vellum 0.0.16 → 0.2.0

package/src/config/bundled-skills/messaging/SKILL.md

@@ -0,0 +1,126 @@
+---
+name: "Messaging"
+description: "Read, search, send, and manage messages across Slack, Gmail, Telegram, and other platforms"
+user-invocable: true
+metadata: {"vellum": {"emoji": "💬"}}
+---
+
+You are a unified messaging assistant with access to multiple platforms (Slack, Gmail, Telegram, and more). Use the messaging tools to help users read, search, organize, draft, and send messages across all connected platforms.
+
+## Connection Setup
+
+Before using any messaging tool, verify that the platform is connected by calling `messaging_auth_test` with the appropriate `platform` parameter. If the call fails with a token/authorization error, follow the steps below.
+
+### Gmail
+1. **Try connecting directly first.** Call `credential_store` with `action: "oauth2_connect"` and `service: "gmail"`. The tool auto-fills Google's OAuth endpoints and looks up any previously stored client credentials — so this single call may be all that's needed.
+2. **If it fails because no client_id is found:** The user needs to create Google Cloud OAuth credentials first. Install and load the **google-oauth-setup** skill:
+   - Call `vellum_skills_catalog` with `action: "install"` and `skill_id: "google-oauth-setup"`.
+   - Then call `skill_load` with `skill: "google-oauth-setup"`.
+   - Tell the user: *"Gmail isn't connected yet. I've loaded a setup guide that will walk you through creating Google credentials and connecting your account."*
+3. **If the user provides a client_id directly in chat:** Call `credential_store` with `action: "oauth2_connect"`, `service: "gmail"`, and `client_id: "<their value>"`. Include `client_secret` too if they provide one. Everything else is auto-filled.
+
+### Slack
+1. **Try connecting directly first.** Call `credential_store` with `action: "oauth2_connect"` and `service: "slack"`. The tool auto-fills Slack's OAuth endpoints and looks up any previously stored client credentials.
+2. **If it fails because no client_id is found:** The user needs to create a Slack App first. Install and load the **slack-oauth-setup** skill:
+   - Call `vellum_skills_catalog` with `action: "install"` and `skill_id: "slack-oauth-setup"`.
+   - Then call `skill_load` with `skill: "slack-oauth-setup"`.
+   - Tell the user: *"Slack isn't connected yet. I've loaded a setup guide that will walk you through creating a Slack App and connecting your workspace."*
+3. **If the user provides client_id and client_secret directly in chat:** Call `credential_store` with `action: "oauth2_connect"`, `service: "slack"`, `client_id`, and `client_secret`. Everything else is auto-filled. Note: Slack always requires a client_secret.
+
+### Telegram
+Telegram uses a bot token (not OAuth). Install and load the **telegram-setup** skill which automates the full setup:
+   - Call `vellum_skills_catalog` with `action: "install"` and `skill_id: "telegram-setup"`.
+   - Then call `skill_load` with `skill: "telegram-setup"`.
+   - Tell the user: *"I've loaded a setup guide for Telegram. It will walk you through connecting a Telegram bot to your assistant."*
+
+The telegram-setup skill handles: verifying the bot token from @BotFather, generating a webhook secret, registering the webhook with Telegram, registering bot commands, and storing credentials securely.
+
+## Platform Selection
+
+- If the user specifies a platform (e.g., "check my Slack"), pass it as the `platform` parameter.
+- If only one platform is connected, it is auto-selected.
+- If multiple platforms are connected and the user doesn't specify, ask which platform they mean — or search across all of them.
+
+## Capabilities
+
+### Universal (all platforms)
+- **Auth Test**: Verify connection and show account info
+- **List Conversations**: Show channels, inboxes, DMs with unread counts
+- **Read Messages**: Read message history from a conversation
+- **Search**: Search messages with platform-appropriate query syntax
+- **Send**: Send a message (high risk — requires user approval)
+- **Reply**: Reply in a thread (medium risk)
+- **Mark Read**: Mark conversation as read
+
+### Slack-specific
+- **Add Reaction**: Add an emoji reaction to a message
+- **Leave Channel**: Leave a Slack channel
+
+### Gmail-specific
+- **Archive**: Remove message from inbox
+- **Label**: Add/remove labels
+- **Trash**: Move to trash
+- **Unsubscribe**: Unsubscribe via List-Unsubscribe header
+- **Draft (native)**: Create a draft in Gmail's Drafts folder
+
+## Slack Search Syntax
+
+When searching Slack, the query is passed directly to Slack's search API:
+
+| Operator | Example | What it finds |
+|---|---|---|
+| `from:` | `from:@alice` | Messages from a specific user |
+| `in:` | `in:#general` | Messages in a specific channel |
+| `has:` | `has:link` | Messages containing links |
+| `before:` | `before:2024-01-01` | Messages before a date |
+| `after:` | `after:2024-01-01` | Messages after a date |
+| `has:reaction` | `has:reaction` | Messages with reactions |
+| `has:star` | `has:star` | Starred messages |
+
+## Gmail Search Syntax
+
+When searching Gmail, the query uses Gmail's search operators:
+
+| Operator | Example | What it finds |
+|---|---|---|
+| `from:` | `from:alice@example.com` | Messages from a specific sender |
+| `to:` | `to:bob@example.com` | Messages sent to a recipient |
+| `subject:` | `subject:meeting` | Messages with a word in the subject |
+| `newer_than:` | `newer_than:7d` | Messages from the last 7 days |
+| `older_than:` | `older_than:30d` | Messages older than 30 days |
+| `is:unread` | `is:unread` | Unread messages |
+| `has:attachment` | `has:attachment` | Messages with attachments |
+| `label:` | `label:work` | Messages with a specific label |
+
+## Drafting vs Sending
+
+- Default to drafting (local draft or Gmail native draft) when the user wants to compose.
+- Only send when the user explicitly requests it.
+- When uncertain, always default to drafting.
+
+## Personalized Drafting
+
+When drafting messages, check your `<dynamic-user-profile>` for style items (e.g., "writing style: tone"). If present, match the user's natural voice.
+
+If no style items exist and the user asks you to draft a message, suggest running `messaging_analyze_style`:
+
+> "I can analyze your sent messages to learn your writing style so drafts sound like you. Want me to do that?"
+
+## Confidence Scores
+
+Medium and high risk tools require a confidence score between 0 and 1:
+
+- **0.9-1.0**: User explicitly requested this exact action
+- **0.7-0.8**: Action is strongly implied by context
+- **0.5-0.6**: Reasonable inference but some ambiguity
+- **Below 0.5**: Ask the user to confirm before proceeding
+
+## Activity Analysis
+
+Use `messaging_analyze_activity` to classify channels or conversations by activity level (high, medium, low, dead). Useful for decluttering — suggest leaving dead channels or archiving old emails.
+
+## Batch Operations
+
+- Gmail batch tools (`gmail_batch_archive`, `gmail_batch_label`) accept arrays of message IDs.
+- First search or list messages to collect IDs, then apply batch actions.
+- Always confirm with the user before batch operations on large numbers of messages.

package/src/config/bundled-skills/messaging/TOOLS.json

@@ -0,0 +1,357 @@
+{
+  "version": 1,
+  "tools": [
+    {
+      "name": "messaging_auth_test",
+      "description": "Verify that a messaging platform is connected and show account info.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform to test (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." }
+        }
+      },
+      "executor": "tools/messaging-auth-test.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_list_conversations",
+      "description": "List channels, inboxes, DMs, or groups with unread counts.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." },
+          "types": {
+            "type": "array",
+            "items": { "type": "string", "enum": ["channel", "dm", "group", "inbox"] },
+            "description": "Filter by conversation type"
+          },
+          "limit": { "type": "number", "description": "Maximum number of conversations to return (default 200)" }
+        }
+      },
+      "executor": "tools/messaging-list-conversations.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_read",
+      "description": "Read message history from a conversation. Optionally read a specific thread.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." },
+          "conversation_id": { "type": "string", "description": "Conversation/channel/label ID to read from" },
+          "thread_id": { "type": "string", "description": "Thread ID to read replies from (optional)" },
+          "limit": { "type": "number", "description": "Maximum number of messages to return (default 50)" }
+        },
+        "required": ["conversation_id"]
+      },
+      "executor": "tools/messaging-read.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_search",
+      "description": "Search messages across a platform using its native query syntax.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." },
+          "query": { "type": "string", "description": "Search query using the platform's native syntax" },
+          "max_results": { "type": "number", "description": "Maximum number of results to return (default 20)" }
+        },
+        "required": ["query"]
+      },
+      "executor": "tools/messaging-search.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_send",
+      "description": "Send a message on a platform. This is a high-risk action that always requires user approval. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "high",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." },
+          "conversation_id": { "type": "string", "description": "Channel ID, email address, or conversation ID to send to" },
+          "text": { "type": "string", "description": "Message text to send" },
+          "subject": { "type": "string", "description": "Email subject line (Gmail only)" },
+          "in_reply_to": { "type": "string", "description": "Message-ID header for replies (Gmail only)" },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["conversation_id", "text", "confidence"]
+      },
+      "executor": "tools/messaging-send.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_reply",
+      "description": "Reply in a thread. Medium-risk action. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." },
+          "conversation_id": { "type": "string", "description": "Channel ID or conversation ID" },
+          "thread_id": { "type": "string", "description": "Thread ID to reply to" },
+          "text": { "type": "string", "description": "Reply text" },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["conversation_id", "thread_id", "text", "confidence"]
+      },
+      "executor": "tools/messaging-reply.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_mark_read",
+      "description": "Mark a conversation or message as read.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." },
+          "conversation_id": { "type": "string", "description": "Conversation/channel ID" },
+          "message_id": { "type": "string", "description": "Specific message ID to mark as read (optional)" }
+        },
+        "required": ["conversation_id"]
+      },
+      "executor": "tools/messaging-mark-read.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "slack_add_reaction",
+      "description": "Add an emoji reaction to a Slack message. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "channel": { "type": "string", "description": "Slack channel ID" },
+          "timestamp": { "type": "string", "description": "Message timestamp (ts)" },
+          "emoji": { "type": "string", "description": "Emoji name without colons (e.g. \"thumbsup\")" },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["channel", "timestamp", "emoji", "confidence"]
+      },
+      "executor": "tools/slack-add-reaction.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "slack_leave_channel",
+      "description": "Leave a Slack channel. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "channel": { "type": "string", "description": "Slack channel ID to leave" },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["channel", "confidence"]
+      },
+      "executor": "tools/slack-leave-channel.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_analyze_activity",
+      "description": "Analyze channel or conversation activity levels. Groups conversations as high/medium/low/dead activity.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." }
+        }
+      },
+      "executor": "tools/messaging-analyze-activity.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_analyze_style",
+      "description": "Analyze sent messages to extract personal writing style patterns. Saves style characteristics to memory for personalized drafting. Run once to enable style-aware message composition.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Auto-detected if only one is connected." },
+          "max_messages": { "type": "number", "description": "Max sent messages to analyze (default 50, max 100)" },
+          "query_filter": { "type": "string", "description": "Optional search filter (e.g. 'to:alice@example.com' for Gmail, 'from:@me' for Slack)" }
+        }
+      },
+      "executor": "tools/messaging-analyze-style.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "messaging_draft",
+      "description": "Create, list, or delete local drafts for any platform.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "action": { "type": "string", "enum": ["create", "list", "delete"], "description": "Draft operation" },
+          "platform": { "type": "string", "description": "Platform (e.g. \"slack\", \"gmail\"). Required for create/list." },
+          "conversation_id": { "type": "string", "description": "Target conversation/channel ID (for create)" },
+          "text": { "type": "string", "description": "Draft text (for create)" },
+          "thread_id": { "type": "string", "description": "Thread ID (for create, optional)" },
+          "subject": { "type": "string", "description": "Email subject (for create, Gmail only)" },
+          "draft_id": { "type": "string", "description": "Draft ID (for delete)" }
+        },
+        "required": ["action"]
+      },
+      "executor": "tools/messaging-draft.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "gmail_archive",
+      "description": "Archive a Gmail message (remove from inbox). Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_id": { "type": "string", "description": "Gmail message ID to archive" },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["message_id", "confidence"]
+      },
+      "executor": "tools/gmail-archive.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "gmail_batch_archive",
+      "description": "Archive multiple Gmail messages at once. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_ids": {
+            "type": "array",
+            "items": { "type": "string" },
+            "description": "Gmail message IDs to archive"
+          },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["message_ids", "confidence"]
+      },
+      "executor": "tools/gmail-batch-archive.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "gmail_label",
+      "description": "Add or remove labels on a Gmail message. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_id": { "type": "string", "description": "Gmail message ID" },
+          "add_label_ids": {
+            "type": "array",
+            "items": { "type": "string" },
+            "description": "Label IDs to add"
+          },
+          "remove_label_ids": {
+            "type": "array",
+            "items": { "type": "string" },
+            "description": "Label IDs to remove"
+          },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["message_id", "confidence"]
+      },
+      "executor": "tools/gmail-label.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "gmail_batch_label",
+      "description": "Add or remove labels on multiple Gmail messages. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_ids": {
+            "type": "array",
+            "items": { "type": "string" },
+            "description": "Gmail message IDs"
+          },
+          "add_label_ids": {
+            "type": "array",
+            "items": { "type": "string" },
+            "description": "Label IDs to add"
+          },
+          "remove_label_ids": {
+            "type": "array",
+            "items": { "type": "string" },
+            "description": "Label IDs to remove"
+          },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["message_ids", "confidence"]
+      },
+      "executor": "tools/gmail-batch-label.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "gmail_trash",
+      "description": "Move a Gmail message to trash. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_id": { "type": "string", "description": "Gmail message ID to trash" },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["message_id", "confidence"]
+      },
+      "executor": "tools/gmail-trash.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "gmail_unsubscribe",
+      "description": "Unsubscribe from a mailing list by following the List-Unsubscribe header. Include a confidence score (0-1).",
+      "category": "messaging",
+      "risk": "medium",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "message_id": { "type": "string", "description": "A Gmail message ID from the mailing list to unsubscribe from" },
+          "confidence": { "type": "number", "description": "Confidence score (0-1) for this action" }
+        },
+        "required": ["message_id", "confidence"]
+      },
+      "executor": "tools/gmail-unsubscribe.ts",
+      "execution_target": "host"
+    },
+    {
+      "name": "gmail_draft",
+      "description": "Create a draft email in Gmail. The draft will appear in Gmail Drafts for user review.",
+      "category": "messaging",
+      "risk": "low",
+      "input_schema": {
+        "type": "object",
+        "properties": {
+          "to": { "type": "string", "description": "Recipient email address" },
+          "subject": { "type": "string", "description": "Email subject line" },
+          "body": { "type": "string", "description": "Email body (plain text)" },
+          "in_reply_to": { "type": "string", "description": "Message-ID header of the email being replied to" }
+        },
+        "required": ["to", "subject", "body"]
+      },
+      "executor": "tools/gmail-draft.ts",
+      "execution_target": "host"
+    }
+  ]
+}

package/src/config/bundled-skills/messaging/tools/gmail-archive.ts

@@ -0,0 +1,23 @@
+import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
+import { withValidToken } from '../../../../security/token-manager.js';
+import { getMessagingProvider } from '../../../../messaging/registry.js';
+import { modifyMessage } from '../../../../messaging/providers/gmail/client.js';
+import { ok, err } from './shared.js';
+
+export async function run(input: Record<string, unknown>, _context: ToolContext): Promise<ToolExecutionResult> {
+  const messageId = input.message_id as string;
+
+  if (!messageId) {
+    return err('message_id is required.');
+  }
+
+  try {
+    const provider = getMessagingProvider('gmail');
+    return withValidToken(provider.credentialService, async (token) => {
+      await modifyMessage(token, messageId, { removeLabelIds: ['INBOX'] });
+      return ok('Message archived.');
+    });
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}

package/src/config/bundled-skills/messaging/tools/gmail-batch-archive.ts

@@ -0,0 +1,23 @@
+import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
+import { withValidToken } from '../../../../security/token-manager.js';
+import { getMessagingProvider } from '../../../../messaging/registry.js';
+import { batchModifyMessages } from '../../../../messaging/providers/gmail/client.js';
+import { ok, err } from './shared.js';
+
+export async function run(input: Record<string, unknown>, _context: ToolContext): Promise<ToolExecutionResult> {
+  const messageIds = input.message_ids as string[];
+
+  if (!messageIds?.length) {
+    return err('message_ids is required and must not be empty.');
+  }
+
+  try {
+    const provider = getMessagingProvider('gmail');
+    return withValidToken(provider.credentialService, async (token) => {
+      await batchModifyMessages(token, messageIds, { removeLabelIds: ['INBOX'] });
+      return ok(`Archived ${messageIds.length} message(s).`);
+    });
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}

package/src/config/bundled-skills/messaging/tools/gmail-batch-label.ts

@@ -0,0 +1,25 @@
+import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
+import { withValidToken } from '../../../../security/token-manager.js';
+import { getMessagingProvider } from '../../../../messaging/registry.js';
+import { batchModifyMessages } from '../../../../messaging/providers/gmail/client.js';
+import { ok, err } from './shared.js';
+
+export async function run(input: Record<string, unknown>, _context: ToolContext): Promise<ToolExecutionResult> {
+  const messageIds = input.message_ids as string[];
+  const addLabelIds = input.add_label_ids as string[] | undefined;
+  const removeLabelIds = input.remove_label_ids as string[] | undefined;
+
+  if (!messageIds?.length) {
+    return err('message_ids is required and must not be empty.');
+  }
+
+  try {
+    const provider = getMessagingProvider('gmail');
+    return withValidToken(provider.credentialService, async (token) => {
+      await batchModifyMessages(token, messageIds, { addLabelIds, removeLabelIds });
+      return ok(`Labels updated on ${messageIds.length} message(s).`);
+    });
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}

package/src/config/bundled-skills/messaging/tools/gmail-draft.ts

@@ -0,0 +1,26 @@
+import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
+import { withValidToken } from '../../../../security/token-manager.js';
+import { getMessagingProvider } from '../../../../messaging/registry.js';
+import { createDraft } from '../../../../messaging/providers/gmail/client.js';
+import { ok, err } from './shared.js';
+
+export async function run(input: Record<string, unknown>, _context: ToolContext): Promise<ToolExecutionResult> {
+  const to = input.to as string;
+  const subject = input.subject as string;
+  const body = input.body as string;
+  const inReplyTo = input.in_reply_to as string | undefined;
+
+  if (!to) return err('to is required.');
+  if (!subject) return err('subject is required.');
+  if (!body) return err('body is required.');
+
+  try {
+    const provider = getMessagingProvider('gmail');
+    return withValidToken(provider.credentialService, async (token) => {
+      const draft = await createDraft(token, to, subject, body, inReplyTo);
+      return ok(`Draft created (ID: ${draft.id}). It will appear in your Gmail Drafts.`);
+    });
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}

package/src/config/bundled-skills/messaging/tools/gmail-label.ts

@@ -0,0 +1,25 @@
+import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
+import { withValidToken } from '../../../../security/token-manager.js';
+import { getMessagingProvider } from '../../../../messaging/registry.js';
+import { modifyMessage } from '../../../../messaging/providers/gmail/client.js';
+import { ok, err } from './shared.js';
+
+export async function run(input: Record<string, unknown>, _context: ToolContext): Promise<ToolExecutionResult> {
+  const messageId = input.message_id as string;
+  const addLabelIds = input.add_label_ids as string[] | undefined;
+  const removeLabelIds = input.remove_label_ids as string[] | undefined;
+
+  if (!messageId) {
+    return err('message_id is required.');
+  }
+
+  try {
+    const provider = getMessagingProvider('gmail');
+    return withValidToken(provider.credentialService, async (token) => {
+      await modifyMessage(token, messageId, { addLabelIds, removeLabelIds });
+      return ok('Labels updated.');
+    });
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}

package/src/config/bundled-skills/messaging/tools/gmail-trash.ts

@@ -0,0 +1,23 @@
+import type { ToolContext, ToolExecutionResult } from '../../../../tools/types.js';
+import { withValidToken } from '../../../../security/token-manager.js';
+import { getMessagingProvider } from '../../../../messaging/registry.js';
+import { trashMessage } from '../../../../messaging/providers/gmail/client.js';
+import { ok, err } from './shared.js';
+
+export async function run(input: Record<string, unknown>, _context: ToolContext): Promise<ToolExecutionResult> {
+  const messageId = input.message_id as string;
+
+  if (!messageId) {
+    return err('message_id is required.');
+  }
+
+  try {
+    const provider = getMessagingProvider('gmail');
+    return withValidToken(provider.credentialService, async (token) => {
+      await trashMessage(token, messageId);
+      return ok('Message moved to trash.');
+    });
+  } catch (e) {
+    return err(e instanceof Error ? e.message : String(e));
+  }
+}