Summary

Operator-facing view of recent inbound + outbound email exchanges in the cockpit. Pairs with CC#1's KR-FEAT-EMAIL bucket (Feature 3 backend, in flight) — ST2 will swap the stub /api/email/recent body for a real read of ${HERMES_HOME}/email_inbound_log.jsonl + email_outbound_log.jsonl (Purelymail-backed).

Shape is pinned by the new test suite so the FE shipping in this PR keeps rendering correctly during the cut-over.

What's in here

• Backend stub: GET /api/email/recent returning 4 representative messages deliberately spanning inbound (received) + outbound (sent_ok) + filtered_non_allowlist + inbound-with-attachment so the operator's first look surfaces the filtering posture AND the attachment-count affordance.
• EmailPanel.tsx (new): title + stub banner + stats strip + filter pills (all / inbound / outbound / filtered / errors) + newest-first timeline. Per row: direction arrow (←/→), from → to label badge, status badge (only when non-default — happy-path rows stay clean), spoofing-risk chip (destructive tone when spoofing_warning: true), attachment count chip, HTML-metadata chip (<Code2> icon — flags "original body contained HTML; rendered as plain text here"), subject (mono), body excerpt (truncated to 80 chars collapsed; full 400-char preview expanded). Expanded detail surfaces message_id, in_reply_to, full timestamp, has_html note pointing to Purelymail web client for full HTML rendering.
• Dashboard card feat(KR-3 ST2): iso_link_* typed-edge tool family #10 ("Email ↔ Joshua") with Mail icon. Layout: keeping lg:grid-cols-3 per PM preference — row 3 wraps cleanly to its second line (3+3+3+1 → 3+3+4). Headline goes destructive when filtered_non_allowlist > 0 OR any spoofing_warning fires in the window OR sent_failed > 0 OR handler_error > 0.
• Route /email + nav entry with Mail icon (between /slack-dm and /mcp-clients).

4-layer security contract

Extending the established pattern with email-specific token sweep — every panel touching a new sensitive-data domain adds the domain-specific guard (per PM standardization).

1. from_label / to_label are LABELS — joshua / kora / unknown_sender, never raw email addresses. Backend test pins per-field AND walk-whole-payload against [A-Za-z0-9._%+-]+@[A-Za-z0-9.-]+\.[A-Za-z]{2,} — a future leak via a raw_from_address diagnostic or address-in-subject gets caught.
2. message_id is a STUB shape (stub-msg-id-N) in v1. Real Purelymail message IDs hashed/truncated by CC#1 when real data flips. Backend test pins the stub pattern.
3. body_text_truncated_400 rendered as PLAIN TEXT via React's default child escaping. Frontend pin: EmailPanel.tsx never uses dangerouslySetInnerHTML for message bodies — real bodies may contain arbitrary HTML / phishing payloads. Full HTML rendering happens in the Purelymail web client, NOT here. has_html is metadata only.
4. Walk-the-whole-payload guards: Purelymail token hints (KORA_PUREMAIL_*, puremail_*, purelymail_*), HMAC-secret shapes (32+ hex), bearer-token shapes (24+ base64, Bearer X / Authorization: headers) — backend bug or future log-entry edit that leaks creds gets caught at the API edge.

Test plan

• tests/kora_cli/test_web_server_email.py — 16 tests: shape, 4-message stub pin (with attachment), direction+status diversity, per-entry schema (incl. 400-char body cap), all 4 security guards, FE source-pins (no dangerouslySetInnerHTML, body as JSX child, spoofing chip rendering), by_direction_24h reconciliation, cron-regression sanity.
• Full admin-panel regression: 241/241 across 21 suites (skipping test_web_server_mcp_clients.py — PM task Fix nous refresh token rotation failure in case where api key mint/retrieval fails NousResearch/hermes-agent#269).
• pnpm tsc --noEmit clean.
• pnpm vite build clean (direct invocation, see notes below).
• Manual smoke: load /email, exercise filters, expand rows, verify spoofing chip + destructive card tone.

Notes

• Pre-existing build issue flagged: pnpm build (= tsc -b && vite build) surfaces 4 PRE-EXISTING errors in HeartbeatPanel.tsx + DashboardPage.tsx. The HeartbeatStatus enum gained "unknown" and HeartbeatService.last_check_at became nullable in a recent change, but the consumers weren't updated. Confirmed present on bare feature/phase2-upgrades — NOT introduced by this PR. Vite alone builds clean, so the production artifact works. Recommend a separate cleanup bucket alongside test task Fix nous refresh token rotation failure in case where api key mint/retrieval fails NousResearch/hermes-agent#269.
• Layout choice: 10 cards = 3+3+3+1 in lg:grid-cols-3, which wraps to 3+3+4 visually as the row continues. Not bumping to cols-4 per PM preference for cols-3; the wrap looks fine.
• Convention divergence from spec: spec hints /admin/email; using flat /email to match every prior panel in this branch.
• Body cap: backend pre-truncates body to 400 chars (body_text_truncated_400); FE does not fetch full bodies — operator pulls from Purelymail web client if full HTML rendering is needed.

🤖 Generated with Claude Code