@rubytech/create-maxy-code 0.1.485 → 0.1.486

package/payload/platform/plugins/cloudflare/skills/data-portal/template/portal.js

@@ -19,6 +19,10 @@
   var sharedEl = document.getElementById('dp-shared');
   var crumbsEl = document.getElementById('dp-crumbs');
   var entriesEl = document.getElementById('dp-entries');
+  var upEl = document.getElementById('dp-up');
+  var uploadOpenEl = document.getElementById('dp-upload-open');
+  var modalEl = document.getElementById('dp-modal');
+  var modalCloseEl = document.getElementById('dp-modal-close');
 
   /* The folder currently open in the "shared with you" tree; '' is its root. */
   var prefix = '';
@@ -38,6 +42,55 @@
     return li;
   }
 
+  /* Lucide folder/file icons, inlined as trusted literals — no network request,
+     no npm dependency. innerHTML is safe here because the markup is fixed and
+     carries no filename or device data; every name still goes through
+     textContent. The stroke is currentColor, so each icon takes its span's
+     colour (folder accent, file muted; see portal.css). */
+  var FOLDER_SVG =
+    '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M20 20a2 2 0 0 0 2-2V8a2 2 0 0 0-2-2h-7.9a2 2 0 0 1-1.69-.9L9.6 3.9A2 2 0 0 0 7.93 3H4a2 2 0 0 0-2 2v13a2 2 0 0 0 2 2Z"/></svg>';
+  var FILE_SVG =
+    '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M15 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7Z"/><path d="M14 2v4a2 2 0 0 0 2 2h4"/></svg>';
+
+  function icon(kind) {
+    var s = document.createElement('span');
+    var dir = kind === 'directory';
+    s.className = dir ? 'dp-icon dp-icon-folder' : 'dp-icon dp-icon-file';
+    s.innerHTML = dir ? FOLDER_SVG : FILE_SVG;
+    return s;
+  }
+
+  /* Split a filename into a stem and its extension. The stem is everything up to
+     the last dot; the extension is the dot and what follows. A name with no dot,
+     or only a leading dot, is all stem. The two render as separate spans so the
+     stem can ellipsis-truncate while the extension stays pinned and visible. */
+  function nameParts(name) {
+    var dot = name.lastIndexOf('.');
+    if (dot > 0) {
+      return { main: name.slice(0, dot), ext: name.slice(dot) };
+    }
+    return { main: name, ext: '' };
+  }
+
+  /* The two-span name block used by both lists. Every value goes through
+     textContent, never markup — the same trust rule the callers already follow.
+     An empty ext adds no second span. */
+  function nameNode(main, ext) {
+    var wrap = document.createElement('span');
+    wrap.className = 'dp-name';
+    var m = document.createElement('span');
+    m.className = 'dp-name-main';
+    m.textContent = main;
+    wrap.appendChild(m);
+    if (ext) {
+      var e = document.createElement('span');
+      e.className = 'dp-name-ext';
+      e.textContent = ext;
+      wrap.appendChild(e);
+    }
+    return wrap;
+  }
+
   function render(files) {
     // replaceChildren, not innerHTML: every filename below is set with
     // textContent so a name like '<img onerror=…>' renders as text, and
@@ -54,7 +107,10 @@
       var a = document.createElement('a');
       a.className = 'dp-file-name';
       a.href = API + '/api/download?key=' + encodeURIComponent(f.objectKey);
-      a.textContent = f.filename;
+      // Full name on hover, since the middle of a long name is clipped away.
+      a.title = f.filename;
+      var p = nameParts(f.filename);
+      a.appendChild(nameNode(p.main, p.ext));
       li.appendChild(a);
 
       var del = document.createElement('button');
@@ -92,6 +148,46 @@
       crumbsEl.appendChild(document.createTextNode(' / '));
       crumbsEl.appendChild(crumb(part, parts.slice(0, i + 1).join('/')));
     });
+    // The up control has no parent to reach from the root, so it is inert there.
+    upEl.disabled = prefix === '';
+  }
+
+  /* One right-click menu at a time. A single element is moved and re-labelled
+     rather than spawning one per row, so dismissal has one thing to hide. */
+  var menuEl = null;
+  function hideMenu() {
+    if (menuEl) { menuEl.hidden = true; }
+  }
+  function showFileMenu(x, y, relPath) {
+    if (!menuEl) {
+      menuEl = document.createElement('div');
+      menuEl.className = 'dp-menu';
+      menuEl.hidden = true;
+      document.body.appendChild(menuEl);
+    }
+    menuEl.replaceChildren();
+    var b = document.createElement('button');
+    b.type = 'button';
+    b.className = 'dp-menu-item';
+    b.textContent = 'Download';
+    b.addEventListener('click', function () {
+      hideMenu();
+      openShared(relPath);
+    });
+    menuEl.appendChild(b);
+    menuEl.style.left = x + 'px';
+    menuEl.style.top = y + 'px';
+    menuEl.hidden = false;
+  }
+  document.addEventListener('click', hideMenu);
+  window.addEventListener('blur', hideMenu);
+
+  /* The endpoint a drag-out points at. redirect=1 makes it 302 to the signed
+     link, so the browser downloads the file rather than a JSON body. Resolved to
+     an absolute URL (DownloadURL requires one) against the page, so it is correct
+     whether api-base is empty, a path, or a full origin. */
+  function downloadUrl(relPath) {
+    return new URL(API + '/api/download?path=' + encodeURIComponent(relPath) + '&redirect=1', location.href).href;
   }
 
   /* Every label goes through textContent, same rule as the upload list: these
@@ -110,7 +206,13 @@
       var b = document.createElement('button');
       b.className = e.kind === 'directory' ? 'dp-folder-name' : 'dp-file-name';
       b.type = 'button';
-      b.textContent = e.kind === 'directory' ? e.name + '/' : e.name;
+      // Full name on hover, since the middle of a long name is clipped away.
+      b.title = e.name;
+      // A folder's tail is its trailing slash; a file's is its extension. Both
+      // stay pinned while the stem truncates.
+      var np = e.kind === 'directory' ? { main: e.name, ext: '/' } : nameParts(e.name);
+      b.appendChild(icon(e.kind));
+      b.appendChild(nameNode(np.main, np.ext));
       b.addEventListener('click', function () {
         if (e.kind === 'directory') {
           prefix = e.relPath;
@@ -119,6 +221,20 @@
           openShared(e.relPath);
         }
       });
+      if (e.kind !== 'directory') {
+        b.draggable = true;
+        b.addEventListener('dragstart', function (ev) {
+          var url = downloadUrl(e.relPath);
+          // DownloadURL is "mime:filename:absolute-url"; octet-stream keeps the
+          // server's content-disposition filename authoritative.
+          ev.dataTransfer.setData('DownloadURL', 'application/octet-stream:' + e.name + ':' + url);
+          ev.dataTransfer.setData('text/uri-list', url);
+        });
+        b.addEventListener('contextmenu', function (ev) {
+          ev.preventDefault();
+          showFileMenu(ev.clientX, ev.clientY, e.relPath);
+        });
+      }
       li.appendChild(b);
       entriesEl.appendChild(li);
     });
@@ -244,24 +360,91 @@
     revealEl.textContent = revealed ? 'Show passcode' : 'Hide passcode';
   });
 
-  document.getElementById('dp-upload').addEventListener('submit', function (e) {
-    e.preventDefault();
-    var input = document.getElementById('dp-file');
-    if (!input.files || !input.files[0]) return;
+  /* Up one level: drop the last path segment and re-list. Inert at the root,
+     where the button is disabled, so this guard is belt-and-braces. */
+  upEl.addEventListener('click', function () {
+    if (prefix === '') return;
+    var parts = prefix.split('/');
+    parts.pop();
+    prefix = parts.join('/');
+    refresh();
+  });
+
+  /* The upload modal. Hidden via the `hidden` attribute so
+     [hidden]{display:none!important} stays authoritative over .dp-modal's
+     display:flex. It dismisses three ways: the close button, a click on the
+     backdrop (never the panel), and Escape while open. */
+  function openModal() {
+    modalEl.hidden = false;
+    document.getElementById('dp-file').focus();
+  }
+  function closeModal() {
+    modalEl.hidden = true;
+  }
+  uploadOpenEl.addEventListener('click', openModal);
+  modalCloseEl.addEventListener('click', closeModal);
+  modalEl.addEventListener('click', function (e) {
+    if (e.target === modalEl) { closeModal(); }
+  });
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape' && !modalEl.hidden) { closeModal(); }
+  });
+
+  var uploadForm = document.getElementById('dp-upload');
+
+  /* One upload path for Browse-and-Upload and for a dropped file. Resolves to
+     { responded, ok }: `responded` is true when the server answered (kept or
+     not), so the picker is cleared only when a retry with the same selection is
+     pointless; `ok` is true only on a kept upload, which is what closes the
+     modal. A network error is { responded:false, ok:false }. */
+  function uploadFile(file) {
     var fd = new FormData();
-    fd.append('file', input.files[0]);
+    fd.append('file', file);
     say('Uploading…');
-    api('/api/upload', { method: 'POST', body: fd })
+    return api('/api/upload', { method: 'POST', body: fd })
       .then(function (r) {
         return r.json();
       })
       .then(function (d) {
         say(d.ok ? 'Uploaded.' : 'Upload failed.');
-        input.value = '';
-        return refresh();
+        return refresh().then(function () { return { responded: true, ok: !!d.ok }; });
       })
       .catch(function () {
         say('Upload failed.');
+        return { responded: false, ok: false };
+      });
+  }
+
+  uploadForm.addEventListener('submit', function (e) {
+    e.preventDefault();
+    var input = document.getElementById('dp-file');
+    if (!input.files || !input.files[0]) return;
+    uploadFile(input.files[0]).then(function (res) {
+      if (res.responded) { input.value = ''; }
+      if (res.ok) { closeModal(); }
+    });
+  });
+
+  uploadForm.addEventListener('dragover', function (e) {
+    e.preventDefault();
+    uploadForm.classList.add('dp-dropping');
+  });
+  uploadForm.addEventListener('dragleave', function (e) {
+    // Only clear when the pointer leaves the form, not when it crosses onto a
+    // child (input, button), which would flicker the outline mid-drag.
+    if (!uploadForm.contains(e.relatedTarget)) {
+      uploadForm.classList.remove('dp-dropping');
+    }
+  });
+  uploadForm.addEventListener('drop', function (e) {
+    e.preventDefault();
+    uploadForm.classList.remove('dp-dropping');
+    var dt = e.dataTransfer;
+    if (dt && dt.files && dt.files[0]) {
+      // The drop target now lives inside the modal, so a kept drop closes it too.
+      uploadFile(dt.files[0]).then(function (res) {
+        if (res.ok) { closeModal(); }
       });
+    }
   });
 })();

package/payload/platform/plugins/cloudflare/skills/data-portal/template/wrangler.toml

@@ -4,7 +4,7 @@
 #   __D1_DATABASE_NAME__ the D1 database name  (<accountId>-<purpose>)
 #   __D1_DATABASE_ID__   the id printed by `wrangler d1 create`
 #   __R2_BUCKET_NAME__   the R2 bucket name    (<accountId>-<purpose>)
-#   __PORTAL_INSTALL_ORIGIN__ the install's public origin (https://<tunnel-hostname>)
+#   __PORTAL_INSTALL_ORIGIN__ the install's PUBLIC origin (https://<public-tunnel-hostname>), NOT the admin/operator host
 name = "__PROJECT_NAME__"
 pages_build_output_dir = "."
 compatibility_date = "2024-01-01"
@@ -22,8 +22,9 @@ binding = "BUCKET"
 bucket_name = "__R2_BUCKET_NAME__"
 
 # Where the install answers, so a download of a device-held file can be signed
-# and sent there. Public information — it is the hostname a client's browser
-# ends up at.
+# and sent there. Public information: it is the hostname a client's browser
+# ends up at. Use the PUBLIC host: the admin host is remote-auth-gated and the
+# edge's signed HEAD probe 401s there, which 503s every download.
 #
 # Its partner, PORTAL_FETCH_SECRET, is deliberately NOT here. This file is
 # committed to the account's assembled tree and the deploy publishes the

package/payload/platform/plugins/email/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "email",
-  "description": "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-status, email-otp-extract.",
+  "description": "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough; email-fetch-attachment for the extracted TEXT of one attachment (PDF via pdftotext, text/* by decode) when data sits inside a file rather than the body. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-status, email-otp-extract.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/email/PLUGIN.md

@@ -1,6 +1,6 @@
 ---
 name: email
-description: "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-status, email-otp-extract."
+description: "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough; email-fetch-attachment for the extracted TEXT of one attachment (PDF via pdftotext, text/* by decode) when data sits inside a file rather than the body. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-status, email-otp-extract."
 tools:
   - name: email-provider-info
     publicAllowlist: false
@@ -14,6 +14,9 @@ tools:
   - name: email-fetch-body
     publicAllowlist: false
     adminAllowlist: false
+  - name: email-fetch-attachment
+    publicAllowlist: false
+    adminAllowlist: false
   - name: email-send
     publicAllowlist: false
     adminAllowlist: false
@@ -84,6 +87,7 @@ Manages the agent's own dedicated email account — IMAP for reading, SMTP for s
 - **Read inbox:** `email-read` — metadata only (UID, sender, subject, date), plus a best-effort `Archive`/`Archive-Section` hint when the IMAP message's `receivedAt` falls inside a stored `:ConversationArchive {source:'email'}` section, plus an `Attachments (N): filename (mime, size); …` footer when the message carries enclosures. Supports pagination (`before_uid`), folders (`inbox`/`sent`), filtering by sender/date/subject. Metadata is derived from IMAP `bodyStructure` — no bytes downloaded.
 - **Search inbox:** `email-search` — live IMAP search by sender, subject, body keyword, date range. Same per-archive hint and attachment footer as `email-read`.
 - **Delete (move to Trash):** `email-delete` — move the messages named by `uids` (from a prior `email-read`/`email-search`, scoped to a source `folder` of `inbox` or `sent`) into the mailbox's Trash folder. **Recoverable, never an expunge** — the message leaves the inbox and permanent removal is left to the operator's own mail client or the provider's Trash auto-purge; this tool never permanently deletes. Trash is resolved per provider: the `\Trash` special-use folder if advertised, else the first existing of `Trash`, `[Gmail]/Trash`, `Deleted Items`, `Deleted Messages`. `Junk` is never treated as Trash. A mailbox with no resolvable Trash yields a typed error and moves nothing — there is no silent expunge fallback. A `uid` that is already gone is counted not-moved without failing the rest; the result reports `Moved N of M message(s) to <Trash>`. It deletes only the UIDs you name, never by search criteria.
+- **Read one attachment's text:** `email-fetch-attachment` — the extracted text of a single inbox attachment, addressed by `uid` plus an optional `index` (1-based, matching the `Attachments (N): …` footer order) or `filename`. With one attachment and no selector, that attachment is read; with more than one and no selector, or an ambiguous filename, the call is refused with a numbered listing. `application/pdf` is extracted via `pdftotext`, `text/*` by decode; any other type reports that it cannot be extracted, and a PDF with no text layer reports it is a scanned image (no OCR), so "no data in the attachment" never reads the same as "the attachment could not be read". Bytes are downloaded once through the 25 MB-capped fetch path; inbox only. Use this when actionable data (a meeting date, an amount) may sit inside a PDF rather than the email body.
 - **Read one whole message:** `email-fetch-body` — the COMPLETE decoded body of a single message addressed by `uid` (with optional `folder`) or `message_id` (resolved across inbox and sent). No 500-char preview cap. Downloads the full RFC822 source and decodes it with `mailparser`, so every MIME shape — flat text, single-part HTML, `multipart/alternative`, and nested `multipart/related`/`multipart/mixed` (Outlook's inline-image house style) — yields a body; the preview tools above intentionally stay preview-only. Use this when the operator wants to read or act on a message's actual content.
 - **Send:** `email-send` — new outbound email. Pass `cc`/`bcc` (each an array of email addresses) to copy or blind-copy recipients — CC appears in the message header, BCC recipients receive the message without appearing in any header. Pass `attachments` (absolute file paths under the account directory, ≤25 MB each) to attach files as SMTP attachments; an invalid path fails the send with no email dispatched. The success message names the CC recipients and reports the BCC count without naming them.
 - **Reply:** `email-reply` — threaded reply to an existing email by `messageId`. Resolves the original envelope via IMAP `SEARCH HEADER Message-ID` (INBOX then `\Sent`), so threading works for any message still present on the server even if the graph never ingested it. Supports `replyAll`, `cc`/`bcc`, and `attachments` (same path rules as `email-send`). Explicit `cc`/`bcc` are added in addition to whatever `replyAll` places in `To`, passed through as given (no overlap de-duplication against `To`).

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-select.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=attachment-select.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-select.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-select.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/attachment-select.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-select.test.js

@@ -0,0 +1,50 @@
+import { describe, it, expect } from "vitest";
+import { resolveAttachmentSelector } from "../lib/imap.js";
+const A = { partKey: "2", filename: "a.pdf", mimeType: "application/pdf", sizeBytes: 10, encoding: "base64" };
+const B = { partKey: "3", filename: "b.pdf", mimeType: "application/pdf", sizeBytes: 20, encoding: "base64" };
+describe("resolveAttachmentSelector", () => {
+    it("single attachment, no selector → that one", () => {
+        expect(resolveAttachmentSelector([A], {})).toEqual({ ok: true, meta: A });
+    });
+    it("multiple attachments, no selector → error listing them", () => {
+        const r = resolveAttachmentSelector([A, B], {});
+        expect(r.ok).toBe(false);
+        if (!r.ok) {
+            expect(r.error).toMatch(/1\. a\.pdf/);
+            expect(r.error).toMatch(/2\. b\.pdf/);
+        }
+    });
+    it("index selects the right attachment", () => {
+        expect(resolveAttachmentSelector([A, B], { index: 2 })).toEqual({ ok: true, meta: B });
+    });
+    it("index out of range → error listing", () => {
+        const r = resolveAttachmentSelector([A], { index: 2 });
+        expect(r.ok).toBe(false);
+        if (!r.ok)
+            expect(r.error).toMatch(/index 2/);
+    });
+    it("filename match is case-insensitive", () => {
+        expect(resolveAttachmentSelector([A, B], { filename: "B.PDF" })).toEqual({ ok: true, meta: B });
+    });
+    it("filename with no match → error", () => {
+        const r = resolveAttachmentSelector([A, B], { filename: "c.pdf" });
+        expect(r.ok).toBe(false);
+        if (!r.ok)
+            expect(r.error).toMatch(/no attachment named/i);
+    });
+    it("filename matching two parts → ambiguous error", () => {
+        const dup = { ...B, filename: "a.pdf" };
+        const r = resolveAttachmentSelector([A, dup], { filename: "a.pdf" });
+        expect(r.ok).toBe(false);
+        if (!r.ok)
+            expect(r.error).toMatch(/more than one/i);
+    });
+    it("no attachments → error", () => {
+        const r = resolveAttachmentSelector([], {});
+        expect(r.ok).toBe(false);
+    });
+    it("index takes precedence over filename when both given", () => {
+        expect(resolveAttachmentSelector([A, B], { index: 1, filename: "b.pdf" })).toEqual({ ok: true, meta: A });
+    });
+});
+//# sourceMappingURL=attachment-select.test.js.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-select.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-select.test.js","sourceRoot":"","sources":["../../src/__tests__/attachment-select.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAG3D,MAAM,CAAC,GAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC9H,MAAM,CAAC,GAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAE9H,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAmB,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,GAAG,yBAAyB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-text.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=attachment-text.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-text.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-text.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/attachment-text.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-text.test.js

@@ -0,0 +1,51 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+// child_process is mocked so the PDF path is testable without a real pdftotext
+// binary or a real PDF. text/* needs no mock.
+// execFileMock returns either { stdout } (success) or { error } (spawn failure).
+// The mocked execFile routes it through promisify's node-style callback, so no
+// synchronous throw ever escapes into the test runner.
+const execFileMock = vi.fn();
+vi.mock("node:child_process", () => ({
+    execFile: (...args) => {
+        const cb = args[args.length - 1];
+        const outcome = execFileMock(args[0], args[1]);
+        if (outcome.error)
+            cb(outcome.error);
+        else
+            cb(null, { stdout: outcome.stdout ?? "" });
+    },
+}));
+import { extractAttachmentText } from "../lib/attachment-text.js";
+describe("extractAttachmentText", () => {
+    beforeEach(() => execFileMock.mockReset());
+    it("decodes text/plain", async () => {
+        const r = await extractAttachmentText(Buffer.from("  meeting at 3pm  "), "text/plain");
+        expect(r.outcome).toBe("extracted");
+        expect(r.text).toBe("meeting at 3pm");
+        expect(r.mimeType).toBe("text/plain");
+    });
+    it("returns unsupported-mime for images", async () => {
+        const r = await extractAttachmentText(Buffer.from([0x89, 0x50]), "image/png");
+        expect(r.outcome).toBe("unsupported-mime");
+        expect(r.text).toBe("");
+    });
+    it("extracts a PDF via pdftotext", async () => {
+        execFileMock.mockReturnValue({ stdout: "Tuesday Sep 8, 2026 10:30am" });
+        const r = await extractAttachmentText(Buffer.from("%PDF-1.4"), "application/pdf");
+        expect(execFileMock).toHaveBeenCalledOnce();
+        expect(execFileMock.mock.calls[0][0]).toBe("pdftotext");
+        expect(r.outcome).toBe("extracted");
+        expect(r.text).toContain("Sep 8, 2026");
+    });
+    it("reports no-text-layer when a PDF yields no text", async () => {
+        execFileMock.mockReturnValue({ stdout: "   " });
+        const r = await extractAttachmentText(Buffer.from("%PDF-1.4"), "application/pdf");
+        expect(r.outcome).toBe("no-text-layer");
+        expect(r.text).toBe("");
+    });
+    it("surfaces a poppler-install hint when pdftotext is missing", async () => {
+        execFileMock.mockReturnValue({ error: new Error("spawn pdftotext ENOENT") });
+        await expect(extractAttachmentText(Buffer.from("%PDF-1.4"), "application/pdf")).rejects.toThrow(/poppler-utils/);
+    });
+});
+//# sourceMappingURL=attachment-text.test.js.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-text.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-text.test.js","sourceRoot":"","sources":["../../src/__tests__/attachment-text.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAE9D,+EAA+E;AAC/E,8CAA8C;AAC9C,iFAAiF;AACjF,+EAA+E;AAC/E,uDAAuD;AACvD,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAC7B,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,GAAG,EAAE,CAAC,CAAC;IACnC,QAAQ,EAAE,CAAC,GAAG,IAAe,EAAE,EAAE;QAC/B,MAAM,EAAE,GAAG,IAAI,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,CAAiD,CAAC;QACjF,MAAM,OAAO,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC,CAAuC,CAAC;QACrF,IAAI,OAAO,CAAC,KAAK;YAAE,EAAE,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;;YAChC,EAAE,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC,CAAC;IAClD,CAAC;CACF,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,qBAAqB,EAAE,MAAM,2BAA2B,CAAC;AAElE,QAAQ,CAAC,uBAAuB,EAAE,GAAG,EAAE;IACrC,UAAU,CAAC,GAAG,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,CAAC;IAE3C,EAAE,CAAC,oBAAoB,EAAE,KAAK,IAAI,EAAE;QAClC,MAAM,CAAC,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,EAAE,YAAY,CAAC,CAAC;QACvF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,gBAAgB,CAAC,CAAC;QACtC,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,MAAM,CAAC,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC,EAAE,WAAW,CAAC,CAAC;QAC9E,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC;QAC3C,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,8BAA8B,EAAE,KAAK,IAAI,EAAE;QAC5C,YAAY,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,6BAA6B,EAAE,CAAC,CAAC;QACxE,MAAM,CAAC,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAClF,MAAM,CAAC,YAAY,CAAC,CAAC,oBAAoB,EAAE,CAAC;QAC5C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACxD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC;QACpC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,aAAa,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iDAAiD,EAAE,KAAK,IAAI,EAAE;QAC/D,YAAY,CAAC,eAAe,CAAC,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,MAAM,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC,CAAC;QAClF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,CAAC;QACxC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2DAA2D,EAAE,KAAK,IAAI,EAAE;QACzE,YAAY,CAAC,eAAe,CAAC,EAAE,KAAK,EAAE,IAAI,KAAK,CAAC,wBAAwB,CAAC,EAAE,CAAC,CAAC;QAC7E,MAAM,MAAM,CAAC,qBAAqB,CAAC,MAAM,CAAC,IAAI,CAAC,UAAU,CAAC,EAAE,iBAAiB,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAC7F,eAAe,CAChB,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/__tests__/email-fetch-attachment.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=email-fetch-attachment.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/email-fetch-attachment.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-fetch-attachment.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/email-fetch-attachment.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/__tests__/email-fetch-attachment.test.js

@@ -0,0 +1,89 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+const loadCredentials = vi.fn();
+const fetchMessageAttachments = vi.fn();
+const fetchAttachmentBytesForMessages = vi.fn();
+const extractAttachmentText = vi.fn();
+vi.mock("../lib/credentials.js", () => ({
+    loadCredentials: (...a) => loadCredentials(...a),
+}));
+// Keep the real resolveAttachmentSelector (pure, already tested); override only
+// the two network-bound functions.
+vi.mock("../lib/imap.js", async (importActual) => {
+    const actual = await importActual();
+    return {
+        ...actual,
+        fetchMessageAttachments: (...a) => fetchMessageAttachments(...a),
+        fetchAttachmentBytesForMessages: (...a) => fetchAttachmentBytesForMessages(...a),
+    };
+});
+vi.mock("../lib/attachment-text.js", () => ({
+    extractAttachmentText: (...a) => extractAttachmentText(...a),
+}));
+import { emailFetchAttachment } from "../tools/email-fetch-attachment.js";
+const PDF = { partKey: "2", filename: "proposal.pdf", mimeType: "application/pdf", sizeBytes: 12345, encoding: "base64" };
+const PDF2 = { partKey: "3", filename: "terms.pdf", mimeType: "application/pdf", sizeBytes: 6789, encoding: "base64" };
+beforeEach(() => {
+    loadCredentials.mockReset();
+    fetchMessageAttachments.mockReset();
+    fetchAttachmentBytesForMessages.mockReset();
+    extractAttachmentText.mockReset();
+    loadCredentials.mockResolvedValue({ credentials: { config: { email: "info@x.com" }, password: "pw" } });
+});
+describe("emailFetchAttachment", () => {
+    it("returns the extracted text with a header for a PDF", async () => {
+        fetchMessageAttachments.mockResolvedValue({ found: true, attachments: [PDF] });
+        fetchAttachmentBytesForMessages.mockResolvedValue([{ uid: 99, partKey: "2", bytes: Buffer.from("x"), failureReason: null }]);
+        extractAttachmentText.mockResolvedValue({ outcome: "extracted", text: "Meeting: Tue Sep 8 10:30", mimeType: "application/pdf" });
+        const out = await emailFetchAttachment({ accountId: "acc", uid: 99 });
+        expect(out).toMatch(/Attachment: proposal\.pdf/);
+        expect(out).toMatch(/part 2/);
+        expect(out).toMatch(/Meeting: Tue Sep 8 10:30/);
+    });
+    it("refuses with a listing when two attachments and no selector", async () => {
+        fetchMessageAttachments.mockResolvedValue({ found: true, attachments: [PDF, PDF2] });
+        const out = await emailFetchAttachment({ accountId: "acc", uid: 99 });
+        expect(out).toMatch(/pass index= or filename=/);
+        expect(out).toMatch(/1\. proposal\.pdf/);
+        expect(fetchAttachmentBytesForMessages).not.toHaveBeenCalled();
+    });
+    it("reports a scanned PDF with no text layer", async () => {
+        fetchMessageAttachments.mockResolvedValue({ found: true, attachments: [PDF] });
+        fetchAttachmentBytesForMessages.mockResolvedValue([{ uid: 99, partKey: "2", bytes: Buffer.from("x"), failureReason: null }]);
+        extractAttachmentText.mockResolvedValue({ outcome: "no-text-layer", text: "", mimeType: "application/pdf" });
+        const out = await emailFetchAttachment({ accountId: "acc", uid: 99 });
+        expect(out).toMatch(/no extractable text layer/);
+        expect(out).toMatch(/OCR is not available/);
+    });
+    it("reports unsupported mime", async () => {
+        const docx = { partKey: "2", filename: "x.docx", mimeType: "application/vnd.openxmlformats-officedocument.wordprocessingml.document", sizeBytes: 10, encoding: "base64" };
+        fetchMessageAttachments.mockResolvedValue({ found: true, attachments: [docx] });
+        fetchAttachmentBytesForMessages.mockResolvedValue([{ uid: 99, partKey: "2", bytes: Buffer.from("x"), failureReason: null }]);
+        extractAttachmentText.mockResolvedValue({ outcome: "unsupported-mime", text: "", mimeType: docx.mimeType });
+        const out = await emailFetchAttachment({ accountId: "acc", uid: 99 });
+        expect(out).toMatch(/cannot be extracted from this type/i);
+    });
+    it("reports an oversize attachment", async () => {
+        fetchMessageAttachments.mockResolvedValue({ found: true, attachments: [PDF] });
+        fetchAttachmentBytesForMessages.mockResolvedValue([{ uid: 99, partKey: "2", bytes: null, failureReason: "oversize" }]);
+        const out = await emailFetchAttachment({ accountId: "acc", uid: 99 });
+        expect(out).toMatch(/25 MB/);
+        expect(extractAttachmentText).not.toHaveBeenCalled();
+    });
+    it("reports a download failure", async () => {
+        fetchMessageAttachments.mockResolvedValue({ found: true, attachments: [PDF] });
+        fetchAttachmentBytesForMessages.mockResolvedValue([{ uid: 99, partKey: "2", bytes: null, failureReason: "fetch-error" }]);
+        const out = await emailFetchAttachment({ accountId: "acc", uid: 99 });
+        expect(out).toMatch(/Could not download/);
+    });
+    it("reports message not found", async () => {
+        fetchMessageAttachments.mockResolvedValue({ found: false, attachments: [] });
+        const out = await emailFetchAttachment({ accountId: "acc", uid: 404 });
+        expect(out).toMatch(/No message found for UID 404/);
+    });
+    it("refuses when credentials are missing", async () => {
+        loadCredentials.mockResolvedValue({ error: "Email not configured." });
+        const out = await emailFetchAttachment({ accountId: "acc", uid: 99 });
+        expect(out).toMatch(/Email not configured/);
+    });
+});
+//# sourceMappingURL=email-fetch-attachment.test.js.map

package/payload/platform/plugins/email/mcp/dist/__tests__/email-fetch-attachment.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"email-fetch-attachment.test.js","sourceRoot":"","sources":["../../src/__tests__/email-fetch-attachment.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,EAAE,UAAU,EAAE,MAAM,QAAQ,CAAC;AAG9D,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAChC,MAAM,uBAAuB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACxC,MAAM,+BAA+B,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAChD,MAAM,qBAAqB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAEtC,EAAE,CAAC,IAAI,CAAC,uBAAuB,EAAE,GAAG,EAAE,CAAC,CAAC;IACtC,eAAe,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;CAC5D,CAAC,CAAC,CAAC;AAEJ,gFAAgF;AAChF,mCAAmC;AACnC,EAAE,CAAC,IAAI,CAAC,gBAAgB,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE;IAC/C,MAAM,MAAM,GAAG,MAAM,YAAY,EAAmC,CAAC;IACrE,OAAO;QACL,GAAG,MAAM;QACT,uBAAuB,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,uBAAuB,CAAC,GAAG,CAAC,CAAC;QAC3E,+BAA+B,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,+BAA+B,CAAC,GAAG,CAAC,CAAC;KAC5F,CAAC;AACJ,CAAC,CAAC,CAAC;AAEH,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,GAAG,EAAE,CAAC,CAAC;IAC1C,qBAAqB,EAAE,CAAC,GAAG,CAAY,EAAE,EAAE,CAAC,qBAAqB,CAAC,GAAG,CAAC,CAAC;CACxE,CAAC,CAAC,CAAC;AAEJ,OAAO,EAAE,oBAAoB,EAAE,MAAM,oCAAoC,CAAC;AAE1E,MAAM,GAAG,GAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,cAAc,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,KAAK,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC1I,MAAM,IAAI,GAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,WAAW,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,IAAI,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAEvI,UAAU,CAAC,GAAG,EAAE;IACd,eAAe,CAAC,SAAS,EAAE,CAAC;IAC5B,uBAAuB,CAAC,SAAS,EAAE,CAAC;IACpC,+BAA+B,CAAC,SAAS,EAAE,CAAC;IAC5C,qBAAqB,CAAC,SAAS,EAAE,CAAC;IAClC,eAAe,CAAC,iBAAiB,CAAC,EAAE,WAAW,EAAE,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,YAAY,EAAE,EAAE,QAAQ,EAAE,IAAI,EAAE,EAAE,CAAC,CAAC;AAC1G,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,+BAA+B,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7H,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,WAAW,EAAE,IAAI,EAAE,0BAA0B,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAEjI,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QACrF,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,0BAA0B,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,mBAAmB,CAAC,CAAC;QACzC,MAAM,CAAC,+BAA+B,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0CAA0C,EAAE,KAAK,IAAI,EAAE;QACxD,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,+BAA+B,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7H,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,eAAe,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,CAAC;QAC7G,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAC;QACjD,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,IAAI,GAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,QAAQ,EAAE,QAAQ,EAAE,yEAAyE,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;QAC1L,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QAChF,+BAA+B,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC;QAC7H,qBAAqB,CAAC,iBAAiB,CAAC,EAAE,OAAO,EAAE,kBAAkB,EAAE,IAAI,EAAE,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,CAAC,CAAC;QAC5G,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,qCAAqC,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,KAAK,IAAI,EAAE;QAC9C,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,+BAA+B,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC;QACvH,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC7B,MAAM,CAAC,qBAAqB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,4BAA4B,EAAE,KAAK,IAAI,EAAE;QAC1C,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC/E,+BAA+B,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,EAAE,EAAE,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,aAAa,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC;QAC1H,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2BAA2B,EAAE,KAAK,IAAI,EAAE;QACzC,uBAAuB,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC;QAC7E,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,CAAC,CAAC;QACvE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,8BAA8B,CAAC,CAAC;IACtD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,eAAe,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC,CAAC;QACtE,MAAM,GAAG,GAAG,MAAM,oBAAoB,CAAC,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,CAAC;QACtE,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC9C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/index.js

@@ -9,6 +9,7 @@ import { z } from "zod";
 import { emailSetup } from "./tools/email-setup.js";
 import { emailRead } from "./tools/email-read.js";
 import { emailFetchBody } from "./tools/email-fetch-body.js";
+import { emailFetchAttachment } from "./tools/email-fetch-attachment.js";
 import { emailSend } from "./tools/email-send.js";
 import { emailDraft } from "./tools/email-draft.js";
 import { emailDraftEdit } from "./tools/email-draft-edit.js";
@@ -207,6 +208,33 @@ eagerTool(server, "email-fetch-body", "Retrieve the COMPLETE decoded body of one
     }
 });
 // ===================================================================
+// email-fetch-attachment — extract the text of one attachment
+// ===================================================================
+eagerTool(server, "email-fetch-attachment", "Return the extracted TEXT of one attachment on an inbox message, addressed by uid plus an optional index (1-based, matching the Attachments (N): footer order) or filename. PDF is read via pdftotext, text/* by decode; other types report that they cannot be extracted, and a scanned PDF reports its missing text layer. This is the read-side twin of email-fetch-body (which returns the message body). Use it when actionable data (a meeting date, an amount) may sit inside a PDF rather than the email text.", {
+    ...MAILBOX_ARG,
+    uid: z.coerce.number().int().describe("IMAP UID of the inbox message (from email-read/email-search/email-fetch output)."),
+    index: z.coerce.number().int().positive().optional().describe("1-based attachment number from the Attachments (N): footer. Omit when the message has a single attachment."),
+    filename: z.string().optional().describe("Attachment filename to read. Omit when the message has a single attachment; ignored when index is given."),
+}, async (params) => {
+    if (!accountId)
+        return refuseNoAccount("email-fetch-attachment");
+    try {
+        const text = await emailFetchAttachment({ ...params, accountId });
+        return { content: [{ type: "text", text }] };
+    }
+    catch (err) {
+        return {
+            content: [
+                {
+                    type: "text",
+                    text: `Failed to fetch attachment: ${err instanceof Error ? err.message : String(err)}`,
+                },
+            ],
+            isError: true,
+        };
+    }
+});
+// ===================================================================
 // email-send — send an email via SMTP
 // ===================================================================
 eagerTool(server, "email-send", "Send an email from the agent's email account via SMTP.", {