@rubytech/create-maxy-code 0.1.485 → 0.1.487

package/payload/platform/plugins/cloudflare/skills/data-portal/template/portal.css

@@ -29,11 +29,11 @@ body {
   padding: 2rem 1rem;
   background: var(--dp-paper);
   color: var(--dp-ink);
-  font: 16px/1.5 system-ui, -apple-system, 'Segoe UI', sans-serif;
+  font: 14px/1.5 system-ui, -apple-system, 'Segoe UI', sans-serif;
 }
 
 .dp-card {
-  max-width: 34rem;
+  max-width: 56rem;
   margin: 0 auto;
 }
 
@@ -98,16 +98,45 @@ body {
   border-bottom: 1px solid var(--dp-rule);
 }
 
+/* One line per name, never wrapped. The name splits into a stem that
+   ellipsis-truncates and an extension that never shrinks, so `.pdf` vs `.html`
+   on two same-named orders stays visible. flex:1 + min-width:0 lets the name
+   give up width to the Delete button beside it. */
 .dp-file-name {
   color: var(--dp-accent);
   text-decoration: none;
-  word-break: break-all;
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  flex: 1;
+  min-width: 0;
+  overflow: hidden;
 }
 
 .dp-file-name:hover {
   text-decoration: underline;
 }
 
+/* The two-span name block. No gap between stem and extension so they read as
+   one filename; the stem clips with an ellipsis, the extension is pinned. */
+.dp-name {
+  display: flex;
+  min-width: 0;
+  overflow: hidden;
+}
+
+.dp-name-main {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+  min-width: 0;
+}
+
+.dp-name-ext {
+  flex: none;
+  white-space: nowrap;
+}
+
 .dp-del {
   border: 1px solid var(--dp-rule);
   border-radius: 0.375rem;
@@ -140,10 +169,15 @@ body {
   color: var(--dp-ink);
 }
 
+/* In the pinned header the crumbs are the flexible middle: they take the space
+   the up/upload buttons leave and clip on one line when a path runs deep. */
 .dp-crumbs {
   font-size: 13px;
   color: var(--dp-muted);
-  margin-bottom: 10px;
+  flex: 1;
+  min-width: 0;
+  overflow: hidden;
+  white-space: nowrap;
 }
 
 /* Crumbs and folder rows are buttons (navigation is a fetch, not a page load),
@@ -166,10 +200,19 @@ body {
 
 .dp-folder-name {
   font-weight: 600;
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  flex: 1;
+  min-width: 0;
+  overflow: hidden;
 }
 
-/* The file rows inside the tree are buttons too — same reset, but they must
-   match .dp-file-name's weight so the two lists read as one surface. */
+/* The file rows inside the tree are buttons too — same reset. The layout (flex,
+   flex:1, min-width:0, overflow) comes from the base .dp-file-name, so these
+   truncate the same way; only the button chrome and left-align are added here.
+   The row-kind icon plus its colour (below) is what tells a folder from a file,
+   so these no longer match .dp-folder-name's weight. */
 .dp-shared .dp-file-name {
   background: none;
   border: 0;
@@ -179,6 +222,30 @@ body {
   text-align: left;
 }
 
+/* Row-kind icon: sized to the text, never shrinks, stroke follows the span's
+   colour. Folder takes the accent, file the muted grey — both existing vars, so
+   the :root rewrite in portal-brand-css.mjs leaves the distinction intact. */
+.dp-icon {
+  flex: none;
+  display: inline-flex;
+  width: 1em;
+  height: 1em;
+}
+
+.dp-icon svg {
+  width: 1em;
+  height: 1em;
+  display: block;
+}
+
+.dp-icon-folder {
+  color: var(--dp-accent);
+}
+
+.dp-icon-file {
+  color: var(--dp-muted);
+}
+
 /* Passcode field with its reveal control. The passcode is transcribed out of
    band, so being able to check what was typed is the point of the toggle.
    Reuses existing variables and declares no new :root value, which
@@ -203,3 +270,125 @@ body {
   cursor: pointer;
   white-space: nowrap;
 }
+
+/* Right-click Download menu for a shared file. Reuses existing variables and
+   declares no new :root value, which portal-brand-css.mjs would drop. */
+.dp-menu {
+  position: fixed;
+  z-index: 10;
+  background: var(--dp-paper);
+  border: 1px solid var(--dp-rule);
+  border-radius: 0.375rem;
+  box-shadow: 0 4px 16px rgba(0, 0, 0, 0.18);
+  padding: 0.25rem;
+  min-width: 8.75rem;
+}
+
+.dp-menu-item {
+  display: block;
+  width: 100%;
+  text-align: left;
+  padding: 0.375rem 0.625rem;
+  border: 0;
+  background: transparent;
+  border-radius: 0.25rem;
+  cursor: pointer;
+  font: inherit;
+  color: var(--dp-ink);
+}
+
+.dp-menu-item:hover,
+.dp-menu-item:focus {
+  background: var(--dp-rule);
+}
+
+/* The upload area while a file is dragged over it. */
+.dp-upload.dp-dropping {
+  outline: 2px dashed var(--dp-accent);
+  outline-offset: 3px;
+}
+
+/* Pinned nav row. position:sticky keeps it in flow, so it reserves its own
+   height and never overlaps the first file row (which position:fixed would). An
+   opaque paper background hides the rows that scroll under it. Reuses existing
+   variables and declares no new :root value, which portal-brand-css.mjs drops. */
+.dp-header {
+  position: sticky;
+  top: 0;
+  z-index: 5;
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.5rem 0;
+  margin-bottom: 0.5rem;
+  background: var(--dp-paper);
+  border-bottom: 1px solid var(--dp-rule);
+}
+
+/* The up and upload controls that flank the crumbs. Square, muted chrome so the
+   filenames stay the loudest thing on the row. */
+.dp-iconbtn {
+  flex: none;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 2rem;
+  height: 2rem;
+  padding: 0.375rem;
+  border: 1px solid var(--dp-rule);
+  border-radius: 0.375rem;
+  background: transparent;
+  color: var(--dp-muted);
+  cursor: pointer;
+}
+
+.dp-iconbtn svg {
+  width: 1.1em;
+  height: 1.1em;
+}
+
+/* Disabled up control at the tree root: dimmed and inert, so it reads as "no
+   parent from here" rather than a dead button. */
+.dp-iconbtn:disabled {
+  opacity: 0.4;
+  cursor: default;
+}
+
+/* Upload modal. [hidden]{display:none!important} keeps this off screen until the
+   header icon clears the attribute; display:flex then centres the panel. The
+   backdrop is a non-themed literal, same as .dp-menu's shadow. */
+.dp-modal {
+  position: fixed;
+  inset: 0;
+  z-index: 20;
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  padding: 1rem;
+  background: rgba(0, 0, 0, 0.4);
+}
+
+.dp-modal-panel {
+  position: relative;
+  width: 100%;
+  max-width: 24rem;
+  padding: 1.5rem;
+  background: var(--dp-paper);
+  border: 1px solid var(--dp-rule);
+  border-radius: 0.5rem;
+  box-shadow: 0 8px 32px rgba(0, 0, 0, 0.2);
+}
+
+.dp-modal-close {
+  position: absolute;
+  top: 0.5rem;
+  right: 0.5rem;
+  padding: 0.25rem 0.5rem;
+  border: 0;
+  background: transparent;
+  color: var(--dp-muted);
+  font: inherit;
+  font-size: 1.25rem;
+  line-height: 1;
+  cursor: pointer;
+}

package/payload/platform/plugins/cloudflare/skills/data-portal/template/portal.js

@@ -19,6 +19,10 @@
   var sharedEl = document.getElementById('dp-shared');
   var crumbsEl = document.getElementById('dp-crumbs');
   var entriesEl = document.getElementById('dp-entries');
+  var upEl = document.getElementById('dp-up');
+  var uploadOpenEl = document.getElementById('dp-upload-open');
+  var modalEl = document.getElementById('dp-modal');
+  var modalCloseEl = document.getElementById('dp-modal-close');
 
   /* The folder currently open in the "shared with you" tree; '' is its root. */
   var prefix = '';
@@ -38,6 +42,55 @@
     return li;
   }
 
+  /* Lucide folder/file icons, inlined as trusted literals — no network request,
+     no npm dependency. innerHTML is safe here because the markup is fixed and
+     carries no filename or device data; every name still goes through
+     textContent. The stroke is currentColor, so each icon takes its span's
+     colour (folder accent, file muted; see portal.css). */
+  var FOLDER_SVG =
+    '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M20 20a2 2 0 0 0 2-2V8a2 2 0 0 0-2-2h-7.9a2 2 0 0 1-1.69-.9L9.6 3.9A2 2 0 0 0 7.93 3H4a2 2 0 0 0-2 2v13a2 2 0 0 0 2 2Z"/></svg>';
+  var FILE_SVG =
+    '<svg viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><path d="M15 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V7Z"/><path d="M14 2v4a2 2 0 0 0 2 2h4"/></svg>';
+
+  function icon(kind) {
+    var s = document.createElement('span');
+    var dir = kind === 'directory';
+    s.className = dir ? 'dp-icon dp-icon-folder' : 'dp-icon dp-icon-file';
+    s.innerHTML = dir ? FOLDER_SVG : FILE_SVG;
+    return s;
+  }
+
+  /* Split a filename into a stem and its extension. The stem is everything up to
+     the last dot; the extension is the dot and what follows. A name with no dot,
+     or only a leading dot, is all stem. The two render as separate spans so the
+     stem can ellipsis-truncate while the extension stays pinned and visible. */
+  function nameParts(name) {
+    var dot = name.lastIndexOf('.');
+    if (dot > 0) {
+      return { main: name.slice(0, dot), ext: name.slice(dot) };
+    }
+    return { main: name, ext: '' };
+  }
+
+  /* The two-span name block used by both lists. Every value goes through
+     textContent, never markup — the same trust rule the callers already follow.
+     An empty ext adds no second span. */
+  function nameNode(main, ext) {
+    var wrap = document.createElement('span');
+    wrap.className = 'dp-name';
+    var m = document.createElement('span');
+    m.className = 'dp-name-main';
+    m.textContent = main;
+    wrap.appendChild(m);
+    if (ext) {
+      var e = document.createElement('span');
+      e.className = 'dp-name-ext';
+      e.textContent = ext;
+      wrap.appendChild(e);
+    }
+    return wrap;
+  }
+
   function render(files) {
     // replaceChildren, not innerHTML: every filename below is set with
     // textContent so a name like '<img onerror=…>' renders as text, and
@@ -54,7 +107,10 @@
       var a = document.createElement('a');
       a.className = 'dp-file-name';
       a.href = API + '/api/download?key=' + encodeURIComponent(f.objectKey);
-      a.textContent = f.filename;
+      // Full name on hover, since the middle of a long name is clipped away.
+      a.title = f.filename;
+      var p = nameParts(f.filename);
+      a.appendChild(nameNode(p.main, p.ext));
       li.appendChild(a);
 
       var del = document.createElement('button');
@@ -92,6 +148,46 @@
       crumbsEl.appendChild(document.createTextNode(' / '));
       crumbsEl.appendChild(crumb(part, parts.slice(0, i + 1).join('/')));
     });
+    // The up control has no parent to reach from the root, so it is inert there.
+    upEl.disabled = prefix === '';
+  }
+
+  /* One right-click menu at a time. A single element is moved and re-labelled
+     rather than spawning one per row, so dismissal has one thing to hide. */
+  var menuEl = null;
+  function hideMenu() {
+    if (menuEl) { menuEl.hidden = true; }
+  }
+  function showFileMenu(x, y, relPath) {
+    if (!menuEl) {
+      menuEl = document.createElement('div');
+      menuEl.className = 'dp-menu';
+      menuEl.hidden = true;
+      document.body.appendChild(menuEl);
+    }
+    menuEl.replaceChildren();
+    var b = document.createElement('button');
+    b.type = 'button';
+    b.className = 'dp-menu-item';
+    b.textContent = 'Download';
+    b.addEventListener('click', function () {
+      hideMenu();
+      openShared(relPath);
+    });
+    menuEl.appendChild(b);
+    menuEl.style.left = x + 'px';
+    menuEl.style.top = y + 'px';
+    menuEl.hidden = false;
+  }
+  document.addEventListener('click', hideMenu);
+  window.addEventListener('blur', hideMenu);
+
+  /* The endpoint a drag-out points at. redirect=1 makes it 302 to the signed
+     link, so the browser downloads the file rather than a JSON body. Resolved to
+     an absolute URL (DownloadURL requires one) against the page, so it is correct
+     whether api-base is empty, a path, or a full origin. */
+  function downloadUrl(relPath) {
+    return new URL(API + '/api/download?path=' + encodeURIComponent(relPath) + '&redirect=1', location.href).href;
   }
 
   /* Every label goes through textContent, same rule as the upload list: these
@@ -110,7 +206,13 @@
       var b = document.createElement('button');
       b.className = e.kind === 'directory' ? 'dp-folder-name' : 'dp-file-name';
       b.type = 'button';
-      b.textContent = e.kind === 'directory' ? e.name + '/' : e.name;
+      // Full name on hover, since the middle of a long name is clipped away.
+      b.title = e.name;
+      // A folder's tail is its trailing slash; a file's is its extension. Both
+      // stay pinned while the stem truncates.
+      var np = e.kind === 'directory' ? { main: e.name, ext: '/' } : nameParts(e.name);
+      b.appendChild(icon(e.kind));
+      b.appendChild(nameNode(np.main, np.ext));
       b.addEventListener('click', function () {
         if (e.kind === 'directory') {
           prefix = e.relPath;
@@ -119,6 +221,20 @@
           openShared(e.relPath);
         }
       });
+      if (e.kind !== 'directory') {
+        b.draggable = true;
+        b.addEventListener('dragstart', function (ev) {
+          var url = downloadUrl(e.relPath);
+          // DownloadURL is "mime:filename:absolute-url"; octet-stream keeps the
+          // server's content-disposition filename authoritative.
+          ev.dataTransfer.setData('DownloadURL', 'application/octet-stream:' + e.name + ':' + url);
+          ev.dataTransfer.setData('text/uri-list', url);
+        });
+        b.addEventListener('contextmenu', function (ev) {
+          ev.preventDefault();
+          showFileMenu(ev.clientX, ev.clientY, e.relPath);
+        });
+      }
       li.appendChild(b);
       entriesEl.appendChild(li);
     });
@@ -244,24 +360,91 @@
     revealEl.textContent = revealed ? 'Show passcode' : 'Hide passcode';
   });
 
-  document.getElementById('dp-upload').addEventListener('submit', function (e) {
-    e.preventDefault();
-    var input = document.getElementById('dp-file');
-    if (!input.files || !input.files[0]) return;
+  /* Up one level: drop the last path segment and re-list. Inert at the root,
+     where the button is disabled, so this guard is belt-and-braces. */
+  upEl.addEventListener('click', function () {
+    if (prefix === '') return;
+    var parts = prefix.split('/');
+    parts.pop();
+    prefix = parts.join('/');
+    refresh();
+  });
+
+  /* The upload modal. Hidden via the `hidden` attribute so
+     [hidden]{display:none!important} stays authoritative over .dp-modal's
+     display:flex. It dismisses three ways: the close button, a click on the
+     backdrop (never the panel), and Escape while open. */
+  function openModal() {
+    modalEl.hidden = false;
+    document.getElementById('dp-file').focus();
+  }
+  function closeModal() {
+    modalEl.hidden = true;
+  }
+  uploadOpenEl.addEventListener('click', openModal);
+  modalCloseEl.addEventListener('click', closeModal);
+  modalEl.addEventListener('click', function (e) {
+    if (e.target === modalEl) { closeModal(); }
+  });
+  document.addEventListener('keydown', function (e) {
+    if (e.key === 'Escape' && !modalEl.hidden) { closeModal(); }
+  });
+
+  var uploadForm = document.getElementById('dp-upload');
+
+  /* One upload path for Browse-and-Upload and for a dropped file. Resolves to
+     { responded, ok }: `responded` is true when the server answered (kept or
+     not), so the picker is cleared only when a retry with the same selection is
+     pointless; `ok` is true only on a kept upload, which is what closes the
+     modal. A network error is { responded:false, ok:false }. */
+  function uploadFile(file) {
     var fd = new FormData();
-    fd.append('file', input.files[0]);
+    fd.append('file', file);
     say('Uploading…');
-    api('/api/upload', { method: 'POST', body: fd })
+    return api('/api/upload', { method: 'POST', body: fd })
       .then(function (r) {
         return r.json();
       })
       .then(function (d) {
         say(d.ok ? 'Uploaded.' : 'Upload failed.');
-        input.value = '';
-        return refresh();
+        return refresh().then(function () { return { responded: true, ok: !!d.ok }; });
       })
       .catch(function () {
         say('Upload failed.');
+        return { responded: false, ok: false };
+      });
+  }
+
+  uploadForm.addEventListener('submit', function (e) {
+    e.preventDefault();
+    var input = document.getElementById('dp-file');
+    if (!input.files || !input.files[0]) return;
+    uploadFile(input.files[0]).then(function (res) {
+      if (res.responded) { input.value = ''; }
+      if (res.ok) { closeModal(); }
+    });
+  });
+
+  uploadForm.addEventListener('dragover', function (e) {
+    e.preventDefault();
+    uploadForm.classList.add('dp-dropping');
+  });
+  uploadForm.addEventListener('dragleave', function (e) {
+    // Only clear when the pointer leaves the form, not when it crosses onto a
+    // child (input, button), which would flicker the outline mid-drag.
+    if (!uploadForm.contains(e.relatedTarget)) {
+      uploadForm.classList.remove('dp-dropping');
+    }
+  });
+  uploadForm.addEventListener('drop', function (e) {
+    e.preventDefault();
+    uploadForm.classList.remove('dp-dropping');
+    var dt = e.dataTransfer;
+    if (dt && dt.files && dt.files[0]) {
+      // The drop target now lives inside the modal, so a kept drop closes it too.
+      uploadFile(dt.files[0]).then(function (res) {
+        if (res.ok) { closeModal(); }
       });
+    }
   });
 })();

package/payload/platform/plugins/cloudflare/skills/data-portal/template/wrangler.toml

@@ -4,7 +4,7 @@
 #   __D1_DATABASE_NAME__ the D1 database name  (<accountId>-<purpose>)
 #   __D1_DATABASE_ID__   the id printed by `wrangler d1 create`
 #   __R2_BUCKET_NAME__   the R2 bucket name    (<accountId>-<purpose>)
-#   __PORTAL_INSTALL_ORIGIN__ the install's public origin (https://<tunnel-hostname>)
+#   __PORTAL_INSTALL_ORIGIN__ the install's PUBLIC origin (https://<public-tunnel-hostname>), NOT the admin/operator host
 name = "__PROJECT_NAME__"
 pages_build_output_dir = "."
 compatibility_date = "2024-01-01"
@@ -22,8 +22,9 @@ binding = "BUCKET"
 bucket_name = "__R2_BUCKET_NAME__"
 
 # Where the install answers, so a download of a device-held file can be signed
-# and sent there. Public information — it is the hostname a client's browser
-# ends up at.
+# and sent there. Public information: it is the hostname a client's browser
+# ends up at. Use the PUBLIC host: the admin host is remote-auth-gated and the
+# edge's signed HEAD probe 401s there, which 503s every download.
 #
 # Its partner, PORTAL_FETCH_SECRET, is deliberately NOT here. This file is
 # committed to the account's assembled tree and the deploy publishes the

package/payload/platform/plugins/email/.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "email",
-  "description": "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-status, email-otp-extract.",
+  "description": "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough; email-fetch-attachment for the extracted TEXT of one attachment (PDF via pdftotext, text/* by decode) when data sits inside a file rather than the body. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-status, email-otp-extract.",
   "version": "0.1.0",
   "author": {
     "name": "Rubytech LLC"

package/payload/platform/plugins/email/PLUGIN.md

@@ -1,6 +1,6 @@
 ---
 name: email
-description: "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-status, email-otp-extract."
+description: "Email — one or more dedicated email mailboxes per account, each addressable by a `mailbox` selector. Retrieval: email-graph-query for stored email-thread history as :ConversationArchive {source:'email'} with :Section chunks (recall, search, 'threads about X', 'what did Y send?'); email-read / email-search for live IMAP inbox previews (with best-effort per-archive section hints from the graph); email-fetch-body for the COMPLETE decoded body of one message (by uid or message_id) when a preview is not enough; email-fetch-attachment for the extracted TEXT of one attachment (PDF via pdftotext, text/* by decode) when data sits inside a file rather than the body. Ingestion (operator-initiated, human-in-the-loop): email-fetch lists new messages, email-ingest writes the operator-approved subset via the conversation-archive pipeline. Sending: email-send (new), email-reply (threaded — resolves the original via IMAP Message-ID search), email-draft (compose to the mailbox Drafts folder, unsent, for operator review; pass messageId for a threaded draft-reply), email-draft-edit (revise a stored draft, located by its Drafts UID or, when Gmail has renumbered it, its draft Message-ID), email-draft-send (dispatch a stored draft by Drafts UID, then remove it). Deleting: email-delete (move named UIDs from email-read/email-search to the mailbox Trash — recoverable, never an expunge). Config: email-provider-info (pre-password host + app-password lookup from an address alone), email-setup, email-status, email-otp-extract."
 tools:
   - name: email-provider-info
     publicAllowlist: false
@@ -14,6 +14,9 @@ tools:
   - name: email-fetch-body
     publicAllowlist: false
     adminAllowlist: false
+  - name: email-fetch-attachment
+    publicAllowlist: false
+    adminAllowlist: false
   - name: email-send
     publicAllowlist: false
     adminAllowlist: false
@@ -84,6 +87,7 @@ Manages the agent's own dedicated email account — IMAP for reading, SMTP for s
 - **Read inbox:** `email-read` — metadata only (UID, sender, subject, date), plus a best-effort `Archive`/`Archive-Section` hint when the IMAP message's `receivedAt` falls inside a stored `:ConversationArchive {source:'email'}` section, plus an `Attachments (N): filename (mime, size); …` footer when the message carries enclosures. Supports pagination (`before_uid`), folders (`inbox`/`sent`), filtering by sender/date/subject. Metadata is derived from IMAP `bodyStructure` — no bytes downloaded.
 - **Search inbox:** `email-search` — live IMAP search by sender, subject, body keyword, date range. Same per-archive hint and attachment footer as `email-read`.
 - **Delete (move to Trash):** `email-delete` — move the messages named by `uids` (from a prior `email-read`/`email-search`, scoped to a source `folder` of `inbox` or `sent`) into the mailbox's Trash folder. **Recoverable, never an expunge** — the message leaves the inbox and permanent removal is left to the operator's own mail client or the provider's Trash auto-purge; this tool never permanently deletes. Trash is resolved per provider: the `\Trash` special-use folder if advertised, else the first existing of `Trash`, `[Gmail]/Trash`, `Deleted Items`, `Deleted Messages`. `Junk` is never treated as Trash. A mailbox with no resolvable Trash yields a typed error and moves nothing — there is no silent expunge fallback. A `uid` that is already gone is counted not-moved without failing the rest; the result reports `Moved N of M message(s) to <Trash>`. It deletes only the UIDs you name, never by search criteria.
+- **Read one attachment's text:** `email-fetch-attachment` — the extracted text of a single inbox attachment, addressed by `uid` plus an optional `index` (1-based, matching the `Attachments (N): …` footer order) or `filename`. With one attachment and no selector, that attachment is read; with more than one and no selector, or an ambiguous filename, the call is refused with a numbered listing. `application/pdf` is extracted via `pdftotext`, `text/*` by decode; any other type reports that it cannot be extracted, and a PDF with no text layer reports it is a scanned image (no OCR), so "no data in the attachment" never reads the same as "the attachment could not be read". Bytes are downloaded once through the 25 MB-capped fetch path; inbox only. Use this when actionable data (a meeting date, an amount) may sit inside a PDF rather than the email body.
 - **Read one whole message:** `email-fetch-body` — the COMPLETE decoded body of a single message addressed by `uid` (with optional `folder`) or `message_id` (resolved across inbox and sent). No 500-char preview cap. Downloads the full RFC822 source and decodes it with `mailparser`, so every MIME shape — flat text, single-part HTML, `multipart/alternative`, and nested `multipart/related`/`multipart/mixed` (Outlook's inline-image house style) — yields a body; the preview tools above intentionally stay preview-only. Use this when the operator wants to read or act on a message's actual content.
 - **Send:** `email-send` — new outbound email. Pass `cc`/`bcc` (each an array of email addresses) to copy or blind-copy recipients — CC appears in the message header, BCC recipients receive the message without appearing in any header. Pass `attachments` (absolute file paths under the account directory, ≤25 MB each) to attach files as SMTP attachments; an invalid path fails the send with no email dispatched. The success message names the CC recipients and reports the BCC count without naming them.
 - **Reply:** `email-reply` — threaded reply to an existing email by `messageId`. Resolves the original envelope via IMAP `SEARCH HEADER Message-ID` (INBOX then `\Sent`), so threading works for any message still present on the server even if the graph never ingested it. Supports `replyAll`, `cc`/`bcc`, and `attachments` (same path rules as `email-send`). Explicit `cc`/`bcc` are added in addition to whatever `replyAll` places in `To`, passed through as given (no overlap de-duplication against `To`).

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-select.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=attachment-select.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-select.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-select.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/attachment-select.test.ts"],"names":[],"mappings":""}

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-select.test.js

@@ -0,0 +1,50 @@
+import { describe, it, expect } from "vitest";
+import { resolveAttachmentSelector } from "../lib/imap.js";
+const A = { partKey: "2", filename: "a.pdf", mimeType: "application/pdf", sizeBytes: 10, encoding: "base64" };
+const B = { partKey: "3", filename: "b.pdf", mimeType: "application/pdf", sizeBytes: 20, encoding: "base64" };
+describe("resolveAttachmentSelector", () => {
+    it("single attachment, no selector → that one", () => {
+        expect(resolveAttachmentSelector([A], {})).toEqual({ ok: true, meta: A });
+    });
+    it("multiple attachments, no selector → error listing them", () => {
+        const r = resolveAttachmentSelector([A, B], {});
+        expect(r.ok).toBe(false);
+        if (!r.ok) {
+            expect(r.error).toMatch(/1\. a\.pdf/);
+            expect(r.error).toMatch(/2\. b\.pdf/);
+        }
+    });
+    it("index selects the right attachment", () => {
+        expect(resolveAttachmentSelector([A, B], { index: 2 })).toEqual({ ok: true, meta: B });
+    });
+    it("index out of range → error listing", () => {
+        const r = resolveAttachmentSelector([A], { index: 2 });
+        expect(r.ok).toBe(false);
+        if (!r.ok)
+            expect(r.error).toMatch(/index 2/);
+    });
+    it("filename match is case-insensitive", () => {
+        expect(resolveAttachmentSelector([A, B], { filename: "B.PDF" })).toEqual({ ok: true, meta: B });
+    });
+    it("filename with no match → error", () => {
+        const r = resolveAttachmentSelector([A, B], { filename: "c.pdf" });
+        expect(r.ok).toBe(false);
+        if (!r.ok)
+            expect(r.error).toMatch(/no attachment named/i);
+    });
+    it("filename matching two parts → ambiguous error", () => {
+        const dup = { ...B, filename: "a.pdf" };
+        const r = resolveAttachmentSelector([A, dup], { filename: "a.pdf" });
+        expect(r.ok).toBe(false);
+        if (!r.ok)
+            expect(r.error).toMatch(/more than one/i);
+    });
+    it("no attachments → error", () => {
+        const r = resolveAttachmentSelector([], {});
+        expect(r.ok).toBe(false);
+    });
+    it("index takes precedence over filename when both given", () => {
+        expect(resolveAttachmentSelector([A, B], { index: 1, filename: "b.pdf" })).toEqual({ ok: true, meta: A });
+    });
+});
+//# sourceMappingURL=attachment-select.test.js.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-select.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-select.test.js","sourceRoot":"","sources":["../../src/__tests__/attachment-select.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,MAAM,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,yBAAyB,EAAE,MAAM,gBAAgB,CAAC;AAG3D,MAAM,CAAC,GAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAC9H,MAAM,CAAC,GAAmB,EAAE,OAAO,EAAE,GAAG,EAAE,QAAQ,EAAE,OAAO,EAAE,QAAQ,EAAE,iBAAiB,EAAE,SAAS,EAAE,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC;AAE9H,QAAQ,CAAC,2BAA2B,EAAE,GAAG,EAAE;IACzC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wDAAwD,EAAE,GAAG,EAAE;QAChE,MAAM,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACV,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;YACtC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC;QACxC,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IACzF,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;QACvD,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACnE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC7D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,GAAG,GAAmB,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC;QACxD,MAAM,CAAC,GAAG,yBAAyB,CAAC,CAAC,CAAC,EAAE,GAAG,CAAC,EAAE,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC;QACrE,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACzB,IAAI,CAAC,CAAC,CAAC,EAAE;YAAE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,GAAG,EAAE;QAChC,MAAM,CAAC,GAAG,yBAAyB,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;QAC5C,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,GAAG,EAAE;QAC9D,MAAM,CAAC,yBAAyB,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,EAAE,CAAC,CAAC;IAC5G,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-text.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=attachment-text.test.d.ts.map

package/payload/platform/plugins/email/mcp/dist/__tests__/attachment-text.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"attachment-text.test.d.ts","sourceRoot":"","sources":["../../src/__tests__/attachment-text.test.ts"],"names":[],"mappings":""}