API capability pack for bounded Gmail API v1 operations against https://gmail.googleapis.com. Enroll a Google OAuth bearer connection named google with the narrowest Gmail scopes needed for the installed operations; Gmail scopes can be restricted and may require Google app verification. Reads the current mailbox profile, labels, messages, message metadata, attachments, threads, mailbox history deltas, drafts, filters, send-as identities, forwarding addresses, and mailbox settings for auto-forwarding, IMAP, POP, language, and vacation responder state. It also bundles a scheduled inbox digest, an AI-assisted thread review brief, and approval-gated vacation responder update workflow. Writes are approval-gated and limited to creating/updating labels, modifying labels on one message or thread, creating/updating/sending one RFC 2822 raw draft, sending one RFC 2822 raw message, creating filters without forwarding actions, deleting one filter, patching send-as display/reply-to/signature/default metadata, sending a send-as verification email, and updating vacation responder settings. The bundled recipes only use settings.vacation.update as a write. The pack intentionally excludes arbitrary API passthrough, permanent delete, trash/untrash, batch modify/delete, import/insert, watch/stop Pub/Sub, forwarding/delegation mutation, forwarding-address mutation, S/MIME, IMAP/POP/language/auto-forwarding mutation, filter forwarding actions, attachments upload, and domain/admin Gmail APIs.