@alisio/plugin-google-chat 0.1.0

package/dist/config.js

@@ -0,0 +1,179 @@
+import { homedir } from "node:os";
+import { join } from "node:path";
+import { GoogleChatError } from "./errors.js";
+export const ENV = {
+    webhookUrl: "GOOGLE_CHAT_WEBHOOK_URL",
+    clientId: "GOOGLE_CHAT_CLIENT_ID",
+    clientSecret: "GOOGLE_CHAT_CLIENT_SECRET",
+    scopes: "GOOGLE_CHAT_SCOPES",
+    tokenFile: "GOOGLE_CHAT_TOKEN_FILE",
+    authTimeoutMs: "GOOGLE_CHAT_AUTH_TIMEOUT_MS",
+    configHome: "ALISIO_CONFIG_HOME",
+    xdgConfigHome: "XDG_CONFIG_HOME",
+    home: "HOME",
+};
+/** Fixed official origins this plugin is ever allowed to transmit to. */
+export const CHAT_API_ORIGIN = "https://chat.googleapis.com";
+export const OAUTH_TOKEN_ORIGIN = "https://oauth2.googleapis.com";
+/** Browser authorization endpoint. It is printed for the user to open, never fetched by the plugin. */
+export const OAUTH_AUTHORIZE_URL = "https://accounts.google.com/o/oauth2/v2/auth";
+/** Scopes requested by default: read, manage, and delete messages, list spaces and members. */
+export const DEFAULT_SCOPES = [
+    "https://www.googleapis.com/auth/chat.messages",
+    "https://www.googleapis.com/auth/chat.spaces.readonly",
+    "https://www.googleapis.com/auth/chat.memberships.readonly",
+];
+const CHAT_SCOPE = /^https:\/\/www\.googleapis\.com\/auth\/chat\.[a-z.]+$/;
+const WEBHOOK_PATH = /^\/v1\/spaces\/[A-Za-z0-9_-]{1,200}\/messages$/;
+const SAFE_PARAM = /^[A-Za-z0-9_-]{1,1024}$/;
+const ALLOWED_WEBHOOK_PARAMS = new Set(["key", "token", "messageReplyOption"]);
+const DEFAULT_AUTH_TIMEOUT_MS = 300_000;
+const MIN_AUTH_TIMEOUT_MS = 10_000;
+const MAX_AUTH_TIMEOUT_MS = 900_000;
+/** How long before real expiry a token is treated as expired and refreshed. */
+export const TOKEN_SKEW_MS = 60_000;
+function fail(detail) {
+    throw new GoogleChatError("configuration missing or invalid", detail);
+}
+function readTrimmed(env, key) {
+    const raw = env[key];
+    if (typeof raw !== "string")
+        return undefined;
+    const value = raw.trim();
+    return value === "" ? undefined : value;
+}
+/**
+ * Validate an incoming webhook URL. Only an HTTPS URL on the official Chat API
+ * origin, on the exact `messages` collection path, with no credentials and no
+ * unexpected query parameters, is accepted.
+ */
+export function parseWebhookUrl(raw) {
+    let url;
+    try {
+        url = new URL(raw.trim());
+    }
+    catch {
+        fail("GOOGLE_CHAT_WEBHOOK_URL is not a valid absolute URL");
+    }
+    if (url.protocol !== "https:")
+        fail("GOOGLE_CHAT_WEBHOOK_URL must use https");
+    if (url.username !== "" || url.password !== "")
+        fail("GOOGLE_CHAT_WEBHOOK_URL must not embed credentials");
+    if (url.hash !== "")
+        fail("GOOGLE_CHAT_WEBHOOK_URL must not include a fragment");
+    if (url.origin !== CHAT_API_ORIGIN)
+        fail(`GOOGLE_CHAT_WEBHOOK_URL must point at ${CHAT_API_ORIGIN}`);
+    if (!WEBHOOK_PATH.test(url.pathname))
+        fail("GOOGLE_CHAT_WEBHOOK_URL must be a https://chat.googleapis.com/v1/spaces/{space}/messages URL");
+    if (!url.searchParams.has("key"))
+        fail("GOOGLE_CHAT_WEBHOOK_URL is missing its `key` query parameter");
+    const token = url.searchParams.get("token");
+    if (token === null || token === "")
+        fail("GOOGLE_CHAT_WEBHOOK_URL is missing its `token` query parameter");
+    for (const key of url.searchParams.keys())
+        if (!ALLOWED_WEBHOOK_PARAMS.has(key))
+            fail(`GOOGLE_CHAT_WEBHOOK_URL has an unexpected query parameter "${key}"`);
+    for (const value of url.searchParams.values())
+        if (!SAFE_PARAM.test(value))
+            fail("GOOGLE_CHAT_WEBHOOK_URL query values must be URL-safe tokens");
+    const spaceId = url.pathname.split("/")[3];
+    if (spaceId === undefined || !/^[A-Za-z0-9_-]{1,200}$/.test(spaceId))
+        fail("GOOGLE_CHAT_WEBHOOK_URL has an invalid space id");
+    const target = {
+        origin: CHAT_API_ORIGIN,
+        space: `spaces/${spaceId}`,
+        hasKey: true,
+        hasToken: true,
+    };
+    Object.defineProperty(target, "url", {
+        value: url.toString(),
+        enumerable: false,
+        writable: false,
+        configurable: false,
+    });
+    return Object.freeze(target);
+}
+/** Normalize a comma- or space-separated scope list; only Chat API scopes are accepted. */
+export function parseScopes(raw) {
+    if (raw === undefined)
+        return DEFAULT_SCOPES;
+    const scopes = raw
+        .split(/[\s,]+/)
+        .map((scope) => scope.trim())
+        .filter((scope) => scope !== "");
+    if (scopes.length === 0)
+        return DEFAULT_SCOPES;
+    for (const scope of scopes)
+        if (!CHAT_SCOPE.test(scope))
+            fail(`GOOGLE_CHAT_SCOPES must contain only Google Chat API scopes, got "${scope}"`);
+    return Object.freeze([...new Set(scopes)]);
+}
+/** Resolve the Alisio config home with the documented precedence. */
+export function resolveConfigHome(env = process.env) {
+    const home = env[ENV.home]?.trim() || homedir();
+    const xdg = env[ENV.xdgConfigHome]?.trim();
+    return (env[ENV.configHome]?.trim() || (xdg ? join(xdg, "alisio") : join(home, ".config", "alisio")));
+}
+/** The plugin-owned token file: `<configHome>/google-chat/token.json`. */
+export function resolveTokenFile(env = process.env, override) {
+    const explicit = override?.trim() || env[ENV.tokenFile]?.trim();
+    return explicit || join(resolveConfigHome(env), "google-chat", "token.json");
+}
+function parseAuthTimeout(env) {
+    const raw = readTrimmed(env, ENV.authTimeoutMs);
+    if (raw === undefined)
+        return DEFAULT_AUTH_TIMEOUT_MS;
+    if (!/^[0-9]{1,9}$/.test(raw))
+        fail("GOOGLE_CHAT_AUTH_TIMEOUT_MS must be an integer");
+    const value = Number.parseInt(raw, 10);
+    if (value < MIN_AUTH_TIMEOUT_MS || value > MAX_AUTH_TIMEOUT_MS)
+        fail(`GOOGLE_CHAT_AUTH_TIMEOUT_MS must be between ${MIN_AUTH_TIMEOUT_MS} and ${MAX_AUTH_TIMEOUT_MS}`);
+    return value;
+}
+/**
+ * Resolve the full configuration. A partially configured OAuth mode is an
+ * operator error and fails closed. With neither mode configured the plugin
+ * still loads so `google-chat:status` can explain what is missing, but every
+ * capability fails with an actionable message.
+ */
+export function loadConfig(env = process.env) {
+    const webhookRaw = readTrimmed(env, ENV.webhookUrl);
+    const clientId = readTrimmed(env, ENV.clientId);
+    const clientSecret = readTrimmed(env, ENV.clientSecret);
+    if ((clientId === undefined) !== (clientSecret === undefined))
+        fail(`${ENV.clientId} and ${ENV.clientSecret} must be set together to enable OAuth user mode`);
+    const webhook = webhookRaw === undefined ? undefined : parseWebhookUrl(webhookRaw);
+    let oauth;
+    if (clientId !== undefined && clientSecret !== undefined) {
+        const oauthConfig = {
+            clientId,
+            scopes: parseScopes(readTrimmed(env, ENV.scopes)),
+            tokenFile: resolveTokenFile(env),
+        };
+        Object.defineProperty(oauthConfig, "clientSecret", {
+            value: clientSecret,
+            enumerable: false,
+            writable: false,
+            configurable: false,
+        });
+        oauth = Object.freeze(oauthConfig);
+    }
+    const config = {
+        webhook,
+        oauth,
+        authTimeoutMs: parseAuthTimeout(env),
+        tokenSkewMs: TOKEN_SKEW_MS,
+    };
+    return Object.freeze(config);
+}
+/** A secret-free description of what is configured, for `google-chat:status`. */
+export function describeConfig(config) {
+    return {
+        webhookConfigured: config.webhook !== undefined,
+        webhookSpace: config.webhook?.space ?? null,
+        oauthClientConfigured: config.oauth !== undefined,
+        scopes: config.oauth?.scopes ?? [],
+        tokenFile: config.oauth?.tokenFile ?? null,
+    };
+}
+//# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAC;AAClC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAc9C,MAAM,CAAC,MAAM,GAAG,GAAG;IACjB,UAAU,EAAE,yBAAyB;IACrC,QAAQ,EAAE,uBAAuB;IACjC,YAAY,EAAE,2BAA2B;IACzC,MAAM,EAAE,oBAAoB;IAC5B,SAAS,EAAE,wBAAwB;IACnC,aAAa,EAAE,6BAA6B;IAC5C,UAAU,EAAE,oBAAoB;IAChC,aAAa,EAAE,iBAAiB;IAChC,IAAI,EAAE,MAAM;CACJ,CAAC;AAEX,yEAAyE;AACzE,MAAM,CAAC,MAAM,eAAe,GAAG,6BAA6B,CAAC;AAC7D,MAAM,CAAC,MAAM,kBAAkB,GAAG,+BAA+B,CAAC;AAClE,uGAAuG;AACvG,MAAM,CAAC,MAAM,mBAAmB,GAAG,8CAA8C,CAAC;AAElF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,cAAc,GAAG;IAC5B,+CAA+C;IAC/C,sDAAsD;IACtD,2DAA2D;CACnD,CAAC;AAEX,MAAM,UAAU,GAAG,uDAAuD,CAAC;AAC3E,MAAM,YAAY,GAAG,gDAAgD,CAAC;AACtE,MAAM,UAAU,GAAG,yBAAyB,CAAC;AAC7C,MAAM,sBAAsB,GAAG,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,OAAO,EAAE,oBAAoB,CAAC,CAAC,CAAC;AAC/E,MAAM,uBAAuB,GAAG,OAAO,CAAC;AACxC,MAAM,mBAAmB,GAAG,MAAM,CAAC;AACnC,MAAM,mBAAmB,GAAG,OAAO,CAAC;AAEpC,+EAA+E;AAC/E,MAAM,CAAC,MAAM,aAAa,GAAG,MAAM,CAAC;AAgCpC,SAAS,IAAI,CAAC,MAAc;IAC1B,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,MAAM,CAAC,CAAC;AACxE,CAAC;AAED,SAAS,WAAW,CAAC,GAAgB,EAAE,GAAW;IAChD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,IAAI,OAAO,GAAG,KAAK,QAAQ;QAAE,OAAO,SAAS,CAAC;IAC9C,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC;IACzB,OAAO,KAAK,KAAK,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,KAAK,CAAC;AAC1C,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,GAAW;IACzC,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5B,CAAC;IAAC,MAAM,CAAC;QACP,IAAI,CAAC,qDAAqD,CAAC,CAAC;IAC9D,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ;QAAE,IAAI,CAAC,wCAAwC,CAAC,CAAC;IAC9E,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE,IAAI,GAAG,CAAC,QAAQ,KAAK,EAAE;QAC5C,IAAI,CAAC,oDAAoD,CAAC,CAAC;IAC7D,IAAI,GAAG,CAAC,IAAI,KAAK,EAAE;QAAE,IAAI,CAAC,qDAAqD,CAAC,CAAC;IACjF,IAAI,GAAG,CAAC,MAAM,KAAK,eAAe;QAChC,IAAI,CAAC,yCAAyC,eAAe,EAAE,CAAC,CAAC;IACnE,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC;QAClC,IAAI,CACF,8FAA8F,CAC/F,CAAC;IACJ,IAAI,CAAC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC;QAC9B,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACvE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IAC5C,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;QAChC,IAAI,CAAC,gEAAgE,CAAC,CAAC;IACzE,KAAK,MAAM,GAAG,IAAI,GAAG,CAAC,YAAY,CAAC,IAAI,EAAE;QACvC,IAAI,CAAC,sBAAsB,CAAC,GAAG,CAAC,GAAG,CAAC;YAClC,IAAI,CAAC,8DAA8D,GAAG,GAAG,CAAC,CAAC;IAC/E,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,YAAY,CAAC,MAAM,EAAE;QAC3C,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,CAAC,8DAA8D,CAAC,CAAC;IACzE,MAAM,OAAO,GAAG,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC;IAC3C,IAAI,OAAO,KAAK,SAAS,IAAI,CAAC,wBAAwB,CAAC,IAAI,CAAC,OAAO,CAAC;QAClE,IAAI,CAAC,iDAAiD,CAAC,CAAC;IAE1D,MAAM,MAAM,GAAG;QACb,MAAM,EAAE,eAAe;QACvB,KAAK,EAAE,UAAU,OAAO,EAAE;QAC1B,MAAM,EAAE,IAAI;QACZ,QAAQ,EAAE,IAAI;KACa,CAAC;IAC9B,MAAM,CAAC,cAAc,CAAC,MAAM,EAAE,KAAK,EAAE;QACnC,KAAK,EAAE,GAAG,CAAC,QAAQ,EAAE;QACrB,UAAU,EAAE,KAAK;QACjB,QAAQ,EAAE,KAAK;QACf,YAAY,EAAE,KAAK;KACpB,CAAC,CAAC;IACH,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,2FAA2F;AAC3F,MAAM,UAAU,WAAW,CAAC,GAAuB;IACjD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,cAAc,CAAC;IAC7C,MAAM,MAAM,GAAG,GAAG;SACf,KAAK,CAAC,QAAQ,CAAC;SACf,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC;SAC5B,MAAM,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,EAAE,CAAC,CAAC;IACnC,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,cAAc,CAAC;IAC/C,KAAK,MAAM,KAAK,IAAI,MAAM;QACxB,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,CAAC,qEAAqE,KAAK,GAAG,CAAC,CAAC;IACxF,OAAO,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;AAC7C,CAAC;AAED,qEAAqE;AACrE,MAAM,UAAU,iBAAiB,CAAC,GAAG,GAAgB,OAAO,CAAC,GAAG;IAC9D,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,IAAI,OAAO,EAAE,CAAC;IAChD,MAAM,GAAG,GAAG,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,EAAE,IAAI,EAAE,CAAC;IAC3C,OAAO,CACL,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,QAAQ,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,EAAE,SAAS,EAAE,QAAQ,CAAC,CAAC,CAC7F,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,gBAAgB,CAC9B,GAAG,GAAgB,OAAO,CAAC,GAAG,EAC9B,QAA6B;IAE7B,MAAM,QAAQ,GAAG,QAAQ,EAAE,IAAI,EAAE,IAAI,GAAG,CAAC,GAAG,CAAC,SAAS,CAAC,EAAE,IAAI,EAAE,CAAC;IAChE,OAAO,QAAQ,IAAI,IAAI,CAAC,iBAAiB,CAAC,GAAG,CAAC,EAAE,aAAa,EAAE,YAAY,CAAC,CAAC;AAC/E,CAAC;AAED,SAAS,gBAAgB,CAAC,GAAgB;IACxC,MAAM,GAAG,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;IAChD,IAAI,GAAG,KAAK,SAAS;QAAE,OAAO,uBAAuB,CAAC;IACtD,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,GAAG,CAAC;QAAE,IAAI,CAAC,gDAAgD,CAAC,CAAC;IACtF,MAAM,KAAK,GAAG,MAAM,CAAC,QAAQ,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;IACvC,IAAI,KAAK,GAAG,mBAAmB,IAAI,KAAK,GAAG,mBAAmB;QAC5D,IAAI,CACF,+CAA+C,mBAAmB,QAAQ,mBAAmB,EAAE,CAChG,CAAC;IACJ,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,UAAU,CAAC,GAAG,GAAgB,OAAO,CAAC,GAAG;IACvD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;IACpD,MAAM,QAAQ,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,QAAQ,CAAC,CAAC;IAChD,MAAM,YAAY,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,YAAY,CAAC,CAAC;IAExD,IAAI,CAAC,QAAQ,KAAK,SAAS,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC;QAC3D,IAAI,CAAC,GAAG,GAAG,CAAC,QAAQ,QAAQ,GAAG,CAAC,YAAY,iDAAiD,CAAC,CAAC;IAEjG,MAAM,OAAO,GAAG,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,UAAU,CAAC,CAAC;IAEnF,IAAI,KAA8B,CAAC;IACnC,IAAI,QAAQ,KAAK,SAAS,IAAI,YAAY,KAAK,SAAS,EAAE,CAAC;QACzD,MAAM,WAAW,GAAG;YAClB,QAAQ;YACR,MAAM,EAAE,WAAW,CAAC,WAAW,CAAC,GAAG,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC;YACjD,SAAS,EAAE,gBAAgB,CAAC,GAAG,CAAC;SACP,CAAC;QAC5B,MAAM,CAAC,cAAc,CAAC,WAAW,EAAE,cAAc,EAAE;YACjD,KAAK,EAAE,YAAY;YACnB,UAAU,EAAE,KAAK;YACjB,QAAQ,EAAE,KAAK;YACf,YAAY,EAAE,KAAK;SACpB,CAAC,CAAC;QACH,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC;IACrC,CAAC;IAED,MAAM,MAAM,GAAqB;QAC/B,OAAO;QACP,KAAK;QACL,aAAa,EAAE,gBAAgB,CAAC,GAAG,CAAC;QACpC,WAAW,EAAE,aAAa;KAC3B,CAAC;IACF,OAAO,MAAM,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAC/B,CAAC;AAED,iFAAiF;AACjF,MAAM,UAAU,cAAc,CAAC,MAAwB;IAOrD,OAAO;QACL,iBAAiB,EAAE,MAAM,CAAC,OAAO,KAAK,SAAS;QAC/C,YAAY,EAAE,MAAM,CAAC,OAAO,EAAE,KAAK,IAAI,IAAI;QAC3C,qBAAqB,EAAE,MAAM,CAAC,KAAK,KAAK,SAAS;QACjD,MAAM,EAAE,MAAM,CAAC,KAAK,EAAE,MAAM,IAAI,EAAE;QAClC,SAAS,EAAE,MAAM,CAAC,KAAK,EAAE,SAAS,IAAI,IAAI;KAC3C,CAAC;AACJ,CAAC"}

package/dist/errors.d.ts

@@ -0,0 +1,22 @@
+/**
+ * Closed failure vocabulary for every network and validation outcome. Callers only
+ * ever see these strings (optionally with a bounded, secret-free suffix), never a
+ * URL, header, request body, access token, refresh token, authorization code,
+ * client secret, or raw upstream payload.
+ */
+export declare const FAILURE_CODES: readonly ["invalid input", "not authenticated", "not permitted", "not found", "rate limited", "temporarily unavailable", "invalid response", "response exceeded limit", "configuration missing or invalid"];
+export type FailureCode = (typeof FAILURE_CODES)[number];
+/** A classified failure whose message is safe to show to a user. */
+export declare class GoogleChatError extends Error {
+    readonly code: FailureCode;
+    constructor(code: FailureCode, detail?: string);
+}
+/**
+ * Reduce any thrown value to a stable, secret-free message. Unknown throwables
+ * and aborts collapse to `temporarily unavailable` because their own text may
+ * embed request details.
+ */
+export declare function safeMessage(error: unknown): string;
+/** True when the classified code is safe to retry after a delay. */
+export declare function isRetryableCode(code: FailureCode): boolean;
+//# sourceMappingURL=errors.d.ts.map

package/dist/errors.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.d.ts","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,eAAO,MAAM,aAAa,YACxB,eAAe,EACf,mBAAmB,EACnB,eAAe,EACf,WAAW,EACX,cAAc,EACd,yBAAyB,EACzB,kBAAkB,EAClB,yBAAyB,EACzB,kCAAkC,CAC1B,CAAC;AAEX,MAAM,MAAM,WAAW,GAAG,CAAC,OAAO,aAAa,CAAC,CAAC,MAAM,CAAC,CAAC;AAEzD,oEAAoE;AACpE,qBAAa,eAAgB,SAAQ,KAAK;IACxC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAE3B,YAAY,IAAI,EAAE,WAAW,EAAE,MAAM,CAAC,EAAE,MAAM,EAI7C;CACF;AAID;;;;GAIG;AACH,wBAAgB,WAAW,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAKlD;AAED,oEAAoE;AACpE,wBAAgB,eAAe,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAE1D"}

package/dist/errors.js

@@ -0,0 +1,44 @@
+/**
+ * Closed failure vocabulary for every network and validation outcome. Callers only
+ * ever see these strings (optionally with a bounded, secret-free suffix), never a
+ * URL, header, request body, access token, refresh token, authorization code,
+ * client secret, or raw upstream payload.
+ */
+export const FAILURE_CODES = [
+    "invalid input",
+    "not authenticated",
+    "not permitted",
+    "not found",
+    "rate limited",
+    "temporarily unavailable",
+    "invalid response",
+    "response exceeded limit",
+    "configuration missing or invalid",
+];
+/** A classified failure whose message is safe to show to a user. */
+export class GoogleChatError extends Error {
+    code;
+    constructor(code, detail) {
+        super(detail ? `${code}: ${detail}` : code);
+        this.name = "GoogleChatError";
+        this.code = code;
+    }
+}
+const RETRYABLE = /^(rate limited|temporarily unavailable)$/;
+/**
+ * Reduce any thrown value to a stable, secret-free message. Unknown throwables
+ * and aborts collapse to `temporarily unavailable` because their own text may
+ * embed request details.
+ */
+export function safeMessage(error) {
+    if (error instanceof GoogleChatError)
+        return error.message;
+    if (error instanceof Error && (error.name === "AbortError" || error.name === "TimeoutError"))
+        return "temporarily unavailable";
+    return "temporarily unavailable";
+}
+/** True when the classified code is safe to retry after a delay. */
+export function isRetryableCode(code) {
+    return RETRYABLE.test(code);
+}
+//# sourceMappingURL=errors.js.map

package/dist/errors.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"errors.js","sourceRoot":"","sources":["../src/errors.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,eAAe;IACf,mBAAmB;IACnB,eAAe;IACf,WAAW;IACX,cAAc;IACd,yBAAyB;IACzB,kBAAkB;IAClB,yBAAyB;IACzB,kCAAkC;CAC1B,CAAC;AAIX,oEAAoE;AACpE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAC/B,IAAI,CAAc;IAE3B,YAAY,IAAiB,EAAE,MAAe;QAC5C,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,GAAG,IAAI,KAAK,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QAC5C,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;QAC9B,IAAI,CAAC,IAAI,GAAG,IAAI,CAAC;IACnB,CAAC;CACF;AAED,MAAM,SAAS,GAAG,0CAA0C,CAAC;AAE7D;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAAc;IACxC,IAAI,KAAK,YAAY,eAAe;QAAE,OAAO,KAAK,CAAC,OAAO,CAAC;IAC3D,IAAI,KAAK,YAAY,KAAK,IAAI,CAAC,KAAK,CAAC,IAAI,KAAK,YAAY,IAAI,KAAK,CAAC,IAAI,KAAK,cAAc,CAAC;QAC1F,OAAO,yBAAyB,CAAC;IACnC,OAAO,yBAAyB,CAAC;AACnC,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,eAAe,CAAC,IAAiB;IAC/C,OAAO,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC9B,CAAC"}

package/dist/http.d.ts

@@ -0,0 +1,66 @@
+import { type GoogleChatConfig } from "./config.js";
+import { type Clock, type Sleep } from "./time.js";
+import { type TokenStore } from "./token.js";
+import { type Fetcher } from "./transport.js";
+export declare const MAX_RETRIES = 2;
+export declare const BASE_BACKOFF_MS = 500;
+export declare const MAX_BACKOFF_MS = 8000;
+export type QueryValue = string | number | boolean | undefined | null;
+/** Build an encoded query string from primitive values only. */
+export declare function buildQuery(params: Record<string, QueryValue>): string;
+export interface Capabilities {
+    readonly mode: "oauth" | "webhook" | "none";
+    readonly configured: boolean;
+    readonly canRead: boolean;
+    readonly canSend: boolean;
+    readonly canEdit: boolean;
+    readonly canDelete: boolean;
+}
+export interface ChatRequest {
+    method: "GET" | "POST" | "PATCH" | "DELETE";
+    path: string;
+    query?: Record<string, QueryValue>;
+    body?: unknown;
+    signal: AbortSignal;
+    /** True only for idempotent reads, which may be retried on 429/5xx. */
+    idempotent?: boolean;
+}
+export interface SendMessageRequest {
+    space: string | undefined;
+    text: string;
+    threadKey: string | undefined;
+    replyOption: string | undefined;
+    messageId: string | undefined;
+    signal: AbortSignal;
+}
+export interface SendMessageResult {
+    message: unknown;
+    via: "oauth" | "webhook";
+}
+/**
+ * A Google Chat client with two independent, fail-closed authentication modes.
+ * Every request reaches one of two fixed official origins, follows no redirect,
+ * and is bounded in time and size.
+ */
+export declare class GoogleChatClient {
+    readonly config: GoogleChatConfig;
+    readonly fetcher: Fetcher;
+    readonly clock: Clock;
+    readonly sleep: Sleep;
+    readonly tokenStore: TokenStore;
+    constructor(config: GoogleChatConfig, fetcher: Fetcher | undefined, clock: Clock | undefined, sleep: Sleep | undefined, tokenStore: TokenStore);
+    capabilities(): Capabilities;
+    hasUserToken(): boolean;
+    /** Prefer OAuth user identity when authenticated; otherwise use the webhook. */
+    resolveSendMode(): "oauth" | "webhook" | "none";
+    private requireUser;
+    /** Authenticated Chat API request in OAuth user mode. */
+    request(spec: ChatRequest): Promise<unknown>;
+    /** Send a message through OAuth user mode or the configured webhook. */
+    send(spec: SendMessageRequest): Promise<SendMessageResult>;
+    private sendViaWebhook;
+    private accessToken;
+    private backoffMs;
+    private handle;
+}
+//# sourceMappingURL=http.d.ts.map

package/dist/http.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.d.ts","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAwB,KAAK,gBAAgB,EAAoB,MAAM,aAAa,CAAC;AAE5F,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,KAAK,EAA4B,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAoC,KAAK,UAAU,EAAE,MAAM,YAAY,CAAC;AAC/E,OAAO,EACL,KAAK,OAAO,EAKb,MAAM,gBAAgB,CAAC;AAExB,eAAO,MAAM,WAAW,IAAI,CAAC;AAC7B,eAAO,MAAM,eAAe,MAAM,CAAC;AACnC,eAAO,MAAM,cAAc,OAAQ,CAAC;AAEpC,MAAM,MAAM,UAAU,GAAG,MAAM,GAAG,MAAM,GAAG,OAAO,GAAG,SAAS,GAAG,IAAI,CAAC;AAEtE,gEAAgE;AAChE,wBAAgB,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,GAAG,MAAM,CAQrE;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,GAAG,MAAM,CAAC;IAC5C,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC;IAC7B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AAED,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE,KAAK,GAAG,MAAM,GAAG,OAAO,GAAG,QAAQ,CAAC;IAC5C,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,UAAU,CAAC,CAAC;IACnC,IAAI,CAAC,EAAE,OAAO,CAAC;IACf,MAAM,EAAE,WAAW,CAAC;IACpB,uEAAuE;IACvE,UAAU,CAAC,EAAE,OAAO,CAAC;CACtB;AAED,MAAM,WAAW,kBAAkB;IACjC,KAAK,EAAE,MAAM,GAAG,SAAS,CAAC;IAC1B,IAAI,EAAE,MAAM,CAAC;IACb,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,WAAW,EAAE,MAAM,GAAG,SAAS,CAAC;IAChC,SAAS,EAAE,MAAM,GAAG,SAAS,CAAC;IAC9B,MAAM,EAAE,WAAW,CAAC;CACrB;AAED,MAAM,WAAW,iBAAiB;IAChC,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,EAAE,OAAO,GAAG,SAAS,CAAC;CAC1B;AAED;;;;GAIG;AACH,qBAAa,gBAAgB;IAC3B,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,KAAK,EAAE,KAAK,CAAC;IACtB,QAAQ,CAAC,UAAU,EAAE,UAAU,CAAC;IAEhC,YACE,MAAM,EAAE,gBAAgB,EACxB,OAAO,EAAE,OAAO,YAAQ,EACxB,KAAK,EAAE,KAAK,YAAc,EAC1B,KAAK,EAAE,KAAK,YAAc,EAC1B,UAAU,EAAE,UAAU,EAOvB;IAED,YAAY,IAAI,YAAY,CAW3B;IAED,YAAY,IAAI,OAAO,CAEtB;IAED,gFAAgF;IAChF,eAAe,IAAI,OAAO,GAAG,SAAS,GAAG,MAAM,CAI9C;IAED,OAAO,CAAC,WAAW;IAYnB,yDAAyD;IACnD,OAAO,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,OAAO,CAAC,CAsCjD;IAED,wEAAwE;IAClE,IAAI,CAAC,IAAI,EAAE,kBAAkB,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAiC/D;YAEa,cAAc;YAoCd,WAAW;IAYzB,OAAO,CAAC,SAAS;IAOjB,OAAO,CAAC,MAAM;CAyBf"}

package/dist/http.js

@@ -0,0 +1,208 @@
+import { CHAT_API_ORIGIN, ENV } from "./config.js";
+import { GoogleChatError } from "./errors.js";
+import { systemClock, systemSleep } from "./time.js";
+import { obtainAccessToken } from "./token.js";
+import { MAX_RETRY_AFTER_SECONDS, rawRequest, retryAfterSeconds, } from "./transport.js";
+export const MAX_RETRIES = 2;
+export const BASE_BACKOFF_MS = 500;
+export const MAX_BACKOFF_MS = 8_000;
+/** Build an encoded query string from primitive values only. */
+export function buildQuery(params) {
+    const parts = [];
+    for (const [key, value] of Object.entries(params)) {
+        if (value === undefined || value === null || value === "")
+            continue;
+        if (!/^[a-z0-9-]+$/i.test(key))
+            throw new GoogleChatError("invalid input", "invalid query key");
+        parts.push(`${encodeURIComponent(key)}=${encodeURIComponent(String(value))}`);
+    }
+    return parts.length > 0 ? `?${parts.join("&")}` : "";
+}
+/**
+ * A Google Chat client with two independent, fail-closed authentication modes.
+ * Every request reaches one of two fixed official origins, follows no redirect,
+ * and is bounded in time and size.
+ */
+export class GoogleChatClient {
+    config;
+    fetcher;
+    clock;
+    sleep;
+    tokenStore;
+    constructor(config, fetcher = fetch, clock = systemClock, sleep = systemSleep, tokenStore) {
+        this.config = config;
+        this.fetcher = fetcher;
+        this.clock = clock;
+        this.sleep = sleep;
+        this.tokenStore = tokenStore;
+    }
+    capabilities() {
+        const oauth = this.config.oauth !== undefined;
+        const webhook = this.config.webhook !== undefined;
+        return {
+            mode: oauth ? "oauth" : webhook ? "webhook" : "none",
+            configured: oauth || webhook,
+            canRead: oauth,
+            canSend: oauth || webhook,
+            canEdit: oauth,
+            canDelete: oauth,
+        };
+    }
+    hasUserToken() {
+        return this.tokenStore.read() !== null;
+    }
+    /** Prefer OAuth user identity when authenticated; otherwise use the webhook. */
+    resolveSendMode() {
+        if (this.config.oauth !== undefined && this.hasUserToken())
+            return "oauth";
+        if (this.config.webhook !== undefined)
+            return "webhook";
+        return "none";
+    }
+    requireUser(capability) {
+        if (this.config.oauth !== undefined)
+            return this.config.oauth;
+        const reason = this.config.webhook !== undefined
+            ? "an incoming webhook can only send messages; reading, searching, editing, and deleting require OAuth user mode"
+            : `set ${ENV.clientId} and ${ENV.clientSecret} (and run google-chat-auth) to enable it`;
+        throw new GoogleChatError("configuration missing or invalid", `${capability} requires OAuth user mode: ${reason}`);
+    }
+    /** Authenticated Chat API request in OAuth user mode. */
+    async request(spec) {
+        const oauth = this.requireUser("this operation");
+        let token = await this.accessToken(oauth, spec.signal, false);
+        let refreshed = false;
+        let attempt = 0;
+        for (;;) {
+            const url = `${CHAT_API_ORIGIN}${spec.path}${buildQuery(spec.query ?? {})}`;
+            const headers = {
+                accept: "application/json",
+                authorization: `${token.tokenType} ${token.accessToken}`,
+            };
+            if (spec.body !== undefined)
+                headers["content-type"] = "application/json";
+            const response = await rawRequest({
+                fetcher: this.fetcher,
+                method: spec.method,
+                url,
+                headers,
+                ...(spec.body === undefined ? {} : { body: JSON.stringify(spec.body) }),
+                signal: spec.signal,
+                origin: CHAT_API_ORIGIN,
+            });
+            if (response.status === 401 && !refreshed) {
+                refreshed = true;
+                token = await this.accessToken(oauth, spec.signal, true);
+                continue;
+            }
+            if ((response.status === 429 || response.status >= 500) &&
+                spec.idempotent === true &&
+                attempt < MAX_RETRIES) {
+                const delay = this.backoffMs(response.headers, attempt);
+                await this.sleep(delay, spec.signal);
+                attempt += 1;
+                continue;
+            }
+            return this.handle(response);
+        }
+    }
+    /** Send a message through OAuth user mode or the configured webhook. */
+    async send(spec) {
+        const mode = this.resolveSendMode();
+        if (mode === "none") {
+            if (this.config.oauth !== undefined)
+                throw new GoogleChatError("not authenticated", "no stored Google authorization; run google-chat-auth to authorize a user account");
+            throw new GoogleChatError("configuration missing or invalid", `set ${ENV.webhookUrl}, or ${ENV.clientId} and ${ENV.clientSecret}, to send messages`);
+        }
+        const body = { text: spec.text };
+        if (spec.threadKey !== undefined)
+            body.thread = { threadKey: spec.threadKey };
+        if (mode === "oauth") {
+            const space = spec.space;
+            if (space === undefined)
+                throw new GoogleChatError("invalid input", '"space" is required in OAuth user mode');
+            const query = {};
+            if (spec.replyOption !== undefined)
+                query.messageReplyOption = spec.replyOption;
+            if (spec.messageId !== undefined)
+                query.messageId = spec.messageId;
+            const message = await this.request({
+                method: "POST",
+                path: `/v1/${space}/messages`,
+                query,
+                body,
+                signal: spec.signal,
+            });
+            return { message, via: "oauth" };
+        }
+        const message = await this.sendViaWebhook(spec, body);
+        return { message, via: "webhook" };
+    }
+    async sendViaWebhook(spec, body) {
+        const webhook = this.config.webhook;
+        if (webhook === undefined)
+            throw new GoogleChatError("configuration missing or invalid", "no webhook is configured");
+        if (spec.space !== undefined && spec.space !== webhook.space)
+            throw new GoogleChatError("invalid input", `the configured webhook only posts to ${webhook.space}`);
+        if (spec.messageId !== undefined)
+            throw new GoogleChatError("invalid input", "client-assigned message ids require OAuth user mode");
+        const url = new URL(webhook.url);
+        if (spec.replyOption !== undefined)
+            url.searchParams.set("messageReplyOption", spec.replyOption);
+        const headers = {
+            accept: "application/json",
+            "content-type": "application/json; charset=utf-8",
+        };
+        const response = await rawRequest({
+            fetcher: this.fetcher,
+            method: "POST",
+            url: url.toString(),
+            headers,
+            body: JSON.stringify(body),
+            signal: spec.signal,
+            origin: CHAT_API_ORIGIN,
+        });
+        return this.handle(response);
+    }
+    async accessToken(oauth, signal, force) {
+        return obtainAccessToken(this.tokenStore, { oauth, fetcher: this.fetcher, clock: this.clock, signal, skewMs: this.config.tokenSkewMs }, { force });
+    }
+    backoffMs(headers, attempt) {
+        const retryAfter = retryAfterSeconds(headers, this.clock.now(), MAX_RETRY_AFTER_SECONDS);
+        const exponential = Math.min(BASE_BACKOFF_MS * 2 ** attempt, MAX_BACKOFF_MS);
+        if (retryAfter !== undefined)
+            return Math.min(retryAfter * 1000, MAX_BACKOFF_MS);
+        return exponential;
+    }
+    handle(response) {
+        const status = response.status;
+        if (status >= 200 && status < 300) {
+            if (status === 204 || status === 205)
+                return {};
+            if (response.text.trim() === "")
+                return {};
+            try {
+                return JSON.parse(response.text);
+            }
+            catch {
+                throw new GoogleChatError("invalid response");
+            }
+        }
+        const retry = retryAfterSeconds(response.headers, this.clock.now(), MAX_RETRY_AFTER_SECONDS);
+        const detail = retry === undefined ? undefined : `retry after ${retry} seconds`;
+        if (status === 401)
+            throw new GoogleChatError("not authenticated");
+        if (status === 403)
+            throw new GoogleChatError("not permitted", "Google Chat returns 403 for inaccessible resources before confirming whether they exist");
+        if (status === 404)
+            throw new GoogleChatError("not found");
+        if (status === 400)
+            throw new GoogleChatError("invalid input");
+        if (status === 429)
+            throw new GoogleChatError("rate limited", detail);
+        if (status >= 500)
+            throw new GoogleChatError("temporarily unavailable", detail);
+        throw new GoogleChatError("invalid response");
+    }
+}
+//# sourceMappingURL=http.js.map

package/dist/http.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"http.js","sourceRoot":"","sources":["../src/http.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,eAAe,EAAE,GAAG,EAA2C,MAAM,aAAa,CAAC;AAC5F,OAAO,EAAE,eAAe,EAAE,MAAM,aAAa,CAAC;AAC9C,OAAO,EAA0B,WAAW,EAAE,WAAW,EAAE,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,iBAAiB,EAAkC,MAAM,YAAY,CAAC;AAC/E,OAAO,EAEL,uBAAuB,EAEvB,UAAU,EACV,iBAAiB,GAClB,MAAM,gBAAgB,CAAC;AAExB,MAAM,CAAC,MAAM,WAAW,GAAG,CAAC,CAAC;AAC7B,MAAM,CAAC,MAAM,eAAe,GAAG,GAAG,CAAC;AACnC,MAAM,CAAC,MAAM,cAAc,GAAG,KAAK,CAAC;AAIpC,gEAAgE;AAChE,MAAM,UAAU,UAAU,CAAC,MAAkC;IAC3D,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;QAClD,IAAI,KAAK,KAAK,SAAS,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,KAAK,EAAE;YAAE,SAAS;QACpE,IAAI,CAAC,eAAe,CAAC,IAAI,CAAC,GAAG,CAAC;YAAE,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,mBAAmB,CAAC,CAAC;QAChG,KAAK,CAAC,IAAI,CAAC,GAAG,kBAAkB,CAAC,GAAG,CAAC,IAAI,kBAAkB,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAChF,CAAC;IACD,OAAO,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;AACvD,CAAC;AAmCD;;;;GAIG;AACH,MAAM,OAAO,gBAAgB;IAClB,MAAM,CAAmB;IACzB,OAAO,CAAU;IACjB,KAAK,CAAQ;IACb,KAAK,CAAQ;IACb,UAAU,CAAa;IAEhC,YACE,MAAwB,EACxB,OAAO,GAAY,KAAK,EACxB,KAAK,GAAU,WAAW,EAC1B,KAAK,GAAU,WAAW,EAC1B,UAAsB;QAEtB,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,IAAI,CAAC,OAAO,GAAG,OAAO,CAAC;QACvB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,KAAK,GAAG,KAAK,CAAC;QACnB,IAAI,CAAC,UAAU,GAAG,UAAU,CAAC;IAC/B,CAAC;IAED,YAAY;QACV,MAAM,KAAK,GAAG,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,CAAC;QAC9C,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS,CAAC;QAClD,OAAO;YACL,IAAI,EAAE,KAAK,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,MAAM;YACpD,UAAU,EAAE,KAAK,IAAI,OAAO;YAC5B,OAAO,EAAE,KAAK;YACd,OAAO,EAAE,KAAK,IAAI,OAAO;YACzB,OAAO,EAAE,KAAK;YACd,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,YAAY;QACV,OAAO,IAAI,CAAC,UAAU,CAAC,IAAI,EAAE,KAAK,IAAI,CAAC;IACzC,CAAC;IAED,gFAAgF;IAChF,eAAe;QACb,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,YAAY,EAAE;YAAE,OAAO,OAAO,CAAC;QAC3E,IAAI,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;YAAE,OAAO,SAAS,CAAC;QACxD,OAAO,MAAM,CAAC;IAChB,CAAC;IAEO,WAAW,CAAC,UAAkB;QACpC,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,MAAM,CAAC,KAAK,CAAC;QAC9D,MAAM,MAAM,GACV,IAAI,CAAC,MAAM,CAAC,OAAO,KAAK,SAAS;YAC/B,CAAC,CAAC,+GAA+G;YACjH,CAAC,CAAC,OAAO,GAAG,CAAC,QAAQ,QAAQ,GAAG,CAAC,YAAY,0CAA0C,CAAC;QAC5F,MAAM,IAAI,eAAe,CACvB,kCAAkC,EAClC,GAAG,UAAU,8BAA8B,MAAM,EAAE,CACpD,CAAC;IACJ,CAAC;IAED,yDAAyD;IACzD,KAAK,CAAC,OAAO,CAAC,IAAiB;QAC7B,MAAM,KAAK,GAAG,IAAI,CAAC,WAAW,CAAC,gBAAgB,CAAC,CAAC;QACjD,IAAI,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;QAC9D,IAAI,SAAS,GAAG,KAAK,CAAC;QACtB,IAAI,OAAO,GAAG,CAAC,CAAC;QAChB,SAAS,CAAC;YACR,MAAM,GAAG,GAAG,GAAG,eAAe,GAAG,IAAI,CAAC,IAAI,GAAG,UAAU,CAAC,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,CAAC;YAC5E,MAAM,OAAO,GAA2B;gBACtC,MAAM,EAAE,kBAAkB;gBAC1B,aAAa,EAAE,GAAG,KAAK,CAAC,SAAS,IAAI,KAAK,CAAC,WAAW,EAAE;aACzD,CAAC;YACF,IAAI,IAAI,CAAC,IAAI,KAAK,SAAS;gBAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;YAC1E,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;gBAChC,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,GAAG;gBACH,OAAO;gBACP,GAAG,CAAC,IAAI,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;gBACvE,MAAM,EAAE,IAAI,CAAC,MAAM;gBACnB,MAAM,EAAE,eAAe;aACxB,CAAC,CAAC;YACH,IAAI,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,EAAE,CAAC;gBAC1C,SAAS,GAAG,IAAI,CAAC;gBACjB,KAAK,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;gBACzD,SAAS;YACX,CAAC;YACD,IACE,CAAC,QAAQ,CAAC,MAAM,KAAK,GAAG,IAAI,QAAQ,CAAC,MAAM,IAAI,GAAG,CAAC;gBACnD,IAAI,CAAC,UAAU,KAAK,IAAI;gBACxB,OAAO,GAAG,WAAW,EACrB,CAAC;gBACD,MAAM,KAAK,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBACxD,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,IAAI,CAAC,MAAM,CAAC,CAAC;gBACrC,OAAO,IAAI,CAAC,CAAC;gBACb,SAAS;YACX,CAAC;YACD,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC/B,CAAC;IACH,CAAC;IAED,wEAAwE;IACxE,KAAK,CAAC,IAAI,CAAC,IAAwB;QACjC,MAAM,IAAI,GAAG,IAAI,CAAC,eAAe,EAAE,CAAC;QACpC,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;YACpB,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,KAAK,SAAS;gBACjC,MAAM,IAAI,eAAe,CACvB,mBAAmB,EACnB,kFAAkF,CACnF,CAAC;YACJ,MAAM,IAAI,eAAe,CACvB,kCAAkC,EAClC,OAAO,GAAG,CAAC,UAAU,QAAQ,GAAG,CAAC,QAAQ,QAAQ,GAAG,CAAC,YAAY,oBAAoB,CACtF,CAAC;QACJ,CAAC;QACD,MAAM,IAAI,GAA4B,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;QAC1D,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAAE,IAAI,CAAC,MAAM,GAAG,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC;QAC9E,IAAI,IAAI,KAAK,OAAO,EAAE,CAAC;YACrB,MAAM,KAAK,GAAG,IAAI,CAAC,KAAK,CAAC;YACzB,IAAI,KAAK,KAAK,SAAS;gBACrB,MAAM,IAAI,eAAe,CAAC,eAAe,EAAE,wCAAwC,CAAC,CAAC;YACvF,MAAM,KAAK,GAA+B,EAAE,CAAC;YAC7C,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;gBAAE,KAAK,CAAC,kBAAkB,GAAG,IAAI,CAAC,WAAW,CAAC;YAChF,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;gBAAE,KAAK,CAAC,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;YACnE,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC;gBACjC,MAAM,EAAE,MAAM;gBACd,IAAI,EAAE,OAAO,KAAK,WAAW;gBAC7B,KAAK;gBACL,IAAI;gBACJ,MAAM,EAAE,IAAI,CAAC,MAAM;aACpB,CAAC,CAAC;YACH,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,CAAC;QACnC,CAAC;QACD,MAAM,OAAO,GAAG,MAAM,IAAI,CAAC,cAAc,CAAC,IAAI,EAAE,IAAI,CAAC,CAAC;QACtD,OAAO,EAAE,OAAO,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC;IACrC,CAAC;IAEO,KAAK,CAAC,cAAc,CAC1B,IAAwB,EACxB,IAA6B;QAE7B,MAAM,OAAO,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC;QACpC,IAAI,OAAO,KAAK,SAAS;YACvB,MAAM,IAAI,eAAe,CAAC,kCAAkC,EAAE,0BAA0B,CAAC,CAAC;QAC5F,IAAI,IAAI,CAAC,KAAK,KAAK,SAAS,IAAI,IAAI,CAAC,KAAK,KAAK,OAAO,CAAC,KAAK;YAC1D,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,wCAAwC,OAAO,CAAC,KAAK,EAAE,CACxD,CAAC;QACJ,IAAI,IAAI,CAAC,SAAS,KAAK,SAAS;YAC9B,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,qDAAqD,CACtD,CAAC;QACJ,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC;QACjC,IAAI,IAAI,CAAC,WAAW,KAAK,SAAS;YAChC,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,oBAAoB,EAAE,IAAI,CAAC,WAAW,CAAC,CAAC;QAC/D,MAAM,OAAO,GAA2B;YACtC,MAAM,EAAE,kBAAkB;YAC1B,cAAc,EAAE,iCAAiC;SAClD,CAAC;QACF,MAAM,QAAQ,GAAG,MAAM,UAAU,CAAC;YAChC,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,MAAM,EAAE,MAAM;YACd,GAAG,EAAE,GAAG,CAAC,QAAQ,EAAE;YACnB,OAAO;YACP,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;YAC1B,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,MAAM,EAAE,eAAe;SACxB,CAAC,CAAC;QACH,OAAO,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;IAC/B,CAAC;IAEO,KAAK,CAAC,WAAW,CACvB,KAAkB,EAClB,MAAmB,EACnB,KAAc;QAEd,OAAO,iBAAiB,CACtB,IAAI,CAAC,UAAU,EACf,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,MAAM,CAAC,WAAW,EAAE,EAC5F,EAAE,KAAK,EAAE,CACV,CAAC;IACJ,CAAC;IAEO,SAAS,CAAC,OAAgB,EAAE,OAAe;QACjD,MAAM,UAAU,GAAG,iBAAiB,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;QACzF,MAAM,WAAW,GAAG,IAAI,CAAC,GAAG,CAAC,eAAe,GAAG,CAAC,IAAI,OAAO,EAAE,cAAc,CAAC,CAAC;QAC7E,IAAI,UAAU,KAAK,SAAS;YAAE,OAAO,IAAI,CAAC,GAAG,CAAC,UAAU,GAAG,IAAI,EAAE,cAAc,CAAC,CAAC;QACjF,OAAO,WAAW,CAAC;IACrB,CAAC;IAEO,MAAM,CAAC,QAAqB;QAClC,MAAM,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC;QAC/B,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,GAAG,GAAG,EAAE,CAAC;YAClC,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,GAAG;gBAAE,OAAO,EAAE,CAAC;YAChD,IAAI,QAAQ,CAAC,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;gBAAE,OAAO,EAAE,CAAC;YAC3C,IAAI,CAAC;gBACH,OAAO,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;YACnC,CAAC;YAAC,MAAM,CAAC;gBACP,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;YAChD,CAAC;QACH,CAAC;QACD,MAAM,KAAK,GAAG,iBAAiB,CAAC,QAAQ,CAAC,OAAO,EAAE,IAAI,CAAC,KAAK,CAAC,GAAG,EAAE,EAAE,uBAAuB,CAAC,CAAC;QAC7F,MAAM,MAAM,GAAG,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,eAAe,KAAK,UAAU,CAAC;QAChF,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,mBAAmB,CAAC,CAAC;QACnE,IAAI,MAAM,KAAK,GAAG;YAChB,MAAM,IAAI,eAAe,CACvB,eAAe,EACf,yFAAyF,CAC1F,CAAC;QACJ,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;QAC3D,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,eAAe,CAAC,CAAC;QAC/D,IAAI,MAAM,KAAK,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,cAAc,EAAE,MAAM,CAAC,CAAC;QACtE,IAAI,MAAM,IAAI,GAAG;YAAE,MAAM,IAAI,eAAe,CAAC,yBAAyB,EAAE,MAAM,CAAC,CAAC;QAChF,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IAChD,CAAC;CACF"}

package/dist/index.d.ts

@@ -0,0 +1,49 @@
+import { type Plugin } from "@alisio/sdk";
+import { type Environment } from "./config.js";
+import { type Clock, type Sleep } from "./time.js";
+import { TokenStore } from "./token.js";
+import type { Fetcher } from "./transport.js";
+export * from "./commands.js";
+export * from "./config.js";
+export * from "./errors.js";
+export * from "./http.js";
+export * from "./oauth.js";
+export * from "./render.js";
+export * from "./text.js";
+export * from "./time.js";
+export * from "./token.js";
+export * from "./toolkit.js";
+export * from "./tools.js";
+export * from "./transport.js";
+export * from "./validation.js";
+export { VERSION } from "./version.js";
+/** Package-local resource directories, registered relative to the built entry. */
+export declare const resourcePaths: {
+    readonly skills: "../.agents/skills";
+};
+/** Every tool this plugin registers. Kept explicit so tests catch drift. */
+export declare const TOOL_NAMES: readonly ["google_chat_list_spaces", "google_chat_list_messages", "google_chat_search_messages", "google_chat_list_memberships", "google_chat_send_message", "google_chat_edit_message", "google_chat_delete_message"];
+/** Tools that mutate remote state and therefore declare the `write` effect. */
+export declare const WRITE_TOOL_NAMES: readonly ["google_chat_send_message", "google_chat_edit_message", "google_chat_delete_message"];
+export interface CreatePluginOptions {
+    /** Environment to read configuration from; defaults to `process.env`. */
+    env?: Environment;
+    /** Transport seam for tests and embedders; defaults to global `fetch`. */
+    fetcher?: Fetcher;
+    /** Clock seam used for token expiry and Retry-After dates. */
+    clock?: Clock;
+    /** Sleep seam used for bounded retry backoff. */
+    sleep?: Sleep;
+    /** Token store seam; defaults to `<configHome>/google-chat/token.json`. */
+    tokenStore?: TokenStore;
+}
+/**
+ * Build the plugin. Configuration is validated during `setup`. A partially
+ * configured OAuth mode fails closed immediately; with neither mode configured
+ * the plugin still loads so `google-chat:status` can explain what is missing,
+ * and every capability reports an actionable error.
+ */
+export declare function createGoogleChatPlugin(options?: CreatePluginOptions): Plugin;
+declare const _default: Plugin;
+export default _default;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAgB,KAAK,MAAM,EAAuC,MAAM,aAAa,CAAC;AAE7F,OAAO,EAAE,KAAK,WAAW,EAAgC,MAAM,aAAa,CAAC;AAE7E,OAAO,EAAE,KAAK,KAAK,EAAE,KAAK,KAAK,EAA4B,MAAM,WAAW,CAAC;AAC7E,OAAO,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAExC,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,gBAAgB,CAAC;AAG9C,cAAc,eAAe,CAAC;AAC9B,cAAc,aAAa,CAAC;AAC5B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,aAAa,CAAC;AAC5B,cAAc,WAAW,CAAC;AAC1B,cAAc,WAAW,CAAC;AAC1B,cAAc,YAAY,CAAC;AAC3B,cAAc,cAAc,CAAC;AAC7B,cAAc,YAAY,CAAC;AAC3B,cAAc,gBAAgB,CAAC;AAC/B,cAAc,iBAAiB,CAAC;AAChC,OAAO,EAAE,OAAO,EAAE,MAAM,cAAc,CAAC;AAEvC,kFAAkF;AAClF,eAAO,MAAM,aAAa;aACxB,MAAM,EAAE,mBAAmB;CACnB,CAAC;AAEX,4EAA4E;AAC5E,eAAO,MAAM,UAAU,YACrB,yBAAyB,EACzB,2BAA2B,EAC3B,6BAA6B,EAC7B,8BAA8B,EAC9B,0BAA0B,EAC1B,0BAA0B,EAC1B,4BAA4B,CACpB,CAAC;AAEX,+EAA+E;AAC/E,eAAO,MAAM,gBAAgB,YAC3B,0BAA0B,EAC1B,0BAA0B,EAC1B,4BAA4B,CACpB,CAAC;AAEX,MAAM,WAAW,mBAAmB;IAClC,yEAAyE;IACzE,GAAG,CAAC,EAAE,WAAW,CAAC;IAClB,0EAA0E;IAC1E,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,8DAA8D;IAC9D,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,iDAAiD;IACjD,KAAK,CAAC,EAAE,KAAK,CAAC;IACd,2EAA2E;IAC3E,UAAU,CAAC,EAAE,UAAU,CAAC;CACzB;AAED;;;;;GAKG;AACH,wBAAgB,sBAAsB,CAAC,OAAO,GAAE,mBAAwB,GAAG,MAAM,CA0BhF"}