Email Channel

This skill runs the host-side Email channel worker. It owns mailbox auth, IMAP/SMTP transport, held-mail state, and provider-specific email handling. The runtime never receives mailbox credentials or OAuth tokens.

The channel admits only exact approved senders through LionClaw channel grants. Unknown mail is held or suppressed by the worker and must not become runtime work unless the local operator explicitly approves the sender or releases an authenticated held item. Full message bodies are fetched only after approval and are capped by EMAIL_MAX_MESSAGE_BYTES before any runtime work is queued.