apple-mail-mcp 2.10.22 → 2.10.24

package/README.md

@@ -74,7 +74,7 @@ codex plugin marketplace add sweetrb/apple-mail-mcp
 codex plugin add apple-mail@apple-mail-mcp
 ```
 
-The Codex package registers the same `apple-mail` MCP server through `npx -y apple-mail-mcp` and includes the Apple Mail skill guidance.
+The Codex package registers the same `apple-mail` MCP server through an exactly pinned runtime — `npx -y apple-mail-mcp@<plugin version>` — and includes the Apple Mail skill guidance. The pin in `codex/.mcp.json` is rewritten to match `package.json` by `scripts/sync-plugin-version.mjs` on every version bump, so the plugin manifest and the server it launches are always the same release; CI fails the PR if they drift.
 
 ### Other Hosts (Hermes, Antigravity)
 
@@ -852,11 +852,12 @@ likely to be refused as ambiguous. Passing the source mailbox explicitly is the
 stay scoped, and it overrides the remembered location. These parameters name where the ids **came
 from**; for `batch-move-messages` that is distinct from `mailbox`, the destination.
 
-`sourceMailbox` is the one that scopes, and it works on its own: omitting `sourceAccount` means
-that mailbox **in the default account**, exactly as an omitted `account` does elsewhere. If the
-default account cannot be determined, the ids fail with an error asking for an explicit
-`sourceAccount` — a scope the server can't honor is never quietly downgraded to the guess-the-copy
-walk. `sourceAccount` by itself pins nothing, since the mailbox is what an id is scoped to.
+`sourceMailbox` and `sourceAccount` are an atomic scope pair: provide **both** for numeric ids.
+The server never fills in a missing account from mutable default-send state, because the same
+mailbox name can exist in more than one account and numeric ids are only unique within an account
+and mailbox. A whitespace-only source field is rejected. `sourceAccount` by itself pins nothing,
+since the mailbox is what an id is scoped to; `imap:…` ids ignore both fields because they carry
+their own account, mailbox, and UID identity.
 
 **A repeated id is one message.** `ids` is treated as a set: a duplicate names the same message,
 so it is operated on once, and the batch returns **one result per distinct id**. `success` is
@@ -868,7 +869,7 @@ therefore a count of messages, not of list positions.
 |-----------|------|----------|-------------|
 | `ids` | string[] | Yes | Message IDs to delete (max 100) |
 | `sourceMailbox` | string | No | Mailbox the **numeric** ids were listed from — pins them to it. Ignored for `imap:` ids. |
-| `sourceAccount` | string | No | Account the numeric ids were listed from. Defaults to the default account; on its own it pins nothing — pair it with `sourceMailbox`. |
+| `sourceAccount` | string | No | Account the numeric ids were listed from. Required when `sourceMailbox` is supplied; on its own it pins nothing. |
 
 `structuredContent` carries `countDelta` — what the batch actually did to each
 source mailbox. See [Auditing destructive operations](#auditing-destructive-operations).
@@ -883,7 +884,7 @@ source mailbox. See [Auditing destructive operations](#auditing-destructive-oper
 | `mailbox` | string | Yes | Destination mailbox |
 | `account` | string | No | Account containing mailbox |
 | `sourceMailbox` | string | No | Mailbox the **numeric** ids were listed from — pins them to it. Ignored for `imap:` ids. |
-| `sourceAccount` | string | No | Account the numeric ids were listed from. Defaults to the default account; on its own it pins nothing — pair it with `sourceMailbox`. |
+| `sourceAccount` | string | No | Account the numeric ids were listed from. Required when `sourceMailbox` is supplied; on its own it pins nothing. |
 
 `structuredContent` carries `countDelta` — what the batch actually did to each
 **source** mailbox. See [Auditing destructive operations](#auditing-destructive-operations).
@@ -894,7 +895,7 @@ source mailbox. See [Auditing destructive operations](#auditing-destructive-oper
 |-----------|------|----------|-------------|
 | `ids` | string[] | Yes | Message IDs (max 100) |
 | `sourceMailbox` | string | No | Mailbox the **numeric** ids were listed from — pins them to it. Ignored for `imap:` ids. |
-| `sourceAccount` | string | No | Account the numeric ids were listed from. Defaults to the default account; on its own it pins nothing — pair it with `sourceMailbox`. |
+| `sourceAccount` | string | No | Account the numeric ids were listed from. Required when `sourceMailbox` is supplied; on its own it pins nothing. |
 
 #### `batch-flag-messages` / `batch-unflag-messages`
 
@@ -903,7 +904,7 @@ source mailbox. See [Auditing destructive operations](#auditing-destructive-oper
 | `ids` | string[] | Yes | Message IDs (max 100) |
 | `color` | string | No | (`batch-flag-messages` only) Flag color — see [`flag-message`](#flag-message--unflag-message). Applied on both routes, so a mixed batch of numeric and `imap:` ids all end up colored. |
 | `sourceMailbox` | string | No | Mailbox the **numeric** ids were listed from — pins them to it. Ignored for `imap:` ids. |
-| `sourceAccount` | string | No | Account the numeric ids were listed from. Defaults to the default account; on its own it pins nothing — pair it with `sourceMailbox`. |
+| `sourceAccount` | string | No | Account the numeric ids were listed from. Required when `sourceMailbox` is supplied; on its own it pins nothing. |
 
 ---
 

package/build/index.js

@@ -80734,39 +80734,44 @@ ${indent}end try${this.sanitizeFragment("_uacct", indent)}${this.sanitizeFragmen
   /**
    * Turn a caller-supplied batch source scope into an account+mailbox pair.
    *
-   * `mailbox` is what does the scoping, and it works ON ITS OWN: an omitted
-   * `account` means "the default account" here exactly as it does for every
-   * other tool in this server (see resolveAccount), never "ignore the argument
-   * you were given". Requiring both used to make a lone `sourceMailbox` a silent
-   * no-op — the ids fell back to the whole-tree path and were then refused as
-   * ambiguous, which is the very failure the parameter exists to prevent.
+   * A numeric source scope is an account+mailbox pair. A mailbox name alone is
+   * not an identity: the same mailbox can exist in several accounts, and a
+   * numeric Mail id is not globally unique. Resolving a missing account from
+   * mutable default-send state can therefore target the wrong account. Require
+   * both fields so a caller cannot silently cross that account boundary.
    *
    * The safety property is absolute: when the account cannot be determined there
    * is NO fallback to the scan-and-guess walk. The caller gets an error naming
    * the mailbox it asked for, so it can retry with an explicit `sourceAccount`.
    * (An `account` with no `mailbox` cannot pin anything, so it scopes nothing —
-   * those ids still go through the index / ambiguity-checked path.)
+   * those ids still go through the index / ambiguity-checked path. A supplied
+   * whitespace-only field is rejected rather than silently discarded.)
    */
   resolveBatchScope(scope) {
-    const mailbox = scope?.mailbox?.trim();
-    if (!mailbox) return { kind: "none" };
-    const account = scope?.account?.trim();
-    if (account) return { kind: "scoped", account, mailbox };
-    const known = this.getCachedAccounts();
-    if (known.length === 0) {
+    const rawMailbox = scope?.mailbox;
+    const rawAccount = scope?.account;
+    const mailbox = rawMailbox?.trim();
+    const account = rawAccount?.trim();
+    if (rawMailbox !== void 0 && !mailbox) {
       return {
         kind: "unresolvable",
-        error: `Cannot scope to source mailbox "${mailbox}": no sourceAccount was given and no Mail account could be read (Mail returned none, or the AppleScript transport failed). Retry with an explicit sourceAccount.`
+        error: "sourceMailbox must contain a mailbox name; whitespace-only scope is not allowed."
       };
     }
-    const chosen = this.resolveAccount();
-    if (!known.some((a) => a.name === chosen)) {
+    if (rawAccount !== void 0 && !account) {
+      return {
+        kind: "unresolvable",
+        error: "sourceAccount must contain an account name; whitespace-only scope is not allowed."
+      };
+    }
+    if (!mailbox) return { kind: "none" };
+    if (!account) {
       return {
         kind: "unresolvable",
-        error: `Cannot scope to source mailbox "${mailbox}": no sourceAccount was given and the default account could not be determined. Retry with an explicit sourceAccount (available: ${known.map((a) => a.name).join(", ")}).`
+        error: `Cannot scope to source mailbox "${mailbox}" without sourceAccount: numeric Mail ids are only unique within an account and mailbox. Retry with both sourceAccount and sourceMailbox explicitly set.`
       };
     }
-    return { kind: "scoped", account: chosen, mailbox };
+    return { kind: "scoped", account, mailbox };
   }
   /**
    * Run one operation over many message IDs in a SINGLE osascript invocation.
@@ -84420,10 +84425,10 @@ function withJsonSchema2020_12(transport2) {
 // src/index.ts
 loadFileConfig();
 var BATCH_SOURCE_MAILBOX_SCHEMA = external_exports.string().optional().describe(
-  "Mailbox the numeric ids were listed from (e.g. 'INBOX'). Pins each id to that mailbox \u2014 strongly recommended, since one numeric id can match in several mailboxes. Works on its own: without sourceAccount it means that mailbox in the default account. Ignored for imap: ids."
+  "Mailbox the numeric ids were listed from (e.g. 'INBOX'). Must be paired with sourceAccount to form an unambiguous scope. Ignored for imap: ids."
 );
 var BATCH_SOURCE_ACCOUNT_SCHEMA = external_exports.string().optional().describe(
-  "Account the numeric ids were listed from. Defaults to the default account. On its own it pins nothing \u2014 pair it with sourceMailbox."
+  "Account the numeric ids were listed from. Required when sourceMailbox is supplied; on its own it pins nothing."
 );
 var FLAG_COLOR_INDEX = {
   red: 0,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-mail-mcp",
-  "version": "2.10.22",
+  "version": "2.10.24",
   "description": "MCP server for Apple Mail - read, search, send, and manage emails via Claude and other AI assistants",
   "type": "module",
   "main": "build/index.js",