apple-tools-mcp 2.0.1 → 2.0.3

package/lib/contactsWrite.js

@@ -9,7 +9,15 @@
  * writing that database directly corrupts iCloud sync.
  */
 
-import { runAppleScript, asString, CONTACTS_TCC_GUIDANCE, ATTRIBUTION_GUIDANCE } from "./appleScript.js";
+import {
+  runAppleScript,
+  asString,
+  formatOsascriptDiagnostic,
+  CONTACTS_TCC_GUIDANCE,
+  CONTACTS_APP_NOT_RUNNING_GUIDANCE,
+  ATTRIBUTION_GUIDANCE
+} from "./appleScript.js";
+import { safeOpenApp } from "./shell.js";
 import {
   planWrite,
   normalizeList,
@@ -75,6 +83,117 @@ function childLines(items, kind, personVar) {
     .join("\n");
 }
 
+export const CONTACTS_READY_ATTEMPTS = 16;
+export const CONTACTS_READY_INTERVAL_MS = 500;
+export const CONTACTS_OPEN_RETRY_EVERY = 4;
+/** Wall-clock cap so ensure + CRUD stay under the 90s write-bridge timeout. */
+export const CONTACTS_READY_BUDGET_MS = 20000;
+export const CONTACTS_LAUNCH_TIMEOUT_MS = 4000;
+export const CONTACTS_READY_SCRIPT_TIMEOUT_MS = 2000;
+
+export function buildContactsLaunchScript() {
+  // launch only — activate waits until Contacts is frontmost and a slow
+  // cold start can ETIMEDOUT, which must not abort the ready poll as TCC.
+  return `tell application "Contacts" to launch`;
+}
+
+export function buildContactsReadyScript() {
+  return `tell application "Contacts" to get name`;
+}
+
+export function contactsAppIsReady(output) {
+  const text = String(output || "").trim().toLowerCase();
+  return text === "contacts" || text === "ready";
+}
+
+export function sleepMs(ms) {
+  if (!Number.isFinite(ms) || ms <= 0) return;
+  Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, Math.min(ms, 5000));
+}
+
+/**
+ * Cold `tell application "Contacts"` under launchd often returns -600
+ * instead of auto-launching. Prefer `open -a Contacts` in *this* process
+ * (the write-bridge daemon when routed), then `launch` (not `activate`),
+ * then poll until a trivial AppleScript (`get name`) responds.
+ * A launch/ready ETIMEDOUT is a slow cold start, not Automation — keep polling.
+ */
+function isFatalContactsReadyKind(kind) {
+  return kind === "tcc" || kind === "attribution" || kind === "app_unavailable";
+}
+
+function tryOpenContacts(openApp) {
+  try {
+    openApp("Contacts");
+    return { ok: true };
+  } catch (e) {
+    return { ok: false, error: e && e.message ? e.message : String(e) };
+  }
+}
+
+export function ensureContactsAppReady({
+  run = runAppleScript,
+  sleep = sleepMs,
+  openApp = safeOpenApp,
+  attempts = CONTACTS_READY_ATTEMPTS,
+  intervalMs = CONTACTS_READY_INTERVAL_MS,
+  openRetryEvery = CONTACTS_OPEN_RETRY_EVERY,
+  budgetMs = CONTACTS_READY_BUDGET_MS,
+  launchTimeoutMs = CONTACTS_LAUNCH_TIMEOUT_MS,
+  readyTimeoutMs = CONTACTS_READY_SCRIPT_TIMEOUT_MS,
+  now = Date.now
+} = {}) {
+  const started = now();
+  const remaining = () => budgetMs - (now() - started);
+  const slice = (maxMs) => Math.max(0, Math.min(maxMs, remaining()));
+
+  tryOpenContacts(openApp);
+
+  const launchBudget = slice(launchTimeoutMs);
+  const launch = launchBudget > 0
+    ? run(buildContactsLaunchScript(), { timeout: launchBudget, appName: "Contacts" })
+    : { ok: false, kind: "app_not_running", error: "Contacts ensure budget exhausted before launch", output: "" };
+  if (!launch.ok && isFatalContactsReadyKind(launch.kind)) {
+    return launch;
+  }
+
+  const tries = Math.max(1, attempts);
+  const retryEvery = Math.max(0, openRetryEvery);
+  let last = launch;
+  for (let i = 0; i < tries; i++) {
+    if (remaining() <= 0) break;
+    if (i > 0 && retryEvery > 0 && i % retryEvery === 0) {
+      tryOpenContacts(openApp);
+    }
+    const readyBudget = slice(readyTimeoutMs);
+    if (readyBudget <= 0) break;
+    const ready = run(buildContactsReadyScript(), { timeout: readyBudget, appName: "Contacts" });
+    last = ready;
+    if (ready.ok && contactsAppIsReady(ready.output)) {
+      return { ok: true, kind: null };
+    }
+    if (!ready.ok && isFatalContactsReadyKind(ready.kind)) {
+      return ready;
+    }
+    const pause = slice(intervalMs);
+    if (i < tries - 1 && pause > 0) sleep(pause);
+  }
+
+  if (last && last.ok === false && isFatalContactsReadyKind(last.kind)) {
+    return last;
+  }
+  if (last && last.ok === false && last.kind === "app_not_running") {
+    return last;
+  }
+
+  return {
+    ok: false,
+    kind: "app_not_running",
+    error: (last && last.error) || (launch && launch.error) || "Contacts.app did not become ready after launch",
+    output: ""
+  };
+}
+
 function failure(action, summary, result, secrets = []) {
   if (result.kind === "tcc" || result.kind === "timeout") {
     return `${action} failed — attempted to ${summary}. ${CONTACTS_TCC_GUIDANCE}`;
@@ -83,6 +202,9 @@ function failure(action, summary, result, secrets = []) {
   if (raw.includes("CONTACT_NOT_FOUND")) {
     return `${action} failed — attempted to ${summary}. No contact with that id was found; use the Contact ID from contacts_search or contacts_lookup.`;
   }
+  if (result.kind === "app_not_running") {
+    return `${action} failed — attempted to ${summary}. ${CONTACTS_APP_NOT_RUNNING_GUIDANCE} ${formatOsascriptDiagnostic(result)}`;
+  }
   if (result.kind === "attribution") {
     return `${action} failed — attempted to ${summary}. ${ATTRIBUTION_GUIDANCE}`;
   }
@@ -105,7 +227,7 @@ end tell
 return newId`;
 }
 
-export function contactsAdd(args = {}) {
+export function contactsAdd(args = {}, deps = {}) {
   const action = "contacts_add";
 
   const firstName = validateSubject(args.first_name);
@@ -140,6 +262,9 @@ export function contactsAdd(args = {}) {
   if (organization.text) properties.organization = organization.text;
   if (jobTitle.text) properties["job title"] = jobTitle.text;
 
+  const ready = ensureContactsAppReady(deps);
+  if (!ready.ok) return { ok: false, message: failure(action, summary, ready) };
+
   const result = runAppleScript(
     buildAddContactScript({ properties, emails: emails.emails, phones: phones.phones }),
     { timeout: 60000, appName: "Contacts" }
@@ -181,7 +306,7 @@ end tell
 return editedName`;
 }
 
-export function contactsEdit(args = {}) {
+export function contactsEdit(args = {}, deps = {}) {
   const action = "contacts_edit";
 
   const contactId = validateContactId(args.contact_id);
@@ -234,6 +359,9 @@ export function contactsEdit(args = {}) {
   });
   if (!plan.proceed) return { ok: true, message: plan.message, planned: true };
 
+  const ready = ensureContactsAppReady(deps);
+  if (!ready.ok) return { ok: false, message: failure(action, summary, ready) };
+
   const result = runAppleScript(
     buildEditContactScript({
       contactId,
@@ -269,7 +397,7 @@ end tell
 return removedName`;
 }
 
-export function contactsRemove(args = {}) {
+export function contactsRemove(args = {}, deps = {}) {
   const action = "contacts_remove";
 
   const contactId = validateContactId(args.contact_id);
@@ -287,6 +415,9 @@ export function contactsRemove(args = {}) {
   });
   if (!plan.proceed) return { ok: true, message: plan.message, planned: true };
 
+  const ready = ensureContactsAppReady(deps);
+  if (!ready.ok) return { ok: false, message: failure(action, summary, ready) };
+
   const result = runAppleScript(buildRemoveContactScript(contactId), { timeout: 60000, appName: "Contacts" });
   if (!result.ok) return { ok: false, message: failure(action, summary, result) };
 
@@ -298,3 +429,59 @@ export function contactsRemove(args = {}) {
     })
   };
 }
+
+/**
+ * First-run / upgrade probe: the Contacts write verb that triggers
+ * Automation → Contacts. Creates a clearly named throwaway person and
+ * deletes it in the same script so a completed run leaves no junk.
+ */
+export const CONTACTS_AUTOMATION_PROBE_FIRST = "ATM";
+export const CONTACTS_AUTOMATION_PROBE_LAST = "Permissions Probe";
+
+export function buildContactsAutomationProbeScript() {
+  return `tell application "Contacts"
+  set probe to make new person with properties {first name:${asString(CONTACTS_AUTOMATION_PROBE_FIRST)}, last name:${asString(CONTACTS_AUTOMATION_PROBE_LAST)}}
+  delete probe
+  save
+end tell
+return "OK"`;
+}
+
+export function buildContactsProbeCleanupScript() {
+  return `tell application "Contacts"
+  set leftovers to (every person whose first name is ${asString(CONTACTS_AUTOMATION_PROBE_FIRST)} and last name is ${asString(CONTACTS_AUTOMATION_PROBE_LAST)})
+  repeat with p in leftovers
+    delete p
+  end repeat
+  save
+end tell
+return "OK"`;
+}
+
+/**
+ * Live Contacts Apple Events check. Not a dry_run.
+ * @returns {{ ok: boolean, message: string, kind: string|null }}
+ */
+export function probeContactsAutomation(deps = {}) {
+  const action = "contacts_automation_probe";
+  const summary = "create and delete a throwaway Contacts person (Automation / AddressBook check)";
+  const ready = ensureContactsAppReady(deps);
+  if (!ready.ok) {
+    runAppleScript(buildContactsProbeCleanupScript(), { timeout: 30000, appName: "Contacts" });
+    return { ok: false, message: failure(action, summary, ready), kind: ready.kind };
+  }
+  const result = runAppleScript(buildContactsAutomationProbeScript(), { timeout: 60000, appName: "Contacts" });
+  // Best-effort cleanup if the probe created the person then failed mid-script.
+  runAppleScript(buildContactsProbeCleanupScript(), { timeout: 30000, appName: "Contacts" });
+  if (!result.ok) {
+    return { ok: false, message: failure(action, summary, result), kind: result.kind };
+  }
+  return {
+    ok: true,
+    kind: null,
+    message: writeSuccessMessage(
+      action,
+      "Contacts Automation allowed (created and deleted a throwaway contact)"
+    )
+  };
+}

package/lib/mailWrite.js

@@ -6,12 +6,25 @@
  * property). `file_path` from mail_search / mail_recent is also accepted and
  * is resolved to a Message-ID by reading the .emlx headers, so callers never
  * have to invent an identifier.
+ *
+ * After a send/reply/forward hang, Sent (and Outbox) is checked before the
+ * tool reports failure. A message already in Sent is success — never a TCC
+ * fail. ETIMEDOUT / -1712 is a timeout (find/reply/open before send too);
+ * -1743 / -10004 is a hard deny.
  */
 
 import fs from "fs";
 import path from "path";
 import { validateEmailPath, unfoldRfc822Headers, safeMatch, stripHtmlTags } from "./validators.js";
-import { runAppleScript, asString, MAIL_TCC_GUIDANCE, ATTRIBUTION_GUIDANCE } from "./appleScript.js";
+import {
+  runAppleScript,
+  asString,
+  MAIL_TCC_GUIDANCE,
+  MAIL_SEND_TIMEOUT_GUIDANCE,
+  MAIL_APP_NOT_RUNNING_GUIDANCE,
+  ATTRIBUTION_GUIDANCE,
+  isHardTccDenial
+} from "./appleScript.js";
 import {
   planWrite,
   validateEmailList,
@@ -123,10 +136,11 @@ export function probeMailAutomation() {
   const summary = "compose a temporary outgoing message in Mail (Automation / Apple Events check; nothing is sent)";
   const result = runAppleScript(buildMailAutomationProbeScript(), { timeout: 30000, appName: "Mail" });
   if (!result.ok) {
-    return { ok: false, message: failure(action, summary, result, []) };
+    return { ok: false, message: failure(action, summary, result, []), kind: result.kind };
   }
   return {
     ok: true,
+    kind: null,
     message: writeSuccessMessage(
       action,
       "Mail Automation allowed (composed and discarded a temporary outgoing message; nothing was sent)"
@@ -171,13 +185,219 @@ function summarizeRecipients(to, cc, bcc) {
   return parts.join("; ");
 }
 
+export const SENT_VERIFY_FOUND = "FOUND";
+export const SENT_VERIFY_TIMEOUT_MS = 15000;
+
+/**
+ * Hard Mail Automation deny: -1743 / -10004 / "not authorized…", or
+ * classify kind `tcc`. A spawnSync hang is `timeout`, not this.
+ */
+export function isMailHardTcc(result) {
+  if (!result) return false;
+  if (result.kind === "tcc") return true;
+  return isHardTccDenial(result.error);
+}
+
+/**
+ * Find/reply/send hang (ETIMEDOUT / -1712). Not a hard TCC deny.
+ */
+export function isMailSendTimeout(result) {
+  if (!result) return false;
+  if (result.kind !== "timeout") return false;
+  return !isHardTccDenial(result.error);
+}
+
+function mailBoxesPreamble() {
+  return `  set cutoff to (current date) - (10 * minutes)
+  set boxes to {}
+  try
+    set end of boxes to sent mailbox
+  end try
+  try
+    set end of boxes to outgoing mailbox
+  end try
+  repeat with acct in accounts
+    try
+      set end of boxes to sent mailbox of acct
+    end try
+  end repeat`;
+}
+
+function appleScriptToList(addresses = []) {
+  return `{${addresses.map((address) => asString(address)).join(", ")}}`;
+}
+
+/**
+ * Look in Sent / Outbox for a reply of `messageId`.
+ * Proper Mail replies set In-Reply-To. The fallback `make new outgoing
+ * message` path does not, so also match exact "Re: " & original subject.
+ * Never treat the original itself (or a Re: that merely contains the
+ * original subject) as this send.
+ */
+export function buildFindSentByInReplyToScript(messageId) {
+  const idLit = asString(messageId);
+  const needleBare = asString(messageId);
+  const needleAngle = asString(`<${messageId}>`);
+  return `${findMessageHandler()}
+
+set origSubject to ""
+try
+  set origMsg to atmFindMessage(${idLit})
+  tell application "Mail" to set origSubject to subject of origMsg
+end try
+tell application "Mail"
+${mailBoxesPreamble()}
+  repeat with boxRef in boxes
+    try
+      set recentMsgs to (messages of boxRef whose date sent > cutoff)
+      repeat with msg in recentMsgs
+        try
+          set candId to message id of msg
+          if candId is ${needleBare} then
+            -- The original, not the reply we just sent.
+          else
+            try
+              set src to source of msg
+              if src contains ("In-Reply-To: " & ${needleAngle}) then return "${SENT_VERIFY_FOUND}"
+              if src contains ("In-Reply-To: " & ${needleBare}) then return "${SENT_VERIFY_FOUND}"
+            end try
+            if origSubject is not "" then
+              set subj to subject of msg
+              if subj is ("Re: " & origSubject) then return "${SENT_VERIFY_FOUND}"
+            end if
+          end if
+        end try
+      end repeat
+    end try
+  end repeat
+end tell
+return "NOT_FOUND"`;
+}
+
+/**
+ * Look in Sent / Outbox for a forward of `messageId` to `toAddresses`.
+ * Mail.app forwards do not set In-Reply-To / References — those headers are
+ * replies. Require the intended recipient plus either an exact Fwd:/Fw:
+ * subject or the original Message-ID in a forwarded body. Skip the original
+ * itself, In-Reply-To hits, and unrelated Fwd: mail that only shares a To.
+ */
+export function buildFindSentForwardScript(messageId, toAddresses = []) {
+  const idLit = asString(messageId);
+  const needleBare = asString(messageId);
+  const needleAngle = asString(`<${messageId}>`);
+  const toList = appleScriptToList(toAddresses);
+  return `${findMessageHandler()}
+
+set origSubject to ""
+try
+  set origMsg to atmFindMessage(${idLit})
+  tell application "Mail" to set origSubject to subject of origMsg
+end try
+tell application "Mail"
+${mailBoxesPreamble()}
+  set wantedTos to ${toList}
+  repeat with boxRef in boxes
+    try
+      set recentMsgs to (messages of boxRef whose date sent > cutoff)
+      repeat with msg in recentMsgs
+        try
+          set candId to message id of msg
+          if candId is ${needleBare} then
+            -- The original, not the forward we just sent.
+          else
+            set src to source of msg
+            if src contains ("In-Reply-To: " & ${needleAngle}) or src contains ("In-Reply-To: " & ${needleBare}) then
+              -- A reply to the original is not this forward.
+            else
+              set hitTo to false
+              try
+                repeat with recip in (to recipients of msg)
+                  set recipAddr to address of recip as string
+                  repeat with wanted in wantedTos
+                    if recipAddr is (wanted as string) then set hitTo to true
+                  end repeat
+                end repeat
+              end try
+              if hitTo then
+                set subj to subject of msg
+                set exactFwd to false
+                if origSubject is not "" then
+                  if subj is ("Fwd: " & origSubject) then set exactFwd to true
+                  if subj is ("Fw: " & origSubject) then set exactFwd to true
+                  if subj is ("FW: " & origSubject) then set exactFwd to true
+                  if subj is ("Forward: " & origSubject) then set exactFwd to true
+                end if
+                set looksForward to exactFwd
+                if subj starts with "Fwd:" or subj starts with "Fw:" or subj starts with "FW:" or subj starts with "Forward:" then set looksForward to true
+                if src contains "Begin forwarded message" then set looksForward to true
+                set mentionsOrigId to false
+                if src contains ${needleAngle} then set mentionsOrigId to true
+                if src contains ${needleBare} then set mentionsOrigId to true
+                if exactFwd then return "${SENT_VERIFY_FOUND}"
+                if looksForward and mentionsOrigId then return "${SENT_VERIFY_FOUND}"
+              end if
+            end if
+          end if
+        end try
+      end repeat
+    end try
+  end repeat
+end tell
+return "NOT_FOUND"`;
+}
+
+/**
+ * Look in Sent / Outbox for a compose whose subject matches exactly and
+ * was sent in the last 10 minutes.
+ */
+export function buildFindSentBySubjectScript(subject) {
+  const subj = asString(subject);
+  return `tell application "Mail"
+${mailBoxesPreamble()}
+  repeat with boxRef in boxes
+    try
+      set hits to (messages of boxRef whose subject is ${subj} and date sent > cutoff)
+      if (count of hits) > 0 then return "${SENT_VERIFY_FOUND}"
+    end try
+  end repeat
+end tell
+return "NOT_FOUND"`;
+}
+
+/**
+ * After a send hang, ask Mail whether the message is already in Sent.
+ * Returns a hit object or null. Verify failure / timeout is not success.
+ */
+export function recoverIfInSent({ inReplyTo = null, subject = null, forwardTo = null } = {}) {
+  const script = forwardTo && inReplyTo
+    ? buildFindSentForwardScript(inReplyTo, forwardTo)
+    : inReplyTo
+      ? buildFindSentByInReplyToScript(inReplyTo)
+      : subject
+        ? buildFindSentBySubjectScript(subject)
+        : null;
+  if (!script) return null;
+  const result = runAppleScript(script, { timeout: SENT_VERIFY_TIMEOUT_MS, appName: "Mail" });
+  if (!result.ok) return null;
+  const out = String(result.output || "").trim();
+  if (out === SENT_VERIFY_FOUND) return { found: true };
+  return null;
+}
+
 function failure(action, summary, result, secrets) {
-  if (result.kind === "tcc" || result.kind === "timeout") {
+  if (result.kind === "tcc" || isHardTccDenial(result && result.error)) {
     return `${action} failed — attempted to ${summary}. ${MAIL_TCC_GUIDANCE}`;
   }
+  if (result.kind === "timeout") {
+    // Allowed hang / ETIMEDOUT / -1712 is never TCC — including pre-send find/reply/open.
+    return `${action} failed — attempted to ${summary}. ${MAIL_SEND_TIMEOUT_GUIDANCE}`;
+  }
   if (result.kind === "not_found") {
     return `${action} failed — attempted to ${summary}. The message could not be found in Mail. Pass a message_id from a current mail_search result.`;
   }
+  if (result.kind === "app_not_running") {
+    return `${action} failed — attempted to ${summary}. ${MAIL_APP_NOT_RUNNING_GUIDANCE}`;
+  }
   if (result.kind === "attribution") {
     return `${action} failed — attempted to ${summary}. ${ATTRIBUTION_GUIDANCE}`;
   }
@@ -187,6 +407,45 @@ function failure(action, summary, result, secrets) {
   return writeErrorMessage(action, summary, new Error(result.error || "unknown error"), secrets);
 }
 
+/**
+ * Finish a compose/reply/forward. A send hang is not labeled TCC; if Mail
+ * already delivered, return success. Hard -1743/-10004 stays a deny.
+ */
+function finalizeMailWrite({
+  action,
+  summary,
+  result,
+  secrets,
+  sendNow,
+  inReplyTo = null,
+  subject = null,
+  forwardTo = null,
+  successSummary,
+  details
+}) {
+  if (result.ok) {
+    return { ok: true, message: writeSuccessMessage(action, successSummary, details) };
+  }
+
+  if (sendNow && isMailSendTimeout(result)) {
+    const recovered = recoverIfInSent({ inReplyTo, subject, forwardTo });
+    if (recovered) {
+      return {
+        ok: true,
+        recovered: true,
+        message: writeSuccessMessage(
+          action,
+          `${successSummary} (verified in Sent after AppleScript hang)`,
+          details
+        )
+      };
+    }
+    return { ok: false, message: failure(action, summary, result, secrets) };
+  }
+
+  return { ok: false, message: failure(action, summary, result, secrets) };
+}
+
 /**
  * Compose and send (or save as draft) a new email.
  */
@@ -240,19 +499,21 @@ export function mailCompose(args = {}, { draft = false } = {}) {
   });
 
   const result = runAppleScript(script, { timeout: 60000, appName: "Mail" });
-  if (!result.ok) {
-    return { ok: false, message: failure(action, summary, result, [body.text, subject.text]) };
-  }
-
-  return {
-    ok: true,
-    message: writeSuccessMessage(action, draft ? `draft saved to Drafts` : `sent`, {
+  return finalizeMailWrite({
+    action,
+    summary,
+    result,
+    secrets: [body.text, subject.text],
+    sendNow: !draft,
+    subject: draft ? null : subject.text,
+    successSummary: draft ? "draft saved to Drafts" : "sent",
+    details: {
       to: to.addresses.join(", "),
       cc: cc.addresses.join(", ") || undefined,
       bcc: bcc.addresses.length ? `${bcc.addresses.length} recipient(s)` : undefined,
       subject: truncate(subject.text, 150)
-    })
-  };
+    }
+  });
 }
 
 export function buildReplyScript({ messageId, body, replyAll, sendNow }) {
@@ -310,15 +571,19 @@ export function mailReply(args = {}) {
     buildReplyScript({ messageId: resolved.messageId, body: body.text, replyAll, sendNow }),
     { timeout: 60000, appName: "Mail" }
   );
-  if (!result.ok) return { ok: false, message: failure(action, summary, result, [body.text]) };
-
-  return {
-    ok: true,
-    message: writeSuccessMessage(action, sendNow ? "reply sent" : "reply saved to Drafts", {
+  return finalizeMailWrite({
+    action,
+    summary,
+    result,
+    secrets: [body.text],
+    sendNow,
+    inReplyTo: sendNow ? resolved.messageId : null,
+    successSummary: sendNow ? "reply sent" : "reply saved to Drafts",
+    details: {
       message_id: resolved.messageId,
       reply_all: String(replyAll)
-    })
-  };
+    }
+  });
 }
 
 export function buildForwardScript({ messageId, to, body, sendNow }) {
@@ -369,15 +634,20 @@ export function mailForward(args = {}) {
     buildForwardScript({ messageId: resolved.messageId, to: to.addresses, body: body.text, sendNow }),
     { timeout: 60000, appName: "Mail" }
   );
-  if (!result.ok) return { ok: false, message: failure(action, summary, result, [body.text]) };
-
-  return {
-    ok: true,
-    message: writeSuccessMessage(action, sendNow ? "forwarded" : "forward saved to Drafts", {
+  return finalizeMailWrite({
+    action,
+    summary,
+    result,
+    secrets: [body.text],
+    sendNow,
+    inReplyTo: sendNow ? resolved.messageId : null,
+    forwardTo: sendNow ? to.addresses : null,
+    successSummary: sendNow ? "forwarded" : "forward saved to Drafts",
+    details: {
       message_id: resolved.messageId,
       to: to.addresses.join(", ")
-    })
-  };
+    }
+  });
 }
 
 export function buildMarkScript({ messageId, read }) {

package/lib/messagesWrite.js

@@ -14,7 +14,7 @@ import fs from "fs";
 import path from "path";
 import { safeSqlite3Json } from "./shell.js";
 import { escapeSQL } from "./validators.js";
-import { runAppleScript, asString, MESSAGES_TCC_GUIDANCE, ATTRIBUTION_GUIDANCE } from "./appleScript.js";
+import { runAppleScript, asString, MESSAGES_TCC_GUIDANCE, MESSAGES_APP_NOT_RUNNING_GUIDANCE, ATTRIBUTION_GUIDANCE } from "./appleScript.js";
 import {
   planWrite,
   normalizeList,
@@ -116,10 +116,11 @@ export function probeMessagesAutomation() {
   const summary = "enumerate Messages accounts (Automation / Apple Events check; nothing is sent)";
   const result = runAppleScript(buildMessagesAutomationProbeScript(), { timeout: 30000, appName: "Messages" });
   if (!result.ok) {
-    return { ok: false, message: failure(action, summary, result, []) };
+    return { ok: false, message: failure(action, summary, result, []), kind: result.kind };
   }
   return {
     ok: true,
+    kind: null,
     message: writeSuccessMessage(
       action,
       "Messages Automation allowed (enumerated accounts; nothing was sent)"
@@ -194,6 +195,9 @@ function failure(action, summary, result, secrets) {
   if (result.kind === "tcc" || result.kind === "timeout") {
     return `${action} failed — attempted to ${summary}. ${MESSAGES_TCC_GUIDANCE}`;
   }
+  if (result.kind === "app_not_running") {
+    return `${action} failed — attempted to ${summary}. ${MESSAGES_APP_NOT_RUNNING_GUIDANCE}`;
+  }
   if (result.kind === "attribution") {
     return `${action} failed — attempted to ${summary}. ${ATTRIBUTION_GUIDANCE}`;
   }