@hera-al/server 1.6.12 → 1.6.13

package/bundled/google-workspace/scripts/gmail.sh

@@ -0,0 +1,452 @@
+#!/usr/bin/env bash
+# Gmail API client — OAuth2 REST API v1
+# Usage: gmail.sh <command> [options]
+#
+# Commands:
+#   list [--max N]                          List recent messages
+#   search "query" [--max N]                Search messages (Gmail query syntax)
+#   read <messageId> [--format minimal|full] Read a message
+#   send --to ADDR --subject SUBJ --body TXT Send an email
+#   reply <messageId> --body TXT             Reply to an email
+#   labels                                   List all labels
+#   label <messageId> --add L --remove L     Modify labels
+#   mark-read <messageId>                    Mark as read
+#   mark-unread <messageId>                  Mark as unread
+#   trash <messageId>                        Move to trash
+#   threads [--max N]                        List threads
+#   thread <threadId>                        Get thread
+
+set -euo pipefail
+
+# --- Config ---
+API_BASE="https://gmail.googleapis.com/gmail/v1/users/me"
+TOKEN_FILE="${HOME}/.gmab-google-token.json"
+
+# --- Token management ---
+get_access_token() {
+  local client_id="${GOOGLE_CLIENT_ID:-}"
+  local client_secret="${GOOGLE_CLIENT_SECRET:-}"
+  local refresh_token="${GOOGLE_REFRESH_TOKEN:-}"
+
+  # Try token file if env vars not set
+  if [[ -z "$refresh_token" && -f "$TOKEN_FILE" ]]; then
+    client_id=$(jq -r '.client_id // empty' "$TOKEN_FILE" 2>/dev/null || true)
+    client_secret=$(jq -r '.client_secret // empty' "$TOKEN_FILE" 2>/dev/null || true)
+    refresh_token=$(jq -r '.refresh_token // empty' "$TOKEN_FILE" 2>/dev/null || true)
+  fi
+
+  if [[ -z "$client_id" || -z "$client_secret" || -z "$refresh_token" ]]; then
+    echo "ERROR: Google credentials not configured." >&2
+    echo "Set GOOGLE_CLIENT_ID, GOOGLE_CLIENT_SECRET, GOOGLE_REFRESH_TOKEN" >&2
+    echo "Or run scripts/google/auth.sh to set up OAuth2." >&2
+    exit 1
+  fi
+
+  # Check cached token
+  if [[ -f "$TOKEN_FILE" ]]; then
+    local cached_token cached_expiry
+    cached_token=$(jq -r '.access_token // empty' "$TOKEN_FILE" 2>/dev/null || true)
+    cached_expiry=$(jq -r '.expires_at // 0' "$TOKEN_FILE" 2>/dev/null || true)
+    local now
+    now=$(date +%s)
+    if [[ -n "$cached_token" && "$cached_expiry" -gt "$now" ]]; then
+      echo "$cached_token"
+      return
+    fi
+  fi
+
+  # Refresh the token
+  local response
+  response=$(curl -s "https://oauth2.googleapis.com/token" \
+    -d "client_id=$client_id" \
+    -d "client_secret=$client_secret" \
+    -d "refresh_token=$refresh_token" \
+    -d "grant_type=refresh_token")
+
+  local access_token
+  access_token=$(echo "$response" | jq -r '.access_token // empty')
+  local expires_in
+  expires_in=$(echo "$response" | jq -r '.expires_in // 3600')
+
+  if [[ -z "$access_token" ]]; then
+    echo "ERROR: Failed to refresh access token" >&2
+    echo "$response" >&2
+    exit 1
+  fi
+
+  # Cache token
+  local expires_at
+  expires_at=$(($(date +%s) + expires_in - 60))
+
+  # Preserve existing fields, update token
+  if [[ -f "$TOKEN_FILE" ]]; then
+    local tmp
+    tmp=$(jq --arg at "$access_token" --argjson ea "$expires_at" \
+      '. + {access_token: $at, expires_at: $ea}' "$TOKEN_FILE")
+    echo "$tmp" > "$TOKEN_FILE"
+  else
+    jq -n \
+      --arg ci "$client_id" \
+      --arg cs "$client_secret" \
+      --arg rt "$refresh_token" \
+      --arg at "$access_token" \
+      --argjson ea "$expires_at" \
+      '{client_id: $ci, client_secret: $cs, refresh_token: $rt, access_token: $at, expires_at: $ea}' \
+      > "$TOKEN_FILE"
+  fi
+  chmod 600 "$TOKEN_FILE"
+
+  echo "$access_token"
+}
+
+api_get() {
+  local path="$1"
+  local token
+  token=$(get_access_token)
+  curl -s -H "Authorization: Bearer $token" "${API_BASE}${path}"
+}
+
+api_post() {
+  local path="$1"
+  local data="${2:-}"
+  local token
+  token=$(get_access_token)
+  if [[ -n "$data" ]]; then
+    curl -s -H "Authorization: Bearer $token" \
+      -H "Content-Type: application/json" \
+      -d "$data" "${API_BASE}${path}"
+  else
+    curl -s -X POST -H "Authorization: Bearer $token" "${API_BASE}${path}"
+  fi
+}
+
+# --- Helpers ---
+format_message_list() {
+  jq -r '
+    .messages[]? | "\(.id)\t\(.threadId)"
+  '
+}
+
+format_message() {
+  local format="${1:-metadata}"
+  if [[ "$format" == "minimal" ]]; then
+    jq -r '{id, threadId, labelIds, snippet}'
+  else
+    jq -r '
+      def header(name): .payload.headers[]? | select(.name == name) | .value;
+      {
+        id: .id,
+        threadId: .threadId,
+        labels: .labelIds,
+        from: header("From"),
+        to: header("To"),
+        cc: (header("Cc") // null),
+        subject: header("Subject"),
+        date: header("Date"),
+        snippet: .snippet,
+        body: (
+          # Try to get text/plain body
+          if .payload.body.data then
+            .payload.body.data
+          elif .payload.parts then
+            (.payload.parts[]? | select(.mimeType == "text/plain") | .body.data) //
+            (.payload.parts[]? | select(.mimeType == "text/html") | .body.data)
+          else
+            null
+          end
+        )
+      }
+    '
+  fi
+}
+
+decode_base64url() {
+  # Gmail uses URL-safe base64 — convert to standard base64 then decode
+  tr '_-' '/+' | base64 -d 2>/dev/null || echo "[decode error]"
+}
+
+# --- Commands ---
+cmd_list() {
+  local max=10
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --max) max="$2"; shift 2 ;;
+      *) shift ;;
+    esac
+  done
+
+  local response
+  response=$(api_get "/messages?maxResults=$max&labelIds=INBOX")
+
+  # Get message IDs, then fetch metadata for each
+  local ids
+  ids=$(echo "$response" | jq -r '.messages[]?.id // empty')
+
+  if [[ -z "$ids" ]]; then
+    echo "No messages found."
+    return
+  fi
+
+  echo "["
+  local first=true
+  while IFS= read -r mid; do
+    [[ -z "$mid" ]] && continue
+    if [[ "$first" == "true" ]]; then
+      first=false
+    else
+      echo ","
+    fi
+    api_get "/messages/$mid?format=metadata&metadataHeaders=From&metadataHeaders=Subject&metadataHeaders=Date" | jq '{
+      id: .id,
+      threadId: .threadId,
+      labels: .labelIds,
+      snippet: .snippet,
+      from: (.payload.headers[]? | select(.name == "From") | .value),
+      subject: (.payload.headers[]? | select(.name == "Subject") | .value),
+      date: (.payload.headers[]? | select(.name == "Date") | .value)
+    }'
+  done <<< "$ids"
+  echo "]"
+}
+
+cmd_search() {
+  local query="$1"; shift
+  local max=10
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --max) max="$2"; shift 2 ;;
+      *) shift ;;
+    esac
+  done
+
+  local encoded_query
+  encoded_query=$(python3 -c "import sys, urllib.parse; print(urllib.parse.quote(sys.stdin.read().strip()))" <<< "$query" 2>/dev/null || echo "$query")
+
+  local response
+  response=$(api_get "/messages?maxResults=$max&q=$encoded_query")
+
+  local ids
+  ids=$(echo "$response" | jq -r '.messages[]?.id // empty')
+
+  if [[ -z "$ids" ]]; then
+    echo "No messages found for query: $query"
+    return
+  fi
+
+  echo "["
+  local first=true
+  while IFS= read -r mid; do
+    [[ -z "$mid" ]] && continue
+    if [[ "$first" == "true" ]]; then
+      first=false
+    else
+      echo ","
+    fi
+    api_get "/messages/$mid?format=metadata&metadataHeaders=From&metadataHeaders=Subject&metadataHeaders=Date" | jq '{
+      id: .id,
+      threadId: .threadId,
+      labels: .labelIds,
+      snippet: .snippet,
+      from: (.payload.headers[]? | select(.name == "From") | .value),
+      subject: (.payload.headers[]? | select(.name == "Subject") | .value),
+      date: (.payload.headers[]? | select(.name == "Date") | .value)
+    }'
+  done <<< "$ids"
+  echo "]"
+}
+
+cmd_read() {
+  local msg_id="$1"; shift
+  local format="full"
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --format) format="$2"; shift 2 ;;
+      *) shift ;;
+    esac
+  done
+
+  local response
+  response=$(api_get "/messages/$msg_id?format=$format")
+
+  if [[ "$format" == "minimal" ]]; then
+    echo "$response" | format_message "minimal"
+  else
+    # Extract and decode body
+    local parsed
+    parsed=$(echo "$response" | format_message "full")
+    local body_b64
+    body_b64=$(echo "$parsed" | jq -r '.body // empty')
+
+    if [[ -n "$body_b64" ]]; then
+      local decoded
+      decoded=$(echo "$body_b64" | decode_base64url)
+      echo "$parsed" | jq --arg body "$decoded" '.body = $body'
+    else
+      echo "$parsed" | jq '.body = "[no text body found]"'
+    fi
+  fi
+}
+
+cmd_send() {
+  local to="" subject="" body="" cc="" bcc=""
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --to) to="$2"; shift 2 ;;
+      --subject) subject="$2"; shift 2 ;;
+      --body) body="$2"; shift 2 ;;
+      --cc) cc="$2"; shift 2 ;;
+      --bcc) bcc="$2"; shift 2 ;;
+      *) shift ;;
+    esac
+  done
+
+  if [[ -z "$to" || -z "$subject" ]]; then
+    echo "ERROR: --to and --subject are required" >&2
+    exit 1
+  fi
+
+  # Build RFC 2822 message
+  local raw_msg="To: $to\nSubject: $subject\nContent-Type: text/plain; charset=utf-8\n"
+  [[ -n "$cc" ]] && raw_msg+="Cc: $cc\n"
+  [[ -n "$bcc" ]] && raw_msg+="Bcc: $bcc\n"
+  raw_msg+="\n$body"
+
+  # Base64url encode
+  local encoded
+  encoded=$(printf '%b' "$raw_msg" | base64 | tr '+/' '-_' | tr -d '=\n')
+
+  local data
+  data=$(jq -n --arg raw "$encoded" '{"raw": $raw}')
+
+  api_post "/messages/send" "$data" | jq '{id: .id, threadId: .threadId, labelIds: .labelIds}'
+}
+
+cmd_reply() {
+  local msg_id="$1"; shift
+  local body=""
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --body) body="$2"; shift 2 ;;
+      *) shift ;;
+    esac
+  done
+
+  if [[ -z "$body" ]]; then
+    echo "ERROR: --body is required" >&2
+    exit 1
+  fi
+
+  # Get original message to extract headers
+  local original
+  original=$(api_get "/messages/$msg_id?format=metadata&metadataHeaders=From&metadataHeaders=Subject&metadataHeaders=Message-Id&metadataHeaders=To")
+
+  local from subject message_id thread_id
+  from=$(echo "$original" | jq -r '.payload.headers[]? | select(.name == "From") | .value')
+  subject=$(echo "$original" | jq -r '.payload.headers[]? | select(.name == "Subject") | .value')
+  message_id=$(echo "$original" | jq -r '.payload.headers[]? | select(.name == "Message-Id") | .value')
+  thread_id=$(echo "$original" | jq -r '.threadId')
+
+  # Add Re: prefix if not already present
+  [[ "$subject" != Re:* ]] && subject="Re: $subject"
+
+  local raw_msg="To: $from\nSubject: $subject\nIn-Reply-To: $message_id\nReferences: $message_id\nContent-Type: text/plain; charset=utf-8\n\n$body"
+
+  local encoded
+  encoded=$(printf '%b' "$raw_msg" | base64 | tr '+/' '-_' | tr -d '=\n')
+
+  local data
+  data=$(jq -n --arg raw "$encoded" --arg tid "$thread_id" '{"raw": $raw, "threadId": $tid}')
+
+  api_post "/messages/send" "$data" | jq '{id: .id, threadId: .threadId}'
+}
+
+cmd_labels() {
+  api_get "/labels" | jq '[.labels[]? | {id: .id, name: .name, type: .type}]'
+}
+
+cmd_label() {
+  local msg_id="$1"; shift
+  local add_labels=() remove_labels=()
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --add) add_labels+=("$2"); shift 2 ;;
+      --remove) remove_labels+=("$2"); shift 2 ;;
+      *) shift ;;
+    esac
+  done
+
+  local data
+  data=$(jq -n \
+    --argjson add "$(printf '%s\n' "${add_labels[@]}" | jq -R . | jq -s .)" \
+    --argjson remove "$(printf '%s\n' "${remove_labels[@]}" | jq -R . | jq -s .)" \
+    '{addLabelIds: $add, removeLabelIds: $remove}')
+
+  api_post "/messages/$msg_id/modify" "$data" | jq '{id: .id, labelIds: .labelIds}'
+}
+
+cmd_mark_read() {
+  local msg_id="$1"
+  api_post "/messages/$msg_id/modify" '{"removeLabelIds": ["UNREAD"]}' | jq '{id: .id, labelIds: .labelIds}'
+}
+
+cmd_mark_unread() {
+  local msg_id="$1"
+  api_post "/messages/$msg_id/modify" '{"addLabelIds": ["UNREAD"]}' | jq '{id: .id, labelIds: .labelIds}'
+}
+
+cmd_trash() {
+  local msg_id="$1"
+  api_post "/messages/$msg_id/trash" | jq '{id: .id, labelIds: .labelIds}'
+}
+
+cmd_threads() {
+  local max=10
+  while [[ $# -gt 0 ]]; do
+    case "$1" in
+      --max) max="$2"; shift 2 ;;
+      *) shift ;;
+    esac
+  done
+  api_get "/threads?maxResults=$max" | jq '[.threads[]? | {id: .id, snippet: .snippet, historyId: .historyId}]'
+}
+
+cmd_thread() {
+  local thread_id="$1"
+  api_get "/threads/$thread_id?format=metadata&metadataHeaders=From&metadataHeaders=Subject&metadataHeaders=Date" | jq '{
+    id: .id,
+    messages: [.messages[]? | {
+      id: .id,
+      labels: .labelIds,
+      snippet: .snippet,
+      from: (.payload.headers[]? | select(.name == "From") | .value),
+      subject: (.payload.headers[]? | select(.name == "Subject") | .value),
+      date: (.payload.headers[]? | select(.name == "Date") | .value)
+    }]
+  }'
+}
+
+# --- Dispatch ---
+COMMAND="${1:-}"
+shift || true
+
+case "$COMMAND" in
+  list) cmd_list "$@" ;;
+  search) cmd_search "$@" ;;
+  read) cmd_read "$@" ;;
+  send) cmd_send "$@" ;;
+  reply) cmd_reply "$@" ;;
+  labels) cmd_labels ;;
+  label) cmd_label "$@" ;;
+  mark-read) cmd_mark_read "$@" ;;
+  mark-unread) cmd_mark_unread "$@" ;;
+  trash) cmd_trash "$@" ;;
+  threads) cmd_threads "$@" ;;
+  thread) cmd_thread "$@" ;;
+  *)
+    echo "Usage: gmail.sh <command> [options]" >&2
+    echo "" >&2
+    echo "Commands: list, search, read, send, reply, labels, label," >&2
+    echo "          mark-read, mark-unread, trash, threads, thread" >&2
+    exit 1
+    ;;
+esac