC;gBAAE,MAAM,WAAW,CAAC,KAAK,CAAC,CAAC;YACxD,IAAI,CAAC,MAAM,EAAE,CAAC;YACd,IAAI,CAAC;gBACH,OAAO,MAAM,EAAE,CAAC,MAAM,IAAI,CAAC,WAAW,EAAE,CAAC,CAAC;YAC5C,CAAC;YAAC,OAAO,UAAU,EAAE,CAAC;gBACpB,MAAM,WAAW,CAAC,UAAU,CAAC,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAEO,MAAM;QACZ,IAAI,CAAC;YACH,IAAI,CAAC,UAAU,EAAE,KAAK,EAAE,CAAC;QAC3B,CAAC;QAAC,MAAM,CAAC;YACP,qCAAqC;QACvC,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;IAED,KAAK,CAAC,aAAa;QACjB,OAAO,IAAI,CAAC,cAAc,CAAC,KAAK,EAAE,MAAM,EAAE,EAAE;YAC1C,yEAAyE;YACzE,2EAA2E;YAC3E,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,MAAM,CAAC,IAAI,CAAC;gBACV,WAAW,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE;aAC7D,CAAC,EACF,MAAM,CACP,CAAC;YACF,OAAO,OAAO,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;gBAC7B,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,IAAI,EAAE,KAAK,CAAC,IAAI;gBAChB,SAAS,EAAE,KAAK,CAAC,SAAS;gBAC1B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,KAAK,CAAC,UAAU;gBAC5B,UAAU,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,YAAY,CAAC;gBAC1C,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE,QAAQ;gBAChC,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,MAAM;gBAC5B,OAAO,EAAE,KAAK,CAAC,MAAM,EAAE,OAAO;aAC/B,CAAC,CAAC,CAAC;QACN,CAAC,CAAC,CAAC;IACL,CAAC;IAED;;;;;;OAMG;IACH,gBAAgB,CAAC,cAA2B;QAC1C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;QAC7C,IAAI,OAAO,KAAK,EAAE;YAAE,OAAO,KAAK,CAAC;QACjC,OAAO,cAAc,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAClE,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;IAED,IAAI,cAAc;QAChB,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC;IAClC,CAAC;IAED,IAAI,WAAW;QACb,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC;IACtC,CAAC;IAED,IAAI,IAAI;QACN,OAAO,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC;IAC/B,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,aAAa,CACjB,OAA2B,EAC3B,GAAW;QAEX,OAAO,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE;YAC1D,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,UAAU,CAAC,KAAK,CAC1C,CAAC,GAAG,CAAC,EACL,EAAE,GAAG,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,YAAY,EAAE,aAAa,CAAC,EAAE,EACrE,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,EAAE,CAAC;gBACF,MAAM,GAAG,GAAG,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC;gBACrD,MAAM,GAAG,GAAG,GAAG,CAAC,KAAK,CAAC,mBAAmB,CAAC,IAAI,EAAE,CAAC;gBACjD,MAAM,SAAS,GAAG,OAAO,CAAC,QAAQ,EAAE,SAAS,CAAC;gBAC9C,MAAM,KAAK,GAAG,CAAC,GAAG,GAAG,EAAE,GAAG,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC;gBACxE,OAAO;oBACL,SAAS;oBACT,oEAAoE;oBACpE,kDAAkD;oBAClD,UAAU,EAAE,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC;iBAC3C,CAAC;YACJ,CAAC;YACD,MAAM,IAAI,cAAc,CACtB,iCAAiC,GAAG,mBAAmB,CACxD,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;IAED,KAAK,CAAC,MAAM,CAAC,MAAsB,EAAE,KAAmB;QACtD,MAAM,KAAK,GAAG,MAAM,WAAW,CAC7B,MAAM,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,EACnC,QAAQ,CACT,CAAC;QACF,OAAO,KAAK,KAAK,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,KAAK,CAAC;IACtC,CAAC;IAED,8CAA8C;IAC9C,KAAK,CAAC,cAAc,CAClB,MAAsB,EACtB,IAAc;QAEd,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,EAAE,CAAC;QACjC,MAAM,QAAQ,GAAyB,EAAE,CAAC;QAC1C,IAAI,KAAK,EAAE,MAAM,OAAO,IAAI,MAAM,CAAC,KAAK,CACtC,IAAI,EACJ;YACE,GAAG,EAAE,IAAI;YACT,QAAQ,EAAE,IAAI;YACd,KAAK,EAAE,IAAI;YACX,IAAI,EAAE,IAAI;YACV,YAAY,EAAE,IAAI;SACnB,EACD,EAAE,GAAG,EAAE,IAAI,EAAE,CACd,EAAE,CAAC;YACF,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACzB,CAAC;QACD,OAAO,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC;IAChD,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,OAAO,CAAC,MAAsB,EAAE,IAAc;QAClD,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC,IAAI,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,KAAK,EAAE;YAAE,OAAO;QACrE,MAAM,WAAW,CACf,MAAM,CAAC,eAAe,CAAC,IAAI,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,WAAW,CAAC,EAAE;YAC3D,GAAG,EAAE,IAAI;SACV,CAAC,EACF,OAAO,CACR,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,KAAK;QACT,IAAI,IAAI,CAAC,UAAU,KAAK,SAAS;YAAE,OAAO;QAC1C,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,UAAU,CAAC,MAAM,EAAE,CAAC;QACjC,CAAC;QAAC,MAAM,CAAC;YACP,IAAI,CAAC,UAAU,CAAC,KAAK,EAAE,CAAC;QAC1B,CAAC;QACD,IAAI,CAAC,UAAU,GAAG,SAAS,CAAC;IAC9B,CAAC;CACF;AAED,2DAA2D;AAC3D,MAAM,CAAC,KAAK,UAAU,WAAW,CAC/B,OAAmB,EACnB,OAAe,EACf,KAAa,kBAAkB;IAE/B,IAAI,KAAiC,CAAC;IACtC,IAAI,CAAC;QACH,OAAO,MAAM,OAAO,CAAC,IAAI,CAAC;YACxB,OAAO;YACP,IAAI,OAAO,CAAQ,CAAC,QAAQ,EAAE,MAAM,EAAE,EAAE;gBACtC,KAAK,GAAG,UAAU,CAChB,GAAG,EAAE,CACH,MAAM,CACJ,IAAI,SAAS,CACX,QAAQ,OAAO,oBAAoB,EAAE,GAAG,IAAI,UAAU,EACtD,WAAW,CACZ,CACF,EACH,EAAE,CACH,CAAC;YACJ,CAAC,CAAC;SACH,CAAC,CAAC;IACL,CAAC;YAAS,CAAC;QACT,IAAI,KAAK,KAAK,SAAS;YAAE,YAAY,CAAC,KAAK,CAAC,CAAC;IAC/C,CAAC;AACH,CAAC;AAED,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC;IACrC,YAAY;IACZ,OAAO;IACP,WAAW;IACX,cAAc;IACd,cAAc;IACd,UAAU;IACV,cAAc;CACf,CAAC,CAAC;AAEH,SAAS,iBAAiB,CAAC,KAAc;IACvC,IAAI,KAAK,YAAY,SAAS,EAAE,CAAC;QAC/B,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,sBAAsB,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC5E,CAAC;IACD,MAAM,IAAI,GAAI,KAAmC,EAAE,IAAI,CAAC;IACxD,OAAO,OAAO,IAAI,KAAK,QAAQ,IAAI,sBAAsB,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,SAAS;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,KAAK,YAAY,cAAc;QAAE,MAAM,KAAK,CAAC;IACjD,MAAM,MAAM,GAAG,KAQF,CAAC;IACd,MAAM,OAAO,GACX,OAAO,MAAM,EAAE,OAAO,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvE,MAAM,IAAI,GAAG,OAAO,MAAM,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IACxE,MAAM,YAAY,GAChB,OAAO,MAAM,EAAE,YAAY,KAAK,QAAQ;QACtC,CAAC,CAAC,MAAM,CAAC,YAAY;QACrB,CAAC,CAAC,OAAO,MAAM,EAAE,QAAQ,KAAK,QAAQ;YACpC,CAAC,CAAC,MAAM,CAAC,QAAQ;YACjB,CAAC,CAAC,EAAE,CAAC;IACX,OAAO,IAAI,SAAS,CAAC,eAAe,OAAO,EAAE,EAAE,IAAI,EAAE,YAAY,CAAC,CAAC;AACrE,CAAC"}

package/dist/index.d.ts

@@ -0,0 +1,2 @@
+#!/usr/bin/env node
+export {};

package/dist/index.js

@@ -0,0 +1,36 @@
+#!/usr/bin/env node
+import { StdioServerTransport } from '@modelcontextprotocol/sdk/server/stdio.js';
+import { loadConfig } from './config.js';
+import { createServer } from './server.js';
+import { ToolFilterError } from './tool-filter.js';
+async function main() {
+    const config = loadConfig();
+    if (config.imap.insecureTls) {
+        console.error('imap-mcp: IMAP_INSECURE_TLS=true — certificate validation is disabled for the mail connections');
+    }
+    if (config.readOnly) {
+        console.error('imap-mcp: IMAP_READ_ONLY is not "false" — the mailbox write tools are not registered');
+    }
+    let server;
+    try {
+        server = createServer(config);
+    }
+    catch (error) {
+        // A bad tool list is operator feedback, not a crash.
+        if (error instanceof ToolFilterError) {
+            console.error(`imap-mcp: ${error.message}`);
+            process.exit(1);
+        }
+        throw error;
+    }
+    // stdout belongs to the protocol; everything human-readable goes to stderr.
+    await server.connect(new StdioServerTransport());
+    console.error(config.imap.host === undefined
+        ? 'imap-mcp: connected without configuration — tools are listed but every call will fail'
+        : `imap-mcp: connected, mailbox "${config.imap.mailbox}" on ${config.imap.host}`);
+}
+main().catch((error) => {
+    console.error('imap-mcp: fatal error:', error);
+    process.exit(1);
+});
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,oBAAoB,EAAE,MAAM,2CAA2C,CAAC;AAEjF,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAC3C,OAAO,EAAE,eAAe,EAAE,MAAM,kBAAkB,CAAC;AAEnD,KAAK,UAAU,IAAI;IACjB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAE5B,IAAI,MAAM,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;QAC5B,OAAO,CAAC,KAAK,CACX,gGAAgG,CACjG,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CACX,sFAAsF,CACvF,CAAC;IACJ,CAAC;IACD,IAAI,MAAM,CAAC;IACX,IAAI,CAAC;QACH,MAAM,GAAG,YAAY,CAAC,MAAM,CAAC,CAAC;IAChC,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,qDAAqD;QACrD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;YACrC,OAAO,CAAC,KAAK,CAAC,aAAa,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;YAC5C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;IACD,4EAA4E;IAC5E,MAAM,MAAM,CAAC,OAAO,CAAC,IAAI,oBAAoB,EAAE,CAAC,CAAC;IACjD,OAAO,CAAC,KAAK,CACX,MAAM,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS;QAC5B,CAAC,CAAC,uFAAuF;QACzF,CAAC,CAAC,iCAAiC,MAAM,CAAC,IAAI,CAAC,OAAO,QAAQ,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,CACnF,CAAC;AACJ,CAAC;AAED,IAAI,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;IAC9B,OAAO,CAAC,KAAK,CAAC,wBAAwB,EAAE,KAAK,CAAC,CAAC;IAC/C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/dist/message.d.ts

@@ -0,0 +1,51 @@
+import type { FetchMessageObject } from 'imapflow';
+import { type SecurityAssessment } from './analyze.js';
+import { type AttachmentCandidate } from './attachments.js';
+export interface MessageSummary {
+    uid: number;
+    subject: string;
+    from: string;
+    to: string;
+    date: string | undefined;
+    size: number | undefined;
+    flags: string[];
+    seen: boolean;
+    flagged: boolean;
+    answered: boolean;
+    hasAttachments: boolean;
+}
+/** Projection of an envelope fetch. Every string here came from the sender. */
+export declare function summarize(message: FetchMessageObject): MessageSummary;
+export interface RenderedMessage {
+    /** Server-side facts and verdicts. Safe to present as this server's voice. */
+    metadata: {
+        uid: number;
+        date: string | undefined;
+        messageId: string | undefined;
+        /** The References/In-Reply-To chain, for reconstructing the conversation. */
+        references: string[];
+        security: SecurityAssessment;
+        attachments: Array<Pick<AttachmentCandidate, 'partId' | 'filename' | 'contentType' | 'size'>>;
+    };
+    /** Headers and body, written by the sender. */
+    content: string;
+}
+/**
+ * Parses a raw message and splits it into what this server knows and what the
+ * sender wrote.
+ *
+ * The split is the whole point: the metadata block can be trusted because the
+ * server produced it, and everything in `content` gets fenced by the caller so
+ * the model can tell where the server stops speaking.
+ */
+export declare function renderMessage(uid: number, source: Buffer, trustedAuthservId?: string): Promise<RenderedMessage>;
+/**
+ * Message-IDs from the References/In-Reply-To chain, for thread reconstruction.
+ * Bounded: a long-running thread accumulates hundreds of them, and each one
+ * becomes a search term.
+ */
+export declare function threadIdsOf(parsed: {
+    messageId?: string | undefined;
+    references?: string | string[] | undefined;
+    inReplyTo?: string | undefined;
+}): string[];

package/dist/message.js

@@ -0,0 +1,155 @@
+import { simpleParser } from 'mailparser';
+import { assess, htmlToText, sanitizeText, } from './analyze.js';
+import { collectAttachments } from './attachments.js';
+/**
+ * Per-field caps. One oversized header must not be able to eat the whole result
+ * budget on its own — a 2 MB Subject is legal MIME.
+ */
+const SUBJECT_MAX = 2000;
+const ADDRESS_MAX = 4000;
+/** RFC 5322 allows a long Message-ID; nothing needs more than this to be useful. */
+const MESSAGE_ID_MAX = 256;
+/** Projection of an envelope fetch. Every string here came from the sender. */
+export function summarize(message) {
+    const envelope = message.envelope;
+    const flags = [...(message.flags ?? [])];
+    return {
+        uid: message.uid,
+        subject: sanitizeText(envelope?.subject ?? '(no subject)', SUBJECT_MAX),
+        from: sanitizeText(formatEnvelopeAddresses(envelope?.from), ADDRESS_MAX),
+        to: sanitizeText(formatEnvelopeAddresses(envelope?.to), ADDRESS_MAX),
+        date: isoDate(envelope?.date ?? message.internalDate),
+        size: message.size,
+        flags,
+        seen: flags.includes('\\Seen'),
+        flagged: flags.includes('\\Flagged'),
+        answered: flags.includes('\\Answered'),
+        hasAttachments: collectAttachments(message.bodyStructure).length > 0,
+    };
+}
+/** imapflow hands back a Date, but a malformed header can leave a raw string. */
+function isoDate(value) {
+    if (value === undefined)
+        return undefined;
+    const date = value instanceof Date ? value : new Date(value);
+    return Number.isNaN(date.getTime()) ? undefined : date.toISOString();
+}
+function formatEnvelopeAddresses(addresses) {
+    if (addresses === undefined || addresses.length === 0)
+        return '(none)';
+    return addresses
+        .map((entry) => {
+        const address = entry.address ?? '(no address)';
+        return entry.name === undefined || entry.name === ''
+            ? address
+            : `${entry.name} <${address}>`;
+    })
+        .join(', ');
+}
+function formatParsedAddresses(value) {
+    if (value === undefined)
+        return '(none)';
+    const list = Array.isArray(value) ? value : [value];
+    const text = list.map((entry) => entry.text).join(', ');
+    return text === '' ? '(none)' : text;
+}
+/**
+ * Parses a raw message and splits it into what this server knows and what the
+ * sender wrote.
+ *
+ * The split is the whole point: the metadata block can be trusted because the
+ * server produced it, and everything in `content` gets fenced by the caller so
+ * the model can tell where the server stops speaking.
+ */
+export async function renderMessage(uid, source, trustedAuthservId) {
+    const parsed = await simpleParser(source, {
+        // Attachments are fetched deliberately, one at a time, through the policy
+        // in attachments.ts. Parsing them here would pull every byte into memory
+        // for a call that only wants the text.
+        skipImageLinks: true,
+    });
+    const body = bodyTextOf(parsed);
+    const text = sanitizeText(body);
+    const security = assess(`${parsed.subject ?? ''}\n${text}`, headerValue(parsed, 'authentication-results'), trustedAuthservId);
+    const content = [
+        `From: ${sanitizeText(formatParsedAddresses(parsed.from), ADDRESS_MAX)}`,
+        `To: ${sanitizeText(formatParsedAddresses(parsed.to), ADDRESS_MAX)}`,
+        parsed.cc === undefined
+            ? undefined
+            : `Cc: ${sanitizeText(formatParsedAddresses(parsed.cc), ADDRESS_MAX)}`,
+        `Subject: ${sanitizeText(parsed.subject ?? '(no subject)', SUBJECT_MAX)}`,
+        '',
+        text,
+    ]
+        .filter((line) => line !== undefined)
+        .join('\n');
+    return {
+        metadata: {
+            uid,
+            date: parsed.date?.toISOString(),
+            // Sender-chosen, unbounded in length, and it lands in the metadata block
+            // *outside* the fence — the one part of the result the model is told is
+            // ours. Every other sender string on this path is sanitised; this one
+            // was going through raw.
+            messageId: parsed.messageId === undefined
+                ? undefined
+                : sanitizeText(parsed.messageId, MESSAGE_ID_MAX),
+            references: threadIdsOf({
+                ...(parsed.references === undefined
+                    ? {}
+                    : { references: parsed.references }),
+                ...(parsed.inReplyTo === undefined
+                    ? {}
+                    : { inReplyTo: parsed.inReplyTo }),
+            }),
+            security,
+            attachments: [],
+        },
+        content,
+    };
+}
+/**
+ * Prefers the plain-text part, falls back to converting the HTML one.
+ *
+ * mailparser's own `text` fallback is deliberately not used: it keeps content
+ * the recipient never sees, which is precisely where an instruction meant only
+ * for the model would be parked.
+ */
+function bodyTextOf(parsed) {
+    if (typeof parsed.text === 'string' && parsed.text.trim() !== '') {
+        return parsed.text;
+    }
+    if (typeof parsed.html === 'string' && parsed.html !== '') {
+        return htmlToText(parsed.html);
+    }
+    return '(no text content)';
+}
+function headerValue(parsed, name) {
+    const value = parsed.headers.get(name);
+    if (typeof value === 'string')
+        return value;
+    if (Array.isArray(value))
+        return value.filter((v) => typeof v === 'string').join('\n');
+    return undefined;
+}
+/**
+ * Message-IDs from the References/In-Reply-To chain, for thread reconstruction.
+ * Bounded: a long-running thread accumulates hundreds of them, and each one
+ * becomes a search term.
+ */
+export function threadIdsOf(parsed) {
+    const references = parsed.references === undefined
+        ? []
+        : Array.isArray(parsed.references)
+            ? parsed.references
+            : parsed.references.split(/\s+/);
+    const all = [
+        ...references,
+        ...(parsed.inReplyTo === undefined ? [] : [parsed.inReplyTo]),
+        ...(parsed.messageId === undefined ? [] : [parsed.messageId]),
+    ]
+        .map((id) => id.trim())
+        .filter((id) => /^<[^\s<>]{1,255}>$/.test(id));
+    return [...new Set(all)].slice(0, 50);
+}
+//# sourceMappingURL=message.js.map

package/dist/message.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"message.js","sourceRoot":"","sources":["../src/message.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAG1C,OAAO,EACL,MAAM,EACN,UAAU,EACV,YAAY,GAEb,MAAM,cAAc,CAAC;AACtB,OAAO,EAAE,kBAAkB,EAA4B,MAAM,kBAAkB,CAAC;AAEhF;;;GAGG;AACH,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,MAAM,WAAW,GAAG,IAAI,CAAC;AACzB,oFAAoF;AACpF,MAAM,cAAc,GAAG,GAAG,CAAC;AAgB3B,+EAA+E;AAC/E,MAAM,UAAU,SAAS,CAAC,OAA2B;IACnD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC;IAClC,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,CAAC;IACzC,OAAO;QACL,GAAG,EAAE,OAAO,CAAC,GAAG;QAChB,OAAO,EAAE,YAAY,CAAC,QAAQ,EAAE,OAAO,IAAI,cAAc,EAAE,WAAW,CAAC;QACvE,IAAI,EAAE,YAAY,CAAC,uBAAuB,CAAC,QAAQ,EAAE,IAAI,CAAC,EAAE,WAAW,CAAC;QACxE,EAAE,EAAE,YAAY,CAAC,uBAAuB,CAAC,QAAQ,EAAE,EAAE,CAAC,EAAE,WAAW,CAAC;QACpE,IAAI,EAAE,OAAO,CAAC,QAAQ,EAAE,IAAI,IAAI,OAAO,CAAC,YAAY,CAAC;QACrD,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,KAAK;QACL,IAAI,EAAE,KAAK,CAAC,QAAQ,CAAC,QAAQ,CAAC;QAC9B,OAAO,EAAE,KAAK,CAAC,QAAQ,CAAC,WAAW,CAAC;QACpC,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,YAAY,CAAC;QACtC,cAAc,EAAE,kBAAkB,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,MAAM,GAAG,CAAC;KACrE,CAAC;AACJ,CAAC;AAED,iFAAiF;AACjF,SAAS,OAAO,CAAC,KAAgC;IAC/C,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,SAAS,CAAC;IAC1C,MAAM,IAAI,GAAG,KAAK,YAAY,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,KAAK,CAAC,CAAC;IAC7D,OAAO,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC;AACvE,CAAC;AAED,SAAS,uBAAuB,CAC9B,SAAyE;IAEzE,IAAI,SAAS,KAAK,SAAS,IAAI,SAAS,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,QAAQ,CAAC;IACvE,OAAO,SAAS;SACb,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE;QACb,MAAM,OAAO,GAAG,KAAK,CAAC,OAAO,IAAI,cAAc,CAAC;QAChD,OAAO,KAAK,CAAC,IAAI,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,EAAE;YAClD,CAAC,CAAC,OAAO;YACT,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,KAAK,OAAO,GAAG,CAAC;IACnC,CAAC,CAAC;SACD,IAAI,CAAC,IAAI,CAAC,CAAC;AAChB,CAAC;AAED,SAAS,qBAAqB,CAC5B,KAAkD;IAElD,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,QAAQ,CAAC;IACzC,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC;IACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACxD,OAAO,IAAI,KAAK,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC;AACvC,CAAC;AAmBD;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,aAAa,CACjC,GAAW,EACX,MAAc,EACd,iBAA0B;IAE1B,MAAM,MAAM,GAAe,MAAM,YAAY,CAAC,MAAM,EAAE;QACpD,0EAA0E;QAC1E,yEAAyE;QACzE,uCAAuC;QACvC,cAAc,EAAE,IAAI;KACrB,CAAC,CAAC;IAEH,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,CAAC,CAAC;IAChC,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;IAChC,MAAM,QAAQ,GAAG,MAAM,CACrB,GAAG,MAAM,CAAC,OAAO,IAAI,EAAE,KAAK,IAAI,EAAE,EAClC,WAAW,CAAC,MAAM,EAAE,wBAAwB,CAAC,EAC7C,iBAAiB,CAClB,CAAC;IAEF,MAAM,OAAO,GAAG;QACd,SAAS,YAAY,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,WAAW,CAAC,EAAE;QACxE,OAAO,YAAY,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,EAAE;QACpE,MAAM,CAAC,EAAE,KAAK,SAAS;YACrB,CAAC,CAAC,SAAS;YACX,CAAC,CAAC,OAAO,YAAY,CAAC,qBAAqB,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,WAAW,CAAC,EAAE;QACxE,YAAY,YAAY,CAAC,MAAM,CAAC,OAAO,IAAI,cAAc,EAAE,WAAW,CAAC,EAAE;QACzE,EAAE;QACF,IAAI;KACL;SACE,MAAM,CAAC,CAAC,IAAI,EAAkB,EAAE,CAAC,IAAI,KAAK,SAAS,CAAC;SACpD,IAAI,CAAC,IAAI,CAAC,CAAC;IAEd,OAAO;QACL,QAAQ,EAAE;YACR,GAAG;YACH,IAAI,EAAE,MAAM,CAAC,IAAI,EAAE,WAAW,EAAE;YAChC,yEAAyE;YACzE,wEAAwE;YACxE,sEAAsE;YACtE,yBAAyB;YACzB,SAAS,EACP,MAAM,CAAC,SAAS,KAAK,SAAS;gBAC5B,CAAC,CAAC,SAAS;gBACX,CAAC,CAAC,YAAY,CAAC,MAAM,CAAC,SAAS,EAAE,cAAc,CAAC;YACpD,UAAU,EAAE,WAAW,CAAC;gBACtB,GAAG,CAAC,MAAM,CAAC,UAAU,KAAK,SAAS;oBACjC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,CAAC;gBACtC,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS;oBAChC,CAAC,CAAC,EAAE;oBACJ,CAAC,CAAC,EAAE,SAAS,EAAE,MAAM,CAAC,SAAS,EAAE,CAAC;aACrC,CAAC;YACF,QAAQ;YACR,WAAW,EAAE,EAAE;SAChB;QACD,OAAO;KACR,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,SAAS,UAAU,CAAC,MAAkB;IACpC,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;QACjE,OAAO,MAAM,CAAC,IAAI,CAAC;IACrB,CAAC;IACD,IAAI,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI,KAAK,EAAE,EAAE,CAAC;QAC1D,OAAO,UAAU,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IACjC,CAAC;IACD,OAAO,mBAAmB,CAAC;AAC7B,CAAC;AAED,SAAS,WAAW,CAAC,MAAkB,EAAE,IAAY;IACnD,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;IACvC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5C,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACtB,OAAO,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,MAI3B;IACC,MAAM,UAAU,GACd,MAAM,CAAC,UAAU,KAAK,SAAS;QAC7B,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC;YAChC,CAAC,CAAC,MAAM,CAAC,UAAU;YACnB,CAAC,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;IACvC,MAAM,GAAG,GAAG;QACV,GAAG,UAAU;QACb,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;QAC7D,GAAG,CAAC,MAAM,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC;KAC9D;SACE,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;SACtB,MAAM,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,oBAAoB,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;AACxC,CAAC"}

package/dist/resources.d.ts

@@ -0,0 +1,16 @@
+import { type McpServer } from '@modelcontextprotocol/sdk/server/mcp.js';
+import type { Config } from './config.js';
+import { ImapClient } from './imap.js';
+/**
+ * Exposes attachments as MCP resources.
+ *
+ * This is the second half of "downloadable": where `IMAP_DOWNLOAD_DIR` is unset
+ * — a container, a remote deployment, anywhere the server has no useful
+ * filesystem — the client can still fetch the bytes itself over the protocol
+ * instead of having them base64-encoded into the conversation.
+ *
+ * The read callback re-runs the *entire* attachment policy. It has to: a
+ * resource read does not go through `get_attachments`, so anything enforced
+ * only there would simply be a second, unguarded door to the same bytes.
+ */
+export declare function registerAttachmentResources(server: McpServer, client: ImapClient, config: Config): void;