RetainWithAudit now takes only the actor; the store builds the detail after
body clearing so bodies_cleared is a real number, and still writes the row
before the cap.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
RetainWithAudit appends the 'retain' audit row inside the same transaction and
before the cap, so the cap counts it. After a run, actions_log holds at most
EMAIL_AGENT_ACTIONS_LOG_MAX_ROWS rows, including the audit row. Adds a test.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
Implements the AGENTS.md §7 data rule: keep message bodies for one month, and
size-cap the append-only action log.
- internal/store/retention.go: Store.Retain clears messages.body_text older
than the window (metadata stays) and deletes actions_log rows beyond the
newest N, in one transaction.
- internal/config: EMAIL_AGENT_RETENTION_DAYS (30) and
EMAIL_AGENT_ACTIONS_LOG_MAX_ROWS (50000).
- cmd/email-agent: bounded -retain flag for the n8n schedule.
- Tests for body clearing, metadata retention, log cap, and disabled policy.
Co-Authored-By: Paperclip <noreply@paperclip.ing>
