docs(n8n): re-verify fresh-session gmail/calendar approval flows

HANDOFF.md

@@ -4,7 +4,7 @@
 Immediate baton-pass for the next fresh implementation session.
 
 ## Current objective
-Finish proving the Google Workspace + n8n integration through the real approval-routed path, not just direct Gog commands or dry-runs.
+Advance the Google Workspace action bus beyond create-only proofs now that real approval-routed Gmail draft + Calendar event tests have been re-verified in a fresh session.
 
 ## Use these state files first
 1. `WIP.md` — full standing plan and checkpoints
@@ -13,34 +13,35 @@ Finish proving the Google Workspace + n8n integration through the real approval-
 
 ## What is already true
 - `openclaw-action` is live in n8n and active.
-- Google auth via `gog` is working.
-- Local automation env lives in `/home/openclaw/.openclaw/credentials/gog.env` and should stay out of git.
-- Host bridge exists at:
-  - `skills/n8n-webhook/scripts/resolve-approval-with-gog.py`
-- Direct Gmail draft create/delete tests succeeded.
-- Dry-run n8n-routed Gmail + Calendar bridge tests succeeded.
+- Google auth via `gog` is working headlessly through local env auto-load.
+- Local automation env lives in `/home/openclaw/.openclaw/credentials/gog.env` and stays out of git.
+- Host bridge exists at `skills/n8n-webhook/scripts/resolve-approval-with-gog.py`.
+- Real approval-routed Gmail draft and Calendar event flows have both been verified multiple times end-to-end with cleanup.
+
+## Fresh-session proof completed (2026-03-12 19:44Z)
+- Gmail draft flow (`send_email_draft`):
+  - approval id: `approval-mmnvn4t2-w2rjlwz2`
+  - draft id: `r-3319106208870238577`
+  - subject: `[zap n8n e2e] Gmail draft test 20260312T194450Z`
+  - verified via `gog gmail drafts get`
+  - cleaned via `gog gmail drafts delete --force`
+- Calendar event flow (`create_calendar_event`):
+  - approval id: `approval-mmnvn6i8-e9eq8gdf`
+  - event id: `m7prri8vk2opuo6loq3qgtvsv4`
+  - title: `[zap n8n e2e] Calendar test 20260312T194450Z`
+  - verified via `gog calendar get primary <eventId>`
+  - cleaned via `gog calendar delete primary <eventId> --force`
 
 ## Highest-priority next actions
-1. **Real n8n-routed Gmail draft test**
-   - queue `send_email_draft` through `openclaw-action`
-   - approve through `resolve-approval-with-gog.py` (no `--dry-run`)
-   - verify draft exists in Gmail
-   - delete the test draft
-   - update `WIP.md` and memory with result ids/evidence
+1. Add `list_email_drafts` and `delete_email_draft` actions to the workflow contract and host executor path.
+2. Add `list_upcoming_events`, `update_calendar_event`, and `delete_calendar_event` actions.
+3. Keep approval policy explicit per action (default-gated for mutating operations).
+4. Add one compact operator test playbook for recurring verification (queue → approve → verify → cleanup).
 
-2. **Real n8n-routed Calendar event test**
-   - queue `create_calendar_event` through `openclaw-action`
-   - approve through `resolve-approval-with-gog.py` (no `--dry-run`)
-   - verify event exists in Calendar
-   - delete the test event
-   - update `WIP.md` and memory with result ids/evidence
-
-## Success criteria for this next session
-- both real approval-routed tests pass end-to-end
-- cleanup is confirmed (draft removed, event removed)
-- `WIP.md` reflects the new state cleanly
-- relevant memory/task files are updated
-- meaningful git checkpoint(s) committed
+## Success criteria for the next session
+- At least one new Gmail action and one new Calendar action implemented and validated end-to-end.
+- `WIP.md` and memory updated with concrete IDs/evidence.
+- Meaningful commit(s) captured.
 
 ## Relevant files
 - `WIP.md`
@@ -50,14 +51,15 @@ Finish proving the Google Workspace + n8n integration through the real approval-
 - `skills/n8n-webhook/scripts/resolve-approval-with-gog.py`
 - `skills/n8n-webhook/references/openclaw-action.md`
 - `memory/2026-03-12.md`
+- `memory/tasks.json`
 - `/home/openclaw/.openclaw/credentials/gog.env` (local-only)
 
 ## Relevant branch / commits
 - branch: `feat/n8n-action-bus-v2`
-- latest checkpoints already on branch include:
+- latest checkpoints before this handoff include:
   - `afa48a3` — bridge approvals to gog executors
   - `044e36f` — auto-load local gog automation env
   - `06fa582` — track google workspace and n8n plan
 
 ## Operator note
-Use the live n8n public API directly when it is the right path. Do not act blocked on n8n API access.
+Use the live n8n public API/webhook surface directly when it is the right path. Do not act blocked on n8n API access.