{
  "id": "imap",
  "name": "IMAP email trigger",
  "description": "Watch IMAP mailboxes and dispatch authenticated incoming email to isolated agent sessions.",
  "activation": {
    "onStartup": true
  },
  "enabledByDefault": false,
  "configContracts": {
    "secretInputs": {
      "bundledDefaultEnabled": false,
      "paths": [
        {
          "path": "accounts.*.password",
          "expected": "string",
          "ownerKind": "route"
        }
      ]
    },
    "dangerousFlags": [
      {
        "path": "accounts.*.senderAuth.acceptTrustedAuthservId",
        "equals": true
      },
      {
        "path": "accounts.*.senderAuth.min",
        "equals": "unverified"
      },
      {
        "path": "accounts.*.senderAuth.min",
        "equals": "mutable"
      }
    ]
  },
  "uiHints": {
    "accounts.*.password": {
      "label": "IMAP password",
      "sensitive": true
    },
    "accounts.*.allowedSenders": {
      "label": "Allowed senders",
      "help": "Email addresses or @domain entries permitted to trigger the reader agent."
    },
    "accounts.*.agentId": {
      "label": "Restricted reader agent"
    },
    "accounts.*.senderAuth.min": {
      "label": "Minimum sender authentication",
      "advanced": true
    }
  },
  "configSchema": {
    "type": "object",
    "additionalProperties": false,
    "$defs": {
      "secretRef": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "source": {
            "type": "string",
            "enum": [
              "env",
              "file",
              "exec",
              "store"
            ]
          },
          "provider": {
            "type": "string"
          },
          "id": {
            "type": "string"
          }
        },
        "required": [
          "source",
          "provider",
          "id"
        ]
      },
      "secretInput": {
        "anyOf": [
          {
            "type": "string",
            "minLength": 1
          },
          {
            "$ref": "#/$defs/secretRef"
          }
        ]
      },
      "senderAuth": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "min": {
            "type": "string",
            "enum": [
              "verified",
              "asserted",
              "unverified",
              "mutable"
            ],
            "default": "verified"
          },
          "trustedAuthservIds": {
            "type": "array",
            "items": {
              "type": "string",
              "minLength": 1
            }
          },
          "acceptTrustedAuthservId": {
            "type": "boolean",
            "default": false
          }
        }
      },
      "addressToken": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "token": {
            "type": "string",
            "minLength": 1
          },
          "senders": {
            "type": "array",
            "items": {
              "type": "string",
              "minLength": 1
            },
            "minItems": 1
          }
        },
        "required": [
          "token",
          "senders"
        ]
      },
      "watch": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "mode": {
            "type": "string",
            "enum": [
              "auto",
              "idle",
              "interval"
            ],
            "default": "auto"
          },
          "pollSeconds": {
            "type": "integer",
            "minimum": 15,
            "default": 60
          }
        }
      },
      "account": {
        "type": "object",
        "additionalProperties": false,
        "properties": {
          "host": {
            "type": "string",
            "minLength": 1
          },
          "port": {
            "type": "integer",
            "minimum": 1,
            "maximum": 65535,
            "default": 993
          },
          "secure": {
            "type": "boolean",
            "default": true
          },
          "user": {
            "type": "string",
            "minLength": 1
          },
          "password": {
            "$ref": "#/$defs/secretInput"
          },
          "mailbox": {
            "type": "string",
            "minLength": 1,
            "default": "INBOX"
          },
          "watch": {
            "$ref": "#/$defs/watch"
          },
          "allowedSenders": {
            "type": "array",
            "items": {
              "type": "string",
              "minLength": 1
            }
          },
          "senderAuth": {
            "$ref": "#/$defs/senderAuth"
          },
          "addressTokens": {
            "type": "array",
            "items": {
              "$ref": "#/$defs/addressToken"
            }
          },
          "agentId": {
            "type": "string",
            "minLength": 1
          },
          "deliver": {
            "type": "boolean",
            "default": false
          },
          "includeBody": {
            "type": "boolean",
            "default": true
          },
          "maxBytes": {
            "type": "integer",
            "minimum": 256,
            "maximum": 1048576,
            "default": 20000
          },
          "model": {
            "type": "string",
            "minLength": 1
          },
          "thinking": {
            "type": "string",
            "enum": [
              "off",
              "minimal",
              "low",
              "medium",
              "high",
              "xhigh",
              "adaptive",
              "max",
              "ultra"
            ]
          },
          "timeoutSeconds": {
            "type": "integer",
            "minimum": 1
          }
        },
        "required": [
          "host",
          "user",
          "password",
          "agentId"
        ]
      }
    },
    "properties": {
      "accounts": {
        "type": "object",
        "propertyNames": {
          "type": "string",
          "pattern": "^[A-Za-z0-9][A-Za-z0-9_-]*$"
        },
        "additionalProperties": {
          "$ref": "#/$defs/account"
        }
      }
    }
  }
}