"""Zion PM - email intake (a sense). Polls each Gmail account's `PM` label over IMAP and turns

new messages into tasks. Label-gated on purpose: set a Gmail filter to label what you want the PM

to handle (outreach replies, client mail) as `PM`, and ONLY those reach the agent. No flooding.

Run periodically (cron/systemd timer):  python3 bin/intake-email.py

Needs each account's Gmail APP PASSWORD in /shared/projects/.env.secrets under its app_pw_var.

"""

import imaplib, email, json, os, time, uuid, re

from email.header import decode_header

PM = os.path.dirname(os.path.dirname(os.path.abspath(__file__)))

ST = os.path.join(PM, "state"); INBOX = os.path.join(PM, "inbox")

LABEL = os.environ.get("PM_EMAIL_LABEL", "PM")

def secrets():

    d = {}

    p = "/shared/projects/.env.secrets"

    if os.path.exists(p):

        for line in open(p):

            line = line.strip().replace("\r", "")

            if "=" in line and not line.startswith("#"):

                k, _, v = line.partition("="); d[k.strip()] = v.strip().strip('"').strip("'")

    return d

def policy_accounts():

    import yaml

    pol = yaml.safe_load(open(os.path.join(PM, "policy.yaml")))

    return (pol.get("sender_identities", {}) or {}).get("accounts", {})

def _dec(s):

    if not s: return ""

    out = []

    for part, enc in decode_header(s):

        out.append(part.decode(enc or "utf-8", "ignore") if isinstance(part, bytes) else part)

    return "".join(out)

def add_task(title, project, ttype):

    p = os.path.join(ST, "tasks.json")

    t = json.load(open(p)) if os.path.exists(p) else {"tasks": []}

    tid = "t-" + uuid.uuid4().hex[:8]

    t["tasks"].append({"id": tid, "title": title, "project": project, "type": ttype,

                       "status": "open", "created": time.strftime("%Y-%m-%dT%H:%M:%S"),

                       "artifacts": [], "worker": None, "source": "email"})

    json.dump(t, open(p, "w"), indent=2)

    open(os.path.join(INBOX, tid + ".task"), "w").write(title + "\n")

    with open(os.path.join(ST, "activity.jsonl"), "a") as f:

        f.write(json.dumps({"ts": time.strftime("%Y-%m-%dT%H:%M:%S"), "event": "intake_email", "id": tid, "title": title}) + "\n")

    return tid

def poll_account(name, acct, sec):

    addr = (acct.get("address") or "").strip()

    pwvar = acct.get("app_pw_var", "")

    pw = sec.get(pwvar, "")

    if not addr or not pw:

        return f"  skip {name}: no address or {pwvar} not set"

    use = acct.get("use", "")

    ttype = "outreach" if "outreach" in use or "recruit" in use else "client" if "client" in use else "misc"

    try:

        M = imaplib.IMAP4_SSL("imap.gmail.com")

        M.login(addr, pw)

        typ, _ = M.select(f'"{LABEL}"', readonly=False)

        if typ != "OK":

            M.logout(); return f"  {name}: no '{LABEL}' label (create a Gmail filter -> label '{LABEL}')"

        typ, data = M.search(None, "UNSEEN")

        ids = data[0].split() if data and data[0] else []

        made = 0

        for i in ids:

            typ, msg_data = M.fetch(i, "(RFC822)")

            if typ != "OK": continue

            msg = email.message_from_bytes(msg_data[0][1])

            frm = _dec(msg.get("From")); subj = _dec(msg.get("Subject"))

            title = f"Email to {name} from {frm}: {subj}".strip()

            add_task(title, project=None, ttype=ttype)

            M.store(i, "+FLAGS", "\\Seen")

            made += 1

        M.logout()

        return f"  {name} ({addr}): {made} new -> tasks"

    except Exception as e:

        return f"  {name} ERROR: {e}"

def main():

    sec = secrets(); accts = policy_accounts()

    print(f"[intake-email] polling '{LABEL}' label across {len(accts)} accounts")

    for name, acct in accts.items():

        print(poll_account(name, acct, sec))

if __name__ == "__main__":

    main()