@rubytech/create-maxy-code 0.1.279 → 0.1.280

package/payload/platform/plugins/aeo/skills/structured-answer/SKILL.md

@@ -5,6 +5,8 @@ description: Use when authoring or auditing a page whose primary purpose is to a
 
 # Structured-answer page template
 
+Invoked from `specialists:content-producer`.
+
 Answer engines (Claude, ChatGPT, Perplexity, Google AI Overviews, Bing Copilot) lift a single short span when they cite a page. That span is almost always the first paragraph after the H1, when it is short and direct. Every other element on the page either supports the lift or gets ignored.
 
 ## The shape

package/payload/platform/plugins/business-assistant/PLUGIN.md

@@ -32,6 +32,8 @@ Enquiries also arrive through the business's **published-site contact form**, wh
 
 Track status through the pipeline: enquiry → quoted → booked → completed → invoiced → paid.
 
+When a built document — a quote, contract, proposal, or set of terms — needs a recordable signature without DocuSign, load the `e-sign` skill (`skill-load skillName="e-sign"`).
+
 ## Session & Task Continuity
 
 Every conversation is a session. At the start of each session:
@@ -57,7 +59,6 @@ Load the relevant reference when the task requires it:
 - **Triage & escalation** → `references/escalation.md` — urgency classification (RED/AMBER/GREEN), customer handoff protocol, voice IVR handling
 - **Scheduling & briefings** → `references/scheduling.md` — booking protocol, geographic clustering, travel time estimation, morning briefings, holiday mode, GPS integration
 - **Invoices & payment** → `references/invoicing.md` — HTML invoice creation, PDF generation via `browser-navigate` + `browser-pdf-save`, sending, payment chase protocol
-- **E-signatures** → `references/e-sign.md` — sign any hosted document (quote, contract, proposal): a Cloudflare Pages signing form captures the acceptance to D1, then the agent sweeps the row and emails both parties a PDF of the signed content
 - **Customer records** → `references/crm.md` — contact record management, `contact_lookup`/`contact_update` usage, pipeline tracking, when to create/update records
 - **Site form submissions** → `references/site-lead-intake.md` — the published-site contact form is a primary inbound channel landing in Cloudflare D1; "any new sign-ups/contacts/enquiries?" reads D1 first, then dedupes each unswept row into the graph and routes it to the recorded front-line owner
 - **Document filing** → `references/document-management.md` — dual-scope filing system, naming conventions, folder structure for customer-facing vs internal documents

package/payload/platform/plugins/business-assistant/{references/e-sign.md → skills/e-sign/SKILL.md}

@@ -1,12 +1,19 @@
+---
+name: e-sign
+description: "Put a legally-recordable signature on any hosted document — a quote, contract, proposal, or set of terms — without DocuSign. A Cloudflare Pages signing form captures the acceptance to D1; the agent then sweeps the row, renders the signed content to PDF, and emails both parties. Triggers: 'sign this proposal', 'get this contract signed', 'put a signature on this', 'e-signature', 'send for signature', 'accept a proposal online', 'signature on a document'."
+---
+
 # E-signatures — signing any hosted document (form → D1 → PDF + email)
 
+**Invoked by the business-assistant (or admin) directly** when a built document — a quote, contract, proposal, or set of terms — needs a recordable signature.
+
 How to put a legally-recordable signature on **any** document the business hosts — a quote, a contract, a proposal, a set of terms — without DocuSign. The document is deployed to **Cloudflare Pages** with a signing form as its final section; the signer submits; a Pages Function writes the acceptance to **Cloudflare D1**; the agent later sweeps the row, renders the signed content to PDF, and emails both parties a confirmation.
 
-This reference owns **only the signature**: the form, the capture, the PDF, and the dispatch. The document's body — what is actually being signed — is whatever flow built it (a quotation plugin, a hand-written contract, anything). This begins at *"a built document needs a signature."*
+This skill owns **only the signature**: the form, the capture, the PDF, and the dispatch. The document's body — what is actually being signed — is whatever flow built it (a quotation plugin, a hand-written contract, anything). This begins at *"a built document needs a signature."*
 
 It composes two patterns you must read alongside it:
 
-- **`cloudflare/references/d1-data-capture.md`** — the form → Pages Function → D1 → sweep mechanics, and the token-scope breakage (§ 0). Everything about minting the Pages-+-D1 token, `wrangler.toml`, and `wrangler d1 execute --remote` lives there; this reference does not repeat it.
+- **`cloudflare/references/d1-data-capture.md`** — the form → Pages Function → D1 → sweep mechanics, and the token-scope breakage (§ 0). Everything about minting the Pages-+-D1 token, `wrangler.toml`, and `wrangler d1 execute --remote` lives there; this skill does not repeat it.
 - **`business-assistant/references/invoicing.md`** — PDF generation via `browser-navigate` + `browser-pdf-save` (its step 4). The signed-content PDF uses that exact pattern.
 
 Auth for every `wrangler`/API call is a minted narrow token per `cloudflare/references/api.md`. Deploy mechanics are `cloudflare/references/hosting-sites.md`.

package/payload/platform/plugins/cloudflare/skills/cloudflare/SKILL.md

@@ -5,6 +5,8 @@ description: Cloudflare operations for the install — tunnel setup/diagnosis/re
 
 # Cloudflare operations
 
+Invoked from `specialists:personal-assistant`.
+
 This is the entry point for every Cloudflare task on the install. Pick the operation class, read the matching reference, run the command via Bash, relay the literal output, and prove the outcome with a live signal. There are no Cloudflare MCP tools; the plugin registers none. The agent never browser-automates the dashboard — the operator clicks where a click is genuinely required.
 
 | You want to… | Read | Outcome contract |

package/payload/platform/plugins/deep-research/skills/academic-verify/SKILL.md

@@ -5,6 +5,8 @@ description: "Traces an academic or scientific claim through the publication cha
 
 # Academic verify
 
+Invoked from `specialists:research-assistant`.
+
 This skill is for claims that arrive as "studies show", "research suggests", or a named paper title. It traces the claim to the actual paper, the actual journal, and the actual conclusion of the source. It never says "verified" without a primary source URL.
 
 ## When to run

package/payload/platform/plugins/deep-research/skills/book-mirror/SKILL.md

@@ -5,6 +5,8 @@ description: "Reads a book the owner provides (PDF, ePub, web link, or text), wa
 
 # Book mirror
 
+Invoked from `specialists:research-assistant`.
+
 This skill turns a book into a usable document by walking the chapters one at a time and asking, for each: "what does this say, and how does it apply to this specific owner". The output is a personalised pack the owner can read once and act on. It is grounded in the graph; the right-hand column is always specific to what the graph already knows about the owner.
 
 ## When to run

package/payload/platform/plugins/deep-research/skills/data-research/SKILL.md

@@ -5,6 +5,8 @@ description: "Recipe-driven structured-data extraction. Takes a named recipe and
 
 # Data research
 
+Invoked from `specialists:research-assistant`.
+
 This skill turns unstructured-looking sources (emails, reports, forms, web pages) into structured graph entities. The transformation is always recipe-driven: a named YAML recipe declares what fields to extract, what validations to apply, and what graph nodes to write. The skill runs a named recipe; it never invents a schema on the fly.
 
 **Default parent.** Every recipe declares its hierarchy parent via `graph_target.parent` — either `Project` (the run-time recipe argument names which Project elementId to attach to) or `LocalBusiness` (the account root, for cross-project recipes like investor-updates). The skill refuses to run a recipe whose `parent` field is missing or whose named Project does not exist. Per-row writes attach to that parent via the canonical containment edge; the recipe's `relationships:` block describes cross-hierarchy edges (e.g. `ROUND_FOR → Organization`) which are written separately and do not substitute for the parent.

package/payload/platform/plugins/deep-research/skills/deep-research/SKILL.md

@@ -20,6 +20,8 @@ config:
 
 # Deep Research Skill
 
+Invoked from `specialists:research-assistant`.
+
 You are a research agent. Answer questions using live web sources, synthesise findings across multiple sources, and present results with full attribution. You do not guess. You search, read, extract, and cite.
 
 ## Workflow

package/payload/platform/plugins/deep-research/skills/strategic-reading/SKILL.md

@@ -5,6 +5,8 @@ description: "Reads a source (article, book, report, document) through a specifi
 
 # Strategic reading
 
+Invoked from `specialists:research-assistant`.
+
 This skill reads a document with a specific question in mind. The owner names the lens (a project, a problem, a goal). The skill summarises what the source actually says, then translates each section into how it applies to the named lens, and closes with a playbook of three to seven concrete steps. Both halves are grounded: the left half in the source text, the right half in the graph.
 
 ## When to run

package/payload/platform/plugins/email/PLUGIN.md

@@ -58,6 +58,8 @@ Manages the agent's own dedicated email account — IMAP for reading, SMTP for s
 
 **Identity boundary (operator-identity fix).** This plugin manages the AGENT's email channel: an `:EmailAccount` node with IMAP/SMTP credentials, polling state, and the agent's `agentAddress`. It is NOT the operator-identity store. The operator's own email lives on the OWNS-bound `:Person` (`Person.email`) and is captured via `profile-update` with `personFields`. Confusing the two surfaces (writing the operator's personal email to `EmailAccount.agentAddress`, or vice versa) breaks routing AND identity coverage. See [.docs/agents.md § Coverage-driven elicitation bias] for the operator-identity contract.
 
+**Login vs alias — the default recipient set.** A config carries two addresses. `email` is the IMAP login: the address you authenticate as, and an address this mailbox owns. `agentAddress` is an *additional* alias to surface (often a per-agent address on a shared catch-all mailbox). When they differ, `email-read`, `email-search`, and `email-otp-extract` default to surfacing mail addressed to **either** — not the alias alone — because replies commonly arrive at the login address (a proposal sent from `info@` is answered to `info@`, not the `maxy@` alias). When no distinct alias is configured, no recipient filter is applied. Pass an explicit `to=` to narrow to a single address. Whenever the default filter hides messages from the fetched window, `email-read`/`email-search` append a `Recipient filter: kept N, hid M (to ∈ {…}); pass to="…" to change.` line — including when every message was hidden — so "I can't see it" is never indistinguishable from "it isn't there".
+
 ## Capabilities
 
 - **Provider lookup:** `email-provider-info` — given just an email address, returns the inferred IMAP/SMTP hosts and the provider's app-password / trusted-application / IMAP-enable requirement, deterministically from the provider map. Call this BEFORE soliciting a password so the requirement is relayed first; most providers reject the normal login password. Returns "unknown" (operator supplies hosts) or "unsupported" (provider blocks IMAP/SMTP, e.g. Tuta).

package/payload/platform/plugins/email/mcp/dist/lib/imap.d.ts

@@ -14,6 +14,8 @@ export interface PaginatedMessages {
     messages: EmailMessage[];
     /** Pass as before_uid to get the next page of older messages. Omitted when results are exhausted. */
     nextBeforeUid?: number;
+    /** Kept-vs-hidden accounting, present only when a client-side recipient filter ran. */
+    recipientFilter?: RecipientFilterStats;
 }
 export declare const MAX_LIMIT = 50;
 /**
@@ -130,17 +132,46 @@ export declare function extractBodyFromFetch(msg: {
  */
 export declare function testConnection(config: EmailConfig, password: string): Promise<string | null>;
 /**
- * Check whether an IMAP envelope's TO field contains the target address.
- * Case-insensitive comparison. Strict: if the server didn't return TO
- * addresses, the message is excluded — we cannot confirm it was addressed
- * to the target.
+ * Check whether an IMAP envelope's TO field contains any of the target
+ * addresses. Case-insensitive comparison. Strict: if the server didn't
+ * return TO addresses, the message is excluded — we cannot confirm it was
+ * addressed to any target. Only the TO field is inspected (not Cc).
+ *
+ * Accepts a single address or a set of acceptable addresses; a message
+ * matches when its TO contains at least one of them.
  */
 export declare function matchesRecipient(envelope: {
     to?: Array<{
         name?: string;
         address?: string;
     }>;
-}, targetAddress: string): boolean;
+}, target: string | string[]): boolean;
+/**
+ * Resolve the implicit recipient-filter set for read/search when no explicit
+ * `to` is supplied. The mailbox always owns its IMAP login (`config.email`),
+ * and `config.agentAddress` is an additional alias to surface. When an alias
+ * is configured (truthy and different from the login) both addresses are
+ * returned, so replies that arrive at the login address are not hidden.
+ *
+ * When no distinct alias is configured, returns `undefined` — no recipient
+ * filter is applied at all, preserving the pre-existing behaviour for plain
+ * (non-alias) mailboxes.
+ */
+export declare function resolveDefaultRecipients(config: {
+    email: string;
+    agentAddress?: string;
+}): string[] | undefined;
+/** Kept-vs-hidden accounting for a client-side recipient filter pass. */
+export interface RecipientFilterStats {
+    kept: number;
+    hidden: number;
+    recipients: string[];
+}
+/**
+ * Render the operator-facing recipient-filter signal line. Returns null when
+ * nothing was hidden, so a fully-matched window emits no misleading line.
+ */
+export declare function formatRecipientFilterLine(stats: RecipientFilterStats | undefined): string | null;
 /**
  * Build IMAP SEARCH criteria for fetchRecent.
  * Never includes TO — that filter is applied client-side to avoid
@@ -150,11 +181,11 @@ export declare function buildFetchRecentCriteria(options: {
     sender?: string;
     since?: Date;
     before?: Date;
-    to?: string;
+    to?: string | string[];
     limit?: number;
 }): {
     criteria: Record<string, unknown>;
-    clientSideTo: string | undefined;
+    clientSideRecipients: string[] | undefined;
     fetchLimit: number;
 };
 /**
@@ -169,10 +200,10 @@ export declare function buildSearchCriteria(options: {
     body?: string;
     since?: Date;
     before?: Date;
-    to?: string;
+    to?: string | string[];
 }): {
     criteria: Record<string, unknown>;
-    clientSideTo: string | undefined;
+    clientSideRecipients: string[] | undefined;
 };
 /**
  * Fetch recent messages from a mailbox folder.
@@ -187,7 +218,7 @@ export declare function fetchRecent(config: EmailConfig, password: string, optio
     subjectPattern?: string;
     since?: Date;
     before?: Date;
-    to?: string;
+    to?: string | string[];
     folder?: "inbox" | "sent";
     beforeUid?: number;
 }): Promise<PaginatedMessages>;
@@ -201,7 +232,7 @@ export declare function searchMessages(config: EmailConfig, password: string, qu
     since?: Date;
     before?: Date;
     limit?: number;
-    to?: string;
+    to?: string | string[];
     folder?: "inbox" | "sent";
     beforeUid?: number;
 }): Promise<PaginatedMessages>;

package/payload/platform/plugins/email/mcp/dist/lib/imap.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"imap.d.ts","sourceRoot":"","sources":["../../src/lib/imap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA2B,MAAM,UAAU,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAuBpD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAGD,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,OAAO,GAAG,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAYjB;AAqBD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAa9C;AAQD;0EAC0E;AAC1E,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAErD,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;GAGG;AACH,UAAU,iBAAiB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,iBAAiB,GAAG,SAAS,GACvC,cAAc,EAAE,CAgClB;AAQD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,CAM7E;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,UAAU,GAAG,cAAc,GAAG,aAAa,GAAG,IAAI,CAAC;CACnE;AAED;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,GAC/F,OAAO,CAAC,qBAAqB,EAAE,CAAC,CA6ElC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAgBrE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE;IACxC,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,aAAa,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CAChH,GAAG,MAAM,CAqCT;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBlG;AAWD;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE;IAAE,EAAE,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,EAC7D,aAAa,EAAE,MAAM,GACpB,OAAO,CAIT;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG;IACF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;IACjC,UAAU,EAAE,MAAM,CAAC;CACpB,CAiBA;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;CACb,GAAG;IACF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,YAAY,EAAE,MAAM,GAAG,SAAS,CAAC;CAClC,CA0BA;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACf,GACL,OAAO,CAAC,iBAAiB,CAAC,CAyH5B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,CAAC;IACZ,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,iBAAiB,CAAC,CAwG5B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,WAAW,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAsF1E;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IACT,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,IAAI,CAAC,CAiER;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS1F"}
+{"version":3,"file":"imap.d.ts","sourceRoot":"","sources":["../../src/lib/imap.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAA2B,MAAM,UAAU,CAAC;AAC7D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,kBAAkB,CAAC;AAuBpD,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,WAAW,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,EAAE,YAAY,EAAE,CAAC;IACzB,qGAAqG;IACrG,aAAa,CAAC,EAAE,MAAM,CAAC;IACvB,uFAAuF;IACvF,eAAe,CAAC,EAAE,oBAAoB,CAAC;CACxC;AAGD,eAAO,MAAM,SAAS,KAAK,CAAC;AAE5B;;;;;;GAMG;AACH,wBAAsB,iBAAiB,CACrC,MAAM,EAAE,QAAQ,EAChB,MAAM,EAAE,OAAO,GAAG,MAAM,GACvB,OAAO,CAAC,MAAM,CAAC,CAYjB;AAqBD;;;GAGG;AACH,wBAAgB,SAAS,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAa9C;AAQD;0EAC0E;AAC1E,eAAO,MAAM,oBAAoB,QAAmB,CAAC;AAErD,yEAAyE;AACzE,MAAM,WAAW,cAAc;IAC7B,wEAAwE;IACxE,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,MAAM,CAAC;IACjB,QAAQ,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,yEAAyE;IACzE,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;CACzB;AAED;;;GAGG;AACH,UAAU,iBAAiB;IACzB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,qBAAqB,CAAC,EAAE;QAAE,QAAQ,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC9C,UAAU,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC/B,UAAU,CAAC,EAAE,iBAAiB,EAAE,CAAC;CAClC;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,sBAAsB,CACpC,SAAS,EAAE,iBAAiB,GAAG,SAAS,GACvC,cAAc,EAAE,CAgClB;AAQD;;;;GAIG;AACH,wBAAgB,uBAAuB,CAAC,WAAW,EAAE,cAAc,EAAE,GAAG,MAAM,CAM7E;AAED;;;;GAIG;AACH,MAAM,WAAW,qBAAqB;IACpC,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IACrB,aAAa,EAAE,UAAU,GAAG,cAAc,GAAG,aAAa,GAAG,IAAI,CAAC;CACnE;AAED;;;;GAIG;AACH,wBAAsB,+BAA+B,CACnD,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,KAAK,CAAC;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,MAAM,CAAC;IAAC,YAAY,EAAE,MAAM,CAAC;IAAC,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,GAC/F,OAAO,CAAC,qBAAqB,EAAE,CAAC,CA6ElC;AAED;;;GAGG;AACH,wBAAgB,cAAc,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,CAAC,EAAE,MAAM,GAAG,MAAM,CAgBrE;AAED;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE;IACxC,SAAS,CAAC,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAChC,aAAa,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;QAAC,UAAU,CAAC,EAAE,KAAK,CAAC;YAAE,IAAI,CAAC,EAAE,MAAM,CAAC;YAAC,QAAQ,CAAC,EAAE,MAAM,CAAA;SAAE,CAAC,CAAA;KAAE,CAAC;CAChH,GAAG,MAAM,CAqCT;AAED;;;GAGG;AACH,wBAAsB,cAAc,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,CAyBlG;AAWD;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAC9B,QAAQ,EAAE;IAAE,EAAE,CAAC,EAAE,KAAK,CAAC;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;CAAE,EAC7D,MAAM,EAAE,MAAM,GAAG,MAAM,EAAE,GACxB,OAAO,CAOT;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,wBAAwB,CACtC,MAAM,EAAE;IAAE,KAAK,EAAE,MAAM,CAAC;IAAC,YAAY,CAAC,EAAE,MAAM,CAAA;CAAE,GAC/C,MAAM,EAAE,GAAG,SAAS,CAKtB;AAED,yEAAyE;AACzE,MAAM,WAAW,oBAAoB;IACnC,IAAI,EAAE,MAAM,CAAC;IACb,MAAM,EAAE,MAAM,CAAC;IACf,UAAU,EAAE,MAAM,EAAE,CAAC;CACtB;AAED;;;GAGG;AACH,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,oBAAoB,GAAG,SAAS,GACtC,MAAM,GAAG,IAAI,CAGf;AAED;;;;GAIG;AACH,wBAAgB,wBAAwB,CAAC,OAAO,EAAE;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACvB,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB,GAAG;IACF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,oBAAoB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;IAC3C,UAAU,EAAE,MAAM,CAAC;CACpB,CAkBA;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE;IAC3C,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;CACxB,GAAG;IACF,QAAQ,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAClC,oBAAoB,EAAE,MAAM,EAAE,GAAG,SAAS,CAAC;CAC5C,CA2BA;AAED;;;;;;GAMG;AACH,wBAAsB,WAAW,CAC/B,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,OAAO,GAAE;IACP,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,cAAc,CAAC,EAAE,MAAM,CAAC;IACxB,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACf,GACL,OAAO,CAAC,iBAAiB,CAAC,CA0I5B;AAED;;GAEG;AACH,wBAAsB,cAAc,CAClC,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,KAAK,EAAE;IACL,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,KAAK,CAAC,EAAE,IAAI,CAAC;IACb,MAAM,CAAC,EAAE,IAAI,CAAC;IACd,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,EAAE,CAAC;IACvB,MAAM,CAAC,EAAE,OAAO,GAAG,MAAM,CAAC;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAC;CACpB,GACA,OAAO,CAAC,iBAAiB,CAAC,CAyH5B;AAED;;;GAGG;AACH,MAAM,WAAW,YAAY;IAC3B,GAAG,EAAE,MAAM,CAAC;IACZ,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAC;IACzB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,WAAW,EAAE,MAAM,CAAC;IACpB,8EAA8E;IAC9E,WAAW,EAAE,cAAc,EAAE,CAAC;CAC/B;AAED;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,QAAQ,EAAE,MAAM,EAChB,gBAAgB,EAAE,MAAM,GACvB,OAAO,CAAC;IAAE,WAAW,EAAE,MAAM,CAAC;IAAC,MAAM,EAAE,YAAY,EAAE,CAAC;IAAC,MAAM,EAAE,MAAM,CAAA;CAAE,CAAC,CAsF1E;AAED;;;;;;;;GAQG;AACH,wBAAsB,wBAAwB,CAC5C,MAAM,EAAE,WAAW,EACnB,QAAQ,EAAE,MAAM,EAChB,SAAS,EAAE,MAAM,GAChB,OAAO,CAAC;IACT,GAAG,EAAE,MAAM,CAAC;IACZ,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,WAAW,EAAE,MAAM,CAAC;IACpB,QAAQ,EAAE,MAAM,GAAG,IAAI,CAAC;IACxB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,WAAW,EAAE,MAAM,EAAE,CAAC;IACtB,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;CACd,GAAG,IAAI,CAAC,CAiER;AAED;;GAEG;AACH,wBAAsB,aAAa,CAAC,MAAM,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAS1F"}

package/payload/platform/plugins/email/mcp/dist/lib/imap.js

@@ -320,16 +320,48 @@ const TO_OVERFETCH_MULTIPLIER = 3;
 // ─── Default since floor for unbounded alias searches ───────────────
 const DEFAULT_SINCE_DAYS = 7;
 /**
- * Check whether an IMAP envelope's TO field contains the target address.
- * Case-insensitive comparison. Strict: if the server didn't return TO
- * addresses, the message is excluded — we cannot confirm it was addressed
- * to the target.
+ * Check whether an IMAP envelope's TO field contains any of the target
+ * addresses. Case-insensitive comparison. Strict: if the server didn't
+ * return TO addresses, the message is excluded — we cannot confirm it was
+ * addressed to any target. Only the TO field is inspected (not Cc).
+ *
+ * Accepts a single address or a set of acceptable addresses; a message
+ * matches when its TO contains at least one of them.
  */
-export function matchesRecipient(envelope, targetAddress) {
+export function matchesRecipient(envelope, target) {
     if (!envelope.to || envelope.to.length === 0)
         return false;
-    const target = targetAddress.toLowerCase();
-    return envelope.to.some((addr) => addr.address?.toLowerCase() === target);
+    const targets = (Array.isArray(target) ? target : [target]).map((t) => t.toLowerCase());
+    return envelope.to.some((addr) => {
+        const a = addr.address?.toLowerCase();
+        return a !== undefined && targets.includes(a);
+    });
+}
+/**
+ * Resolve the implicit recipient-filter set for read/search when no explicit
+ * `to` is supplied. The mailbox always owns its IMAP login (`config.email`),
+ * and `config.agentAddress` is an additional alias to surface. When an alias
+ * is configured (truthy and different from the login) both addresses are
+ * returned, so replies that arrive at the login address are not hidden.
+ *
+ * When no distinct alias is configured, returns `undefined` — no recipient
+ * filter is applied at all, preserving the pre-existing behaviour for plain
+ * (non-alias) mailboxes.
+ */
+export function resolveDefaultRecipients(config) {
+    if (config.agentAddress && config.agentAddress !== config.email) {
+        return [config.email, config.agentAddress];
+    }
+    return undefined;
+}
+/**
+ * Render the operator-facing recipient-filter signal line. Returns null when
+ * nothing was hidden, so a fully-matched window emits no misleading line.
+ */
+export function formatRecipientFilterLine(stats) {
+    if (!stats || stats.hidden <= 0)
+        return null;
+    return `Recipient filter: kept ${stats.kept}, hid ${stats.hidden} (to ∈ {${stats.recipients.join(", ")}}); pass to="…" to change.`;
 }
 /**
  * Build IMAP SEARCH criteria for fetchRecent.
@@ -338,6 +370,7 @@ export function matchesRecipient(envelope, targetAddress) {
  */
 export function buildFetchRecentCriteria(options) {
     const { sender, since, before, to, limit = 20 } = options;
+    const recipients = to ? (Array.isArray(to) ? to : [to]) : undefined;
     const criteria = {};
     if (sender)
         criteria.from = sender;
@@ -351,8 +384,8 @@ export function buildFetchRecentCriteria(options) {
     }
     return {
         criteria,
-        clientSideTo: to,
-        fetchLimit: to ? limit * TO_OVERFETCH_MULTIPLIER : limit,
+        clientSideRecipients: recipients,
+        fetchLimit: recipients ? limit * TO_OVERFETCH_MULTIPLIER : limit,
     };
 }
 /**
@@ -363,6 +396,7 @@ export function buildFetchRecentCriteria(options) {
  */
 export function buildSearchCriteria(options) {
     const { sender, subject, body, since, before, to } = options;
+    const recipients = to ? (Array.isArray(to) ? to : [to]) : undefined;
     const criteria = {};
     if (sender)
         criteria.from = sender;
@@ -375,9 +409,9 @@ export function buildSearchCriteria(options) {
     if (before)
         criteria.before = before;
     // TO is intentionally excluded — filtered client-side after fetch
-    // When TO was the only effective filter (nothing else bounds the search),
-    // inject a date floor to prevent unbounded full-mailbox scans
-    if (to && Object.keys(criteria).length === 0) {
+    // When recipient filtering was the only effective filter (nothing else
+    // bounds the search), inject a date floor to prevent unbounded full-mailbox scans
+    if (recipients && Object.keys(criteria).length === 0) {
         const sinceFloor = new Date();
         sinceFloor.setDate(sinceFloor.getDate() - DEFAULT_SINCE_DAYS);
         criteria.since = sinceFloor;
@@ -387,7 +421,7 @@ export function buildSearchCriteria(options) {
     }
     return {
         criteria,
-        clientSideTo: to,
+        clientSideRecipients: recipients,
     };
 }
 /**
@@ -408,11 +442,11 @@ export async function fetchRecent(config, password, options = {}) {
         }
         catch { /* invalid — ignore */ }
     }
-    const { criteria, clientSideTo, fetchLimit } = buildFetchRecentCriteria({
+    const { criteria, clientSideRecipients, fetchLimit } = buildFetchRecentCriteria({
         sender, since, before, to, limit,
     });
     const t0 = Date.now();
-    diag("fetchRecent", "start", `folder=${folder} criteria=${JSON.stringify(criteria)} fetchLimit=${fetchLimit} clientSideTo=${clientSideTo ?? "none"} beforeUid=${beforeUid ?? "none"}`);
+    diag("fetchRecent", "start", `folder=${folder} criteria=${JSON.stringify(criteria)} fetchLimit=${fetchLimit} clientSideRecipients=${clientSideRecipients ? `[${clientSideRecipients.join(",")}]` : "none"} beforeUid=${beforeUid ?? "none"}`);
     try {
         await client.connect();
         diag("fetchRecent", "connected", `${Date.now() - t0}ms`);
@@ -441,6 +475,8 @@ export async function fetchRecent(config, password, options = {}) {
             const uidList = recentUids.map(String).join(",");
             diag("fetchRecent", "fetching envelopes", `UIDs=[${uidList}]`);
             let envelopeCount = 0;
+            let recipientKept = 0;
+            let recipientHidden = 0;
             for await (const msg of client.fetch(uidList, {
                 envelope: true,
                 uid: true,
@@ -449,9 +485,14 @@ export async function fetchRecent(config, password, options = {}) {
             }, { uid: true })) {
                 envelopeCount++;
                 diag("fetchRecent", `envelope #${envelopeCount}`, `uid=${msg.uid} from=${msg.envelope?.from?.[0]?.address ?? "?"} at ${Date.now() - t2}ms`);
-                // Client-side TO filter (replaces IMAP SEARCH TO)
-                if (clientSideTo && !matchesRecipient(msg.envelope ?? {}, clientSideTo))
-                    continue;
+                // Client-side recipient filter (replaces IMAP SEARCH TO), with kept-vs-hidden accounting
+                if (clientSideRecipients) {
+                    if (!matchesRecipient(msg.envelope ?? {}, clientSideRecipients)) {
+                        recipientHidden++;
+                        continue;
+                    }
+                    recipientKept++;
+                }
                 const fromAddr = msg.envelope?.from?.[0]?.address ?? "(unknown)";
                 const subject = msg.envelope?.subject ?? "(no subject)";
                 const date = msg.envelope?.date?.toISOString() ?? "(unknown date)";
@@ -459,30 +500,39 @@ export async function fetchRecent(config, password, options = {}) {
                 const inReplyTo = msg.envelope?.inReplyTo ?? null;
                 if (subjectRegex && !subjectRegex.test(subject))
                     continue;
-                // Stop once we have enough matches
-                if (messages.length >= limit)
-                    break;
-                const bodyPreview = extractBodyFromFetch(msg);
-                diag("fetchRecent", `body #${envelopeCount}`, `uid=${msg.uid} preview=${bodyPreview.length}chars type=${msg.bodyStructure?.type ?? "?"}`);
-                const attachments = walkAttachmentMetadata(msg.bodyStructure);
-                messages.push({
-                    uid: msg.uid,
-                    messageId,
-                    inReplyTo,
-                    from: fromAddr,
-                    subject,
-                    date,
-                    bodyPreview,
-                    attachments,
-                });
+                // Collect up to `limit` messages for display, but keep iterating past
+                // that point so the recipient kept/hidden accounting covers the whole
+                // fetched window — the envelopes are already fetched, so the extra
+                // iterations cost nothing on the wire and we skip body extraction.
+                if (messages.length < limit) {
+                    const bodyPreview = extractBodyFromFetch(msg);
+                    diag("fetchRecent", `body #${envelopeCount}`, `uid=${msg.uid} preview=${bodyPreview.length}chars type=${msg.bodyStructure?.type ?? "?"}`);
+                    const attachments = walkAttachmentMetadata(msg.bodyStructure);
+                    messages.push({
+                        uid: msg.uid,
+                        messageId,
+                        inReplyTo,
+                        from: fromAddr,
+                        subject,
+                        date,
+                        bodyPreview,
+                        attachments,
+                    });
+                }
             }
             diag("fetchRecent", "fetch done", `${envelopeCount} envelopes, ${messages.length} messages in ${Date.now() - t2}ms (total ${Date.now() - t0}ms)`);
+            if (clientSideRecipients) {
+                diag("fetchRecent", "filter applied", `kept=${recipientKept} hidden=${recipientHidden} recipients=[${clientSideRecipients.join(",")}]`);
+            }
             // Return newest first
             messages.reverse();
             // Calculate pagination cursor: use the oldest UID in the *fetched* set
             // (not the filtered set) to avoid skipping messages between filtered-out
-            // and kept messages when client-side TO/subject filtering is active
+            // and kept messages when client-side recipient/subject filtering is active
             const result = { messages };
+            if (clientSideRecipients) {
+                result.recipientFilter = { kept: recipientKept, hidden: recipientHidden, recipients: clientSideRecipients };
+            }
             if (totalAfterCursor > fetchLimit && recentUids.length > 0) {
                 const oldestFetchedUid = recentUids[0]; // UIDs are sorted ascending
                 result.nextBeforeUid = oldestFetchedUid;
@@ -511,13 +561,13 @@ export async function fetchRecent(config, password, options = {}) {
 export async function searchMessages(config, password, query) {
     const { sender, subject, body, since, before, limit = 20, to, folder = "inbox", beforeUid } = query;
     const client = createClient(config, password);
-    // When client-side TO filtering is active, overfetch to compensate for non-matching messages
-    const fetchLimit = to ? limit * TO_OVERFETCH_MULTIPLIER : limit;
-    const { criteria, clientSideTo } = buildSearchCriteria({
+    const { criteria, clientSideRecipients } = buildSearchCriteria({
         sender, subject, body, since, before, to,
     });
+    // When client-side recipient filtering is active, overfetch to compensate for non-matching messages
+    const fetchLimit = clientSideRecipients ? limit * TO_OVERFETCH_MULTIPLIER : limit;
     const t0 = Date.now();
-    diag("searchMessages", "start", `folder=${folder} criteria=${JSON.stringify(criteria)} clientSideTo=${clientSideTo ?? "none"} beforeUid=${beforeUid ?? "none"}`);
+    diag("searchMessages", "start", `folder=${folder} criteria=${JSON.stringify(criteria)} clientSideRecipients=${clientSideRecipients ? `[${clientSideRecipients.join(",")}]` : "none"} beforeUid=${beforeUid ?? "none"}`);
     try {
         await client.connect();
         diag("searchMessages", "connected", `${Date.now() - t0}ms`);
@@ -542,6 +592,8 @@ export async function searchMessages(config, password, query) {
             const messages = [];
             const t2 = Date.now();
             let envelopeCount = 0;
+            let recipientKept = 0;
+            let recipientHidden = 0;
             for await (const msg of client.fetch(recentUids.map(String).join(","), {
                 envelope: true,
                 uid: true,
@@ -549,33 +601,47 @@ export async function searchMessages(config, password, query) {
                 bodyParts: [{ key: "1", start: 0, maxLength: BODY_MAX_BYTES }],
             }, { uid: true })) {
                 envelopeCount++;
-                // Client-side TO filter (replaces IMAP SEARCH TO)
-                if (clientSideTo && !matchesRecipient(msg.envelope ?? {}, clientSideTo))
-                    continue;
+                // Client-side recipient filter (replaces IMAP SEARCH TO), with kept-vs-hidden accounting
+                if (clientSideRecipients) {
+                    if (!matchesRecipient(msg.envelope ?? {}, clientSideRecipients)) {
+                        recipientHidden++;
+                        continue;
+                    }
+                    recipientKept++;
+                }
                 const fromAddr = msg.envelope?.from?.[0]?.address ?? "(unknown)";
                 const subj = msg.envelope?.subject ?? "(no subject)";
                 const date = msg.envelope?.date?.toISOString() ?? "(unknown date)";
                 const messageId = msg.envelope?.messageId ?? null;
                 const inReplyTo = msg.envelope?.inReplyTo ?? null;
-                // Stop once we have enough matches
-                if (messages.length >= limit)
-                    break;
-                const bodyPreview = extractBodyFromFetch(msg);
-                const attachments = walkAttachmentMetadata(msg.bodyStructure);
-                messages.push({
-                    uid: msg.uid,
-                    messageId,
-                    inReplyTo,
-                    from: fromAddr,
-                    subject: subj,
-                    date,
-                    bodyPreview,
-                    attachments,
-                });
+                // Collect up to `limit` messages for display, but keep iterating past
+                // that point so the recipient kept/hidden accounting covers the whole
+                // fetched window — the envelopes are already fetched, so the extra
+                // iterations cost nothing on the wire and we skip body extraction.
+                if (messages.length < limit) {
+                    const bodyPreview = extractBodyFromFetch(msg);
+                    const attachments = walkAttachmentMetadata(msg.bodyStructure);
+                    messages.push({
+                        uid: msg.uid,
+                        messageId,
+                        inReplyTo,
+                        from: fromAddr,
+                        subject: subj,
+                        date,
+                        bodyPreview,
+                        attachments,
+                    });
+                }
             }
             diag("searchMessages", "fetch done", `${envelopeCount} envelopes, ${messages.length} messages in ${Date.now() - t2}ms (total ${Date.now() - t0}ms)`);
+            if (clientSideRecipients) {
+                diag("searchMessages", "filter applied", `kept=${recipientKept} hidden=${recipientHidden} recipients=[${clientSideRecipients.join(",")}]`);
+            }
             messages.reverse();
             const result = { messages };
+            if (clientSideRecipients) {
+                result.recipientFilter = { kept: recipientKept, hidden: recipientHidden, recipients: clientSideRecipients };
+            }
             if (totalAfterCursor > fetchLimit && recentUids.length > 0) {
                 const oldestFetchedUid = recentUids[0]; // UIDs are sorted ascending
                 result.nextBeforeUid = oldestFetchedUid;