apple-mail-mcp 2.6.1 → 2.6.2

package/README.md

@@ -186,7 +186,7 @@ Search for messages matching criteria. Searches all accounts by default.
 | `isFlagged` | boolean | No | Filter by flagged status |
 | `dateFrom` | string | No | Start date filter (e.g., "January 1, 2026") |
 | `dateTo` | string | No | End date filter (e.g., "March 1, 2026") |
-| `limit` | number | No | Max results (default: 50) |
+| `limit` | number | No | Max results, 1–500 (default: 50) |
 
 **Large mailboxes & partial results.** Apple Mail's AppleScript bridge cannot
 search very large IMAP/Gmail mailboxes (tens of thousands of messages) before
@@ -222,6 +222,13 @@ Get the full content of a message.
 
 **Returns:** Subject line and message body (plain text by default, HTML if `preferHtml` is true and HTML content is available).
 
+> **Large messages / attachments:** reading a full message routes through
+> `osascript`, whose captured output buffer defaults to **64 MB**. Override it
+> with the `APPLE_MAIL_MCP_MAX_BUFFER` environment variable (in **bytes**) if you
+> work with messages whose raw MIME (e.g. a large embedded attachment) exceeds
+> that — a value below the message size makes the read fail with a buffer-overflow
+> error rather than truncating ([#27](https://github.com/sweetrb/apple-mail-mcp/issues/27)).
+
 ---
 
 #### `list-messages`
@@ -232,8 +239,8 @@ List messages in a mailbox.
 |-----------|------|----------|-------------|
 | `mailbox` | string | No | Mailbox name (omit to list from all mailboxes) |
 | `account` | string | No | Account name |
-| `limit` | number | No | Max messages (default: 50) |
-| `offset` | number | No | Number of messages to skip (for pagination) |
+| `limit` | number | No | Max messages, 1–500 (default: 50) |
+| `offset` | number | No | Number of messages to skip, ≥ 0 (for pagination) |
 | `from` | string | No | Filter by sender email address or name |
 | `unreadOnly` | boolean | No | Only show unread messages |
 
@@ -1056,6 +1063,13 @@ AI: [calls list-messages with account="Work Exchange", mailbox="INBOX"]
     "Your Work account has 5 unread messages..."
 ```
 
+To pin which account is used when a tool call omits `account`, set the
+`APPLE_MAIL_MCP_DEFAULT_ACCOUNT` environment variable to an account **name or
+email**. When unset (the default), the server falls back to Mail.app's
+default-send account if it is enabled, otherwise the first enabled account. A
+**disabled** account is never selected implicitly — this env var (an explicit,
+deliberate pin) is one of the few ways to target one ([#47](https://github.com/sweetrb/apple-mail-mcp/issues/47)).
+
 ### Sending Emails Safely
 
 ```

package/build/index.js

@@ -265,7 +265,13 @@ server.registerTool("search-messages", {
         isFlagged: z.boolean().optional().describe("Filter by flagged status"),
         dateFrom: DATE_FILTER_SCHEMA.describe("Start date filter (e.g., 'January 1, 2026')"),
         dateTo: DATE_FILTER_SCHEMA.describe("End date filter (e.g., 'March 1, 2026')"),
-        limit: z.number().optional().describe("Maximum number of results (default: 50)"),
+        limit: z
+            .number()
+            .int()
+            .min(1)
+            .max(500)
+            .optional()
+            .describe("Maximum number of results (default: 50, max: 500)"),
     },
     outputSchema: LIST_OUTPUT_SCHEMA,
 }, withErrorHandling(async ({ query, mailbox, account, limit = 50, dateFrom, dateTo, from, subject, isRead, isFlagged, }) => {
@@ -485,8 +491,19 @@ server.registerTool("list-messages", {
             .optional()
             .describe("Mailbox to list messages from. Omit to list from all mailboxes."),
         account: z.string().optional().describe("Account to list messages from"),
-        limit: z.number().optional().describe("Maximum number of messages (default: 50)"),
-        offset: z.number().optional().describe("Number of messages to skip (for pagination)"),
+        limit: z
+            .number()
+            .int()
+            .min(1)
+            .max(500)
+            .optional()
+            .describe("Maximum number of messages (default: 50, max: 500)"),
+        offset: z
+            .number()
+            .int()
+            .min(0)
+            .optional()
+            .describe("Number of messages to skip (for pagination)"),
         from: z.string().optional().describe("Filter by sender email address or name"),
         unreadOnly: z.boolean().optional().describe("Only show unread messages"),
     },

package/build/utils/mimeParse.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"mimeParse.d.ts","sourceRoot":"","sources":["../../src/utils/mimeParse.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,kBAAkB;IACjC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;CACd;AAyLD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAyBzE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuB7D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuB7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,kBAAkB,GAAG,IAAI,CAwB3B"}
+{"version":3,"file":"mimeParse.d.ts","sourceRoot":"","sources":["../../src/utils/mimeParse.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AAEH,MAAM,WAAW,kBAAkB;IACjC,uEAAuE;IACvE,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,QAAQ,EAAE,MAAM,CAAC;IACjB,oFAAoF;IACpF,IAAI,EAAE,MAAM,CAAC;CACd;AAED,MAAM,WAAW,kBAAmB,SAAQ,kBAAkB;IAC5D,6BAA6B;IAC7B,IAAI,EAAE,MAAM,CAAC;CACd;AAqMD;;;;;;;GAOG;AACH,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,MAAM,GAAG,kBAAkB,EAAE,CAyBzE;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuB7D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAuB7D;AAED;;;;;;;;GAQG;AACH,wBAAgB,qBAAqB,CACnC,MAAM,EAAE,MAAM,EACd,cAAc,EAAE,MAAM,GACrB,kBAAkB,GAAG,IAAI,CAwB3B"}

package/build/utils/mimeParse.js

@@ -107,19 +107,30 @@ function splitMimeParts(source, boundary) {
     }
     return parts;
 }
+/**
+ * Maximum nesting depth for multipart MIME traversal. Bounds recursion so a
+ * pathologically (or maliciously) deeply nested multipart tree can't blow the
+ * stack — past this depth we stop descending and treat the container as a leaf.
+ * Real mail nests only a few levels (e.g. mixed → related → alternative).
+ */
+const MAX_MIME_DEPTH = 20;
 /**
  * Walk a multipart MIME block and return all non-multipart leaf parts,
  * descending into nested multipart/* containers (alternative, related, mixed).
+ *
+ * Descent is bounded by MAX_MIME_DEPTH; once reached, deeper multipart
+ * containers are returned as-is (as leaf parts) rather than recursed into,
+ * yielding what's parsed so far instead of overflowing the stack.
  */
-function walkLeafParts(source, boundary) {
+function walkLeafParts(source, boundary, depth = 0) {
     const result = [];
     const parts = splitMimeParts(source, boundary);
     for (const part of parts) {
         const ct = getHeader(part.headers, "Content-Type");
-        if (ct && /^multipart\//i.test(ct)) {
+        if (ct && /^multipart\//i.test(ct) && depth < MAX_MIME_DEPTH) {
             const nestedBoundary = extractBoundary(ct);
             if (nestedBoundary) {
-                result.push(...walkLeafParts(part.body, nestedBoundary));
+                result.push(...walkLeafParts(part.body, nestedBoundary, depth + 1));
                 continue;
             }
         }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-mail-mcp",
-  "version": "2.6.1",
+  "version": "2.6.2",
   "description": "MCP server for Apple Mail - read, search, send, and manage emails via Claude and other AI assistants",
   "type": "module",
   "main": "build/index.js",