# Non-secret email-connect config for Binky company mailbox (IONOS).
# Credentials: env names only — values from OpenBao tenants/binky/company-email/imap
# via warden access / bao as the caller (WARDEN-WP-0028 / CCR-2026-0007).
#
# Usage (after Red provision):
#   export IMAP_USERNAME=... IMAP_PASSWORD=...   # via warden access --exec, not chat
#   PYTHONPATH=src python3 -m email_connect.cli scan-mailbox \
#     --config integrations/mailbox-binky-company.yml \
#     --out mailmeta/reports/

mailbox:
  id: binky-company-primary
  protocol: imap
  host: imap.ionos.de
  port: 993
  tls: true
  username_env: IMAP_USERNAME
  password_env: IMAP_PASSWORD
  folder: INBOX

source:
  fixture_dir: null

scan:
  mode: incremental
  max_messages_per_run: 500
  since: null
  from: null
  to: null
  include_seen: true
  mark_seen: false
  store_raw_headers: true
  store_raw_body: false
  store_raw_message_ref: false

expected_recipients:
  path: null
  csv_column: email

storage:
  path: mailmeta/.email-connect-state.sqlite

reports:
  output_dir: mailmeta/reports
  include_all_evidence: true
  include_unknown_messages: true
  timestamp_timezone: Europe/Berlin