apple-mail-mcp 2.8.8 → 2.8.10

package/README.md

@@ -291,8 +291,8 @@ Send a new email immediately.
 | `body` | string | Yes | Email body (plain text) |
 | `cc` | string[] | No | CC recipients |
 | `bcc` | string[] | No | BCC recipients |
-| `account` | string | No | Send from specific account (with `transport: "smtp"`, overrides the From address) |
-| `attachments` | (string \| {filename, contentBase64})[] | No | Up to 20 attachments: absolute file paths (e.g., `"/Users/me/report.pdf"`) and/or inline `{filename, contentBase64}` objects for content not on disk |
+| `account` | string | No | Mail.app account label, or an email-form SMTP From override. An SMTP override must match `APPLE_MAIL_MCP_SMTP_USER`, `APPLE_MAIL_MCP_SMTP_FROM`, or an address in `APPLE_MAIL_MCP_SMTP_ALLOWED_FROM` |
+| `attachments` | (string \| {filename, contentBase64})[] | No | Up to 20 attachments: absolute file paths (e.g., `"/Users/me/report.pdf"`) and/or inline `{filename, contentBase64}` objects up to 25 MiB decoded each |
 | `transport` | `"applescript"` \| `"smtp"` | No | Send transport. If omitted, **SMTP is used automatically when configured** (otherwise AppleScript). Pass `"smtp"` to require clean MIME, or `"applescript"` to force the Mail.app path — see [SMTP transport](#smtp-transport) |
 
 **Example:**
@@ -326,7 +326,11 @@ Two differences to know when SMTP is auto-preferred:
   is used as the From address only when it is an email address; a Mail.app
   account *label* (e.g. `"Work"`) can't select an account over SMTP, so a call
   that passes one is left on the AppleScript path automatically. To force
-  account selection, pass `transport: "applescript"` explicitly.
+  account selection, pass `transport: "applescript"` explicitly. For sender
+  safety, an email-form override must match the SMTP login user, the configured
+  `APPLE_MAIL_MCP_SMTP_FROM`, or an address listed in the comma-separated
+  `APPLE_MAIL_MCP_SMTP_ALLOWED_FROM`; any other From address is rejected before
+  connecting.
 
 Both plain-text and HTML bodies are supported — over SMTP an HTML body (CLI
 `--html-body-file`) is sent as `multipart/alternative` with the plain-text
@@ -342,6 +346,7 @@ read from the macOS **Keychain** by default, so no secret goes in config:
 | `APPLE_MAIL_MCP_SMTP_PORT` | No | `465` if secure, else `587` | SMTP port |
 | `APPLE_MAIL_MCP_SMTP_SECURE` | No | `false` | `true` for implicit TLS (port 465); otherwise STARTTLS |
 | `APPLE_MAIL_MCP_SMTP_FROM` | No | = user | From address |
+| `APPLE_MAIL_MCP_SMTP_ALLOWED_FROM` | No | — | Comma-separated sender aliases permitted as per-message From overrides |
 | `APPLE_MAIL_MCP_SMTP_PASSWORD` | No | — | Password (if set, used instead of the Keychain) |
 | `APPLE_MAIL_MCP_SMTP_KEYCHAIN_SERVICE` | No | = host | Keychain item service/server name |
 | `APPLE_MAIL_MCP_SMTP_KEYCHAIN_ACCOUNT` | No | = user | Keychain item account |
@@ -625,7 +630,7 @@ Save an email to Drafts without sending.
 | `cc` | string[] | No | CC recipients |
 | `bcc` | string[] | No | BCC recipients |
 | `account` | string | No | Account for draft |
-| `attachments` | (string \| {filename, contentBase64})[] | No | Up to 20 attachments: absolute file paths and/or inline `{filename, contentBase64}` objects |
+| `attachments` | (string \| {filename, contentBase64})[] | No | Up to 20 attachments: absolute file paths and/or inline `{filename, contentBase64}` objects up to 25 MiB decoded each |
 
 **Returns:** Confirmation that draft was created.
 

package/build/cli.js

@@ -11869,6 +11869,29 @@ import { execFileSync } from "child_process";
 import { isAbsolute } from "path";
 import { existsSync } from "fs";
 
+// src/utils/attachmentLimits.ts
+var MAX_INLINE_ATTACHMENT_BYTES = 25 * 1024 * 1024;
+var MAX_INLINE_ATTACHMENT_BASE64_CHARS = Math.ceil(MAX_INLINE_ATTACHMENT_BYTES / 3) * 4;
+var MAX_INLINE_ATTACHMENT_BASE64_INPUT_CHARS = MAX_INLINE_ATTACHMENT_BASE64_CHARS * 2;
+function isInlineAttachmentBase64WithinLimit(contentBase64) {
+  if (contentBase64.length > MAX_INLINE_ATTACHMENT_BASE64_INPUT_CHARS) return false;
+  let encodedChars = 0;
+  for (const char of contentBase64) {
+    if (!/\s/u.test(char) && ++encodedChars > MAX_INLINE_ATTACHMENT_BASE64_CHARS) return false;
+  }
+  return true;
+}
+function decodeInlineAttachment(contentBase64) {
+  if (!isInlineAttachmentBase64WithinLimit(contentBase64)) {
+    throw new Error("Inline attachment exceeds the 25 MiB decoded size limit.");
+  }
+  const content = Buffer.from(contentBase64, "base64");
+  if (content.length > MAX_INLINE_ATTACHMENT_BYTES) {
+    throw new Error("Inline attachment exceeds the 25 MiB decoded size limit.");
+  }
+  return content;
+}
+
 // src/utils/docsUrls.ts
 var SETUP_GUIDE_URL = "https://github.com/sweetrb/apple-mail-mcp/blob/main/docs/IMAP-SETUP.md";
 var SETUP_HINT = `Setup guide: ${SETUP_GUIDE_URL} \u2014 run the "doctor" tool to check your setup.`;
@@ -11880,6 +11903,7 @@ var SMTP_ENV = {
   secure: "APPLE_MAIL_MCP_SMTP_SECURE",
   user: "APPLE_MAIL_MCP_SMTP_USER",
   from: "APPLE_MAIL_MCP_SMTP_FROM",
+  allowedFrom: "APPLE_MAIL_MCP_SMTP_ALLOWED_FROM",
   password: "APPLE_MAIL_MCP_SMTP_PASSWORD",
   keychainService: "APPLE_MAIL_MCP_SMTP_KEYCHAIN_SERVICE",
   keychainAccount: "APPLE_MAIL_MCP_SMTP_KEYCHAIN_ACCOUNT"
@@ -11915,6 +11939,7 @@ function resolveSmtpConfig(env = process.env) {
     throw new Error(`Invalid ${SMTP_ENV.port}: "${env[SMTP_ENV.port]}" is not a valid port.`);
   }
   const from = env[SMTP_ENV.from]?.trim() || user;
+  const allowedFrom = (env[SMTP_ENV.allowedFrom] ?? "").split(",").map((value) => value.trim()).filter(Boolean);
   let pass = env[SMTP_ENV.password];
   if (!pass) {
     const service = env[SMTP_ENV.keychainService]?.trim() || host;
@@ -11926,7 +11951,7 @@ function resolveSmtpConfig(env = process.env) {
       `No SMTP password found. Set ${SMTP_ENV.password}, or store an internet password in the Keychain for service "${env[SMTP_ENV.keychainService]?.trim() || host}" / account "${env[SMTP_ENV.keychainAccount]?.trim() || user}". ` + SETUP_HINT
     );
   }
-  return { host, port, secure, user, pass, from };
+  return { host, port, secure, user, pass, from, allowedFrom };
 }
 function buildAttachments(attachments) {
   if (!attachments || attachments.length === 0) return void 0;
@@ -11939,7 +11964,7 @@ function buildAttachments(attachments) {
     if (!a.filename || !a.contentBase64) {
       throw new Error("Inline attachment requires both filename and contentBase64.");
     }
-    return { filename: a.filename, content: Buffer.from(a.contentBase64, "base64") };
+    return { filename: a.filename, content: decodeInlineAttachment(a.contentBase64) };
   });
 }
 async function sendViaSmtp(opts, config, createTransport = import_nodemailer.default.createTransport) {
@@ -11949,6 +11974,16 @@ async function sendViaSmtp(opts, config, createTransport = import_nodemailer.def
   } catch (error) {
     return { success: false, error: error instanceof Error ? error.message : String(error) };
   }
+  const requestedFrom = opts.from?.trim();
+  const allowedFrom = new Set(
+    [cfg.user, cfg.from, ...cfg.allowedFrom ?? []].map((value) => value.trim().toLowerCase())
+  );
+  if (requestedFrom && !allowedFrom.has(requestedFrom.toLowerCase())) {
+    return {
+      success: false,
+      error: `SMTP From "${requestedFrom}" is not a configured sender identity.`
+    };
+  }
   let attachments;
   try {
     attachments = buildAttachments(opts.attachments);
@@ -11964,7 +11999,7 @@ async function sendViaSmtp(opts, config, createTransport = import_nodemailer.def
   const html = opts.htmlBody?.trim() ? opts.htmlBody : void 0;
   try {
     const info = await transporter.sendMail({
-      from: opts.from?.trim() || cfg.from,
+      from: requestedFrom || cfg.from,
       to: opts.to,
       cc: opts.cc,
       bcc: opts.bcc,
@@ -11995,7 +12030,8 @@ var EX_CONFIG = 78;
 var USAGE = `apple-mail-send \u2014 send a clean email via SMTP (no Mail.app blockquote wrapping).
 
 Required:
-  --from <addr>         Sender address (must be allowed by the SMTP server)
+  --from <addr>         Sender address (SMTP user/configured From, or an alias in
+                        ${SMTP_ENV.allowedFrom})
   --to <addr>           Recipient (repeatable)
   --subject <text>      Subject line
   --body-file <path>    UTF-8 file with the plain-text body

package/build/index.js

@@ -75678,7 +75678,15 @@ var StdioServerTransport = class {
 
 // src/services/appleMailManager.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync3, writeFileSync as writeFileSync3, readFileSync as readFileSync2, mkdtempSync as mkdtempSync2, rmSync as rmSync2 } from "fs";
+import {
+  existsSync as existsSync3,
+  writeFileSync as writeFileSync3,
+  readFileSync as readFileSync2,
+  mkdtempSync as mkdtempSync2,
+  rmSync as rmSync2,
+  realpathSync,
+  lstatSync
+} from "fs";
 import { isAbsolute, resolve, sep, join as join4 } from "path";
 import { homedir as homedir3 } from "os";
 
@@ -76095,6 +76103,14 @@ function extractTextBody(source) {
   const encoding = getHeader(headers, "Content-Transfer-Encoding");
   return decodeBody(body, encoding).toString("utf8");
 }
+function extractRfcMessageIdFromSource(source) {
+  if (!source || !source.trim()) return "";
+  const blankLineIdx = source.search(/\r?\n\r?\n/);
+  const headers = blankLineIdx === -1 ? source : source.substring(0, blankLineIdx);
+  const raw = getHeader(headers, "Message-ID") ?? getHeader(headers, "Message-Id");
+  if (!raw) return "";
+  return raw.trim().replace(/^<+/, "").replace(/>+$/, "").trim();
+}
 function extractMimeAttachment(source, attachmentName) {
   if (!source || !source.trim()) return null;
   const boundary = extractBoundary(source);
@@ -76192,22 +76208,53 @@ var TemplateStore = class {
 import { writeFileSync as writeFileSync2, rmSync, mkdtempSync } from "fs";
 import { join as join2 } from "path";
 import { tmpdir } from "os";
+
+// src/utils/attachmentLimits.ts
+var MAX_INLINE_ATTACHMENT_BYTES = 25 * 1024 * 1024;
+var MAX_INLINE_ATTACHMENT_BASE64_CHARS = Math.ceil(MAX_INLINE_ATTACHMENT_BYTES / 3) * 4;
+var MAX_INLINE_ATTACHMENT_BASE64_INPUT_CHARS = MAX_INLINE_ATTACHMENT_BASE64_CHARS * 2;
+function isInlineAttachmentBase64WithinLimit(contentBase64) {
+  if (contentBase64.length > MAX_INLINE_ATTACHMENT_BASE64_INPUT_CHARS) return false;
+  let encodedChars = 0;
+  for (const char of contentBase64) {
+    if (!/\s/u.test(char) && ++encodedChars > MAX_INLINE_ATTACHMENT_BASE64_CHARS) return false;
+  }
+  return true;
+}
+function decodeInlineAttachment(contentBase64) {
+  if (!isInlineAttachmentBase64WithinLimit(contentBase64)) {
+    throw new Error("Inline attachment exceeds the 25 MiB decoded size limit.");
+  }
+  const content = Buffer.from(contentBase64, "base64");
+  if (content.length > MAX_INLINE_ATTACHMENT_BYTES) {
+    throw new Error("Inline attachment exceeds the 25 MiB decoded size limit.");
+  }
+  return content;
+}
+
+// src/utils/attachmentMaterialize.ts
 function materializeAttachments(attachments) {
   if (!attachments || attachments.length === 0) {
     return { paths: [], cleanup: () => void 0 };
   }
   let dir = null;
-  const paths = attachments.map((a) => {
-    if (typeof a === "string") return a;
-    if (!a.filename || !a.contentBase64) {
-      throw new Error("Inline attachment requires both filename and contentBase64.");
-    }
-    if (!dir) dir = mkdtempSync(join2(tmpdir(), "amcp-att-"));
-    const safeName = a.filename.replace(/[/\\]/g, "_");
-    const p = join2(dir, safeName);
-    writeFileSync2(p, Buffer.from(a.contentBase64, "base64"));
-    return p;
-  });
+  let paths;
+  try {
+    paths = attachments.map((a) => {
+      if (typeof a === "string") return a;
+      if (!a.filename || !a.contentBase64) {
+        throw new Error("Inline attachment requires both filename and contentBase64.");
+      }
+      if (!dir) dir = mkdtempSync(join2(tmpdir(), "amcp-att-"));
+      const safeName = a.filename.replace(/[/\\]/g, "_");
+      const p = join2(dir, safeName);
+      writeFileSync2(p, decodeInlineAttachment(a.contentBase64));
+      return p;
+    });
+  } catch (error2) {
+    if (dir) rmSync(dir, { recursive: true, force: true });
+    throw error2;
+  }
   return {
     paths,
     cleanup: () => {
@@ -76341,8 +76388,12 @@ var DIAG_MARKER = "DIAG";
 var DIAG_FIELD_SEP = "F";
 var DIAG_ITEM_SEP = "M";
 var CONTENT_MARKER = "CONTENT";
+var MSGID_MARKER = "MSGID";
 var HTML_MARKER = "HTML";
 var BATCH_FATAL = "FATAL";
+function normalizeRfcMessageId(mid) {
+  return (mid || "").trim().replace(/^<+/, "").replace(/>+$/, "").trim();
+}
 function mergeSearchDiagnostics(into, from) {
   into.timedOutAccounts.push(...from.timedOutAccounts);
   into.skippedLargeMailboxes.push(...from.skippedLargeMailboxes);
@@ -76386,6 +76437,25 @@ function isPathWithinAllowedRoots(resolvedPath) {
     return resolvedPath === base || resolvedPath.startsWith(base + sep);
   });
 }
+function resolveAttachmentSaveTarget(savePath, attachmentName) {
+  let saveDirectory;
+  try {
+    saveDirectory = realpathSync(resolve(savePath));
+  } catch {
+    throw new Error(`Save directory "${savePath}" does not exist`);
+  }
+  if (!isPathWithinAllowedRoots(saveDirectory)) {
+    throw new Error(`Save path "${savePath}" is outside allowed directories`);
+  }
+  const savedPath = resolve(saveDirectory, attachmentName);
+  if (!isPathWithinAllowedRoots(savedPath)) {
+    throw new Error(`Output path "${savedPath}" is outside allowed directories`);
+  }
+  if (existsSync3(savedPath) && lstatSync(savedPath).isSymbolicLink()) {
+    throw new Error(`Refusing to overwrite symbolic link "${savedPath}"`);
+  }
+  return { saveDirectory, savedPath };
+}
 var UNSUPPORTED_APPLESCRIPT_OP = /AppleEvent handler failed|-10000/i;
 function describeMailboxOpError(op, raw) {
   const trimmed = (raw || "").trim();
@@ -76621,6 +76691,32 @@ var AppleMailManager = class {
   };
   /** Cache TTL in milliseconds (60 seconds). */
   CACHE_TTL_MS = 6e4;
+  /**
+   * Remembers where each message id was last seen: id → {account, mailbox}.
+   *
+   * Mail.app numeric message ids are unique *per mailbox*, and by-id fetches
+   * (getMessageContent/getRawSource) otherwise have to linear-scan every mailbox
+   * of every account probing `whose id is N`. On a real multi-account setup that
+   * is 700+ mailboxes; a message in a late-iterated folder (e.g. a large "Sent
+   * Items") isn't reached before the AppleScript timeout fires, so the fetch
+   * returns a false "not found" (only INBOX ids, reached early, worked). Every
+   * search/list/by-id result records its id→location here so a subsequent fetch
+   * opens the one right mailbox directly. A stale entry (message moved) simply
+   * misses and falls back to the full scan, so it can never wedge a lookup.
+   */
+  idLocationIndex = /* @__PURE__ */ new Map();
+  /** Cap on the id→location index so a long-lived process can't grow unbounded. */
+  ID_LOCATION_MAX = 5e3;
+  /** Record (or refresh) where a message id lives, evicting oldest when full. */
+  rememberLocation(id, account, mailbox) {
+    if (!id || !account || !mailbox) return;
+    if (this.idLocationIndex.has(id)) this.idLocationIndex.delete(id);
+    this.idLocationIndex.set(id, { account, mailbox });
+    if (this.idLocationIndex.size > this.ID_LOCATION_MAX) {
+      const oldest = this.idLocationIndex.keys().next().value;
+      if (oldest !== void 0) this.idLocationIndex.delete(oldest);
+    }
+  }
   /**
    * Returns cached accounts or fetches fresh data if cache is expired/empty.
    */
@@ -77123,6 +77219,7 @@ var AppleMailManager = class {
     }
     const parts = result.output.split(FIELD_SEP);
     if (parts.length < 9) return null;
+    this.rememberLocation(id.toString(), parts[8], parts[7]);
     return {
       id: id.toString(),
       subject: parts[0],
@@ -77138,6 +77235,47 @@ var AppleMailManager = class {
       hasAttachments: parts.length > 9 ? parts[9] === "true" : false
     };
   }
+  /**
+   * Build an app-level AppleScript that opens exactly one account+mailbox, finds
+   * the message with numeric `id` in it, and runs `innerAction` (which may assume
+   * `msg` is bound). Used by the by-id fast paths (getMessageContent/getRawSource)
+   * so a message in a late-iterated large folder resolves directly instead of via
+   * the timeout-prone full-mailbox scan.
+   *
+   * The mailbox name is resolved through `resolveMailbox` (so an alias like
+   * "Sent"→"Sent Items" or a casing mismatch like "INBOX"→"Inbox" still opens the
+   * right folder), and matched case-insensitively by iterating the account's
+   * mailboxes — `mailbox "INBOX" of account …` throws on accounts whose inbox is
+   * actually named "Inbox", which would silently drop us back to the slow scan.
+   * Returns "" (found nothing) on any error, so the caller falls back safely.
+   */
+  scopedByIdScript(account, mailbox, id, innerAction) {
+    const resolved = this.resolveMailbox(mailbox, account);
+    return buildAppLevelScript(`
+      try
+        set acct to (first account whose name is "${escapeForAppleScript(account)}")
+        set targetMb to missing value
+        ignoring case
+          repeat with mb in mailboxes of acct
+            if (name of mb) is "${escapeForAppleScript(resolved)}" then
+              set targetMb to mb
+              exit repeat
+            end if
+          end repeat
+        end ignoring
+        if targetMb is not missing value then
+          set matchingMsgs to (messages of targetMb whose id is ${Number(id)})
+          if (count of matchingMsgs) > 0 then
+            set msg to item 1 of matchingMsgs
+            ${innerAction}
+          end if
+        end if
+        return ""
+      on error errMsg
+        return ""
+      end try
+    `);
+  }
   /**
    * Get the content of a message.
    *
@@ -77148,11 +77286,30 @@ var AppleMailManager = class {
    *   path doesn't need it; fetching it unconditionally was both slow and, worse,
    *   returned the entire raw MIME blob mislabeled as HTML (#32).
    */
-  getMessageContent(id, includeHtml = false) {
+  getMessageContent(id, includeHtml = false, hint) {
     const sourceFetch = includeHtml ? `set htmlSource to ""
                 try
                   set htmlSource to source of msg
                 end try` : `set htmlSource to ""`;
+    const innerFetch = `
+                set msgSubject to subject of msg
+                set msgRfcId to ""
+                try
+                  set msgRfcId to message id of msg
+                end try
+                set msgContent to content of msg
+                ${sourceFetch}
+                return msgSubject & "${MSGID_MARKER}" & msgRfcId & "${CONTENT_MARKER}" & msgContent & "${HTML_MARKER}" & htmlSource`;
+    const loc = hint?.account && hint?.mailbox ? { account: hint.account, mailbox: hint.mailbox } : this.idLocationIndex.get(id.toString());
+    if (loc) {
+      const scopedScript = this.scopedByIdScript(loc.account, loc.mailbox, id, innerFetch);
+      const scoped = this.parseMessageContent(
+        id,
+        executeAppleScript(scopedScript, { timeoutMs: 6e4 }),
+        includeHtml
+      );
+      if (scoped) return scoped;
+    }
     const script = buildAppLevelScript(`
       try
         repeat with acct in accounts
@@ -77161,10 +77318,7 @@ var AppleMailManager = class {
               set matchingMsgs to (messages of mb whose id is ${Number(id)})
               if (count of matchingMsgs) > 0 then
                 set msg to item 1 of matchingMsgs
-                set msgSubject to subject of msg
-                set msgContent to content of msg
-                ${sourceFetch}
-                return msgSubject & "${CONTENT_MARKER}" & msgContent & "${HTML_MARKER}" & htmlSource
+                ${innerFetch}
               end if
             end try
           end repeat
@@ -77174,9 +77328,20 @@ var AppleMailManager = class {
         return ""
       end try
     `);
-    const result = executeAppleScript(script, { timeoutMs: 6e4 });
+    return this.parseMessageContent(
+      id,
+      executeAppleScript(script, { timeoutMs: 6e4 }),
+      includeHtml
+    );
+  }
+  /**
+   * Parse the marker-delimited output of a getMessageContent AppleScript into a
+   * MessageContent, or null when nothing was found / the fetch failed. Shared by
+   * the scoped fast path and the full-mailbox-scan fallback.
+   */
+  parseMessageContent(id, result, includeHtml) {
     if (!result.success || !result.output.trim()) {
-      console.error(`Failed to get message content: ${result.error}`);
+      if (!result.success) console.error(`Failed to get message content: ${result.error}`);
       return null;
     }
     const htmlSplit = result.output.split(HTML_MARKER);
@@ -77184,12 +77349,16 @@ var AppleMailManager = class {
     const rawSource = htmlSplit.length > 1 ? htmlSplit[1] : "";
     const parts = contentPart.split(CONTENT_MARKER);
     if (parts.length < 2) return null;
+    const subjParts = parts[0].split(MSGID_MARKER);
+    const subject = subjParts[0];
+    const rfcMessageId = normalizeRfcMessageId(subjParts.length > 1 ? subjParts[1] : "");
     const htmlContent = includeHtml && rawSource ? extractHtmlBody(rawSource) || void 0 : void 0;
     return {
       id: id.toString(),
-      subject: parts[0],
+      subject,
       plainText: parts[1],
-      htmlContent
+      htmlContent,
+      rfcMessageId
     };
   }
   /**
@@ -77201,7 +77370,18 @@ var AppleMailManager = class {
    * the entire raw message including base64-encoded attachments —
    * a 20MB attachment can take several seconds over Exchange/IMAP.
    */
-  getRawSource(id) {
+  getRawSource(id, hint) {
+    const loc = hint?.account && hint?.mailbox ? { account: hint.account, mailbox: hint.mailbox } : this.idLocationIndex.get(id.toString());
+    if (loc) {
+      const scopedScript = this.scopedByIdScript(
+        loc.account,
+        loc.mailbox,
+        id,
+        "return source of msg"
+      );
+      const scoped = executeAppleScript(scopedScript, { timeoutMs: 12e4 });
+      if (scoped.success && scoped.output.trim()) return scoped.output;
+    }
     const script = buildAppLevelScript(`
       try
         repeat with acct in accounts
@@ -77372,8 +77552,9 @@ var AppleMailManager = class {
       } else if (parts.length === 7) {
         hasAttachments = parts[6] === "true";
       }
+      const msgId = parts[0].trim();
       messages.push({
-        id: parts[0].trim(),
+        id: msgId,
         subject: parts[1],
         sender: parts[2],
         recipients: [],
@@ -77386,6 +77567,7 @@ var AppleMailManager = class {
         account,
         hasAttachments
       });
+      this.rememberLocation(msgId, account, msgMailbox);
     }
     return messages;
   }
@@ -77793,7 +77975,7 @@ var AppleMailManager = class {
   findNumericIdByMessageId(messageId, accountName) {
     const mid = messageId.trim().replace(/^<+/, "").replace(/>+$/, "").trim();
     if (!mid) return null;
-    const q = (s) => s.replace(/\\/g, "\\\\").replace(/"/g, '\\"');
+    const q = (s) => escapeForAppleScript(s);
     const midLit = `"${q(mid)}"`;
     const bracketedLit = `"${q(`<${mid}>`)}"`;
     const matchClause = (mbVar) => `(messages of ${mbVar} whose message id is ${midLit} or message id is ${bracketedLit})`;
@@ -78180,13 +78362,15 @@ var AppleMailManager = class {
       console.error(`Invalid attachment name: "${attachmentName}"`);
       return false;
     }
-    const resolvedPath = resolve(savePath);
-    if (!isPathWithinAllowedRoots(resolvedPath)) {
-      console.error(`Save path "${savePath}" is outside allowed directories`);
+    let target;
+    try {
+      target = resolveAttachmentSaveTarget(savePath, attachmentName);
+    } catch (error2) {
+      console.error(error2 instanceof Error ? error2.message : String(error2));
       return false;
     }
     const safeName = escapeForAppleScript(attachmentName);
-    const safePath = escapeForAppleScript(resolvedPath);
+    const safePath = escapeForAppleScript(target.saveDirectory);
     const numericId = Number(id);
     const script = buildAppLevelScript(`
       try
@@ -78228,12 +78412,7 @@ var AppleMailManager = class {
       return false;
     }
     try {
-      const outPath = resolve(resolvedPath, attachmentName);
-      if (!isPathWithinAllowedRoots(outPath)) {
-        console.error(`Output path "${outPath}" is outside allowed directories`);
-        return false;
-      }
-      writeFileSync3(outPath, attachment.data);
+      writeFileSync3(target.savedPath, attachment.data);
       return true;
     } catch (err) {
       console.error(`Failed to write attachment to disk: ${err}`);
@@ -78250,7 +78429,7 @@ var AppleMailManager = class {
     try {
       dir = mkdtempSync2("/private/tmp/amcp-fetch-");
       const dest = join4(dir, attachmentName.replace(/[/\\]/g, "_"));
-      const ok = this.saveAttachment(id, attachmentName, dest);
+      const ok = this.saveAttachment(id, attachmentName, dir);
       if (!ok) {
         return {
           success: false,
@@ -79001,7 +79180,7 @@ ${actionStmts.join("\n")}
 
 // src/index.ts
 import { writeFileSync as writeFileSync4 } from "fs";
-import { resolve as resolvePath, join as joinPath } from "path";
+import { join as joinPath } from "path";
 
 // src/services/smtpMailer.ts
 var import_nodemailer = __toESM(require_nodemailer(), 1);
@@ -79020,6 +79199,7 @@ var SMTP_ENV = {
   secure: "APPLE_MAIL_MCP_SMTP_SECURE",
   user: "APPLE_MAIL_MCP_SMTP_USER",
   from: "APPLE_MAIL_MCP_SMTP_FROM",
+  allowedFrom: "APPLE_MAIL_MCP_SMTP_ALLOWED_FROM",
   password: "APPLE_MAIL_MCP_SMTP_PASSWORD",
   keychainService: "APPLE_MAIL_MCP_SMTP_KEYCHAIN_SERVICE",
   keychainAccount: "APPLE_MAIL_MCP_SMTP_KEYCHAIN_ACCOUNT"
@@ -79065,6 +79245,7 @@ function resolveSmtpConfig(env = process.env) {
     throw new Error(`Invalid ${SMTP_ENV.port}: "${env[SMTP_ENV.port]}" is not a valid port.`);
   }
   const from = env[SMTP_ENV.from]?.trim() || user;
+  const allowedFrom = (env[SMTP_ENV.allowedFrom] ?? "").split(",").map((value) => value.trim()).filter(Boolean);
   let pass = env[SMTP_ENV.password];
   if (!pass) {
     const service = env[SMTP_ENV.keychainService]?.trim() || host;
@@ -79076,7 +79257,7 @@ function resolveSmtpConfig(env = process.env) {
       `No SMTP password found. Set ${SMTP_ENV.password}, or store an internet password in the Keychain for service "${env[SMTP_ENV.keychainService]?.trim() || host}" / account "${env[SMTP_ENV.keychainAccount]?.trim() || user}". ` + SETUP_HINT
     );
   }
-  return { host, port, secure, user, pass, from };
+  return { host, port, secure, user, pass, from, allowedFrom };
 }
 function buildAttachments(attachments) {
   if (!attachments || attachments.length === 0) return void 0;
@@ -79089,7 +79270,7 @@ function buildAttachments(attachments) {
     if (!a.filename || !a.contentBase64) {
       throw new Error("Inline attachment requires both filename and contentBase64.");
     }
-    return { filename: a.filename, content: Buffer.from(a.contentBase64, "base64") };
+    return { filename: a.filename, content: decodeInlineAttachment(a.contentBase64) };
   });
 }
 async function sendViaSmtp(opts, config2, createTransport = import_nodemailer.default.createTransport) {
@@ -79099,6 +79280,16 @@ async function sendViaSmtp(opts, config2, createTransport = import_nodemailer.de
   } catch (error2) {
     return { success: false, error: error2 instanceof Error ? error2.message : String(error2) };
   }
+  const requestedFrom = opts.from?.trim();
+  const allowedFrom = new Set(
+    [cfg.user, cfg.from, ...cfg.allowedFrom ?? []].map((value) => value.trim().toLowerCase())
+  );
+  if (requestedFrom && !allowedFrom.has(requestedFrom.toLowerCase())) {
+    return {
+      success: false,
+      error: `SMTP From "${requestedFrom}" is not a configured sender identity.`
+    };
+  }
   let attachments;
   try {
     attachments = buildAttachments(opts.attachments);
@@ -79114,7 +79305,7 @@ async function sendViaSmtp(opts, config2, createTransport = import_nodemailer.de
   const html = opts.htmlBody?.trim() ? opts.htmlBody : void 0;
   try {
     const info = await transporter.sendMail({
-      from: opts.from?.trim() || cfg.from,
+      from: requestedFrom || cfg.from,
       to: opts.to,
       cc: opts.cc,
       bcc: opts.bcc,
@@ -79324,6 +79515,27 @@ function decodeImapId(id) {
     return null;
   }
 }
+function sameImapAccount(left, right, deps) {
+  if (left === right) return true;
+  if (deps.config) {
+    const aliases = /* @__PURE__ */ new Set([deps.config.accountLabel, deps.config.user]);
+    if (aliases.has(left) && aliases.has(right)) return true;
+  }
+  const specs = listImapAccountSpecs();
+  const matches = (selector, spec) => spec.accountLabel === selector || spec.user === selector;
+  const leftSpec = specs.find((spec) => matches(left, spec));
+  const rightSpec = specs.find((spec) => matches(right, spec));
+  return leftSpec !== void 0 && leftSpec === rightSpec;
+}
+function depsForAccount(account, deps) {
+  if (deps.account && !sameImapAccount(account, deps.account, deps)) {
+    throw new Error(`IMAP message id belongs to account "${account}", not "${deps.account}".`);
+  }
+  return { ...deps, account };
+}
+function depsForMessageRef(ref, deps) {
+  return depsForAccount(ref.account, deps);
+}
 function str(v) {
   return typeof v === "string" && v.trim() ? v.trim() : void 0;
 }
@@ -79831,25 +80043,21 @@ async function withMailbox(path, deps, fn) {
 async function imapGetMessage(id, preferHtml, deps = {}) {
   const ref = decodeImapId(id);
   if (!ref) return { success: false, error: `Not an IMAP message id: "${id}".` };
-  return withMailbox(
-    ref.path,
-    { ...deps, account: deps.account ?? ref.account },
-    async (client) => {
-      const msg = await client.fetchOne(
-        String(ref.uid),
-        { envelope: true, source: true },
-        { uid: true }
-      );
-      if (!msg)
-        return { success: false, error: `IMAP message UID ${ref.uid} not found in "${ref.path}".` };
-      const subject = msg.envelope?.subject || "(no subject)";
-      const src = msg.source ? msg.source.toString() : "";
-      const body = (preferHtml ? extractHtmlBody(src) : extractTextBody(src)) ?? extractTextBody(src) ?? extractHtmlBody(src) ?? "(no readable body)";
-      return { success: true, info: `Subject: ${subject}
+  return withMailbox(ref.path, depsForMessageRef(ref, deps), async (client) => {
+    const msg = await client.fetchOne(
+      String(ref.uid),
+      { envelope: true, source: true },
+      { uid: true }
+    );
+    if (!msg)
+      return { success: false, error: `IMAP message UID ${ref.uid} not found in "${ref.path}".` };
+    const subject = msg.envelope?.subject || "(no subject)";
+    const src = msg.source ? msg.source.toString() : "";
+    const body = (preferHtml ? extractHtmlBody(src) : extractTextBody(src)) ?? extractTextBody(src) ?? extractHtmlBody(src) ?? "(no readable body)";
+    return { success: true, info: `Subject: ${subject}
 
 ${body}` };
-    }
-  );
+  });
 }
 function normalizeMessageId(mid) {
   return mid.trim().replace(/^<+/, "").replace(/>+$/, "").trim();
@@ -79858,15 +80066,11 @@ async function imapFetchMessageId(id, deps = {}) {
   const ref = decodeImapId(id);
   if (!ref) return null;
   try {
-    return await withMailbox(
-      ref.path,
-      { ...deps, account: deps.account ?? ref.account },
-      async (client) => {
-        const msg = await client.fetchOne(String(ref.uid), { envelope: true }, { uid: true });
-        const mid = msg && msg.envelope?.messageId;
-        return mid ? normalizeMessageId(mid) : null;
-      }
-    );
+    return await withMailbox(ref.path, depsForMessageRef(ref, deps), async (client) => {
+      const msg = await client.fetchOne(String(ref.uid), { envelope: true }, { uid: true });
+      const mid = msg && msg.envelope?.messageId;
+      return mid ? normalizeMessageId(mid) : null;
+    });
   } catch {
     return null;
   }
@@ -79874,23 +80078,19 @@ async function imapFetchMessageId(id, deps = {}) {
 function flagOp(id, flag, add, deps) {
   const ref = decodeImapId(id);
   if (!ref) return Promise.resolve({ success: false, error: `Not an IMAP message id: "${id}".` });
-  return withMailbox(
-    ref.path,
-    { ...deps, account: deps.account ?? ref.account },
-    async (client) => {
-      try {
-        const ok = add ? await client.messageFlagsAdd([ref.uid], [flag], { uid: true }) : await client.messageFlagsRemove([ref.uid], [flag], { uid: true });
-        if (!ok)
-          return { success: false, error: `IMAP flag update returned false for UID ${ref.uid}.` };
-        return { success: true };
-      } catch (e) {
-        return {
-          success: false,
-          error: `IMAP flag update failed for UID ${ref.uid}: ${errText(e)}`
-        };
-      }
+  return withMailbox(ref.path, depsForMessageRef(ref, deps), async (client) => {
+    try {
+      const ok = add ? await client.messageFlagsAdd([ref.uid], [flag], { uid: true }) : await client.messageFlagsRemove([ref.uid], [flag], { uid: true });
+      if (!ok)
+        return { success: false, error: `IMAP flag update returned false for UID ${ref.uid}.` };
+      return { success: true };
+    } catch (e) {
+      return {
+        success: false,
+        error: `IMAP flag update failed for UID ${ref.uid}: ${errText(e)}`
+      };
     }
-  );
+  });
 }
 var imapMarkRead = (id, deps = {}) => flagOp(id, "\\Seen", true, deps);
 var imapMarkUnread = (id, deps = {}) => flagOp(id, "\\Seen", false, deps);
@@ -79899,7 +80099,7 @@ var imapUnflagMessage = (id, deps = {}) => flagOp(id, "\\Flagged", false, deps);
 async function imapMoveMessageById(id, destMailbox, deps = {}) {
   const ref = decodeImapId(id);
   if (!ref) return { success: false, error: `Not an IMAP message id: "${id}".` };
-  return withClient({ ...deps, account: deps.account ?? ref.account }, async (client) => {
+  return withClient(depsForMessageRef(ref, deps), async (client) => {
     const destPath = await findMailboxPath(client, destMailbox) ?? resolveMailboxPath(destMailbox, "list");
     const lock = await client.getMailboxLock(ref.path);
     try {
@@ -79940,21 +80140,17 @@ async function trashUids(client, uids, srcPath) {
 async function imapDeleteMessageById(id, deps = {}) {
   const ref = decodeImapId(id);
   if (!ref) return { success: false, error: `Not an IMAP message id: "${id}".` };
-  return withMailbox(
-    ref.path,
-    { ...deps, account: deps.account ?? ref.account },
-    async (client) => {
-      try {
-        const { dest, expunged } = await trashUids(client, [ref.uid], ref.path);
-        return {
-          success: true,
-          info: expunged ? `Permanently deleted UID ${ref.uid} from Trash ("${ref.path}") via IMAP.` : `Moved UID ${ref.uid} to Trash ("${dest}") via IMAP.`
-        };
-      } catch (e) {
-        return { success: false, error: `IMAP delete failed for UID ${ref.uid}: ${errText(e)}` };
-      }
+  return withMailbox(ref.path, depsForMessageRef(ref, deps), async (client) => {
+    try {
+      const { dest, expunged } = await trashUids(client, [ref.uid], ref.path);
+      return {
+        success: true,
+        info: expunged ? `Permanently deleted UID ${ref.uid} from Trash ("${ref.path}") via IMAP.` : `Moved UID ${ref.uid} to Trash ("${dest}") via IMAP.`
+      };
+    } catch (e) {
+      return { success: false, error: `IMAP delete failed for UID ${ref.uid}: ${errText(e)}` };
     }
-  );
+  });
 }
 function collectAttachments(node, out = []) {
   if (!node) return out;
@@ -79980,54 +80176,46 @@ async function streamToBuffer(content) {
 async function imapListAttachments(id, deps = {}) {
   const ref = decodeImapId(id);
   if (!ref) return { success: false, error: `Not an IMAP message id: "${id}".` };
-  return withMailbox(
-    ref.path,
-    { ...deps, account: deps.account ?? ref.account },
-    async (client) => {
-      const msg = await client.fetchOne(String(ref.uid), { bodyStructure: true }, { uid: true });
-      if (!msg || !msg.bodyStructure) {
-        return { success: false, error: `IMAP message UID ${ref.uid} not found in "${ref.path}".` };
-      }
-      const attachments = collectAttachments(msg.bodyStructure).map((a) => ({
-        id: `${id}#${a.part}`,
-        name: a.filename,
-        mimeType: a.mimeType,
-        size: a.size
-      }));
-      return { success: true, attachments };
-    }
-  );
+  return withMailbox(ref.path, depsForMessageRef(ref, deps), async (client) => {
+    const msg = await client.fetchOne(String(ref.uid), { bodyStructure: true }, { uid: true });
+    if (!msg || !msg.bodyStructure) {
+      return { success: false, error: `IMAP message UID ${ref.uid} not found in "${ref.path}".` };
+    }
+    const attachments = collectAttachments(msg.bodyStructure).map((a) => ({
+      id: `${id}#${a.part}`,
+      name: a.filename,
+      mimeType: a.mimeType,
+      size: a.size
+    }));
+    return { success: true, attachments };
+  });
 }
 async function imapFetchAttachment(id, attachmentName, deps = {}) {
   const ref = decodeImapId(id);
   if (!ref) return { success: false, error: `Not an IMAP message id: "${id}".` };
-  return withMailbox(
-    ref.path,
-    { ...deps, account: deps.account ?? ref.account },
-    async (client) => {
-      const msg = await client.fetchOne(String(ref.uid), { bodyStructure: true }, { uid: true });
-      if (!msg || !msg.bodyStructure) {
-        return { success: false, error: `IMAP message UID ${ref.uid} not found in "${ref.path}".` };
-      }
-      const atts = collectAttachments(msg.bodyStructure);
-      const match = atts.find((a) => a.filename === attachmentName);
-      if (!match) {
-        const names = atts.map((a) => a.filename).join(", ") || "none";
-        return {
-          success: false,
-          error: `Attachment "${attachmentName}" not found on UID ${ref.uid}. Available: ${names}.`
-        };
-      }
-      const dl = await client.download(String(ref.uid), match.part, { uid: true });
-      const buf = await streamToBuffer(dl.content);
+  return withMailbox(ref.path, depsForMessageRef(ref, deps), async (client) => {
+    const msg = await client.fetchOne(String(ref.uid), { bodyStructure: true }, { uid: true });
+    if (!msg || !msg.bodyStructure) {
+      return { success: false, error: `IMAP message UID ${ref.uid} not found in "${ref.path}".` };
+    }
+    const atts = collectAttachments(msg.bodyStructure);
+    const match = atts.find((a) => a.filename === attachmentName);
+    if (!match) {
+      const names = atts.map((a) => a.filename).join(", ") || "none";
       return {
-        success: true,
-        base64: buf.toString("base64"),
-        bytes: buf.length,
-        mimeType: match.mimeType
+        success: false,
+        error: `Attachment "${attachmentName}" not found on UID ${ref.uid}. Available: ${names}.`
       };
     }
-  );
+    const dl = await client.download(String(ref.uid), match.part, { uid: true });
+    const buf = await streamToBuffer(dl.content);
+    return {
+      success: true,
+      base64: buf.toString("base64"),
+      bytes: buf.length,
+      mimeType: match.mimeType
+    };
+  });
 }
 async function imapBatch(ids, deps, op) {
   const groups = /* @__PURE__ */ new Map();
@@ -80048,7 +80236,7 @@ async function imapBatch(ids, deps, op) {
   let success = 0;
   for (const g of groups.values()) {
     try {
-      await useClient({ ...deps, account: deps.account ?? g.account }, async (client) => {
+      await useClient(depsForAccount(g.account, deps), async (client) => {
         const lock = await client.getMailboxLock(g.path);
         try {
           await op(client, g.uids, g.path);
@@ -80097,7 +80285,7 @@ async function imapThread(id, deps = {}, limit = 50) {
   const ref = decodeImapId(id);
   if (!ref) return null;
   return useClient(
-    { ...deps, account: deps.account ?? ref.account },
+    depsForMessageRef(ref, deps),
     async (client) => {
       const lock = await client.getMailboxLock(ref.path);
       try {
@@ -80736,12 +80924,18 @@ var ATTACHMENTS_SCHEMA = external_exports.array(
   external_exports.union([
     external_exports.string().describe("Absolute path to an existing file"),
     external_exports.object({
-      filename: external_exports.string().min(1).describe("Filename to give the attachment"),
-      contentBase64: external_exports.string().min(1).describe("Base64-encoded file content")
+      filename: external_exports.string().min(1).max(255).describe("Filename to give the attachment"),
+      contentBase64: external_exports.string().min(1).max(
+        MAX_INLINE_ATTACHMENT_BASE64_INPUT_CHARS,
+        "Inline attachment exceeds the 25 MiB decoded size limit"
+      ).refine(
+        isInlineAttachmentBase64WithinLimit,
+        "Inline attachment exceeds the 25 MiB decoded size limit"
+      ).describe("Base64-encoded file content (maximum 25 MiB decoded)")
     })
   ])
 ).max(20, "Cannot attach more than 20 files").optional().describe(
-  "Files to attach: absolute paths (e.g. '/Users/me/report.pdf') and/or inline {filename, contentBase64} objects for content not on disk."
+  "Files to attach: absolute paths (e.g. '/Users/me/report.pdf') and/or inline {filename, contentBase64} objects up to 25 MiB decoded each."
 );
 var MESSAGE_ROW_SCHEMA = external_exports.object({}).passthrough();
 var LIST_OUTPUT_SCHEMA = {
@@ -80964,20 +81158,32 @@ ${messageList}${coverageBlock}`,
 server.registerTool(
   "get-message",
   {
-    description: "Use when: reading the full body of one message whose id you already have (numeric or imap:\u2026); set preferHtml to get the HTML body instead of plain text.\nReturns: the message subject and body (plain text by default, HTML when preferHtml is true).\nDo not use when: you don't yet have an id (use search-messages or list-messages first), or you want the whole conversation (use get-thread).",
+    description: `Use when: reading the full body of one message whose id you already have (numeric or imap:\u2026); set preferHtml to get the HTML body instead of plain text.
+Returns: the message subject, body (plain text by default, HTML when preferHtml is true), and its stable RFC Message-ID (rfcMessageId) for dedup/threading.
+Tip: pass the mailbox+account you got the id from (e.g. from search-messages) to fetch it directly \u2014 required for reliable reads of large folders like "Sent Items", which otherwise time out.
+Do not use when: you don't yet have an id (use search-messages or list-messages first), or you want the whole conversation (use get-thread).`,
     inputSchema: {
       id: MESSAGE_ID_SCHEMA,
-      preferHtml: external_exports.boolean().optional().describe("Return the HTML body (extracted from the message source) instead of plain text")
+      preferHtml: external_exports.boolean().optional().describe("Return the HTML body (extracted from the message source) instead of plain text"),
+      mailbox: external_exports.string().optional().describe(
+        'Mailbox that holds the message (e.g. "Sent Items"). Numeric ids are unique per mailbox; supplying this (with account) opens that mailbox directly instead of scanning every mailbox, which is required to read large folders like Sent Items without timing out.'
+      ),
+      account: external_exports.string().optional().describe(
+        "Account that holds the message. Pair with `mailbox` for a direct, scan-free fetch."
+      )
     },
     outputSchema: {
       id: external_exports.string().optional(),
       subject: external_exports.string().optional(),
       body: external_exports.string().optional(),
-      isHtml: external_exports.boolean().optional()
+      isHtml: external_exports.boolean().optional(),
+      rfcMessageId: external_exports.string().optional().describe(
+        "Stable RFC 5322 Message-ID (angle brackets stripped); empty when the message has none"
+      )
     }
   },
   withErrorHandling(
-    ({ id, preferHtml }) => routeMessage(id, {
+    ({ id, preferHtml, mailbox, account }) => routeMessage(id, {
       // IMAP id (imap:…) → fetch via IMAP (#43 Phase 3); else AppleScript.
       imap: () => imapGetMessage(id, preferHtml === true),
       // IMAP path: parse subject/body out of the returned source so the
@@ -80989,11 +81195,15 @@ server.registerTool(
           id,
           subject: subjectFromGetMessage(r.info),
           body: sep2 >= 0 ? r.info.slice(sep2 + 2) : r.info,
-          isHtml: preferHtml === true
+          isHtml: preferHtml === true,
+          rfcMessageId: extractRfcMessageIdFromSource(r.info)
         };
       },
       apple: () => {
-        const content = mailManager.getMessageContent(id, preferHtml === true);
+        const content = mailManager.getMessageContent(id, preferHtml === true, {
+          account,
+          mailbox
+        });
         if (!content) return errorResponse(`Message with ID "${id}" not found`);
         const isHtml = preferHtml === true && !!content.htmlContent;
         const body = isHtml ? content.htmlContent : content.plainText;
@@ -81003,7 +81213,8 @@ ${body}`, {
           id,
           subject: content.subject,
           body,
-          isHtml
+          isHtml,
+          rfcMessageId: content.rfcMessageId ?? ""
         });
       },
       ok: "",
@@ -81868,20 +82079,21 @@ server.registerTool(
       if (/[/\\\0]/.test(attachmentName) || attachmentName.includes("..")) {
         return errorResponse(`Invalid attachment name: "${attachmentName}"`);
       }
-      const resolvedDir = resolvePath(savePath);
-      if (!isPathWithinAllowedRoots(resolvedDir)) {
-        return errorResponse(`Save path "${savePath}" is outside allowed directories`);
+      let target;
+      try {
+        target = resolveAttachmentSaveTarget(savePath, attachmentName);
+      } catch (error2) {
+        return errorResponse(error2 instanceof Error ? error2.message : String(error2));
       }
       const r = await imapFetchAttachment(id, attachmentName);
       if (!r.success || !r.base64) {
         return errorResponse(r.error || `Failed to fetch attachment "${attachmentName}"`);
       }
-      const savedPath = joinPath(resolvedDir, attachmentName);
-      writeFileSync4(savedPath, Buffer.from(r.base64, "base64"));
+      writeFileSync4(target.savedPath, Buffer.from(r.base64, "base64"));
       return successResponse(`Attachment "${attachmentName}" saved to ${savePath}`, {
         ok: true,
         attachmentName,
-        savedPath
+        savedPath: target.savedPath
       });
     }
     const success = mailManager.saveAttachment(id, attachmentName, savePath);

package/docs/IMAP-SETUP.md

@@ -199,6 +199,7 @@ the macOS 15+ blockquote wrapping. SMTP is single-account (the default sender):
   "APPLE_MAIL_MCP_SMTP_PORT": "587",
   "APPLE_MAIL_MCP_SMTP_USER": "you@gmail.com",
   "APPLE_MAIL_MCP_SMTP_FROM": "you@gmail.com",
+  "APPLE_MAIL_MCP_SMTP_ALLOWED_FROM": "alias@example.com",
   "APPLE_MAIL_MCP_SMTP_KEYCHAIN_SERVICE": "imap.gmail.com",
   "APPLE_MAIL_MCP_SMTP_KEYCHAIN_ACCOUNT": "you@gmail.com"
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "apple-mail-mcp",
-  "version": "2.8.8",
+  "version": "2.8.10",
   "description": "MCP server for Apple Mail - read, search, send, and manage emails via Claude and other AI assistants",
   "type": "module",
   "main": "build/index.js",