docs(specs): Iskra mail consumer v0 prebuild (#235) #346

Merged
pdurlej merged 1 commit from claude/iskra/mail-consumer-v0 into main 2026-05-23 10:31:19 +02:00
Collaborator

Summary

Operator-emotional priority. Prebuild for #235 — wire VPS1000 OpenClaw to consume mail events from existing healthy RS2000 mail-infra-x4 gateway, add first-class reply action with threading.

Mail infra is 60% done per Apr 12 audit — three threads flagged the gap since early April. This v0 closes the gap to operator's #1 promised Iskra value: "reads my email + replies as me, with context."

What's in this PR

6-file Spec Kit + companion execution prompt:

  • docs/specs/iskra-mail-consumer-v0/00-constitution.md — 8 principles:
    • P1 mail-infra-x4 unchanged (sacred per evidence)
    • P2 reply is first-class action, NOT workaround
    • P3 Threading headers preserved (In-Reply-To + References)
    • P4 Voice approval for every reply (existing assistant.send UX)
    • P5 Operator-only target during v0 (family tier in #179)
    • P6 Visible telemetry from day 1 (lastInboundAt + lastOutboundAt)
    • P7 No new mail provider integrations
    • P8 Secrets pattern (no plaintext in module.yaml)
  • 01-specify.md — problem (3 threads open since April), scope, acceptance, success metrics
  • 02-plan.md — 5-slice architecture (recon, dispatch wiring, intake handler, reply action, telemetry+runbook+retro) with Q1-Q5 open questions
  • 03-tasks.md — per-slice tasks with adversarial cases
  • 04-implement-notes.md — assistant.send handler reference pattern, RFC 5322 threading chain construction, sacred-path discipline, gotchas G1-G7
  • prompts/codex-iskra-mail-consumer.md — execution prompt with Safety / production boundary + per-slice instructions + stop conditions

Slices (forthcoming PRs)

  • (a) Recon — Lite — read-only investigation; recon doc resolves Q1-Q5; blocks Slice (b)
  • (b) Dispatch endpoint + token — Full — secret wiring (no plaintext); stub handler accepts payload
  • (c) Intake handler — Full — mirrors assistant.send pattern; operator-validated smoke
  • (d) reply action — Full — most operator-emotional slice; schema + handler + threading + operator-validated Gmail threading test
  • (e) Telemetry + runbook + retrospective — Lite — final wiring; 1-week soak feeds RETRO

Operator coordination points

  • Slice (a) Recon requires SSH to VPS1000 (operator on duty)
  • Slice (d) threading test = operator verifies in own Gmail/Inbox
  • Voice approval primitive owner = operator (reused from assistant.send)

Tier

Trivial per ADR-0007 (docs-only prebuild, no runtime mutation).

Operator action

Draft for review. After merge: paste prompts/codex-iskra-mail-consumer.md to fresh codex session to begin Slice (a) recon.

Refs #235 (related: #236 Phase 1.0 bundle for HUMAN-DECISION-POLICY alignment; #179 family tier explicitly OUT; #76 Agent Access Plane future v0.1)

## Summary **Operator-emotional priority.** Prebuild for #235 — wire VPS1000 OpenClaw to consume mail events from existing healthy RS2000 mail-infra-x4 gateway, add first-class `reply` action with threading. Mail infra is **60% done per Apr 12 audit** — three threads flagged the gap since early April. This v0 closes the gap to operator's #1 promised Iskra value: *"reads my email + replies as me, with context."* ## What's in this PR 6-file Spec Kit + companion execution prompt: - `docs/specs/iskra-mail-consumer-v0/00-constitution.md` — 8 principles: - **P1** mail-infra-x4 unchanged (sacred per evidence) - **P2** `reply` is first-class action, NOT workaround - **P3** Threading headers preserved (In-Reply-To + References) - **P4** Voice approval for every reply (existing assistant.send UX) - **P5** Operator-only target during v0 (family tier in #179) - **P6** Visible telemetry from day 1 (lastInboundAt + lastOutboundAt) - **P7** No new mail provider integrations - **P8** Secrets pattern (no plaintext in module.yaml) - `01-specify.md` — problem (3 threads open since April), scope, acceptance, success metrics - `02-plan.md` — 5-slice architecture (recon, dispatch wiring, intake handler, reply action, telemetry+runbook+retro) with Q1-Q5 open questions - `03-tasks.md` — per-slice tasks with adversarial cases - `04-implement-notes.md` — assistant.send handler reference pattern, RFC 5322 threading chain construction, sacred-path discipline, gotchas G1-G7 - `prompts/codex-iskra-mail-consumer.md` — execution prompt with Safety / production boundary + per-slice instructions + stop conditions ## Slices (forthcoming PRs) - **(a) Recon** — Lite — read-only investigation; recon doc resolves Q1-Q5; blocks Slice (b) - **(b) Dispatch endpoint + token** — Full — secret wiring (no plaintext); stub handler accepts payload - **(c) Intake handler** — Full — mirrors assistant.send pattern; operator-validated smoke - **(d) `reply` action** — Full — most operator-emotional slice; schema + handler + threading + operator-validated Gmail threading test - **(e) Telemetry + runbook + retrospective** — Lite — final wiring; 1-week soak feeds RETRO ## Operator coordination points - Slice (a) Recon requires SSH to VPS1000 (operator on duty) - Slice (d) threading test = operator verifies in own Gmail/Inbox - Voice approval primitive owner = operator (reused from `assistant.send`) ## Tier Trivial per ADR-0007 (docs-only prebuild, no runtime mutation). ## Operator action Draft for review. After merge: paste `prompts/codex-iskra-mail-consumer.md` to fresh codex session to begin Slice (a) recon. Refs #235 (related: #236 Phase 1.0 bundle for HUMAN-DECISION-POLICY alignment; #179 family tier explicitly OUT; #76 Agent Access Plane future v0.1)
docs(specs): Iskra mail consumer v0 prebuild for #235
All checks were successful
base-is-main / guard (pull_request) Successful in 2s
canary-required / collect-diff (pull_request) Successful in 4s
patchwarden-pr-sanity / collect-diff (pull_request) Successful in 4s
canary-required / canary (pull_request) Successful in 13s
patchwarden-pr-sanity / sanity (pull_request) Successful in 20s
99a4b00810
Operator-emotional priority. Wire VPS1000 OpenClaw to consume mail events
from existing healthy RS2000 mail-infra-x4 gateway, add first-class
`reply` action with threading. Mail infra is "60% done" per Apr 12 audit
— this v0 closes the gap to operator's #1 promised Iskra value:
"reads my email + replies as me, with context."

Spec Kit:
- 00-constitution.md: 8 principles (mail-infra-x4 unchanged sacred,
  `reply` first-class not workaround, threading headers preserved,
  voice approval for every reply, operator-only target during v0,
  visible telemetry from day 1, no new mail provider integrations,
  secrets pattern enforced)
- 01-specify.md: problem (3 threads open since April), scope, acceptance,
  success metrics
- 02-plan.md: 5-slice architecture (recon, dispatch wiring, intake handler,
  reply action, telemetry+runbook+retro) with Q1-Q5
- 03-tasks.md: per-slice tasks with adversarial test cases
- 04-implement-notes.md: assistant.send handler pattern (reference),
  RFC 5322 threading chain construction, sacred-path discipline,
  gotchas G1-G7

Companion execution prompt: prompts/codex-iskra-mail-consumer.md with
explicit Safety / production boundary + per-slice instructions + stop
conditions (P3 threading + P4 voice approval + P8 plaintext secret =
automatic STOP triggers).

Slice (d) `reply` action is the most operator-emotional slice; threading
correctness verified by operator in own Gmail before Slice (e).

Tier: Trivial per ADR-0007 (docs-only prebuild).

Refs #235 (related: #236 Phase 1.0 bundle, #179 family tier excluded,
#76 Agent Access Plane future v0.1 onboarding)
Sign in to join this conversation.
No reviewers
No labels
W6d-automerge-calibration
agent/claude-code
agent/codex
agent/hermes
agent/iskra
agent/ollama
agent/patchwarden
automerge-candidate
class/security-sensitive
cutover-gate
dependency/blocked
dependency/blocks-others
dependency/cross-repo
dependency/needs-confirmation
domain:agents
domain:ci
domain:docs
domain:forgejo
domain:infra
domain:memory
domain:runtime
domain:signal
domain:ux
flow/architecture
flow/blocked
flow/deployed
flow/done
flow/implementation
flow/intake
flow/maintained
flow/observed
flow/ready
flow/refining
flow/retired
flow/review
iterating
judge/codex-candidate
judge/hermes-candidate
judge/low-confidence
judge/needs-refinement
judge/operator-needed
judge/p0
judge/p1
judge/p2
judge/p3
judge/park
judge/patchwarden-candidate
judge/stale-priority
kind/adr
kind/bug
kind/chore
kind/feature
kind/infra
kind/ops
kind/refactor
kind/research
large-impact
merge/auto
merge/manual
merge/manual-dependency-conflict
merge/manual-failing-tests
merge/manual-merge-conflict
merge/manual-missing-review
merge/manual-operator-preference
merge/manual-red-zone
merge/manual-security-sensitive
merge/manual-unclear-scope
merge/manual-unknown
meta
mode:operator-only
mode:patchwarden-iskra-approved
mode:safe-auto
needs-operator-decision
needs-triage
not-ready
observed/erroring
observed/needs-followup
observed/pending
observed/retire-candidate
observed/unused
observed/used
operator-emotional
owner-attention
phase/02
phase/03
priority:p0
priority:p1
priority:p2
priority:p3
proposed
ready-for-agent
ready-for-operator
recovery
review:claude-reviewed
review:codex-reviewed
review:dziadek-reviewed
review:needs-human
risk/exposure
risk/process
risk/product
risk/runtime
safety:external-write
safety:no-prod-mutation
safety:prod-impact
safety:secret-touch
size/large
size/medium
size/small
size/tiny
size/unknown
source/adr
source/agent-generated
source/manual
source/operator-chat
source/voice-note
status:blocked
status:codex-ready
status:merged:pending-evidence
status:needs-evidence
status:operator-needed
status:parked
tier/full
tier/lite
tier/stacked
tier:0-platform-substrate
tier:1-iskra-value-layer
tier:2-tools-products-modules
type:bug
type:chore
type:docs
type:feat
type:policy
type:research
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
pdurlej/platform!346
No description provided.