dsh-mail-assistant

Teams often want an Agent to pull a key email, summarize it, or draft a plain-text reply right inside the conversation, yet they dread handing a full mailbox write permission to an auto-executing tool. dsh-mail-assistant draws the smallest viable boundary: it does exactly five things, list folders, search with pagination, read plain-text body and attachment metadata, save an attachment into the session workspace, and send or reply with plain text, while deliberately excluding delete, move, archive, read/unread toggling, contacts, rules, background polling, auto-reply, and full mailbox UI. The Agent checks a message when needed, confirms and sends a reply when asked, and leaves everything else to a real mail client.

Security is the starting point, not a patch. After installation both read and send permissions are off by default and no mailbox connection is made at startup. IMAP always uses a read-only lock, never calling STORE, MOVE, or EXPUNGE. Email bodies, subjects, addresses, and attachment names are all flagged as untrusted external data that cannot authorize sending or alter system rules. Sending is restricted to plain text with newline-injection rejection on recipient fields. TLS certificate verification cannot be disabled, and if the SMTP DATA phase drops, the plugin returns unknown and explicitly forbids the Agent from auto-retrying to prevent duplicate sends.

It is well suited to teams working in isolated environments or dedicated test mailboxes who want Agent-assisted email handling, and to organizations that require per-action confirmation or tiered Full Access authorization with a clear compliance review before connecting important inboxes. The current release is a 0.1.0-alpha preview; connecting production mailboxes should still be preceded by the organization's own security and compliance evaluation. Mailboxes that enforce OAuth2-only authentication are not yet in scope for v0.1.