Feat: phishing detection, thread summary, bulk summarize UI, CRM pipeline

- Classifier: added is_phishing + phishing_indicators fields to AI analysis
- Email detail: phishing warning banner with red alert and indicator list
- Email detail: Thread Summary button — AI summary of full thread with key points, next action, sentiment
- Backend: GET /api/emails/{id}/thread-summary endpoint
- BatchActionBar: Summarize button (up to 10 emails) with callback
- BulkSummaryModal: modal to display AI summaries for selected emails
- Email index: wires onSummarize callback and shows BulkSummaryModal
- CRM: Pipeline tab with full Kanban — New Lead / Contacted / Proposal / Won / Lost
- CRM: drag-and-drop + dropdown stage selector on each card, Add Lead modal, localStorage persistence
- CRM: tabs UI (Contacts / Pipeline) with won-value tracker

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: 2 people

backend/ai/classifier.py

@@ -16,6 +16,8 @@
 - action_items: array of objects with fields "task" (string) and "deadline" (string or null)
 - confidence_score: float from 0.0 to 1.0
 - language: ISO 639-1 language code of the email (e.g. 'en', 'es', 'fr', 'de', 'pt', 'hi', 'zh', 'ja')
+- is_phishing: boolean — true if the email shows signs of phishing or social engineering
+- phishing_indicators: array of strings listing specific suspicious elements found (empty array if none)
 
 Email Subject: {subject}
 From: {sender}
@@ -76,6 +78,8 @@ async def classify_email(subject: str, sender: str, body: str, attachments: list
         result["action_items"] = result.get("action_items", [])
         result["summary"] = result.get("summary", "")
         result["language"] = result.get("language", "en")
+        result["is_phishing"] = bool(result.get("is_phishing", False))
+        result["phishing_indicators"] = result.get("phishing_indicators", [])
 
         return result
 

backend/routes/emails.py

@@ -488,6 +488,92 @@ async def detect_meeting_info(
         raise HTTPException(status_code=500, detail="Failed to detect meeting info.")
 
 
+@router.get("/{email_id}/thread-summary", response_model=dict)
+async def get_thread_summary(
+    email_id: str,
+    current_user: Annotated[dict, Depends(get_current_user)],
+):
+    """Generate an AI summary of the entire email thread."""
+    try:
+        import json
+        supabase = get_supabase()
+        user_id = _current_user_id(current_user)
+
+        # Get the email and its thread ID
+        email_row = supabase.table("emails").select(
+            "id, subject, sender, gmail_thread_id"
+        ).eq("id", email_id).eq("user_id", user_id).single().execute()
+
+        if not email_row.data:
+            raise HTTPException(status_code=404, detail="Email not found.")
+
+        thread_id = email_row.data.get("gmail_thread_id") or email_id
+
+        # Fetch all emails in the thread
+        thread_rows = supabase.table("emails").select(
+            "id, subject, sender, body, received_at"
+        ).eq("user_id", user_id).eq("gmail_thread_id", thread_id).order(
+            "received_at", desc=False
+        ).limit(20).execute()
+
+        emails_in_thread = thread_rows.data or [email_row.data]
+
+        if len(emails_in_thread) <= 1:
+            return {
+                "thread_length": 1,
+                "summary": None,
+                "key_points": [],
+                "status": "single_email",
+            }
+
+        # Build thread text for AI
+        thread_text = ""
+        for idx, e in enumerate(emails_in_thread, 1):
+            received = e.get("received_at", "")[:10] if e.get("received_at") else ""
+            thread_text += f"\n--- Email {idx} ({received}) from {e.get('sender', 'Unknown')} ---\n"
+            thread_text += f"Subject: {e.get('subject', '')}\n"
+            thread_text += (e.get("body") or "")[:600]
+            thread_text += "\n"
+
+        from ai.classifier import client as ai_client
+
+        prompt = f"""You are summarizing an email thread for a busy professional.
+
+Thread ({len(emails_in_thread)} emails):
+{thread_text[:4000]}
+
+Return ONLY a JSON object with:
+- summary: string (2-3 sentence overview of the full conversation)
+- key_points: array of strings (3-5 key points or decisions from the thread)
+- next_action: string or null (what action is needed, if any)
+- sentiment: one of "positive", "neutral", "negative", "mixed"
+"""
+
+        response = await ai_client.messages.create(
+            model="claude-opus-4-6",
+            max_tokens=500,
+            messages=[{"role": "user", "content": prompt}],
+        )
+
+        text = next((b.text for b in response.content if b.type == "text"), None)
+        raw = (text or "{}").strip()
+        if raw.startswith("```"):
+            raw = raw.split("```")[1]
+            if raw.startswith("json"):
+                raw = raw[4:]
+
+        result = json.loads(raw.strip())
+        result["thread_length"] = len(emails_in_thread)
+        result["status"] = "summarized"
+        return result
+
+    except HTTPException:
+        raise
+    except Exception as exc:
+        logger.error("thread_summary error: %s", exc)
+        raise HTTPException(status_code=500, detail="Failed to generate thread summary.")
+
+
 @router.get("/{email_id}")
 async def get_email(
     email_id: str,

frontend/components/BatchActionBar.tsx

@@ -1,5 +1,5 @@
 import { useState } from 'react';
-import { CheckCheck, Eye, Trash2, X, Loader2 } from 'lucide-react';
+import { CheckCheck, Eye, Trash2, X, Loader2, FileText } from 'lucide-react';
 import clsx from 'clsx';
 import toast from 'react-hot-toast';
 import { emailsApi } from '@/lib/api';
@@ -8,9 +8,10 @@ interface BatchActionBarProps {
   selectedIds: Set<string>;
   onCancel: () => void;
   onComplete: () => void;
+  onSummarize?: (summaries: Array<{ id: string; summary: string }>) => void;
 }
 
-export default function BatchActionBar({ selectedIds, onCancel, onComplete }: BatchActionBarProps) {
+export default function BatchActionBar({ selectedIds, onCancel, onComplete, onSummarize }: BatchActionBarProps) {
   const [loading, setLoading] = useState<string | null>(null);
   const ids = Array.from(selectedIds);
   const count = ids.length;
@@ -41,6 +42,26 @@ export default function BatchActionBar({ selectedIds, onCancel, onComplete }: Ba
     }
   };
 
+  const handleSummarize = async () => {
+    if (ids.length > 10) {
+      toast.error('Summarize supports up to 10 emails at a time');
+      return;
+    }
+    setLoading('summarize');
+    try {
+      const results = await emailsApi.bulkSummarize(ids);
+      if (onSummarize) {
+        onSummarize(results);
+      } else {
+        toast.success(`Generated ${results.length} summaries`);
+      }
+    } catch {
+      toast.error('Failed to summarize emails');
+    } finally {
+      setLoading(null);
+    }
+  };
+
   const handleBulkProcess = async () => {
     setLoading('process');
     try {
@@ -73,6 +94,17 @@ export default function BatchActionBar({ selectedIds, onCancel, onComplete }: Ba
           Mark read
         </button>
 
+        {count <= 10 && (
+          <button
+            onClick={handleSummarize}
+            disabled={!!loading}
+            className="inline-flex items-center gap-1.5 rounded-lg bg-white/15 hover:bg-white/25 px-3 py-1.5 text-xs font-medium transition-colors disabled:opacity-50"
+          >
+            {loading === 'summarize' ? <Loader2 className="h-3.5 w-3.5 animate-spin" /> : <FileText className="h-3.5 w-3.5" />}
+            Summarize
+          </button>
+        )}
+
         <button
           onClick={handleBulkProcess}
           disabled={!!loading}

frontend/components/BulkSummaryModal.tsx

@@ -0,0 +1,68 @@
+import { X, FileText } from 'lucide-react';
+
+interface SummaryItem {
+  id: string;
+  summary: string;
+}
+
+interface BulkSummaryModalProps {
+  summaries: SummaryItem[];
+  onClose: () => void;
+}
+
+export default function BulkSummaryModal({ summaries, onClose }: BulkSummaryModalProps) {
+  return (
+    <>
+      <div
+        className="fixed inset-0 z-40 bg-black/50 backdrop-blur-sm"
+        onClick={onClose}
+        aria-hidden="true"
+      />
+      <div className="fixed inset-0 z-50 flex items-center justify-center p-4">
+        <div className="w-full max-w-xl rounded-2xl bg-white dark:bg-gray-900 shadow-2xl flex flex-col max-h-[80vh]">
+          {/* Header */}
+          <div className="flex items-center justify-between border-b border-gray-200 dark:border-gray-700 px-5 py-4 flex-shrink-0">
+            <div className="flex items-center gap-2">
+              <FileText className="h-4 w-4 text-primary-600 dark:text-primary-400" />
+              <h2 className="font-semibold text-gray-900 dark:text-gray-100 text-sm">
+                AI Summaries ({summaries.length})
+              </h2>
+            </div>
+            <button
+              onClick={onClose}
+              className="rounded-lg p-1.5 text-gray-400 hover:bg-gray-100 dark:hover:bg-gray-800 transition-colors"
+            >
+              <X className="h-4 w-4" />
+            </button>
+          </div>
+
+          {/* List */}
+          <div className="overflow-y-auto flex-1 p-5 space-y-3">
+            {summaries.map((item, idx) => (
+              <div
+                key={item.id}
+                className="rounded-xl border border-gray-100 dark:border-gray-700 bg-gray-50 dark:bg-gray-800 p-4"
+              >
+                <p className="text-xs font-semibold text-gray-400 dark:text-gray-500 uppercase tracking-wider mb-1.5">
+                  Email {idx + 1}
+                </p>
+                <p className="text-sm text-gray-800 dark:text-gray-200 leading-relaxed">
+                  {item.summary}
+                </p>
+              </div>
+            ))}
+          </div>
+
+          <div className="border-t border-gray-200 dark:border-gray-700 px-5 py-3 flex-shrink-0">
+            <button
+              onClick={onClose}
+              className="w-full rounded-xl bg-primary-600 hover:bg-primary-700 text-white py-2 text-sm font-medium transition-colors"
+            >
+              Done
+            </button>
+          </div>
+        </div>
+      </div>
+    </>
+  );
+}

frontend/lib/api.ts

@@ -223,6 +223,18 @@ export const emailsApi = {
     const { data } = await api.get(`/api/emails/${id}/meeting-info`);
     return data;
   },
+
+  getThreadSummary: async (id: string): Promise<{
+    thread_length: number;
+    summary: string | null;
+    key_points: string[];
+    next_action: string | null;
+    sentiment: string;
+    status: string;
+  }> => {
+    const { data } = await api.get(`/api/emails/${id}/thread-summary`);
+    return data;
+  },
 };
 
 // ─── Actions Endpoints ────────────────────────────────────────────────────────

frontend/lib/types.ts

@@ -21,6 +21,8 @@ export interface AIAnalysis {
   key_topics: string[];
   action_required: boolean;
   processed_at: string;
+  is_phishing?: boolean;
+  phishing_indicators?: string[];
 }
 
 export interface Email {