@rubytech/create-maxy-code 0.1.477 → 0.1.478

package/payload/platform/plugins/email/mcp/dist/lib/sent-copy-sweep.js

@@ -0,0 +1,79 @@
+/**
+ * Standing reconciliation of sends against copies actually present in \Sent.
+ *
+ * Post-condition reporting on each tool only covers sends the agent was
+ * present for. A mailbox that silently stops filing copies emits nothing at
+ * all — that no-event blind spot is what let four days pass before an operator
+ * noticed by hand (Task 1822).
+ *
+ * The copy status comes from reading \Sent, not from the ledger's own recorded
+ * outcome. Trusting the recorded flag would only replay what the tool already
+ * said; re-reading the folder is what makes this independent evidence, and it
+ * is the only way a copy that was filed and later removed shows up.
+ *
+ * Presence is tested per Message-ID, never by comparing bulk counts. \Sent
+ * holds everything the mailbox owner sends from any client, so a total count
+ * is dominated by messages this plugin never sent: a mailbox filing none of
+ * our sends still reads as healthy the moment its owner sends a few from their
+ * phone. Bulk comparison would report clean on precisely the incident this
+ * task exists to catch.
+ */
+export const SWEEP_WINDOW_MS = 24 * 60 * 60 * 1000;
+export function formatSweepLine(r) {
+    const base = `[email-sent-sweep] op=reconcile account=${r.accountId} mailbox=${r.mailbox} ` +
+        `sends=${r.sends} copies=${r.copies} shortfall=${r.shortfall} status=${r.status}`;
+    return r.detail ? `${base} detail=${r.detail}` : base;
+}
+export async function sweepAccount(accountId, nowMs, deps) {
+    const sinceMs = nowMs - SWEEP_WINDOW_MS;
+    const configs = await deps.listConfigs(accountId);
+    const ledger = deps.readLedger(sinceMs);
+    const results = [];
+    for (const config of configs) {
+        const messageIds = ledger.filter((e) => e.mailbox === config.email).map((e) => e.messageId);
+        const sends = messageIds.length;
+        // A mailbox that sent nothing needs no connection to report clean. Opening
+        // one per idle mailbox every hour is cost with no finding behind it.
+        if (sends === 0) {
+            results.push({
+                accountId,
+                mailbox: config.email,
+                sends: 0,
+                copies: 0,
+                shortfall: 0,
+                status: "clean",
+            });
+            continue;
+        }
+        // Each mailbox is reported independently: one unreachable server must not
+        // suppress the result for every other mailbox on the account.
+        try {
+            const password = await deps.loadPassword(config.email);
+            const { missing } = await deps.findMissingInSent(config, password, messageIds);
+            const shortfall = missing.length;
+            results.push({
+                accountId,
+                mailbox: config.email,
+                sends,
+                copies: sends - shortfall,
+                shortfall,
+                status: shortfall > 0 ? "shortfall" : "clean",
+            });
+        }
+        catch (err) {
+            // A mailbox that could not be read is not a mailbox losing copies.
+            // Reporting a shortfall here would invent a finding out of an outage.
+            results.push({
+                accountId,
+                mailbox: config.email,
+                sends,
+                copies: 0,
+                shortfall: 0,
+                status: "check-failed",
+                detail: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    return results;
+}
+//# sourceMappingURL=sent-copy-sweep.js.map

package/payload/platform/plugins/email/mcp/dist/lib/sent-copy-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-copy-sweep.js","sourceRoot":"","sources":["../../src/lib/sent-copy-sweep.ts"],"names":[],"mappings":"AAEA;;;;;;;;;;;;;;;;;;;GAmBG;AACH,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAwBnD,MAAM,UAAU,eAAe,CAAC,CAAqB;IACnD,MAAM,IAAI,GACR,2CAA2C,CAAC,CAAC,SAAS,YAAY,CAAC,CAAC,OAAO,GAAG;QAC9E,SAAS,CAAC,CAAC,KAAK,WAAW,CAAC,CAAC,MAAM,cAAc,CAAC,CAAC,SAAS,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC;IACpF,OAAO,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,WAAW,CAAC,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC;AACxD,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,YAAY,CAChC,SAAiB,EACjB,KAAa,EACb,IAAe;IAEf,MAAM,OAAO,GAAG,KAAK,GAAG,eAAe,CAAC;IACxC,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,IAAI,CAAC,UAAU,CAAC,OAAO,CAAC,CAAC;IACxC,MAAM,OAAO,GAAyB,EAAE,CAAC;IAEzC,KAAK,MAAM,MAAM,IAAI,OAAO,EAAE,CAAC;QAC7B,MAAM,UAAU,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,MAAM,CAAC,KAAK,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;QAC5F,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC;QAEhC,2EAA2E;QAC3E,qEAAqE;QACrE,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YAChB,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,KAAK,EAAE,CAAC;gBACR,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,OAAO;aAChB,CAAC,CAAC;YACH,SAAS;QACX,CAAC;QAED,0EAA0E;QAC1E,8DAA8D;QAC9D,IAAI,CAAC;YACH,MAAM,QAAQ,GAAG,MAAM,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;YACvD,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,IAAI,CAAC,iBAAiB,CAAC,MAAM,EAAE,QAAQ,EAAE,UAAU,CAAC,CAAC;YAC/E,MAAM,SAAS,GAAG,OAAO,CAAC,MAAM,CAAC;YACjC,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,KAAK;gBACL,MAAM,EAAE,KAAK,GAAG,SAAS;gBACzB,SAAS;gBACT,MAAM,EAAE,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO;aAC9C,CAAC,CAAC;QACL,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,mEAAmE;YACnE,sEAAsE;YACtE,OAAO,CAAC,IAAI,CAAC;gBACX,SAAS;gBACT,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,KAAK;gBACL,MAAM,EAAE,CAAC;gBACT,SAAS,EAAE,CAAC;gBACZ,MAAM,EAAE,cAAc;gBACtB,MAAM,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACzD,CAAC,CAAC;QACL,CAAC;IACH,CAAC;IAED,OAAO,OAAO,CAAC;AACjB,CAAC"}

package/payload/platform/plugins/email/mcp/dist/lib/sent-ledger.d.ts

@@ -0,0 +1,44 @@
+/**
+ * Append-only record of what each send actually achieved, written after the
+ * \Sent read-back has returned.
+ *
+ * This is deliberately not an intent line. "Filed to Sent" written before the
+ * read-back would be the same unverified claim the model was already making,
+ * relocated into a log where it is harder to challenge (Task 1822). Every row
+ * here states an observed outcome.
+ *
+ * It exists because nothing else records that a send happened at all — SMTP
+ * diags only on failure — so the standing sweep had no left-hand side to
+ * reconcile \Sent against.
+ */
+export interface SentLedgerEntry {
+    at: string;
+    accountId: string;
+    mailbox: string;
+    messageId: string;
+    copy: "found" | "not-in-sent" | "no-sent-folder" | "check-failed";
+    sentFolder?: string;
+    sentUid?: number;
+}
+export declare function ledgerPath(): string;
+/**
+ * Append one row. Pure append, never read-modify-write.
+ *
+ * Two sends completing together would otherwise interleave read/read/write/
+ * write and silently drop a row, which would show up later as a phantom
+ * shortfall. O_APPEND keeps concurrent single-line writes from tearing.
+ * Trimming is the sweep's job — see pruneSentLedger.
+ */
+export declare function appendSentLedger(entry: SentLedgerEntry): void;
+/**
+ * Drop rows past the retention window.
+ *
+ * Called once per sweep run, from the sweep's own single process, rather than
+ * on every send: rewriting the file is the one operation that can lose a
+ * concurrent append, so it happens as rarely as possible and never on the send
+ * path. A send landing inside the rewrite window loses at most its own
+ * observability row, never the mail.
+ */
+export declare function pruneSentLedger(): void;
+export declare function readSentLedger(sinceMs: number): SentLedgerEntry[];
+//# sourceMappingURL=sent-ledger.d.ts.map

package/payload/platform/plugins/email/mcp/dist/lib/sent-ledger.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-ledger.d.ts","sourceRoot":"","sources":["../../src/lib/sent-ledger.ts"],"names":[],"mappings":"AAGA;;;;;;;;;;;;GAYG;AACH,MAAM,WAAW,eAAe;IAC9B,EAAE,EAAE,MAAM,CAAC;IACX,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,EAAE,MAAM,CAAC;IAChB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,OAAO,GAAG,aAAa,GAAG,gBAAgB,GAAG,cAAc,CAAC;IAClE,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;CAClB;AAKD,wBAAgB,UAAU,IAAI,MAAM,CAGnC;AAgBD;;;;;;;GAOG;AACH,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,eAAe,GAAG,IAAI,CAE7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,eAAe,IAAI,IAAI,CAYtC;AAED,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,eAAe,EAAE,CAIjE"}

package/payload/platform/plugins/email/mcp/dist/lib/sent-ledger.js

@@ -0,0 +1,63 @@
+import { existsSync, readFileSync, writeFileSync, appendFileSync } from "node:fs";
+import { resolve } from "node:path";
+/** Retained span. The sweep window is 24h; 48h leaves a full window of margin. */
+const RETENTION_MS = 48 * 60 * 60 * 1000;
+export function ledgerPath() {
+    const root = process.env.PLATFORM_ROOT ?? resolve(import.meta.dirname, "../../../..");
+    return resolve(root, "config/email-sent-ledger.jsonl");
+}
+function parseLines(raw) {
+    const out = [];
+    for (const line of raw.split("\n")) {
+        if (!line.trim())
+            continue;
+        try {
+            out.push(JSON.parse(line));
+        }
+        catch {
+            // A malformed line is skipped, never thrown on: this file is
+            // observability, and a parse error must not take out a send.
+        }
+    }
+    return out;
+}
+/**
+ * Append one row. Pure append, never read-modify-write.
+ *
+ * Two sends completing together would otherwise interleave read/read/write/
+ * write and silently drop a row, which would show up later as a phantom
+ * shortfall. O_APPEND keeps concurrent single-line writes from tearing.
+ * Trimming is the sweep's job — see pruneSentLedger.
+ */
+export function appendSentLedger(entry) {
+    appendFileSync(ledgerPath(), JSON.stringify(entry) + "\n", { mode: 0o600 });
+}
+/**
+ * Drop rows past the retention window.
+ *
+ * Called once per sweep run, from the sweep's own single process, rather than
+ * on every send: rewriting the file is the one operation that can lose a
+ * concurrent append, so it happens as rarely as possible and never on the send
+ * path. A send landing inside the rewrite window loses at most its own
+ * observability row, never the mail.
+ */
+export function pruneSentLedger() {
+    const path = ledgerPath();
+    if (!existsSync(path))
+        return;
+    const cutoff = Date.now() - RETENTION_MS;
+    const all = parseLines(readFileSync(path, "utf8"));
+    const kept = all.filter((e) => Date.parse(e.at) >= cutoff);
+    if (kept.length === all.length)
+        return;
+    writeFileSync(path, kept.map((e) => JSON.stringify(e)).join("\n") + (kept.length ? "\n" : ""), {
+        mode: 0o600,
+    });
+}
+export function readSentLedger(sinceMs) {
+    const path = ledgerPath();
+    if (!existsSync(path))
+        return [];
+    return parseLines(readFileSync(path, "utf8")).filter((e) => Date.parse(e.at) >= sinceMs);
+}
+//# sourceMappingURL=sent-ledger.js.map

package/payload/platform/plugins/email/mcp/dist/lib/sent-ledger.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-ledger.js","sourceRoot":"","sources":["../../src/lib/sent-ledger.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,aAAa,EAAE,cAAc,EAAE,MAAM,SAAS,CAAC;AAClF,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAyBpC,kFAAkF;AAClF,MAAM,YAAY,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAEzC,MAAM,UAAU,UAAU;IACxB,MAAM,IAAI,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,IAAI,OAAO,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;IACtF,OAAO,OAAO,CAAC,IAAI,EAAE,gCAAgC,CAAC,CAAC;AACzD,CAAC;AAED,SAAS,UAAU,CAAC,GAAW;IAC7B,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,IAAI,IAAI,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE;YAAE,SAAS;QAC3B,IAAI,CAAC;YACH,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAoB,CAAC,CAAC;QAChD,CAAC;QAAC,MAAM,CAAC;YACP,6DAA6D;YAC7D,6DAA6D;QAC/D,CAAC;IACH,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,gBAAgB,CAAC,KAAsB;IACrD,cAAc,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;AAC9E,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,eAAe;IAC7B,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO;IAE9B,MAAM,MAAM,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,YAAY,CAAC;IACzC,MAAM,GAAG,GAAG,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,MAAM,IAAI,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,MAAM,CAAC,CAAC;IAC3D,IAAI,IAAI,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM;QAAE,OAAO;IAEvC,aAAa,CAAC,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAC7F,IAAI,EAAE,KAAK;KACZ,CAAC,CAAC;AACL,CAAC;AAED,MAAM,UAAU,cAAc,CAAC,OAAe;IAC5C,MAAM,IAAI,GAAG,UAAU,EAAE,CAAC;IAC1B,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC;QAAE,OAAO,EAAE,CAAC;IACjC,OAAO,UAAU,CAAC,YAAY,CAAC,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC;AAC3F,CAAC"}

package/payload/platform/plugins/email/mcp/dist/scripts/sent-copy-sweep.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sent-copy-sweep.d.ts.map

package/payload/platform/plugins/email/mcp/dist/scripts/sent-copy-sweep.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-copy-sweep.d.ts","sourceRoot":"","sources":["../../src/scripts/sent-copy-sweep.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/scripts/sent-copy-sweep.js

@@ -0,0 +1,55 @@
+/**
+ * Standing sent-copy reconciliation, one pass over every local account.
+ *
+ * Spawned by the scheduling heartbeat on an hourly throttle rather than
+ * imported by it: the scheduling plugin builds with its own rootDir and does
+ * not carry imapflow, so the IMAP work stays on this side of the boundary
+ * (Task 1822).
+ *
+ * Exit code is 0 whenever the sweep ran, including when it found a shortfall —
+ * a shortfall is a reported finding, not a failure of the check. A non-zero
+ * exit means the sweep itself could not run, which is what keeps "failing" and
+ * "did not run" distinguishable (Task 1817).
+ */
+import { existsSync } from "node:fs";
+import { resolve } from "node:path";
+import { enumerateValidAccountIds } from "../../../../../lib/account-enumeration/dist/index.js";
+import { listConfigs, readPassword } from "../lib/credentials.js";
+import { readSentLedger, pruneSentLedger } from "../lib/sent-ledger.js";
+import { findMissingInSent } from "../lib/imap.js";
+import { sweepAccount, formatSweepLine } from "../lib/sent-copy-sweep.js";
+async function main() {
+    const platformRoot = process.env.PLATFORM_ROOT;
+    if (!platformRoot)
+        throw new Error("PLATFORM_ROOT is not set");
+    const accountsDir = resolve(platformRoot, "..", "data/accounts");
+    const accountIds = existsSync(accountsDir) ? enumerateValidAccountIds(accountsDir) : [];
+    const now = Date.now();
+    let mailboxes = 0;
+    for (const accountId of accountIds) {
+        const results = await sweepAccount(accountId, now, {
+            listConfigs,
+            // The password lives in the on-disk store, so this needs no second graph
+            // round-trip on top of the one listConfigs already made.
+            loadPassword: async (email) => readPassword(email),
+            readLedger: readSentLedger,
+            findMissingInSent,
+        });
+        for (const r of results) {
+            console.error(formatSweepLine(r));
+            mailboxes++;
+        }
+    }
+    // Trim here rather than on the send path: rewriting the ledger is the one
+    // operation that can lose a concurrent append, so it runs once an hour in
+    // this single process instead of on every send.
+    pruneSentLedger();
+    console.error(`[email-sent-sweep] done: ${accountIds.length} accounts, ${mailboxes} mailboxes checked`);
+}
+main()
+    .then(() => process.exit(0))
+    .catch((err) => {
+    console.error(`[email-sent-sweep] FAILED ${err instanceof Error ? err.message : String(err)}`);
+    process.exit(1);
+});
+//# sourceMappingURL=sent-copy-sweep.js.map

package/payload/platform/plugins/email/mcp/dist/scripts/sent-copy-sweep.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-copy-sweep.js","sourceRoot":"","sources":["../../src/scripts/sent-copy-sweep.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AACH,OAAO,EAAE,UAAU,EAAE,MAAM,SAAS,CAAC;AACrC,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EAAE,wBAAwB,EAAE,MAAM,sDAAsD,CAAC;AAChG,OAAO,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,uBAAuB,CAAC;AAClE,OAAO,EAAE,cAAc,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxE,OAAO,EAAE,iBAAiB,EAAE,MAAM,gBAAgB,CAAC;AACnD,OAAO,EAAE,YAAY,EAAE,eAAe,EAAE,MAAM,2BAA2B,CAAC;AAE1E,KAAK,UAAU,IAAI;IACjB,MAAM,YAAY,GAAG,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC;IAC/C,IAAI,CAAC,YAAY;QAAE,MAAM,IAAI,KAAK,CAAC,0BAA0B,CAAC,CAAC;IAE/D,MAAM,WAAW,GAAG,OAAO,CAAC,YAAY,EAAE,IAAI,EAAE,eAAe,CAAC,CAAC;IACjE,MAAM,UAAU,GAAG,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,wBAAwB,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,IAAI,SAAS,GAAG,CAAC,CAAC;IAElB,KAAK,MAAM,SAAS,IAAI,UAAU,EAAE,CAAC;QACnC,MAAM,OAAO,GAAG,MAAM,YAAY,CAAC,SAAS,EAAE,GAAG,EAAE;YACjD,WAAW;YACX,yEAAyE;YACzE,yDAAyD;YACzD,YAAY,EAAE,KAAK,EAAE,KAAK,EAAE,EAAE,CAAC,YAAY,CAAC,KAAK,CAAC;YAClD,UAAU,EAAE,cAAc;YAC1B,iBAAiB;SAClB,CAAC,CAAC;QACH,KAAK,MAAM,CAAC,IAAI,OAAO,EAAE,CAAC;YACxB,OAAO,CAAC,KAAK,CAAC,eAAe,CAAC,CAAC,CAAC,CAAC,CAAC;YAClC,SAAS,EAAE,CAAC;QACd,CAAC;IACH,CAAC;IAED,0EAA0E;IAC1E,0EAA0E;IAC1E,gDAAgD;IAChD,eAAe,EAAE,CAAC;IAElB,OAAO,CAAC,KAAK,CACX,4BAA4B,UAAU,CAAC,MAAM,cAAc,SAAS,oBAAoB,CACzF,CAAC;AACJ,CAAC;AAED,IAAI,EAAE;KACH,IAAI,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;KAC3B,KAAK,CAAC,CAAC,GAAG,EAAE,EAAE;IACb,OAAO,CAAC,KAAK,CAAC,6BAA6B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAC/F,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/tools/email-draft-send.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-draft-send.d.ts","sourceRoot":"","sources":["../../src/tools/email-draft-send.ts"],"names":[],"mappings":"AAIA,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAqD7E"}
+{"version":3,"file":"email-draft-send.d.ts","sourceRoot":"","sources":["../../src/tools/email-draft-send.ts"],"names":[],"mappings":"AAOA,UAAU,eAAe;IACvB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,kDAAkD;IAClD,GAAG,EAAE,MAAM,CAAC;CACb;AAED,wBAAsB,cAAc,CAAC,MAAM,EAAE,eAAe,GAAG,OAAO,CAAC,MAAM,CAAC,CAiG7E"}

package/payload/platform/plugins/email/mcp/dist/tools/email-draft-send.js

@@ -1,6 +1,7 @@
 import { loadCredentials } from "../lib/credentials.js";
 import { sendRaw } from "../lib/smtp.js";
-import { fetchDraftSource, deleteDraft } from "../lib/imap.js";
+import { fetchDraftSource, fileDraftToSent } from "../lib/imap.js";
+import { appendSentLedger } from "../lib/sent-ledger.js";
 export async function emailDraftSend(params) {
     const result = await loadCredentials(params.accountId, params.mailbox);
     if ("error" in result)
@@ -32,21 +33,71 @@ export async function emailDraftSend(params) {
         }
         throw err;
     }
-    // Only after SMTP accepts: remove the draft. A failure here means the message
-    // already went out but the draft remains — report a qualified success rather
-    // than letting the removal error masquerade as a send failure (which would
-    // invite a duplicate re-send).
-    let deleted = false;
+    // Only after SMTP accepts: relocate the draft into \Sent. A failure here means
+    // the message already went out, so report a qualified success rather than
+    // letting the filing error masquerade as a send failure (which would invite a
+    // duplicate re-send). The draft is never expunged — on every failure path it
+    // survives where it is, and the note below says so (Task 1821).
+    let filing = null;
+    let filingError = null;
     try {
-        ({ deleted } = await deleteDraft(config, password, params.uid));
+        filing = await fileDraftToSent(config, password, params.uid, messageId);
     }
-    catch {
-        deleted = false;
+    catch (err) {
+        filingError = err instanceof Error ? err.message : String(err);
     }
     const idNote = messageId ? ` (Message-ID: ${messageId})` : "";
-    const cleanupNote = deleted
-        ? `removed from ${draft.folder}`
-        : `sent, but draft UID ${params.uid} could not be confirmed removed from ${draft.folder}`;
-    return `Draft UID ${params.uid} sent to ${recipients.join(", ")}${idNote}; ${cleanupNote}.`;
+    let filedNote;
+    if (filing === null) {
+        filedNote = `the message went out but filing the copy failed, so it is still in ${draft.folder} as UID ${params.uid} (${filingError})`;
+    }
+    else if (filing.filed) {
+        filedNote = `copy confirmed in ${filing.sentFolder} (UID ${filing.sentUid})`;
+    }
+    else if (filing.reason === "no-sent-folder") {
+        filedNote = `no copy was filed — this server advertises no \\Sent folder, so the copy is still in ${filing.draftFolder} as UID ${params.uid}`;
+    }
+    else if (filing.reason === "move-did-nothing") {
+        filedNote = `no copy was filed — the server moved nothing, so the copy is still in ${filing.draftFolder} as UID ${params.uid}`;
+    }
+    else if (filing.reason === "moved-but-not-in-sent") {
+        filedNote = `the message was moved out of ${filing.draftFolder} but no copy was found in the Sent folder`;
+    }
+    else {
+        filedNote = `no copy was filed — draft UID ${params.uid} was no longer in ${filing.draftFolder}`;
+    }
+    // No Message-ID means there is no key to reconcile against later, so the row
+    // would be uncountable. Skip it rather than writing an empty key.
+    if (messageId) {
+        // Each filing outcome keeps its own ledger value. Recording a thrown
+        // filing or a server with no \Sent folder as "not-in-sent" would assert
+        // the folder was searched and found empty — the same conflation this task
+        // removes from the tool result, relocated into the ledger the sweep reads.
+        let copy;
+        if (filing === null)
+            copy = "check-failed";
+        else if (filing.filed)
+            copy = "found";
+        else if (filing.reason === "no-sent-folder")
+            copy = "no-sent-folder";
+        else
+            copy = "not-in-sent";
+        try {
+            appendSentLedger({
+                at: new Date().toISOString(),
+                accountId: params.accountId,
+                mailbox: config.email,
+                messageId,
+                copy,
+                ...(filing !== null && filing.filed
+                    ? { sentFolder: filing.sentFolder, sentUid: filing.sentUid }
+                    : {}),
+            });
+        }
+        catch {
+            // Observability only — never turn a completed send into an error.
+        }
+    }
+    return `Draft UID ${params.uid} sent to ${recipients.join(", ")}${idNote}; ${filedNote}.`;
 }
 //# sourceMappingURL=email-draft-send.js.map

package/payload/platform/plugins/email/mcp/dist/tools/email-draft-send.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-draft-send.js","sourceRoot":"","sources":["../../src/tools/email-draft-send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAC;AAS/D,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAuB;IAC1D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,OAAO,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAEhD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,GAAG,wBAAwB,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,aAAa,MAAM,CAAC,GAAG,sEAAsE,CAC9F,CAAC;IACJ,CAAC;IAED,IAAI,SAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,CAAC,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE;YAC7D,IAAI,EAAE,MAAM,CAAC,YAAY;YACzB,EAAE,EAAE,UAAU;SACf,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,yEAAyE;QACzE,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,uBAAuB,MAAM,CAAC,YAAY,sBAAsB,MAAM,CAAC,KAAK,iGAAiG,CACpL,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,2EAA2E;IAC3E,+BAA+B;IAC/B,IAAI,OAAO,GAAG,KAAK,CAAC;IACpB,IAAI,CAAC;QACH,CAAC,EAAE,OAAO,EAAE,GAAG,MAAM,WAAW,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC;IAClE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,GAAG,KAAK,CAAC;IAClB,CAAC;IACD,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,MAAM,WAAW,GAAG,OAAO;QACzB,CAAC,CAAC,gBAAgB,KAAK,CAAC,MAAM,EAAE;QAChC,CAAC,CAAC,uBAAuB,MAAM,CAAC,GAAG,wCAAwC,KAAK,CAAC,MAAM,EAAE,CAAC;IAC5F,OAAO,aAAa,MAAM,CAAC,GAAG,YAAY,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,WAAW,GAAG,CAAC;AAC9F,CAAC"}
+{"version":3,"file":"email-draft-send.js","sourceRoot":"","sources":["../../src/tools/email-draft-send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AACzC,OAAO,EAAE,gBAAgB,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAC;AAEnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,uBAAuB,CAAC;AAUzD,MAAM,CAAC,KAAK,UAAU,cAAc,CAAC,MAAuB;IAC1D,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,OAAO,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAEhD,MAAM,KAAK,GAAG,MAAM,gBAAgB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,CAAC,CAAC;IACnE,IAAI,CAAC,KAAK,EAAE,CAAC;QACX,MAAM,IAAI,KAAK,CAAC,qBAAqB,MAAM,CAAC,GAAG,wBAAwB,CAAC,CAAC;IAC3E,CAAC;IAED,8EAA8E;IAC9E,6EAA6E;IAC7E,oCAAoC;IACpC,MAAM,UAAU,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,CAAC,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,WAAW,EAAE,GAAG,KAAK,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;IACrG,IAAI,UAAU,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC5B,MAAM,IAAI,KAAK,CACb,aAAa,MAAM,CAAC,GAAG,sEAAsE,CAC9F,CAAC;IACJ,CAAC;IAED,IAAI,SAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,CAAC,EAAE,SAAS,EAAE,GAAG,MAAM,OAAO,CAAC,MAAM,EAAE,QAAQ,EAAE,KAAK,CAAC,MAAM,EAAE;YAC7D,IAAI,EAAE,MAAM,CAAC,YAAY;YACzB,EAAE,EAAE,UAAU;SACf,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,yEAAyE;QACzE,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,uBAAuB,MAAM,CAAC,YAAY,sBAAsB,MAAM,CAAC,KAAK,iGAAiG,CACpL,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,+EAA+E;IAC/E,0EAA0E;IAC1E,8EAA8E;IAC9E,6EAA6E;IAC7E,gEAAgE;IAChE,IAAI,MAAM,GAA4B,IAAI,CAAC;IAC3C,IAAI,WAAW,GAAkB,IAAI,CAAC;IACtC,IAAI,CAAC;QACH,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC1E,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,WAAW,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACjE,CAAC;IAED,MAAM,MAAM,GAAG,SAAS,CAAC,CAAC,CAAC,iBAAiB,SAAS,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;IAC9D,IAAI,SAAiB,CAAC;IACtB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;QACpB,SAAS,GAAG,sEAAsE,KAAK,CAAC,MAAM,WAAW,MAAM,CAAC,GAAG,KAAK,WAAW,GAAG,CAAC;IACzI,CAAC;SAAM,IAAI,MAAM,CAAC,KAAK,EAAE,CAAC;QACxB,SAAS,GAAG,qBAAqB,MAAM,CAAC,UAAU,SAAS,MAAM,CAAC,OAAO,GAAG,CAAC;IAC/E,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB,EAAE,CAAC;QAC9C,SAAS,GAAG,wFAAwF,MAAM,CAAC,WAAW,WAAW,MAAM,CAAC,GAAG,EAAE,CAAC;IAChJ,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,kBAAkB,EAAE,CAAC;QAChD,SAAS,GAAG,yEAAyE,MAAM,CAAC,WAAW,WAAW,MAAM,CAAC,GAAG,EAAE,CAAC;IACjI,CAAC;SAAM,IAAI,MAAM,CAAC,MAAM,KAAK,uBAAuB,EAAE,CAAC;QACrD,SAAS,GAAG,gCAAgC,MAAM,CAAC,WAAW,2CAA2C,CAAC;IAC5G,CAAC;SAAM,CAAC;QACN,SAAS,GAAG,iCAAiC,MAAM,CAAC,GAAG,qBAAqB,MAAM,CAAC,WAAW,EAAE,CAAC;IACnG,CAAC;IAED,6EAA6E;IAC7E,kEAAkE;IAClE,IAAI,SAAS,EAAE,CAAC;QACd,qEAAqE;QACrE,wEAAwE;QACxE,0EAA0E;QAC1E,2EAA2E;QAC3E,IAAI,IAA6B,CAAC;QAClC,IAAI,MAAM,KAAK,IAAI;YAAE,IAAI,GAAG,cAAc,CAAC;aACtC,IAAI,MAAM,CAAC,KAAK;YAAE,IAAI,GAAG,OAAO,CAAC;aACjC,IAAI,MAAM,CAAC,MAAM,KAAK,gBAAgB;YAAE,IAAI,GAAG,gBAAgB,CAAC;;YAChE,IAAI,GAAG,aAAa,CAAC;QAE1B,IAAI,CAAC;YACH,gBAAgB,CAAC;gBACf,EAAE,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;gBAC5B,SAAS,EAAE,MAAM,CAAC,SAAS;gBAC3B,OAAO,EAAE,MAAM,CAAC,KAAK;gBACrB,SAAS;gBACT,IAAI;gBACJ,GAAG,CAAC,MAAM,KAAK,IAAI,IAAI,MAAM,CAAC,KAAK;oBACjC,CAAC,CAAC,EAAE,UAAU,EAAE,MAAM,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,EAAE;oBAC5D,CAAC,CAAC,EAAE,CAAC;aACR,CAAC,CAAC;QACL,CAAC;QAAC,MAAM,CAAC;YACP,kEAAkE;QACpE,CAAC;IACH,CAAC;IAED,OAAO,aAAa,MAAM,CAAC,GAAG,YAAY,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,MAAM,KAAK,SAAS,GAAG,CAAC;AAC5F,CAAC"}

package/payload/platform/plugins/email/mcp/dist/tools/email-reply.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-reply.d.ts","sourceRoot":"","sources":["../../src/tools/email-reply.ts"],"names":[],"mappings":"AAKA,UAAU,WAAW;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CA2ErE"}
+{"version":3,"file":"email-reply.d.ts","sourceRoot":"","sources":["../../src/tools/email-reply.ts"],"names":[],"mappings":"AAMA,UAAU,WAAW;IACnB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,EAAE,MAAM,CAAC;IAClB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAsB,UAAU,CAAC,MAAM,EAAE,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAoFrE"}

package/payload/platform/plugins/email/mcp/dist/tools/email-reply.js

@@ -2,6 +2,7 @@ import { loadCredentials } from "../lib/credentials.js";
 import { sendEmail, formatCopyNote, replySubject } from "../lib/smtp.js";
 import { fetchEnvelopeByMessageId } from "../lib/imap.js";
 import { resolveOutboundAttachments, formatAttachNote, accountDirFor } from "../lib/attachment-resolve.js";
+import { verifyAndRecordSentCopy } from "../lib/sent-copy-note.js";
 export async function emailReply(params) {
     const result = await loadCredentials(params.accountId, params.mailbox);
     if ("error" in result)
@@ -66,6 +67,15 @@ export async function emailReply(params) {
         throw smtpErr;
     }
     const replyType = params.replyAll ? "Reply-all" : "Reply";
-    return `${replyType} sent to ${to}${formatCopyNote(params.cc, params.bcc)}${formatAttachNote(attachments)} (Message-ID: ${sentMessageId})`;
+    // SMTP acceptance is not evidence the provider filed a copy. Read \Sent back
+    // and state what is actually there, as a fact separate from the send itself
+    // (Task 1822).
+    const sentCopyNote = await verifyAndRecordSentCopy({
+        config,
+        password,
+        messageId: sentMessageId,
+        accountId: params.accountId,
+    });
+    return `${replyType} sent to ${to}${formatCopyNote(params.cc, params.bcc)}${formatAttachNote(attachments)} (Message-ID: ${sentMessageId}); ${sentCopyNote}.`;
 }
 //# sourceMappingURL=email-reply.js.map

package/payload/platform/plugins/email/mcp/dist/tools/email-reply.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-reply.js","sourceRoot":"","sources":["../../src/tools/email-reply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAc3G,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAmB;IAClD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,OAAO,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAEhD,0EAA0E;IAC1E,6EAA6E;IAC7E,kEAAkE;IAClE,8CAA8C;IAC9C,MAAM,WAAW,GAAG,0BAA0B,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAEpG,oEAAoE;IACpE,yCAAyC;IACzC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,SAAS,sGAAsG,CACzJ,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;IACxC,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,IAAI,cAAc,CAAC;IAE3D,qCAAqC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,uBAAuB;IACvB,IAAI,EAAU,CAAC;IACf,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,uFAAuF;QACvF,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,CAAC;QAChF,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,YAAY,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IAED,wCAAwC;IACxC,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE;YAChE,EAAE;YACF,OAAO,EAAE,YAAY,CAAC,eAAe,CAAC;YACtC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,iBAAiB;YAC5B,UAAU,EAAE,iBAAiB;YAC7B,WAAW;SACZ,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7E,8CAA8C;QAC9C,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,uBAAuB,MAAM,CAAC,YAAY,sBAAsB,MAAM,CAAC,KAAK,iGAAiG,CACxL,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1D,OAAO,GAAG,SAAS,YAAY,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,iBAAiB,aAAa,GAAG,CAAC;AAC7I,CAAC"}
+{"version":3,"file":"email-reply.js","sourceRoot":"","sources":["../../src/tools/email-reply.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,YAAY,EAAE,MAAM,gBAAgB,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,gBAAgB,CAAC;AAC1D,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAcnE,MAAM,CAAC,KAAK,UAAU,UAAU,CAAC,MAAmB;IAClD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,OAAO,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAEhD,0EAA0E;IAC1E,6EAA6E;IAC7E,kEAAkE;IAClE,8CAA8C;IAC9C,MAAM,WAAW,GAAG,0BAA0B,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAEpG,oEAAoE;IACpE,yCAAyC;IACzC,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,MAAM,EAAE,QAAQ,EAAE,MAAM,CAAC,SAAS,CAAC,CAAC;IACpF,IAAI,CAAC,QAAQ,EAAE,CAAC;QACd,MAAM,IAAI,KAAK,CACb,kCAAkC,MAAM,CAAC,SAAS,sGAAsG,CACzJ,CAAC;IACJ,CAAC;IAED,MAAM,iBAAiB,GAAG,QAAQ,CAAC,SAAS,CAAC;IAC7C,MAAM,YAAY,GAAG,QAAQ,CAAC,WAAW,CAAC;IAC1C,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;IACxC,MAAM,UAAU,GAAG,QAAQ,CAAC,WAAW,CAAC;IACxC,MAAM,eAAe,GAAG,QAAQ,CAAC,OAAO,IAAI,cAAc,CAAC;IAE3D,qCAAqC;IACrC,MAAM,SAAS,GAAG,MAAM,CAAC,YAAY,CAAC,WAAW,EAAE,CAAC;IACpD,IAAI,YAAY,CAAC,WAAW,EAAE,KAAK,SAAS,EAAE,CAAC;QAC7C,MAAM,IAAI,KAAK,CAAC,8DAA8D,CAAC,CAAC;IAClF,CAAC;IAED,uBAAuB;IACvB,IAAI,EAAU,CAAC;IACf,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACpB,uFAAuF;QACvF,MAAM,GAAG,GAAG,CAAC,YAAY,EAAE,GAAG,UAAU,EAAE,GAAG,UAAU,CAAC,CAAC;QACzD,MAAM,QAAQ,GAAG,CAAC,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,WAAW,EAAE,KAAK,SAAS,CAAC,CAAC;QAChF,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC3B,CAAC;SAAM,CAAC;QACN,EAAE,GAAG,YAAY,CAAC;IACpB,CAAC;IAED,IAAI,CAAC,EAAE,EAAE,CAAC;QACR,MAAM,IAAI,KAAK,CAAC,6EAA6E,CAAC,CAAC;IACjG,CAAC;IAED,wCAAwC;IACxC,IAAI,aAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,CAAC,EAAE,SAAS,EAAE,aAAa,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE;YAChE,EAAE;YACF,OAAO,EAAE,YAAY,CAAC,eAAe,CAAC;YACtC,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,SAAS,EAAE,iBAAiB;YAC5B,UAAU,EAAE,iBAAiB;YAC7B,WAAW;SACZ,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,OAAO,EAAE,CAAC;QACjB,MAAM,OAAO,GAAG,OAAO,YAAY,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QAC7E,8CAA8C;QAC9C,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,GAAG,OAAO,uBAAuB,MAAM,CAAC,YAAY,sBAAsB,MAAM,CAAC,KAAK,iGAAiG,CACxL,CAAC;QACJ,CAAC;QACD,MAAM,OAAO,CAAC;IAChB,CAAC;IAED,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC;IAC1D,6EAA6E;IAC7E,4EAA4E;IAC5E,eAAe;IACf,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC;QACjD,MAAM;QACN,QAAQ;QACR,SAAS,EAAE,aAAa;QACxB,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,OAAO,GAAG,SAAS,YAAY,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,iBAAiB,aAAa,MAAM,YAAY,GAAG,CAAC;AAC/J,CAAC"}

package/payload/platform/plugins/email/mcp/dist/tools/email-send.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"email-send.d.ts","sourceRoot":"","sources":["../../src/tools/email-send.ts"],"names":[],"mappings":"AAIA,UAAU,UAAU;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CAkCnE"}
+{"version":3,"file":"email-send.d.ts","sourceRoot":"","sources":["../../src/tools/email-send.ts"],"names":[],"mappings":"AAKA,UAAU,UAAU;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,EAAE,CAAC,EAAE,MAAM,EAAE,CAAC;IACd,GAAG,CAAC,EAAE,MAAM,EAAE,CAAC;IACf,WAAW,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAED,wBAAsB,SAAS,CAAC,MAAM,EAAE,UAAU,GAAG,OAAO,CAAC,MAAM,CAAC,CA+CnE"}

package/payload/platform/plugins/email/mcp/dist/tools/email-send.js

@@ -1,6 +1,7 @@
 import { loadCredentials } from "../lib/credentials.js";
 import { sendEmail, formatCopyNote } from "../lib/smtp.js";
 import { resolveOutboundAttachments, formatAttachNote, accountDirFor } from "../lib/attachment-resolve.js";
+import { verifyAndRecordSentCopy } from "../lib/sent-copy-note.js";
 export async function emailSend(params) {
     const result = await loadCredentials(params.accountId, params.mailbox);
     if ("error" in result)
@@ -13,8 +14,11 @@ export async function emailSend(params) {
     // just loaded), not an ambient ACCOUNT_DIR. Falls back to the resolver's env
     // path when undefined.
     const attachments = resolveOutboundAttachments(accountDirFor(params.accountId), params.attachments);
+    // The catch wraps the SMTP call alone. Once SMTP has accepted, the mail is
+    // out, and nothing after this point may surface as a send failure.
+    let messageId;
     try {
-        const { messageId } = await sendEmail(config, password, {
+        ({ messageId } = await sendEmail(config, password, {
             to: params.to,
             subject: params.subject,
             body: params.body,
@@ -22,8 +26,7 @@ export async function emailSend(params) {
             cc: params.cc,
             bcc: params.bcc,
             attachments,
-        });
-        return `Email sent to ${params.to}${formatCopyNote(params.cc, params.bcc)}${formatAttachNote(attachments)} (Message-ID: ${messageId})`;
+        }));
     }
     catch (err) {
         const msg = err instanceof Error ? err.message : String(err);
@@ -32,5 +35,15 @@ export async function emailSend(params) {
         }
         throw err;
     }
+    // SMTP acceptance is not evidence the provider filed a copy. Read \Sent back
+    // and state what is actually there, as a fact separate from the send itself
+    // (Task 1822).
+    const sentCopyNote = await verifyAndRecordSentCopy({
+        config,
+        password,
+        messageId,
+        accountId: params.accountId,
+    });
+    return `Email sent to ${params.to}${formatCopyNote(params.cc, params.bcc)}${formatAttachNote(attachments)} (Message-ID: ${messageId}); ${sentCopyNote}.`;
 }
 //# sourceMappingURL=email-send.js.map

package/payload/platform/plugins/email/mcp/dist/tools/email-send.js.map

@@ -1 +1 @@
-{"version":3,"file":"email-send.js","sourceRoot":"","sources":["../../src/tools/email-send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAc3G,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB;IAChD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,OAAO,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAEhD,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,uBAAuB;IACvB,MAAM,WAAW,GAAG,0BAA0B,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAEpG,IAAI,CAAC;QACH,MAAM,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE;YACtD,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,WAAW;SACZ,CAAC,CAAC;QACH,OAAO,iBAAiB,MAAM,CAAC,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,iBAAiB,SAAS,GAAG,CAAC;IACzI,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,uBAAuB,MAAM,CAAC,YAAY,sBAAsB,MAAM,CAAC,KAAK,iGAAiG,CACpL,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;AACH,CAAC"}
+{"version":3,"file":"email-send.js","sourceRoot":"","sources":["../../src/tools/email-send.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,MAAM,uBAAuB,CAAC;AACxD,OAAO,EAAE,SAAS,EAAE,cAAc,EAAE,MAAM,gBAAgB,CAAC;AAC3D,OAAO,EAAE,0BAA0B,EAAE,gBAAgB,EAAE,aAAa,EAAE,MAAM,8BAA8B,CAAC;AAC3G,OAAO,EAAE,uBAAuB,EAAE,MAAM,0BAA0B,CAAC;AAcnE,MAAM,CAAC,KAAK,UAAU,SAAS,CAAC,MAAkB;IAChD,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,MAAM,CAAC,SAAS,EAAE,MAAM,CAAC,OAAO,CAAC,CAAC;IACvE,IAAI,OAAO,IAAI,MAAM;QAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAErD,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,GAAG,MAAM,CAAC,WAAW,CAAC;IAEhD,4EAA4E;IAC5E,0EAA0E;IAC1E,0EAA0E;IAC1E,2EAA2E;IAC3E,6EAA6E;IAC7E,uBAAuB;IACvB,MAAM,WAAW,GAAG,0BAA0B,CAAC,aAAa,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC,WAAW,CAAC,CAAC;IAEpG,2EAA2E;IAC3E,mEAAmE;IACnE,IAAI,SAAiB,CAAC;IACtB,IAAI,CAAC;QACH,CAAC,EAAE,SAAS,EAAE,GAAG,MAAM,SAAS,CAAC,MAAM,EAAE,QAAQ,EAAE;YACjD,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,OAAO,EAAE,MAAM,CAAC,OAAO;YACvB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,IAAI,EAAE,MAAM,CAAC,IAAI;YACjB,EAAE,EAAE,MAAM,CAAC,EAAE;YACb,GAAG,EAAE,MAAM,CAAC,GAAG;YACf,WAAW;SACZ,CAAC,CAAC,CAAC;IACN,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,MAAM,GAAG,GAAG,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;QAC7D,IAAI,MAAM,CAAC,YAAY,KAAK,MAAM,CAAC,KAAK,EAAE,CAAC;YACzC,MAAM,IAAI,KAAK,CACb,GAAG,GAAG,uBAAuB,MAAM,CAAC,YAAY,sBAAsB,MAAM,CAAC,KAAK,iGAAiG,CACpL,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,CAAC;IACZ,CAAC;IAED,6EAA6E;IAC7E,4EAA4E;IAC5E,eAAe;IACf,MAAM,YAAY,GAAG,MAAM,uBAAuB,CAAC;QACjD,MAAM;QACN,QAAQ;QACR,SAAS;QACT,SAAS,EAAE,MAAM,CAAC,SAAS;KAC5B,CAAC,CAAC;IACH,OAAO,iBAAiB,MAAM,CAAC,EAAE,GAAG,cAAc,CAAC,MAAM,CAAC,EAAE,EAAE,MAAM,CAAC,GAAG,CAAC,GAAG,gBAAgB,CAAC,WAAW,CAAC,iBAAiB,SAAS,MAAM,YAAY,GAAG,CAAC;AAC3J,CAAC"}

package/payload/platform/plugins/email/references/email-reference.md

@@ -103,6 +103,42 @@ Use `email-reply` when responding to a received email. Use `email-send` for new
 
 Both `email-send` and `email-reply` accept optional `cc` and `bcc` fields. Each is an array of email addresses (one element or many); every address is validated individually. CC recipients appear in the message header and are visible to all recipients. BCC recipients receive the message but do not appear in any header — the other recipients cannot see them. Omitting both sends exactly as before, with no CC/BCC headers. The success message names the CC recipients so the operator can confirm the copy went out, and reports the BCC count without naming them, preserving the blind semantics.
 
+## The Sent copy is verified, not assumed
+
+SMTP accepting a message is not evidence that the provider filed a copy anywhere. `email-send`, `email-reply` and `email-draft-send` therefore each read the mailbox's `\Sent` folder back after the send and report what is actually there, as a fact separate from the send itself. The search is by Message-ID, retried briefly because providers do not file the copy at the instant SMTP returns.
+
+Four outcomes are reported, and they are deliberately distinct:
+
+| Result clause | Means |
+|---|---|
+| `copy confirmed in <folder> (UID n)` | The copy was found by search. A folder and UID are only ever named when they were read back. |
+| `no copy was found in <folder>` | The folder was searched and the message is not in it. |
+| `no copy was filed — this server advertises no \Sent folder` | There is nowhere to file to. Not the same as a missing copy. |
+| `the Sent folder could not be checked (<error>), so the copy is unconfirmed` | The check itself failed. Not evidence either way. |
+
+A send whose copy cannot be located is still a successful send, and the result says both things plainly. Collapsing them into one word is what allowed a sent-copy claim to go unchallenged for four days when no copy was being filed at all.
+
+Every send also appends one row to `config/email-sent-ledger.jsonl` recording the observed outcome. That ledger is the left-hand side of the hourly sweep below; it is written after the read-back, so it records what happened, not what was intended.
+
+## The hourly sent-copy sweep
+
+Per-tool reporting only covers sends the agent was present for. A mailbox that silently stops filing copies emits nothing at all, so nothing surfaces until someone checks by hand.
+
+The install heartbeat therefore spawns `email/mcp/dist/scripts/sent-copy-sweep.js` once an hour. Per account, per mailbox, it takes the Message-IDs this plugin sent in the trailing 24 hours and asks `\Sent` whether each one is actually there, then reports:
+
+```
+[email-sent-sweep] op=reconcile account=<id> mailbox=<email> sends=N copies=M shortfall=K status=clean|shortfall|check-failed
+```
+
+It reports on mailboxes with zero sends too, so a silent check is distinguishable from an absent one. A mailbox that could not be read is `check-failed`, never a shortfall — an unreadable mailbox and a mailbox losing copies are different findings.
+
+Two properties of that design are load-bearing:
+
+- **Presence is asked per Message-ID, never by comparing totals.** `\Sent` holds everything the mailbox owner sends from any client. A bulk count is dominated by messages this plugin never sent, so a mailbox filing none of our sends would still look healthy the moment its owner sends a few from their phone — which is exactly the incident this check exists to catch.
+- **The answer comes from the folder, not from the ledger's own recorded outcome.** Re-reading is what makes the sweep independent evidence rather than a replay of what the tool already said, and it is the only way a copy that was filed and later removed shows up.
+
+The sweep also trims the ledger past its 48-hour retention. That rewrite happens here, once an hour in a single process, rather than on the send path where it could lose a concurrent row.
+
 ## Attachments
 
 Both `email-send` and `email-reply` accept an optional `attachments` array of absolute file paths. Each path must point to a regular file inside the account directory and be 25 MB or smaller; the path is validated before the message is sent, so an invalid, missing, oversized, or out-of-account path fails the call with a clear error and no email dispatched. Validated files ride the message as real SMTP attachments, and the success message names each attached file.

package/payload/platform/plugins/scheduling/mcp/dist/__tests__/sent-sweep-throttle.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=sent-sweep-throttle.test.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/__tests__/sent-sweep-throttle.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-sweep-throttle.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/sent-sweep-throttle.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/scheduling/mcp/dist/__tests__/sent-sweep-throttle.test.js

@@ -0,0 +1,18 @@
+import { describe, it, expect } from "vitest";
+import { shouldRunSentSweep } from "../lib/sent-sweep-throttle.js";
+const HOUR = 60 * 60 * 1000;
+describe("shouldRunSentSweep", () => {
+    it("runs when there is no prior state", () => {
+        expect(shouldRunSentSweep(undefined, 1_000_000, HOUR)).toBe(true);
+    });
+    it("does not run again inside the interval", () => {
+        expect(shouldRunSentSweep({ lastRunMs: 1_000_000 }, 1_000_000 + HOUR / 2, HOUR)).toBe(false);
+    });
+    it("runs once the interval has elapsed", () => {
+        expect(shouldRunSentSweep({ lastRunMs: 1_000_000 }, 1_000_000 + HOUR, HOUR)).toBe(true);
+    });
+    it("runs when the clock stepped backwards", () => {
+        expect(shouldRunSentSweep({ lastRunMs: 5_000_000 }, 1_000_000, HOUR)).toBe(true);
+    });
+});
+//# sourceMappingURL=sent-sweep-throttle.test.js.map

package/payload/platform/plugins/scheduling/mcp/dist/__tests__/sent-sweep-throttle.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-sweep-throttle.test.js","sourceRoot":"","sources":["../../src/__tests__/sent-sweep-throttle.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,kBAAkB,EAAE,MAAM,+BAA+B,CAAC;AAEnE,MAAM,IAAI,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE5B,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,CAAC,kBAAkB,CAAC,SAAS,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACpE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wCAAwC,EAAE,GAAG,EAAE;QAChD,MAAM,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,IAAI,GAAG,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC/F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,GAAG,IAAI,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,GAAG,EAAE;QAC/C,MAAM,CAAC,kBAAkB,CAAC,EAAE,SAAS,EAAE,SAAS,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACnF,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/sent-sweep-throttle.d.ts

@@ -0,0 +1,13 @@
+/**
+ * Hourly gate for the email sent-copy sweep inside the 60-second heartbeat.
+ *
+ * The sweep opens an IMAP connection per mailbox, which is affordable hourly
+ * and not per minute. Mirrors the provisioning-heartbeat gate in
+ * connector-sync-provision.ts rather than inventing a second pattern.
+ */
+export interface SentSweepState {
+    lastRunMs: number;
+}
+export declare const SENT_SWEEP_INTERVAL_MS: number;
+export declare function shouldRunSentSweep(prev: SentSweepState | undefined, nowMs: number, intervalMs: number): boolean;
+//# sourceMappingURL=sent-sweep-throttle.d.ts.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/sent-sweep-throttle.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-sweep-throttle.d.ts","sourceRoot":"","sources":["../../src/lib/sent-sweep-throttle.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AACH,MAAM,WAAW,cAAc;IAC7B,SAAS,EAAE,MAAM,CAAC;CACnB;AAED,eAAO,MAAM,sBAAsB,QAAiB,CAAC;AAErD,wBAAgB,kBAAkB,CAChC,IAAI,EAAE,cAAc,GAAG,SAAS,EAChC,KAAK,EAAE,MAAM,EACb,UAAU,EAAE,MAAM,GACjB,OAAO,CAMT"}

package/payload/platform/plugins/scheduling/mcp/dist/lib/sent-sweep-throttle.js

@@ -0,0 +1,10 @@
+export const SENT_SWEEP_INTERVAL_MS = 60 * 60 * 1000;
+export function shouldRunSentSweep(prev, nowMs, intervalMs) {
+    if (!prev)
+        return true;
+    const elapsed = nowMs - prev.lastRunMs;
+    // A negative elapsed means the clock stepped backwards (an NTP correction on
+    // a Pi with no battery-backed RTC). Running is the safe side.
+    return elapsed < 0 || elapsed >= intervalMs;
+}
+//# sourceMappingURL=sent-sweep-throttle.js.map

package/payload/platform/plugins/scheduling/mcp/dist/lib/sent-sweep-throttle.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sent-sweep-throttle.js","sourceRoot":"","sources":["../../src/lib/sent-sweep-throttle.ts"],"names":[],"mappings":"AAWA,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAErD,MAAM,UAAU,kBAAkB,CAChC,IAAgC,EAChC,KAAa,EACb,UAAkB;IAElB,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAC;IACvB,MAAM,OAAO,GAAG,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC;IACvC,6EAA6E;IAC7E,8DAA8D;IAC9D,OAAO,OAAO,GAAG,CAAC,IAAI,OAAO,IAAI,UAAU,CAAC;AAC9C,CAAC"}