v0.4.0

Re-auth required: this release adds the gmail.settings.basic OAuth scope for the new filter tools. Existing users must run mailwarden --auth once; until then, filter calls return an actionable insufficient-scope message. Read-only and non-filter tools are unaffected.

Added

• Filter management — list_filters / create_filter / delete_filter for Gmail's server-side auto-triage rules. Label actions only; no forwarding filters (kept out as an exfiltration path — list_filters still surfaces existing forwards for auditing). create_filter can optionally applyToExisting, sweeping mail already in the mailbox. Guardrails: a positive criterion is required (exclusion-only rules that would sweep the whole mailbox are refused), values are quoted against query break-out, and create_filter / bulk_modify are marked destructiveHint.
• Label management — new create_label (idempotent, nested via /); modify_labels / bulk_modify accept a plain label name as well as an id (unknown name in add auto-created).
• get_profile — connected account address + total message/thread counts, to confirm which mailbox is wired up before a bulk or filter action. Read-only, no extra scope.

Security

• Closed 4 transitive npm audit advisories via overrides (fast-uri, hono, ip-address, postcss) — none on mailwarden's own code path. npm audit back to 0.

Full changelog: https://github.com/csitte/mailwarden/blob/v0.4.0/CHANGELOG.md