ews-email

# EWS Email CLI

A CLI for enterprise Exchange (EWS) email. Use when the user asks about email, inbox, messages, or mail.

## Setup

### 1. 环境变量

在 `~/.openclaw/config.yaml` 中配置：

```yaml
env:
  EWS_SERVER: "your-exchange-server.com"
  EWS_EMAIL: "you@company.com"
```

### 2. 存储密码

#### macOS（自动使用 Keychain，无需额外配置）

```bash
pip3 install keyring exchangelib
python3 ~/.openclaw/skills/ews-email/scripts/ews-mail.py setup
```

#### Linux 云服务器（无桌面环境）

脚本会自动检测 Linux 无桌面环境，切换到 EncryptedKeyring 后端（AES 加密文件存储）。

```bash
# 安装依赖
pip3 install keyring exchangelib keyrings.alt

# 设置 master password 环境变量（用于加解密 EWS 密码）
# 在 ~/.openclaw/config.yaml 中添加：
#   env:
#     KEYRING_CRYPTFILE_PASSWORD: "你自己定义的一个强密码"
#
# 或在 systemd service / 启动脚本中 export：
export KEYRING_CRYPTFILE_PASSWORD="你自己定义的一个强密码"

# 存储 EWS 密码（会用 AES 加密写入本地文件）
python3 ~/.openclaw/skills/ews-email/scripts/ews-mail.py setup

# 验证
python3 ~/.openclaw/skills/ews-email/scripts/ews-mail.py folder-list
```

重启后只要 `KEYRING_CRYPTFILE_PASSWORD` 环境变量还在，密码就能正常解密读取，无需重新输入。

### 3. 验证安装

```bash
python3 ~/.openclaw/skills/ews-email/scripts/ews-mail.py folder-list
```

## SECURITY RULES

- **NEVER** attempt to read, display, or output the EWS password.
- **NEVER** run commands that could expose keyring contents.
- **NEVER** include passwords in any output, log, or message.
- The password is managed exclusively through the `setup` command.

## IMPORTANT: Reading Email Content

To read the FULL content/body of an email, you MUST follow these two steps:

1. First run `envelope-list` to get the message list (this gives you numeric IDs)
2. Then run `message-read <ID>` to get the FULL email body/content

**`envelope-list` only shows subject lines and metadata. It does NOT contain the email body.**
**You MUST run `message-read` to get the actual email content. NEVER guess or...