Preserve preview harness, editor, email and task improvements

Snapshot current maintainer-preview application changes and regression fixtures for integration into lab. Excludes local runtime data, evaluation outputs and source backups. Focused Python regression selection: 140 passed; full suite not certified.

tests/test_email_fixture_reply_account.py

@@ -0,0 +1,40 @@
+"""Fixture reader responses preserve the authenticated account selection."""
+import json
+
+import pytest
+
+
+@pytest.mark.asyncio
+async def test_fixture_read_preserves_selected_account_for_reply(tmp_path, monkeypatch):
+    import routes.email_routes as module
+    monkeypatch.setenv('ODYSSEUS_EMAIL_FIXTURE', '1')
+    monkeypatch.setattr(module, 'DATA_DIR', str(tmp_path))
+    (tmp_path / 'fixture_email_messages.json').write_text(json.dumps({'messages': [
+        {'owner': 'fixture-owner', 'uid': '10', 'account_id': 'primary-inbox',
+         'subject': 'Picnic', 'body': 'Join us Saturday', 'folder': 'INBOX'},
+    ]}))
+    router = module.setup_email_routes()
+    read = next(r.endpoint for r in router.routes if r.path == '/api/email/read/{uid}')
+    result = await read(uid='10', folder='INBOX', account_id='validated-account',
+                        mark_seen=False, full=False, owner='fixture-owner')
+    assert result['account_id'] == 'validated-account'
+    assert result['body'] == 'Join us Saturday'
+
+
+@pytest.mark.asyncio
+async def test_ai_reply_still_checks_selected_account_before_generation(monkeypatch):
+    import routes.email_routes as module
+    from fastapi import HTTPException
+    checked = []
+
+    def check(account_id, owner):
+        checked.append((account_id, owner))
+        raise HTTPException(404, 'Account not found')
+
+    monkeypatch.setattr(module, '_assert_owns_account', check)
+    router = module.setup_email_routes()
+    reply = next(r.endpoint for r in router.routes if r.path == '/api/email/ai-reply')
+    result = await reply({'account_id': 'missing-account', 'original_body': 'Hello'}, owner='fixture-owner')
+    assert checked == [('missing-account', 'fixture-owner')]
+    assert result['success'] is False
+    assert 'Account not found' in result['error']