Open GitHub issues from failed backup emails

import re
from google.oauth2.credentials import Credentials
from googleapiclient.discovery import build
from clickruntime import on_trigger, credentials, http, notify, state, ai, report_fetched

def gh(method, path, **kw):
    resp = http.request(method, f"https://api.github.com{path}", headers={
        "Authorization": f"Bearer {credentials.connection('github', 'work')}", "Accept": "application/vnd.github+json"}, **kw)
    return resp.raise_for_status() or (resp.json() if resp.content else None)

REPO, QUERY = "acme/infra", "subject:(backup OR cron) newer_than:1d"
FAIL = re.compile(r"error|failed|failure|exit code [1-9]", re.I)

@on_trigger
def run(event):
    gmail = build("gmail", "v1", credentials=Credentials(credentials.connection("google", "work")), cache_discovery=False).users()
    seen = set(state.get("seen") or [])
    new = [m["id"] for m in gmail.messages().list(userId="me", q=QUERY).execute().get("messages", []) if m["id"] not in seen]
    report_fetched(len(new))
    if not new:
        return {"issues": 0}
    opened = []
    for mid in new:
        msg = gmail.messages().get(userId="me", id=mid, format="metadata", metadataHeaders=["Subject"]).execute()
        subject, text = msg["payload"]["headers"][0]["value"], msg["snippet"]
        failed = bool(FAIL.search(text))
        try:
            failed = ai.generate(text, system="Does this job report describe a failure? Answer yes or no.", max_output_tokens=5).text.lower().startswith("yes")
        except (ai.AINotIncluded, ai.AILimitReached):
            pass
        if failed:
            issue = gh("POST", f"/repos/{REPO}/issues", json={"title": f"Job failed: {subject}"[:200], "labels": ["ops"], "body": f"From the job report email:\n\n> {text}"})
            opened.append(issue["html_url"])
        seen.add(mid)
    if opened:
        notify.email_me(f"{len(opened)} job failures filed", "\n".join(opened))
    state.set("seen", sorted(seen)[-500:])
    return {"issues": len(opened)}