Back up attachments from chosen senders to S3

import base64, boto3
from datetime import date
from google.oauth2.credentials import Credentials
from googleapiclient.discovery import build
from clickruntime import on_trigger, credentials, http, state, notify, ai, report_fetched

QUERY = "has:attachment from:(bank@northwind-bank.com OR @acme-accounting.com) newer_than:2d"
REGION, BUCKET = "us-east-1", "northwind-files"

def aws(service):
    return boto3.client(service, region_name=REGION, aws_access_key_id=credentials.secret("AWS_ACCESS_KEY_ID"),
                        aws_secret_access_key=credentials.secret("AWS_SECRET_ACCESS_KEY"))

@on_trigger
def run(event):
    gmail, done = build("gmail", "v1", credentials=Credentials(credentials.connection("google", "work")), cache_discovery=False), set(state.get("done") or [])
    msgs = [m for m in gmail.users().messages().list(userId="me", q=QUERY).execute().get("messages", []) if m["id"] not in done]
    report_fetched(len(msgs))
    if not msgs:
        return {"summary": "Nothing new"}
    s3, lines = aws("s3"), []
    for m in msgs:
        full = gmail.users().messages().get(userId="me", id=m["id"]).execute()
        sender = next(h["value"] for h in full["payload"]["headers"] if h["name"] == "From").split("<")[-1].strip(">")
        for p in [p for p in full["payload"].get("parts", []) if p.get("filename")]:
            data = gmail.users().messages().attachments().get(userId="me", messageId=m["id"], id=p["body"]["attachmentId"]).execute()["data"]
            s3.put_object(Bucket=BUCKET, Key=f"attachments/{date.today()}/{sender}/{p['filename']}", Body=base64.urlsafe_b64decode(data))
            try:
                summary = ai.generate(f"One line: key details (type, amount, dates) of {p['filename']} from: {full['snippet']}", max_output_tokens=50).text
            except ai.AIError:
                summary = full["snippet"][:100]
            lines.append(f"{sender} · {p['filename']}: {summary}")
        done.add(m["id"])
    notify.email_me(f"{len(lines)} attachments backed up to S3", "\n".join(lines))
    state.set("done", list(done)[-1000:])
    return {"files": len(lines)}