Skip to content

[Opus 4.6] Support IMAP accounts in delete-staged command #223

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
DominicHolmes wants to merge 1 commit into
base: main
Choose a base branch
from
Open

[Opus 4.6] Support IMAP accounts in delete-staged command #223

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
129 changes: 63 additions & 66 deletions cmd/msgvault/cmd/deletions.go
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -11,10 +11,8 @@ import (
"syscall"
"time"

"github.com/mattn/go-isatty"
"github.com/spf13/cobra"
"github.com/wesm/msgvault/internal/deletion"
"github.com/wesm/msgvault/internal/gmail"
"github.com/wesm/msgvault/internal/oauth"
"github.com/wesm/msgvault/internal/store"
)
Expand Down Expand Up @@ -308,11 +306,6 @@ Examples:
}
}

// Validate config
if !cfg.OAuth.HasAnyConfig() {
return errOAuthNotConfigured()
}

// Collect unique accounts from manifests
accountSet := make(map[string]bool)
for _, m := range manifests {
Expand Down Expand Up @@ -358,20 +351,6 @@ Examples:
return fmt.Errorf("init schema: %w", err)
}

// Resolve OAuth credentials for this account
appName := ""
src, srcErr := findGmailSource(s, account)
if srcErr != nil {
return fmt.Errorf("look up source for %s: %w", account, srcErr)
}
if src != nil {
appName = sourceOAuthApp(src)
}
clientSecretsPath, err := cfg.OAuth.ClientSecretsFor(appName)
if err != nil {
return err
}

// Set up context with cancellation
ctx, cancel := context.WithCancel(cmd.Context())
defer cancel()
Expand All @@ -385,59 +364,73 @@ Examples:
cancel()
}()

// Determine which scopes we need
needsBatchDelete := !deleteTrash
var requiredScopes []string
if needsBatchDelete {
requiredScopes = oauth.ScopesDeletion
} else {
requiredScopes = oauth.Scopes
// Look up the source to determine account type (gmail vs imap).
sources, err := s.GetSourcesByIdentifier(account)
if err != nil {
return fmt.Errorf("look up source for %s: %w", account, err)
}
var src *store.Source
for _, candidate := range sources {
if candidate.SourceType == "gmail" || candidate.SourceType == "imap" {
src = candidate
break
}
}
if src == nil {
return fmt.Errorf("no gmail or imap source found for %s", account)
}

// Create OAuth manager with appropriate scopes
oauthMgr, err := oauth.NewManagerWithScopes(clientSecretsPath, cfg.TokensDir(), logger, requiredScopes)
if err != nil {
return wrapOAuthError(fmt.Errorf("create oauth manager: %w", err))
}

// Proactively check if we need scope escalation before making API calls.
// Legacy tokens (saved before scope tracking) won't have scope metadata,
// so we only trigger proactive escalation when we positively know the
// token lacks the required scope.
if needsBatchDelete && !oauthMgr.HasScope(account, "https://mail.google.com/") {
// Only trigger proactive escalation when we have scope metadata.
// Legacy tokens (saved before scope tracking) fall through to
// reactive detection on the first API call.
if oauthMgr.HasScopeMetadata(account) {
// Token has scope metadata but lacks deletion scope — escalate now
if err := promptScopeEscalation(ctx, oauthMgr, account, needsBatchDelete, clientSecretsPath); err != nil {
if errors.Is(err, errUserCanceled) {
return nil
}
return err
}
// Re-create OAuth manager with new token
oauthMgr, err = oauth.NewManagerWithScopes(clientSecretsPath, cfg.TokensDir(), logger, requiredScopes)
// For Gmail, handle scope escalation before building the client.
// buildAPIClient uses standard scopes; deletion may need elevated ones.
var clientSecretsPath string
if src.SourceType == "gmail" {
if !cfg.OAuth.HasAnyConfig() {
return errOAuthNotConfigured()
}
appName := sourceOAuthApp(src)
clientSecretsPath, err = cfg.OAuth.ClientSecretsFor(appName)
if err != nil {
return err
}

needsBatchDelete := !deleteTrash
if needsBatchDelete {
requiredScopes := oauth.ScopesDeletion
oauthMgr, err := oauth.NewManagerWithScopes(clientSecretsPath, cfg.TokensDir(), logger, requiredScopes)
if err != nil {
return wrapOAuthError(fmt.Errorf("create oauth manager: %w", err))
}
if !oauthMgr.HasScope(account, "https://mail.google.com/") && oauthMgr.HasScopeMetadata(account) {
if err := promptScopeEscalation(ctx, oauthMgr, account, needsBatchDelete, clientSecretsPath); err != nil {
if errors.Is(err, errUserCanceled) {
return nil
}
return err
}
}
}
// If no scope metadata at all (legacy token), fall through to reactive detection
}

interactive := isatty.IsTerminal(os.Stdin.Fd()) ||
isatty.IsCygwinTerminal(os.Stdin.Fd())
tokenSource, err := getTokenSourceWithReauth(ctx, oauthMgr, account, interactive)
// Build API client — reuses the same factory as sync.
getOAuthMgr := func(appName string) (*oauth.Manager, error) {
secretsPath := clientSecretsPath
if secretsPath == "" {
var err error
secretsPath, err = cfg.OAuth.ClientSecretsFor(appName)
if err != nil {
return nil, err
}
}
scopes := oauth.Scopes
if !deleteTrash {
scopes = oauth.ScopesDeletion
}
return oauth.NewManagerWithScopes(secretsPath, cfg.TokensDir(), logger, scopes)
}
client, err := buildAPIClient(ctx, src, getOAuthMgr)
if err != nil {
return err
}

// Create Gmail client
rateLimiter := gmail.NewRateLimiter(float64(cfg.Sync.RateLimitQPS))
client := gmail.NewClient(tokenSource,
gmail.WithLogger(logger),
gmail.WithRateLimiter(rateLimiter),
)
defer client.Close()

// Create executor
Expand Down Expand Up @@ -476,8 +469,12 @@ Examples:
return nil
}

// Check if this is a scope error - offer to re-authorize
if isInsufficientScopeError(execErr) {
// Check if this is a scope error - offer to re-authorize (Gmail only)
if src.SourceType == "gmail" && isInsufficientScopeError(execErr) {
oauthMgr, mgrErr := getOAuthMgr(sourceOAuthApp(src))
if mgrErr != nil {
return mgrErr
}
if err := promptScopeEscalation(ctx, oauthMgr, account, !useTrash, clientSecretsPath); err != nil {
if errors.Is(err, errUserCanceled) {
return nil
Expand Down Expand Up @@ -712,7 +709,7 @@ func init() {
deleteStagedCmd.Flags().BoolVarP(&deleteYes, "yes", "y", false, "Skip confirmation")
deleteStagedCmd.Flags().BoolVar(&deleteDryRun, "dry-run", false, "Show what would be deleted")
deleteStagedCmd.Flags().BoolVarP(&deleteList, "list", "l", false, "List staged batches without executing")
deleteStagedCmd.Flags().StringVar(&deleteAccount, "account", "", "Gmail account to use")
deleteStagedCmd.Flags().StringVar(&deleteAccount, "account", "", "Account to use (Gmail or IMAP)")

rootCmd.AddCommand(listDeletionsCmd)
rootCmd.AddCommand(showDeletionCmd)
Expand Down