email sync: API passes full config at enqueue, auto-reconnect on IMAP drops

Sidecar/queue runner no longer needs job-specific context. API server
resolves account details, IMAP auth, and user email at enqueue time —
all persisted in the job file. Handler reads directly from job meta.

Removed "Load account" step. Sync step auto-reconnects up to 10 times
when Gmail drops the connection, resuming from saved UIDs.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/servers/sidecar/email-cron.ts

@@ -1,4 +1,4 @@
-import { getAllSyncedAccounts, getUserById } from 'officerdb';
+import { getAllSyncedAccounts, getUserById, getUserIntegration } from 'officerdb';
 import * as queueRunner from './queue-runner';
 
 const INTERVAL_MS = 10 * 60 * 1000; // 10 minutes
@@ -23,12 +23,43 @@ async function tick() {
       const user = await getUserById(account.userId);
       if (!user) continue;
 
+      // Resolve IMAP auth
+      const imapAuth: Record<string, unknown> = { user: account.email };
+      if (account.authType === 'oauth') {
+        const integration = await getUserIntegration(account.userId, 'google');
+        const config = integration?.config as Record<string, unknown> | undefined;
+        const accessToken = config?.accessToken as string | undefined;
+        if (!accessToken) {
+          console.log(`[email-cron] Skipping ${account.email}: no OAuth access token`);
+          continue;
+        }
+        imapAuth.accessToken = accessToken;
+      } else {
+        const creds = account.credentials as Record<string, unknown>;
+        imapAuth.pass = creds.password;
+      }
+
       try {
         await queueRunner.enqueue({
           lane: 'email',
           type: 'email-sync',
           userId: user.email,
-          meta: { emailAccountId: account.id },
+          meta: {
+            emailAccountId: account.id,
+            userEmail: user.email,
+            account: {
+              id: account.id,
+              userId: account.userId,
+              email: account.email,
+              imapHost: account.imapHost,
+              imapPort: account.imapPort,
+              imapSecure: account.imapSecure,
+              provider: account.provider,
+              authType: account.authType,
+              credentials: account.credentials,
+            },
+            imapAuth,
+          },
         });
         console.log(`[email-cron] Enqueued incremental sync for ${account.email}`);
       } catch (err) {

src/servers/sidecar/queue-runner.ts

@@ -73,6 +73,12 @@ async function resumeInterruptedJobs() {
       console.log(`[sidecar:queue] reset interrupted job ${job.id} back to queued`);
       lanesToKick.add(job.lane);
     } else if (job.status === 'queued') {
+      // Clear retry delay on restart — no reason to wait after a sidecar restart
+      if (job.retryAt) {
+        job.retryAt = undefined;
+        await writeJob(job);
+        console.log(`[sidecar:queue] cleared retry delay for job ${job.id}`);
+      }
       lanesToKick.add(job.lane);
     }
   }
@@ -187,6 +193,7 @@ async function runJob(job: Job) {
       await writeJob(fresh);
     } catch (err) {
       const errorMessage = err instanceof Error ? err.message : String(err);
+      console.error(`[sidecar:queue] step "${step.name}" failed: ${errorMessage}`);
       step.status = 'failed';
       step.error = errorMessage;
       step.completedAt = Date.now();