feat(email-triage): read-only inbox classification + ranked digest (local-first)

[AVADSA25]

Summary

Phase 3 (Cookbook → Compare → Email triage → Image). The agreed v1 scope: read-only triage digest. Read a recent inbox window → classify each message → return a ranked digest. No labels, no drafts, no send — those are later consent-gated phases.

Local-first by design: classification runs on the local Qwen (llm_base_url) in one batched call, so email content never leaves the machine — only the digest metadata (sender / subject / category / priority / reason) comes back. Aligns with CODEC's zero-data-leaves principle and reads the user's own mailbox (pull, not an inbound channel).

Engine — codec_email_triage.py

fn	role
fetch_recent	reuse codec_google_auth.build_service (same path as google_gmail); read-only list + get(metadata) — a test asserts no mutating Gmail method is ever called
classify	one LLM call classifies the whole batch → [{idx,category,priority,reason}]; tolerant parse (strips fences/prose, coerces unknown enums); LLM failure → all unclassified/medium (digest still works)
triage	fetch → classify → rank (priority, then category, unread-first) → {count, items, by_priority, by_category}

categories: lead / support / personal / transactional / noise · priority: high / medium / low

Skill — skills/email_triage.py

Thin (imports codec_email_triage + re → passes the AST gate). Parses count + unread scope, renders a priority-grouped digest (🔴/🟡/⚪), turns an auth error into a friendly "connect Google first". SKILL_MCP_EXPOSE=True — read-only, mirrors google_gmail.

Test plan

• tests/test_email_triage.py — 17 tests, Gmail service + local LLM mocked (offline): fetch parse/cleanup + read-only-calls-only assertion, classification parsing (code-fence/prose/enum-coercion/garbage/out-of-range-idx), single-batch-call + LLM-failure fallback, triage ranking + empty inbox, skill format/unread-query/auth-error/no-messages, discovery + MCP exposure
• python3.13 -m pytest --ignore=tests/test_skills.py -q → 2,184 passed, 77 skipped
• AST gate clean; manifest → 84 skills; ruff check: 0 issues

Roadmap note

v2 (when you want it) layers the action surface you deferred: + Gmail labels then + draft replies — both build on this read-only base; send stays out (bridge + consent).

Merge with Squash and merge (standing repo rule). Branches off current main; independent of other work.

🤖 Generated with Claude Code