dsh-email 0.9.1 → 0.10.1

package/README.md

@@ -29,6 +29,8 @@ Email tools for DeepSeek Harness: list, read, search and send mail through stand
 | `email_folders` | 列出邮箱的文件夹（INBOX/已发送/垃圾邮件/自定义…），拿 path 喂给其他工具 |
 | `email_attachment` | 按序号下载邮件附件（默认存到会话工作区，模型可直接读取；大小受 maxAttachmentBytes 限制） |
 | `email_watch` | 增量检查新邮件：首次调用建立基线，之后每次只报告比上次多出来的未读邮件，适合定时任务做新邮件提醒 |
+| `email_mark` | 修改邮件状态：标记已读/未读、加/取消星标，或移动到别的文件夹（归档、丢回收站），收发闭环的「收完之后」那一半 |
+| `email_reply` | 回复/回复全部/转发已有邮件：自动带上 In-Reply-To/References 线程头与原文引文，收件人自动排除自己，主题不重复叠 Re:/Fwd:；同样走发信审批门 |
 
 ### 新邮件提醒（Web 端）
 
@@ -42,6 +44,8 @@ Email tools for DeepSeek Harness: list, read, search and send mail through stand
 
 ### 版本记录
 
+- **0.10.1**：补发制品——已发布的 0.10.0 打包时只含 `email_mark`，本版同时包含 `email_mark` 与 `email_reply`，代码与 0.10.0 的 main 一致。
+- **0.10.0**：新增 `email_mark`（已读/未读/星标/移动文件夹，补齐收发闭环的整理侧）与 `email_reply`（回复/回复全部/转发，自动线程头+引文，走发信审批门）；连接池按读/写模式分别管理邮箱打开状态。
 - **0.9.1**：修复设置页空主机遮蔽 provider 预设（#3/#6）；IMAP 连接超时不再杀死整个 DSH 进程（#4）；暗色模式输入控件可见（#2）；密码栏提示环境变量 `DSH_EMAIL_PASSWORD` 免明文方案（#5）。
 - **0.9.0**：新增 `email_watch` 增量新邮件检查工具（游标式，适合定时提醒）；Web 端新增「鲸鱼娘递信」新邮件弹窗（本地皮肤素材运行时读取 + 内置回退图）。
 - **0.8.2**：`since` / `until` 参数描述与其余参数统一为英文，方便多语言 agent 理解。

package/lib/index.d.ts

@@ -11,6 +11,6 @@ export declare function apply(ctx: any, config?: Config): void;
 export { PROVIDER_NAMES, EMAIL_PASSWORD_ENV } from './config.js';
 export { resolveEmailConfig, resolveEmailSettings, parseAccountsYaml, clampInt, defaultDownloadDir } from './config.js';
 export { stripHtml, truncateText, flattenAddresses, sanitizeFilename, parseRawMessage } from './parse.js';
-export { EmailPool, MailError, messageOf, validateAttachmentPaths, selectAttachmentPart, messageMatchesQuery } from './mail-client.js';
+export { EmailPool, MailError, messageOf, validateAttachmentPaths, selectAttachmentPart, messageMatchesQuery, buildReplyMessage, extractMessageIds } from './mail-client.js';
 export { SETTINGS_NAMESPACE, EmailSettingsSchema, toSettingsBase, toEmailConfig, validateSettingsValue } from './settings.js';
 export { SETTINGS_ROUTE, EmailSettingsBackend, installEmailSettingsWeb } from './web.js';

package/lib/index.js

@@ -137,6 +137,22 @@ const attachmentSchema = {
     },
     additionalProperties: true,
 };
+const markSchema = {
+    type: 'object',
+    properties: {
+        account: { type: 'string' },
+        uid: { type: 'integer' },
+        folder: { type: 'string' },
+        action: { type: 'string' },
+        seen: { type: 'boolean' },
+        flagged: { type: 'boolean' },
+        movedTo: { type: 'string' },
+        movedUid: { type: 'integer' },
+    },
+    additionalProperties: true,
+};
+const MARK_ACTIONS = ['read', 'unread', 'star', 'unstar', 'move'];
+const REPLY_MODES = ['reply', 'reply-all', 'forward'];
 function oneText(text) {
     return [{ type: 'text', text }];
 }
@@ -194,6 +210,32 @@ function renderFolders(value) {
 function renderAttachment(value) {
     return oneText('账号 ' + value.account + ' 已下载附件 "' + value.filename + '"（' + value.contentType + '，' + value.size + ' 字节）到：\n' + value.path + '\n可用 read 工具读取该文件。');
 }
+const MARK_LABELS = {
+    read: '标记为已读',
+    unread: '标记为未读',
+    star: '加星标',
+    unstar: '取消星标',
+    move: '移动',
+};
+function renderMark(value) {
+    let text = '账号 ' + value.account + '：文件夹 "' + value.folder + '" 中 uid=' + value.uid + ' 已' + (MARK_LABELS[value.action] ?? value.action);
+    if (value.action === 'move') {
+        text += '到 "' + (value.movedTo ?? '') + '"' + (typeof value.movedUid === 'number' ? '（新 uid=' + value.movedUid + '）' : '');
+    }
+    else {
+        text += '（当前：' + (value.seen ? '已读' : '未读') + (value.flagged ? '、已标星' : '') + '）';
+    }
+    return oneText(text);
+}
+const REPLY_LABELS = {
+    reply: '回复',
+    'reply-all': '回复全部',
+    forward: '转发',
+};
+function renderReply(value) {
+    const rejected = value.rejected.length > 0 ? '；被拒：' + value.rejected.join(', ') : '';
+    return oneText('账号 ' + value.account + ' 已' + REPLY_LABELS[value.mode] + ' uid=' + value.originalUid + ' 的邮件：收件人 ' + value.to.join(', ') + '，主题「' + value.subject + '」，messageId: ' + value.messageId + rejected);
+}
 function fingerprintSettings(settings) {
     return JSON.stringify({
         accounts: [...settings.accounts.entries()].map(([name, account]) => [name, account]),
@@ -293,6 +335,35 @@ export function apply(ctx, config = {}) {
             return await getPool().read(args.account, args.uid, args.folder?.trim() || '');
         },
     });
+    ctx.tools.register({
+        name: 'email_mark',
+        description: 'Change an existing message: mark it read/unread, star/unstar it, or move it to another folder. Use after email_list/email_search when the user wants to tidy the mailbox (archive, clear unread, flag important mail). Moving uses the server MOVE/COPY so the uid changes; the new uid is reported when the server provides it.',
+        parameters: compileParameters({
+            uid: { type: 'integer', required: true, description: 'Message uid from email_list or email_search' },
+            action: { type: 'string', required: true, description: 'What to do: read, unread, star, unstar, or move' },
+            toFolder: { type: 'string', description: 'Destination folder path for action=move (see email_folders for valid paths)' },
+            folder: { type: 'string', description: 'IMAP folder the uid belongs to; defaults to the account inboxFolder' },
+            account: { type: 'string', description: ACCOUNT_HINT },
+        }),
+        output: {
+            schema: markSchema,
+            render: (_args, value) => renderMark(value),
+        },
+        async execute(rawArgs) {
+            const args = rawArgs;
+            if (typeof args.uid !== 'number' || !Number.isInteger(args.uid) || args.uid <= 0) {
+                throw new Error('uid 必须是正整数（用 email_list 获取）');
+            }
+            const action = (typeof args.action === 'string' ? args.action.trim().toLowerCase() : '');
+            if (!MARK_ACTIONS.includes(action)) {
+                throw new Error('action 必须是 ' + MARK_ACTIONS.join('、') + ' 之一');
+            }
+            if (action === 'move' && (typeof args.toFolder !== 'string' || args.toFolder.trim() === '')) {
+                throw new Error('action=move 时需要 toFolder 参数（用 email_folders 查看可用文件夹）');
+            }
+            return await getPool().mark(args.account, args.folder?.trim() || '', args.uid, action, args.toFolder);
+        },
+    });
     ctx.tools.register({
         name: 'email_search',
         description: 'Search emails by a keyword matched against sender, recipient and subject (server-side IMAP SEARCH). Body search is not supported by every server and is not attempted; returns the same compact rows as email_list.',
@@ -342,6 +413,54 @@ export function apply(ctx, config = {}) {
             return await getPool().send(args.account, args.to.trim(), args.subject.trim(), typeof args.text === 'string' ? args.text : undefined, typeof args.cc === 'string' && args.cc.trim() !== '' ? args.cc.trim() : undefined, normalizeAttachmentPaths(args.attachments));
         },
     });
+    ctx.tools.register({
+        name: 'email_reply',
+        description: 'Reply to, reply-all to, or forward an existing message (mode: reply | reply-all | forward). Recipients come from the original message (your own address is excluded automatically), the subject gets a single Re:/Fwd: prefix, the original text is quoted underneath, and In-Reply-To/References headers keep mail clients threading correctly. mode=forward needs the to parameter. Like email_send, this asks the user for approval before sending. Never invent recipients or content without the user\'s instruction.',
+        parameters: compileParameters({
+            uid: { type: 'integer', required: true, description: 'Message uid to answer/forward, from email_list or email_search' },
+            text: { type: 'string', required: true, description: 'The new text to write; the original is quoted below it automatically' },
+            mode: { type: 'string', description: 'reply (default), reply-all, or forward' },
+            to: { type: 'string', description: 'Recipient(s) for mode=forward, comma-separated' },
+            cc: { type: 'string', description: 'Extra CC recipient(s), comma-separated (optional)' },
+            folder: { type: 'string', description: 'IMAP folder the uid belongs to; defaults to the account inboxFolder' },
+            account: { type: 'string', description: ACCOUNT_HINT },
+        }),
+        output: {
+            schema: {
+                type: 'object',
+                properties: {
+                    account: { type: 'string' },
+                    mode: { type: 'string' },
+                    originalUid: { type: 'integer' },
+                    messageId: { type: 'string' },
+                    accepted: strArray,
+                    rejected: strArray,
+                    response: { type: 'string' },
+                    to: strArray,
+                    subject: { type: 'string' },
+                },
+                additionalProperties: true,
+            },
+            render: (_args, value) => renderReply(value),
+        },
+        async execute(rawArgs) {
+            const args = rawArgs;
+            if (typeof args.uid !== 'number' || !Number.isInteger(args.uid) || args.uid <= 0) {
+                throw new Error('uid 必须是正整数（用 email_list 获取）');
+            }
+            if (typeof args.text !== 'string' || args.text.trim() === '')
+                throw new Error('text 不能为空');
+            const mode = ((typeof args.mode === 'string' && args.mode.trim() !== '' ? args.mode.trim().toLowerCase() : 'reply'));
+            if (!REPLY_MODES.includes(mode)) {
+                throw new Error('mode 必须是 ' + REPLY_MODES.join('、') + ' 之一');
+            }
+            if (mode === 'forward' && (typeof args.to !== 'string' || args.to.trim() === '')) {
+                throw new Error('mode=forward 时需要 to 参数指定转发收件人');
+            }
+            const cc = typeof args.cc === 'string' && args.cc.trim() !== '' ? args.cc.trim() : undefined;
+            return await getPool().reply(args.account, args.folder?.trim() || '', args.uid, mode, args.text, args.to?.trim() ?? '', cc);
+        },
+    });
     ctx.tools.register({
         name: 'email_folders',
         description: 'List the mailbox folders of an account (INBOX, Sent, Trash, custom folders, ...). Use the returned path values as the folder argument of the other email tools.',
@@ -487,11 +606,12 @@ export function apply(ctx, config = {}) {
             return await watchCore(args.account?.trim() || '', args.folder?.trim() || '', limit, 'tool');
         },
     });
-    // Approval gate: the user must confirm every send (recipient + subject).
-    // Runs before other listeners; degrades to the tool-time failure only
-    // when the account itself is not configured yet.
+    // Approval gate: the user must confirm every outgoing message
+    // (email_send: recipient + subject; email_reply: target + subject when
+    // known). Runs before other listeners; degrades to the tool-time failure
+    // only when the account itself is not configured yet.
     ctx.on('tools/pre-execute', async (exec, next) => {
-        if (exec?.name !== 'email_send')
+        if (exec?.name !== 'email_send' && exec?.name !== 'email_reply')
             return next();
         const descriptor = (ctx.settings.describe?.() ?? []).find((row) => row.ns === SETTINGS_NAMESPACE);
         const userSection = descriptor?.user;
@@ -504,9 +624,18 @@ export function apply(ctx, config = {}) {
         catch {
             return next(); // unconfigured: let the tool report the actionable hint
         }
-        const args = (exec.args ?? {});
-        const attachCount = Array.isArray(args.attachments) ? args.attachments.length : 0;
-        const reason = '发送邮件给 ' + args.to + '，主题「' + args.subject + '」' + (attachCount > 0 ? '，附件 ' + attachCount + ' 个' : '');
+        let reason;
+        if (exec.name === 'email_send') {
+            const args = (exec.args ?? {});
+            const attachCount = Array.isArray(args.attachments) ? args.attachments.length : 0;
+            reason = '发送邮件给 ' + args.to + '，主题「' + args.subject + '」' + (attachCount > 0 ? '，附件 ' + attachCount + ' 个' : '');
+        }
+        else {
+            const args = (exec.args ?? {});
+            const mode = typeof args.mode === 'string' && args.mode.trim() !== '' ? args.mode.trim().toLowerCase() : 'reply';
+            const modeLabel = mode === 'forward' ? '转发' : mode === 'reply-all' ? '回复全部' : '回复';
+            reason = modeLabel + '邮件（原邮件 uid=' + args.uid + '）' + (mode === 'forward' && typeof args.to === 'string' && args.to.trim() !== '' ? '，收件人 ' + args.to : '');
+        }
         // Gate-owned approval: we run the approval round-trip ourselves so the
         // denial reason is always honest and actionable — including the Full
         // Access case where the harness policy answers 'rejected' without ever
@@ -540,6 +669,6 @@ export function apply(ctx, config = {}) {
 export { PROVIDER_NAMES, EMAIL_PASSWORD_ENV } from './config.js';
 export { resolveEmailConfig, resolveEmailSettings, parseAccountsYaml, clampInt, defaultDownloadDir } from './config.js';
 export { stripHtml, truncateText, flattenAddresses, sanitizeFilename, parseRawMessage } from './parse.js';
-export { EmailPool, MailError, messageOf, validateAttachmentPaths, selectAttachmentPart, messageMatchesQuery } from './mail-client.js';
+export { EmailPool, MailError, messageOf, validateAttachmentPaths, selectAttachmentPart, messageMatchesQuery, buildReplyMessage, extractMessageIds } from './mail-client.js';
 export { SETTINGS_NAMESPACE, EmailSettingsSchema, toSettingsBase, toEmailConfig, validateSettingsValue } from './settings.js';
 export { SETTINGS_ROUTE, EmailSettingsBackend, installEmailSettingsWeb } from './web.js';

package/lib/mail-client.d.ts

@@ -1,6 +1,6 @@
 import { ImapFlow } from 'imapflow';
 import type { ResolvedEmailConfig, ResolvedEmailSettings } from './config.js';
-import type { EmailAttachmentMeta, EmailAttachmentResult, EmailFoldersResult, EmailListResult, EmailReadResult, EmailSearchResult, EmailSendResult } from './types.js';
+import type { AddressEntry, EmailAttachmentMeta, EmailAttachmentResult, EmailFoldersResult, EmailListResult, EmailMarkAction, EmailMarkResult, EmailReadResult, EmailReplyMode, EmailReplyResult, EmailSearchResult, EmailSendResult } from './types.js';
 export declare class MailError extends Error {
     constructor(message: string);
 }
@@ -20,6 +20,37 @@ interface AttachmentPart {
 export declare function selectAttachmentPart(readAttachments: EmailAttachmentMeta[], parts: AttachmentPart[], index: number): AttachmentPart | undefined;
 /** Case-insensitive match of a query against subject/from/body text. */
 export declare function messageMatchesQuery(subject: string, fromText: string, body: string, query: string): boolean;
+export interface OriginalDigest {
+    from: AddressEntry[];
+    to: AddressEntry[];
+    cc: AddressEntry[];
+    subject: string;
+    date: string;
+    text: string;
+    /** Bare id without angle brackets, '' when absent. */
+    messageId: string;
+    /** Space-joined bare ids from the References header, '' when absent. */
+    references: string;
+}
+export interface BuiltReply {
+    to: string;
+    cc?: string;
+    subject: string;
+    text: string;
+    inReplyTo?: string;
+    references?: string;
+}
+/** Pull Message-ID / References out of a raw RFC822 source (header section only). */
+export declare function extractMessageIds(source: Buffer): {
+    messageId: string;
+    references: string;
+};
+/**
+ * Compose the outgoing message for a reply/reply-all/forward. Pure so it can
+ * be tested without a connection: recipients exclude the sending account,
+ * subject prefixes never stack, the original text is quoted underneath.
+ */
+export declare function buildReplyMessage(original: OriginalDigest, mode: EmailReplyMode, selfAddress: string, text: string, forwardTo?: string): BuiltReply;
 /**
  * One mailbox pool for the whole plugin: pooled IMAP connections per
  * account plus pooled SMTP transporters, with idle sweep and error eviction.
@@ -35,7 +66,7 @@ export declare class EmailPool {
     resolveName(name?: string): string;
     /** Serialize operations per account: one IMAP connection serves one op at a time. */
     private enqueue;
-    withImap<T>(accountName: string | undefined, folder: string | null, run: (client: ImapFlow) => Promise<T>): Promise<T>;
+    withImap<T>(accountName: string | undefined, folder: string | null, run: (client: ImapFlow) => Promise<T>, readOnly?: boolean): Promise<T>;
     private createImap;
     private imapRun;
     private normalizeImapError;
@@ -50,9 +81,11 @@ export declare class EmailPool {
     private searchBodies;
     private fetchListed;
     read(accountName: string | undefined, uid: number, folder: string): Promise<EmailReadResult>;
+    mark(accountName: string | undefined, folder: string, uid: number, action: EmailMarkAction, toFolder?: string): Promise<EmailMarkResult>;
     folders(accountName: string | undefined, subscribedOnly: boolean): Promise<EmailFoldersResult>;
     downloadAttachment(accountName: string | undefined, folder: string, uid: number, index: number, workspaceHint?: string): Promise<EmailAttachmentResult>;
     send(accountName: string | undefined, to: string, subject: string, text: string | undefined, cc: string | undefined, attachmentPaths: string[] | undefined): Promise<EmailSendResult>;
+    reply(accountName: string | undefined, folder: string, uid: number, mode: EmailReplyMode, text: string, forwardTo: string, cc: string | undefined): Promise<EmailReplyResult>;
 }
 /** Stat every attachment path up front; total size must stay under the cap. */
 export declare function validateAttachmentPaths(paths: string[], maxBytes: number): Promise<Array<{

package/lib/mail-client.js

@@ -64,6 +64,92 @@ export function messageMatchesQuery(subject, fromText, body, query) {
         || fromText.toLowerCase().includes(q)
         || body.toLowerCase().includes(q);
 }
+/** Pull Message-ID / References out of a raw RFC822 source (header section only). */
+export function extractMessageIds(source) {
+    const headerEnd = source.indexOf('\r\n\r\n');
+    const head = source.slice(0, headerEnd === -1 ? Math.min(source.length, 32768) : headerEnd).toString('latin1');
+    const idMatch = head.match(/^message-id:\s*<([^>]+)>/im);
+    // References can fold across continuation lines; collect every <id> token up to the next header.
+    const refBlock = head.match(/^references:((?:[^\r\n]|\r?\n[ \t])*)/im);
+    const refs = refBlock === null ? [] : [...refBlock[1].matchAll(/<([^>]+)>/g)].map(m => m[1]);
+    return { messageId: idMatch === null ? '' : idMatch[1], references: refs.join(' ') };
+}
+function formatAddress(entry) {
+    if (entry.address === undefined)
+        return entry.name ?? '';
+    return entry.name !== undefined && entry.name !== '' ? entry.name + ' <' + entry.address + '>' : entry.address;
+}
+function dedupeAddresses(entries, exclude) {
+    const seen = new Set();
+    const out = [];
+    for (const entry of entries) {
+        const addr = (entry.address ?? '').toLowerCase();
+        if (addr === '' || addr === exclude || seen.has(addr))
+            continue;
+        seen.add(addr);
+        out.push(entry);
+    }
+    return out;
+}
+function stripReplyPrefix(subject, prefix) {
+    return subject.replace(new RegExp('^(?:' + prefix.source + '\\s*)+', 'i'), '').trim();
+}
+const QUOTE_MAX_CHARS = 2000;
+const FORWARD_MAX_CHARS = 4000;
+/**
+ * Compose the outgoing message for a reply/reply-all/forward. Pure so it can
+ * be tested without a connection: recipients exclude the sending account,
+ * subject prefixes never stack, the original text is quoted underneath.
+ */
+export function buildReplyMessage(original, mode, selfAddress, text, forwardTo = '') {
+    const fromText = original.from.map(a => a.name ?? a.address).filter(Boolean).join(', ') || '(未知发件人)';
+    const self = selfAddress.toLowerCase();
+    if (mode === 'forward') {
+        const to = forwardTo.trim();
+        if (to === '')
+            throw new MailError('forward 模式需要 to 参数指定转发收件人');
+        const fwdBody = original.text.length > FORWARD_MAX_CHARS
+            ? original.text.slice(0, FORWARD_MAX_CHARS) + '\n…[原文过长，已截断]'
+            : original.text;
+        const header = '---------- 转发的邮件 ----------\n发件人: ' + fromText
+            + (original.date !== '' ? '\n时间: ' + original.date : '')
+            + '\n主题: ' + (original.subject || '(无主题)')
+            + (original.to.length > 0 ? '\n收件人: ' + original.to.map(a => a.address).filter(Boolean).join(', ') : '');
+        return {
+            to,
+            subject: 'Fwd: ' + stripReplyPrefix(original.subject, /fwd:|fw:|re:/),
+            text: text + '\n\n' + header + '\n\n' + fwdBody,
+            ...(original.messageId !== '' ? { references: (original.references !== '' ? original.references + ' ' : '') + original.messageId } : {}),
+        };
+    }
+    let recipients;
+    if (mode === 'reply-all') {
+        recipients = dedupeAddresses([...original.from, ...original.to, ...original.cc], self);
+        if (recipients.length === 0)
+            recipients = dedupeAddresses(original.from, '');
+    }
+    else {
+        recipients = dedupeAddresses(original.from, '');
+    }
+    if (recipients.length === 0) {
+        throw new MailError('原邮件没有可用的发件人地址，无法回复；可用 email_send 手动发送');
+    }
+    const quoteText = original.text.length > QUOTE_MAX_CHARS
+        ? original.text.slice(0, QUOTE_MAX_CHARS) + '\n…[原文过长，已截断]'
+        : original.text;
+    const quote = '在 ' + (original.date || '未知时间') + '，' + fromText + ' 写道：\n'
+        + quoteText.split('\n').map(line => '> ' + line).join('\n');
+    const built = {
+        to: recipients.map(formatAddress).join(', '),
+        subject: 'Re: ' + stripReplyPrefix(original.subject, /re:/),
+        text: text + '\n\n' + quote,
+    };
+    if (original.messageId !== '') {
+        built.inReplyTo = original.messageId;
+        built.references = (original.references !== '' ? original.references + ' ' : '') + original.messageId;
+    }
+    return built;
+}
 function flattenAddressText(value) {
     return flattenAddresses(value)
         .map(a => (a.name ?? '') + ' ' + (a.address ?? ''))
@@ -114,10 +200,10 @@ export class EmailPool {
         this.queues.set(name, next.then(() => undefined, () => undefined));
         return next;
     }
-    async withImap(accountName, folder, run) {
+    async withImap(accountName, folder, run, readOnly = true) {
         const name = this.resolveName(accountName);
         const cfg = this.account(name);
-        return this.enqueue(name, () => this.imapRun(name, cfg, folder, run));
+        return this.enqueue(name, () => this.imapRun(name, cfg, folder, readOnly, run));
     }
     createImap(cfg) {
         const client = new ImapFlow({
@@ -144,7 +230,7 @@ export class EmailPool {
         });
         return client;
     }
-    async imapRun(name, cfg, folder, run) {
+    async imapRun(name, cfg, folder, readOnly, run) {
         let entry = this.imaps.get(name);
         try {
             if (entry === undefined || !entry.client.usable) {
@@ -152,14 +238,17 @@ export class EmailPool {
                     await this.evictImap(name);
                 const client = this.createImap(cfg);
                 await client.connect();
-                entry = { client, selected: null, lastUsed: Date.now(), inUse: 0 };
+                entry = { client, selected: null, selectedReadOnly: true, lastUsed: Date.now(), inUse: 0 };
                 this.imaps.set(name, entry);
             }
             entry.lastUsed = Date.now();
             entry.inUse += 1;
-            if (folder !== null && entry.selected !== folder) {
-                await entry.client.mailboxOpen(folder, { readOnly: true });
+            // Reopen when the folder changes or when the caller needs a different
+            // access mode (email_mark writes flags / moves messages).
+            if (folder !== null && (entry.selected !== folder || entry.selectedReadOnly !== readOnly)) {
+                await entry.client.mailboxOpen(folder, { readOnly });
                 entry.selected = folder;
+                entry.selectedReadOnly = readOnly;
             }
             const result = await run(entry.client);
             entry.lastUsed = Date.now();
@@ -355,6 +444,55 @@ export class EmailPool {
             return { account: name, uid, folder: folderName, ...body };
         });
     }
+    async mark(accountName, folder, uid, action, toFolder) {
+        const name = this.resolveName(accountName);
+        const cfg = this.account(name);
+        const folderName = folder || cfg.inboxFolder;
+        return this.withImap(name, folderName, async (client) => {
+            const before = await client.fetchOne(uid, { uid: true, flags: true }, { uid: true });
+            if (before === false) {
+                throw new MailError('找不到 uid=' + uid + ' 的邮件（可能已被删除，或不在文件夹 "' + folderName + '"；可用 email_list 重新获取 uid）');
+            }
+            let seen = before.flags?.has('\\Seen') === true;
+            let flagged = before.flags?.has('\\Flagged') === true;
+            if (action === 'read' && !seen) {
+                await client.messageFlagsAdd(uid, ['\\Seen'], { uid: true });
+                seen = true;
+            }
+            else if (action === 'unread' && seen) {
+                await client.messageFlagsRemove(uid, ['\\Seen'], { uid: true });
+                seen = false;
+            }
+            else if (action === 'star' && !flagged) {
+                await client.messageFlagsAdd(uid, ['\\Flagged'], { uid: true });
+                flagged = true;
+            }
+            else if (action === 'unstar' && flagged) {
+                await client.messageFlagsRemove(uid, ['\\Flagged'], { uid: true });
+                flagged = false;
+            }
+            else if (action === 'move') {
+                const target = (toFolder ?? '').trim();
+                if (target === '')
+                    throw new MailError('move 操作需要 toFolder 参数（用 email_folders 查看可用文件夹）');
+                if (target === folderName)
+                    throw new MailError('邮件已在文件夹 "' + folderName + '" 中，无需移动');
+                const folders = await client.list();
+                if (!folders.some(row => row.path === target)) {
+                    throw new MailError('找不到目标文件夹 "' + target + '"，可用：' + folders.map(row => row.path).join('、'));
+                }
+                const moved = await client.messageMove(uid, target, { uid: true });
+                if (moved === false)
+                    throw new MailError('移动 uid=' + uid + ' 到 "' + target + '" 失败（服务器拒绝了 MOVE/COPY）');
+                const result = { account: name, uid, folder: folderName, action, seen, flagged, movedTo: target };
+                const destUid = moved?.destinationUid;
+                if (typeof destUid === 'number')
+                    result.movedUid = destUid;
+                return result;
+            }
+            return { account: name, uid, folder: folderName, action, seen, flagged };
+        }, false);
+    }
     async folders(accountName, subscribedOnly) {
         const name = this.resolveName(accountName);
         return this.withImap(name, null, async (client) => {
@@ -431,6 +569,42 @@ export class EmailPool {
             response: info.response,
         };
     }
+    async reply(accountName, folder, uid, mode, text, forwardTo, cc) {
+        const name = this.resolveName(accountName);
+        const cfg = this.account(name);
+        const folderName = folder || cfg.inboxFolder;
+        // Read the original first (read-only), send second: a failed compose never
+        // leaves a half-written mailbox state behind.
+        const built = await this.withImap(name, folderName, async (client) => {
+            const message = await client.fetchOne(uid, { uid: true, source: true }, { uid: true });
+            if (message === false || message.source === undefined) {
+                throw new MailError('找不到 uid=' + uid + ' 的邮件（可能已被删除，或不在文件夹 "' + folderName + '"；可用 email_list 重新获取 uid）');
+            }
+            const ids = extractMessageIds(message.source);
+            const body = await parseRawMessage(message.source, this.settings.maxBodyChars);
+            return buildReplyMessage({ from: body.from, to: body.to, cc: body.cc, subject: body.subject, date: body.date, text: body.text, messageId: ids.messageId, references: ids.references }, mode, cfg.user, text, forwardTo);
+        });
+        const info = await this.transporter(name, cfg).sendMail({
+            from: cfg.user,
+            to: built.to,
+            cc,
+            subject: built.subject,
+            text: built.text,
+            ...(built.inReplyTo !== undefined ? { inReplyTo: '<' + built.inReplyTo + '>' } : {}),
+            ...(built.references !== undefined ? { references: built.references.split(' ').map(id => '<' + id + '>') } : {}),
+        });
+        return {
+            account: name,
+            mode,
+            originalUid: uid,
+            messageId: info.messageId,
+            accepted: info.accepted.map(String),
+            rejected: info.rejected.map(String),
+            response: info.response,
+            to: built.to.split(',').map(part => part.trim()).filter(part => part !== ''),
+            subject: built.subject,
+        };
+    }
 }
 /** Stat every attachment path up front; total size must stay under the cap. */
 export async function validateAttachmentPaths(paths, maxBytes) {

package/lib/types.d.ts

@@ -124,6 +124,49 @@ export interface EmailWatchArgs extends AccountArg {
     /** Max number of new messages to return per call, default 20. */
     limit?: number;
 }
+export type EmailMarkAction = 'read' | 'unread' | 'star' | 'unstar' | 'move';
+export interface EmailMarkArgs extends AccountArg {
+    uid: number;
+    action: EmailMarkAction;
+    /** Target folder path; only used (and required) when action is 'move'. */
+    toFolder?: string;
+    folder?: string;
+}
+export interface EmailMarkResult {
+    account: string;
+    uid: number;
+    folder: string;
+    action: EmailMarkAction;
+    seen: boolean;
+    flagged: boolean;
+    /** Set after a successful move: the destination folder path. */
+    movedTo?: string;
+    /** Set after a successful move: uid in the destination when the server reports it. */
+    movedUid?: number;
+}
+export type EmailReplyMode = 'reply' | 'reply-all' | 'forward';
+export interface EmailReplyArgs extends AccountArg {
+    uid: number;
+    /** The new text to write; the original is quoted below it automatically. */
+    text: string;
+    mode?: EmailReplyMode;
+    /** Recipient(s) for mode=forward, comma-separated. */
+    to?: string;
+    cc?: string;
+    folder?: string;
+}
+export interface EmailReplyResult {
+    account: string;
+    mode: EmailReplyMode;
+    /** uid of the original message that was answered/forwarded. */
+    originalUid: number;
+    messageId: string;
+    accepted: string[];
+    rejected: string[];
+    response: string;
+    to: string[];
+    subject: string;
+}
 export interface EmailWatchResult {
     account: string;
     folder: string;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-email",
-  "version": "0.9.1",
+  "version": "0.10.1",
   "description": "IMAP/SMTP email tools for DeepSeek Harness: list, read, search and send mail, with QQ/163/126/Sina/Aliyun/Gmail/Outlook/iCloud presets.",
   "type": "module",
   "main": "lib/index.js",