@deployfoundation/foundation-deploy 0.2.23 → 0.2.25

package/agent-image/Dockerfile

@@ -250,6 +250,7 @@ COPY packages/capability-otter/ ./packages/capability-otter/
 COPY packages/capability-knock/ ./packages/capability-knock/
 COPY packages/capability-browser/ ./packages/capability-browser/
 COPY packages/capability-email/ ./packages/capability-email/
+COPY packages/capability-google-docs/ ./packages/capability-google-docs/
 COPY packages/capability-crm/ ./packages/capability-crm/
 COPY packages/capability-upwork/ ./packages/capability-upwork/
 COPY packages/capability-etrade/ ./packages/capability-etrade/

package/dist/bin/app.js

@@ -8,13 +8,13 @@ import {
   FoundationPages,
   FoundationPipeline,
   NewsletterStack
-} from "../chunk-hzrrx2pq.js";
+} from "../chunk-7krjky1x.js";
 import {
   adminsFor,
   instanceNames,
   loadInstanceFile,
   provisionsIntegration
-} from "../chunk-bp4yddcp.js";
+} from "../chunk-f4s4c4bg.js";
 
 // bin/app.ts
 import { execFileSync } from "node:child_process";

package/dist/bin/foundation-deploy.js

@@ -29,7 +29,7 @@ import {
   stackExists,
   stackOutput,
   toolVersion
-} from "../chunk-j3etxk5j.js";
+} from "../chunk-165c7rv9.js";
 import {
   BASE_SLACK_EVENTS,
   CAPABILITY_IDS,
@@ -45,7 +45,7 @@ import {
   requiredSlackScopes,
   skillsKey,
   slackCommandPrefix
-} from "../chunk-bp4yddcp.js";
+} from "../chunk-f4s4c4bg.js";
 
 // src/deploy/config-sync.ts
 import { existsSync, mkdirSync, mkdtempSync, readdirSync } from "node:fs";
@@ -932,6 +932,7 @@ function composeRuntimeSecret(inputs) {
     FOUNDATION_ROUTINE_GROUP: names.routineGroup,
     FOUNDATION_AGENT_ENDPOINT: inputs.agentEndpoint !== undefined && inputs.agentEndpoint !== "" ? inputs.agentEndpoint : LIVE_ENDPOINT,
     ...inputs.readOnlyRoleArn !== undefined && inputs.readOnlyRoleArn !== "" ? { FOUNDATION_AWS_READONLY_ROLE_ARN: inputs.readOnlyRoleArn } : {},
+    ...inputs.googleDocsProxyFunctionArn !== undefined && inputs.googleDocsProxyFunctionArn !== "" ? { FOUNDATION_GOOGLE_DOCS_PROXY_ARN: inputs.googleDocsProxyFunctionArn } : {},
     ...inputs.emailProxyFunctionArn !== undefined && inputs.emailProxyFunctionArn !== "" ? { FOUNDATION_EMAIL_PROXY_FUNCTION_ARN: inputs.emailProxyFunctionArn } : {},
     ...inputs.browserProxyFunctionArn !== undefined && inputs.browserProxyFunctionArn !== "" ? { FOUNDATION_BROWSER_PROXY_FUNCTION_ARN: inputs.browserProxyFunctionArn } : {},
     ...inputs.crmProxyFunctionArn !== undefined && inputs.crmProxyFunctionArn !== "" ? { FOUNDATION_CRM_PROXY_FUNCTION_ARN: inputs.crmProxyFunctionArn } : {},
@@ -1260,6 +1261,7 @@ async function syncRuntimeSecret(ctx) {
   const agentRuntimeArn = dry ? `<${agent}.AgentRuntimeArn>` : await optionalOutput(ctx, agent, "AgentRuntimeArn");
   const readOnlyRoleArn = dry ? `<${agent}.ReadOnlyRoleArn>` : await optionalOutput(ctx, agent, "ReadOnlyRoleArn");
   const emailProxyFunctionArn = dry ? `<${api}.EmailProxyFunctionArn>` : await optionalOutput(ctx, api, "EmailProxyFunctionArn");
+  const googleDocsProxyFunctionArn = dry ? `<${api}.GoogleDocsProxyFunctionArn>` : await optionalOutput(ctx, api, "GoogleDocsProxyFunctionArn");
   const browserProxyFunctionArn = dry ? `<${api}.BrowserProxyFunctionArn>` : await optionalOutput(ctx, api, "BrowserProxyFunctionArn");
   const crmProxyFunctionArn = ctx.instance.integrations.crm ? dry ? `<${api}.CrmProxyFunctionArn>` : await optionalOutput(ctx, api, "CrmProxyFunctionArn") : undefined;
   const crmPolicyFingerprint = ctx.instance.integrations.crm ? dry ? `<${api}.CrmPolicyFingerprint>` : await optionalOutput(ctx, api, "CrmPolicyFingerprint") : undefined;
@@ -1286,6 +1288,7 @@ async function syncRuntimeSecret(ctx) {
     ...agentRuntimeArn === undefined ? {} : { agentRuntimeArn },
     ...readOnlyRoleArn === undefined ? {} : { readOnlyRoleArn },
     ...emailProxyFunctionArn === undefined ? {} : { emailProxyFunctionArn },
+    ...googleDocsProxyFunctionArn === undefined ? {} : { googleDocsProxyFunctionArn },
     ...browserProxyFunctionArn === undefined ? {} : { browserProxyFunctionArn },
     ...crmProxyFunctionArn === undefined ? {} : { crmProxyFunctionArn },
     ...crmPolicyFingerprint === undefined ? {} : { crmPolicyFingerprint },

package/dist/bin/release-account.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env bun
 import {
   DEFAULT_RELEASE_BUCKET
-} from "../chunk-j3etxk5j.js";
-import"../chunk-bp4yddcp.js";
+} from "../chunk-165c7rv9.js";
+import"../chunk-f4s4c4bg.js";
 
 // bin/release-account.ts
 import * as cdk2 from "aws-cdk-lib";

package/dist/{chunk-j3etxk5j.js → chunk-165c7rv9.js}

@@ -6,7 +6,7 @@ import {
   manifestKey,
   releaseCacheDir,
   verifyManifest
-} from "./chunk-bp4yddcp.js";
+} from "./chunk-f4s4c4bg.js";
 
 // src/deploy/release.ts
 import { existsSync as existsSync2, mkdirSync, readFileSync as readFileSync2 } from "node:fs";

package/dist/{chunk-hzrrx2pq.js → chunk-7krjky1x.js}

@@ -19,7 +19,7 @@ import {
   scheduledJobBindings,
   slackCommandPrefixes,
   webhookJobBindings
-} from "./chunk-bp4yddcp.js";
+} from "./chunk-f4s4c4bg.js";
 
 // src/stacks/agent-stack.ts
 import * as cdk from "aws-cdk-lib";
@@ -240,6 +240,21 @@ class FoundationAgent extends cdk.Stack {
       resources: [secretArnPattern(knockOauthClient), secretArnPattern(knockCredential)]
     }));
   }
+  denyDirectDocsSecretAccess(role, docsSecretPrefix) {
+    role.addToPolicy(new iam.PolicyStatement({
+      sid: "DenyGoogleDocsSecrets",
+      effect: iam.Effect.DENY,
+      actions: ["secretsmanager:*"],
+      resources: [
+        cdk.Stack.of(this).formatArn({
+          service: "secretsmanager",
+          resource: "secret",
+          resourceName: `${docsSecretPrefix}/personal/*-??????`,
+          arnFormat: cdk.ArnFormat.COLON_RESOURCE_NAME
+        })
+      ]
+    }));
+  }
   denyDirectEmailSecretAccess(role, sharedMailboxSecret, personalSecretPrefix) {
     const stack = cdk.Stack.of(this);
     const personalSecrets = stack.formatArn({
@@ -358,6 +373,7 @@ class FoundationAgent extends cdk.Stack {
     this.denyDirectCrmTableAccess(role, props.instance, props.crmTable);
     this.denyDirectKnockSecretAccess(role, props);
     this.denyDirectEmailSecretAccess(role, props.secrets.googleEmail, instanceNames(props.instance).secretGoogleEmail);
+    this.denyDirectDocsSecretAccess(role, instanceNames(props.instance).secretGoogleDocs);
     this.denyDirectUpworkApprovalAccess(role, props.upworkApprovalTable);
     this.denyDirectEtradeAccess(role, props);
     this.pagesPolicy("AgentReadOnlyPagesPolicy", role, props.instance, { invoke: false });
@@ -421,6 +437,7 @@ class FoundationAgent extends cdk.Stack {
     this.denyDirectKnockSecretAccess(role, props);
     this.denyDirectUpworkApprovalAccess(role, props.upworkApprovalTable);
     this.denyDirectEmailSecretAccess(role, props.secrets.googleEmail, instanceNames(props.instance).secretGoogleEmail);
+    this.denyDirectDocsSecretAccess(role, instanceNames(props.instance).secretGoogleDocs);
     this.denyDirectEtradeAccess(role, props);
     this.pagesPolicy("AgentExecutionPagesPolicy", role, props.instance, { invoke: true });
     const releaseRepositoryArn = releaseImageRepositoryArn(this);
@@ -489,6 +506,18 @@ class FoundationAgent extends cdk.Stack {
       actions: ["secretsmanager:GetSecretValue"],
       resources: [secretArnPattern(props.secrets.signing)]
     }));
+    role.addToPolicy(new iam.PolicyStatement({
+      sid: "GoogleDocsProxyInvoke",
+      actions: ["lambda:InvokeFunction"],
+      resources: [
+        cdk.Stack.of(this).formatArn({
+          service: "lambda",
+          resource: "function",
+          resourceName: instanceNames(props.instance).googleDocsProxyFunctionName,
+          arnFormat: cdk.ArnFormat.COLON_RESOURCE_NAME
+        })
+      ]
+    }));
     role.addToPolicy(new iam.PolicyStatement({
       sid: "EmailProxyInvoke",
       actions: ["lambda:InvokeFunction"],
@@ -788,6 +817,7 @@ class FoundationApi extends cdk2.Stack {
   invokeQueue;
   invokeDlq;
   emailProxyFunction;
+  googleDocsProxyFunction;
   browserProxyFunction;
   otterProxyFunction;
   crmProxyFunction;
@@ -799,6 +829,7 @@ class FoundationApi extends cdk2.Stack {
     const names = instanceNames(props.instance);
     const display = props.instance.displayName;
     const emailIdentities = emailIdentitiesFor(props.configPath);
+    const docsIdentities = googleDocsIdentitiesFor(props.configPath);
     const personalEmailIdentities = emailIdentities.filter((identity) => identity.owner !== undefined);
     const upwork = provisionsIntegration(props.instance, "upwork") ? upworkConfigForProvisioning(props.configPath) : undefined;
     const upworkSecret = upwork === undefined ? undefined : props.secrets.upwork;
@@ -846,6 +877,15 @@ class FoundationApi extends cdk2.Stack {
         generateStringKey: "placeholder"
       }
     }));
+    const docsSecrets = docsIdentities.map((identity) => new secretsmanager.Secret(this, `GoogleDocsSecret${identity.owner}`, {
+      secretName: `${instanceNames(props.instance).secretGoogleDocs}/personal/${identity.owner}`,
+      description: `${display} Google Docs drafting grant for Slack ${identity.owner}; gateway writes and the docs proxy reads`,
+      removalPolicy: cdk2.RemovalPolicy.DESTROY,
+      generateSecretString: {
+        secretStringTemplate: "{}",
+        generateStringKey: "placeholder"
+      }
+    }));
     const gatewayRole = new iam2.Role(this, "GatewayRole", {
       assumedBy: new iam2.ServicePrincipal("lambda.amazonaws.com"),
       description: `${display} gateway Lambda role (least privilege)`,
@@ -877,6 +917,13 @@ class FoundationApi extends cdk2.Stack {
         ...personalEmailSecrets.map(secretArnPattern2)
       ]
     }));
+    if (docsSecrets.length > 0) {
+      gatewayRole.addToPolicy(new iam2.PolicyStatement({
+        sid: "GoogleDocsIdentityConnect",
+        actions: ["secretsmanager:PutSecretValue"],
+        resources: docsSecrets.map(secretArnPattern2)
+      }));
+    }
     if (props.secrets.knockCredential !== undefined) {
       gatewayRole.addToPolicy(new iam2.PolicyStatement({
         sid: "KnockCredentialConnect",
@@ -982,6 +1029,10 @@ class FoundationApi extends cdk2.Stack {
           owner
         })))
       },
+      ...docsIdentities.length === 0 ? {} : {
+        FOUNDATION_GOOGLE_DOCS_SECRET_ID: instanceNames(props.instance).secretGoogleDocs,
+        FOUNDATION_GOOGLE_DOCS_IDENTITIES: JSON.stringify(docsIdentities)
+      },
       ...props.secrets.knockOauthClient === undefined ? {} : { FOUNDATION_KNOCK_OAUTH_CLIENT_SECRET_ID: props.secrets.knockOauthClient.secretName },
       ...props.secrets.knockCredential === undefined ? {} : { FOUNDATION_KNOCK_CREDENTIAL_SECRET_ID: props.secrets.knockCredential.secretName },
       ...upworkSecret === undefined ? {} : { FOUNDATION_UPWORK_SECRET_ID: upworkSecret.secretName },
@@ -1152,6 +1203,50 @@ class FoundationApi extends cdk2.Stack {
         FOUNDATION_EMAIL_IDENTITIES: JSON.stringify(emailIdentities)
       }
     });
+    if (docsIdentities.length > 0) {
+      const docsProxyRole = new iam2.Role(this, "GoogleDocsProxyRole", {
+        assumedBy: new iam2.ServicePrincipal("lambda.amazonaws.com"),
+        description: `${display} Google Docs drafts proxy role (the only reader of a docs grant)`,
+        managedPolicies: [
+          iam2.ManagedPolicy.fromAwsManagedPolicyName("service-role/AWSLambdaBasicExecutionRole")
+        ]
+      });
+      docsProxyRole.addToPolicy(new iam2.PolicyStatement({
+        sid: "GoogleDocsProxyCredentials",
+        actions: ["secretsmanager:GetSecretValue"],
+        resources: [
+          ...docsSecrets.map(secretArnPattern2),
+          secretArnPattern2(props.secrets.googleOauth),
+          secretArnPattern2(props.secrets.signing)
+        ]
+      }));
+      docsProxyRole.addToPolicy(new iam2.PolicyStatement({
+        sid: "GoogleDocsProxyDataKey",
+        actions: ["kms:Decrypt"],
+        resources: [props.dataKey.keyArn]
+      }));
+      this.googleDocsProxyFunction = new lambda.Function(this, "GoogleDocsProxyFunction", {
+        functionName: instanceNames(props.instance).googleDocsProxyFunctionName,
+        runtime: lambda.Runtime.NODEJS_22_X,
+        handler: "index.handler",
+        code: lambdaCode(this, "google-docs-proxy"),
+        role: docsProxyRole,
+        timeout: cdk2.Duration.seconds(30),
+        memorySize: 256,
+        environment: {
+          FOUNDATION_GOOGLE_DOCS_SECRET_ID: instanceNames(props.instance).secretGoogleDocs,
+          FOUNDATION_GOOGLE_OAUTH_SECRET_ID: instanceNames(props.instance).secretGoogleOauth,
+          FOUNDATION_SLACK_SIGNING_SECRET_ID: props.secrets.signing.secretName,
+          FOUNDATION_SLACK_TEAM_ID: props.instance.slack.teamId,
+          FOUNDATION_GOOGLE_DOCS_IDENTITIES: JSON.stringify(docsIdentities),
+          FOUNDATION_GOOGLE_DOCS_FOLDER: `${props.instance.displayName} drafts`
+        }
+      });
+      new cdk2.CfnOutput(this, "GoogleDocsProxyFunctionArn", {
+        value: this.googleDocsProxyFunction.functionArn,
+        description: "The Google Docs drafts proxy the agent invokes"
+      });
+    }
     const browserDomains = provisionsIntegration(props.instance, "browser") ? browserDomainsFor(props.configPath) : [];
     if (browserDomains.length > 0) {
       const browserProxyRole = new iam2.Role(this, "BrowserProxyRole", {
@@ -1656,6 +1751,10 @@ function etradeConfigForProvisioning(configPath) {
 function configTimezoneFor(configPath) {
   return parseInstanceConfig(readFileSync(configPath, "utf8")).timezone;
 }
+function googleDocsIdentitiesFor(configPath) {
+  const docs = parseInstanceConfig(readFileSync(configPath, "utf8")).capabilities.googleDocs;
+  return docs.enabled ? docs.identities.map(({ address, channel, owner }) => ({ address, channel, owner })) : [];
+}
 function emailIdentitiesFor(configPath) {
   const email = parseInstanceConfig(readFileSync(configPath, "utf8")).capabilities.email;
   return email.enabled ? email.identities : [];

package/dist/{chunk-bp4yddcp.js → chunk-f4s4c4bg.js}

@@ -110,6 +110,34 @@ var RawGoogleDriveCapability = z.object({
   enabled: z.boolean().default(true),
   channels: z.array(RawSlackChannel).max(100).default([])
 }).strict().default({});
+var RawGoogleDocsIdentity = z.object({
+  address: z.string().regex(/^[a-z0-9._%+-]+@[a-z0-9.-]+\.[a-z]{2,}$/i),
+  channel: z.string().regex(/^[CGD][A-Z0-9]{8,}$/),
+  owner: z.string().regex(/^U[A-Z0-9]{8,}$/, "owner must be a Slack U id")
+}).strict();
+var RawGoogleDocsCapability = z.object({
+  enabled: z.boolean().default(false),
+  identities: z.array(RawGoogleDocsIdentity).max(50).default([])
+}).strict().superRefine((value, ctx) => {
+  if (value.enabled && value.identities.length === 0)
+    ctx.addIssue({
+      code: z.ZodIssueCode.custom,
+      path: ["identities"],
+      message: "an enabled Google Docs capability needs at least one identity"
+    });
+  for (const field of ["owner", "channel"]) {
+    const seen = new Set;
+    for (const [index, identity] of value.identities.entries()) {
+      if (seen.has(identity[field]))
+        ctx.addIssue({
+          code: z.ZodIssueCode.custom,
+          path: ["identities", index, field],
+          message: `duplicate Google Docs identity ${field}: ${identity[field]}`
+        });
+      seen.add(identity[field]);
+    }
+  }
+}).default({});
 var RawCrmOutreach = z.object({
   weeklyLimit: z.number().int().min(1).max(20).default(5),
   eligibleStatuses: z.array(RawCrmValue).max(100).default([]),
@@ -373,6 +401,16 @@ var CAPABILITIES = [
     slackCommands: ["drive-connect"],
     googleScopes: ["https://www.googleapis.com/auth/drive.readonly"]
   },
+  {
+    id: "googleDocs",
+    summary: "Draft Google Docs in a person's own Drive, by personal consent; it reaches only the Docs it created.",
+    config: RawGoogleDocsCapability,
+    ...NONE,
+    secrets: ["google/docs", GOOGLE_OAUTH_SECRET],
+    resources: ["googleDocsProxyFunctionName"],
+    slackCommands: ["docs-connect"],
+    googleScopes: ["https://www.googleapis.com/auth/drive.file", ...GOOGLE_IDENTITY_SCOPES]
+  },
   {
     id: "googleCalendar",
     summary: "Each person's own calendar plus team free/busy, by personal consent.",
@@ -863,6 +901,7 @@ function instanceNames(instance) {
     secretGoogleCalendar: secret("google/calendar"),
     secretGoogleOauth: secret("google/oauth"),
     secretGoogleEmail: secret("google/email"),
+    secretGoogleDocs: secret("google/docs"),
     secretMongodbReadonly: secret("mongodb/readonly"),
     secretOtterApi: secret("otter/api"),
     secretKnockOauthClient: secret("knock/oauth-client"),
@@ -886,6 +925,7 @@ function instanceNames(instance) {
     deployRole: stack("DeployRole"),
     configKey: instance.config,
     emailProxyFunctionName: stack("EmailProxy"),
+    googleDocsProxyFunctionName: stack("GoogleDocsProxy"),
     otterProxyFunctionName: stack("OtterProxy"),
     crmProxyFunctionName: stack("CrmProxy"),
     pagesApiFunctionName: stack("PagesApi"),
@@ -1556,6 +1596,7 @@ var LAMBDA_ENTRY_POINTS = {
   gateway: { entry: "packages/gateway/src/lambda.ts" },
   invoker: { entry: "packages/gateway/src/invoker.ts" },
   "email-proxy": { entry: "packages/capability-email/src/proxy/handler.ts" },
+  "google-docs-proxy": { entry: "packages/capability-google-docs/src/proxy/handler.ts" },
   "otter-proxy": { entry: "packages/capability-otter/src/proxy/handler.ts" },
   "knock-proxy": { entry: "packages/capability-knock/src/proxy/handler.ts" },
   "crm-proxy": { entry: "packages/capability-crm/src/proxy/handler.ts" },

package/dist/src/index.js

@@ -10,7 +10,7 @@ import {
   FoundationPipeline,
   NewsletterStack,
   deployStatements
-} from "../chunk-hzrrx2pq.js";
+} from "../chunk-7krjky1x.js";
 import {
   BUN_VERSION,
   LAMBDA_ENTRY_POINTS,
@@ -43,7 +43,7 @@ import {
   skillsKey,
   skipBundle,
   verifyManifest
-} from "../chunk-bp4yddcp.js";
+} from "../chunk-f4s4c4bg.js";
 export {
   BUILD_TIMEOUT,
   BUN_VERSION,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@deployfoundation/foundation-deploy",
-  "version": "0.2.23",
+  "version": "0.2.25",
   "description": "Deploys one Foundation instance from a published, signed release: the CDK app and the deploy tool.",
   "license": "UNLICENSED",
   "private": false,

package/src/artifacts.ts

@@ -61,6 +61,7 @@ export const LAMBDA_ENTRY_POINTS = {
   gateway: { entry: "packages/gateway/src/lambda.ts" },
   invoker: { entry: "packages/gateway/src/invoker.ts" },
   "email-proxy": { entry: "packages/capability-email/src/proxy/handler.ts" },
+  "google-docs-proxy": { entry: "packages/capability-google-docs/src/proxy/handler.ts" },
   "otter-proxy": { entry: "packages/capability-otter/src/proxy/handler.ts" },
   "knock-proxy": { entry: "packages/capability-knock/src/proxy/handler.ts" },
   "crm-proxy": { entry: "packages/capability-crm/src/proxy/handler.ts" },

package/src/deploy/assets/slack-app-manifest.yml

@@ -68,6 +68,11 @@ features:
       url: ${COMMANDS_REQUEST_URL}
       description: Connect the mailbox ${DISPLAY_NAME} drafts from (admins)
       should_escape: false
+    # Personal: only a configured owner, only in their configured DM or channel.
+    - command: /${COMMAND_PREFIX}-docs-connect
+      url: ${COMMANDS_REQUEST_URL}
+      description: Let ${DISPLAY_NAME} draft Google Docs in your own Drive
+      should_escape: false
     - command: /${COMMAND_PREFIX}-knock-connect
       url: ${COMMANDS_REQUEST_URL}
       description: Connect ${DISPLAY_NAME} to Knock read-only tools (admins)

package/src/deploy/deploy.ts

@@ -396,6 +396,9 @@ export async function syncRuntimeSecret(ctx: AwsContext): Promise<string[]> {
   const emailProxyFunctionArn = dry
     ? `<${api}.EmailProxyFunctionArn>`
     : await optionalOutput(ctx, api, "EmailProxyFunctionArn");
+  const googleDocsProxyFunctionArn = dry
+    ? `<${api}.GoogleDocsProxyFunctionArn>`
+    : await optionalOutput(ctx, api, "GoogleDocsProxyFunctionArn");
   const browserProxyFunctionArn = dry
     ? `<${api}.BrowserProxyFunctionArn>`
     : await optionalOutput(ctx, api, "BrowserProxyFunctionArn");
@@ -458,6 +461,7 @@ export async function syncRuntimeSecret(ctx: AwsContext): Promise<string[]> {
     ...(agentRuntimeArn === undefined ? {} : { agentRuntimeArn }),
     ...(readOnlyRoleArn === undefined ? {} : { readOnlyRoleArn }),
     ...(emailProxyFunctionArn === undefined ? {} : { emailProxyFunctionArn }),
+    ...(googleDocsProxyFunctionArn === undefined ? {} : { googleDocsProxyFunctionArn }),
     ...(browserProxyFunctionArn === undefined ? {} : { browserProxyFunctionArn }),
     ...(crmProxyFunctionArn === undefined ? {} : { crmProxyFunctionArn }),
     ...(crmPolicyFingerprint === undefined ? {} : { crmPolicyFingerprint }),

package/src/deploy/runtime-secret.ts

@@ -64,6 +64,8 @@ export interface RuntimeSecretInputs {
    * offers no email tools.
    */
   emailProxyFunctionArn?: string;
+  /** Present only when a Google Docs drafting identity is configured. */
+  googleDocsProxyFunctionArn?: string;
   /**
    * `FoundationApi.BrowserProxyFunctionArn`; absent when managed browser is disabled.
    * The runtime receives no Browser API grant or signing secret.
@@ -210,6 +212,9 @@ export function composeRuntimeSecret(inputs: RuntimeSecretInputs): Record<string
     ...(inputs.readOnlyRoleArn !== undefined && inputs.readOnlyRoleArn !== ""
       ? { FOUNDATION_AWS_READONLY_ROLE_ARN: inputs.readOnlyRoleArn }
       : {}),
+    ...(inputs.googleDocsProxyFunctionArn !== undefined && inputs.googleDocsProxyFunctionArn !== ""
+      ? { FOUNDATION_GOOGLE_DOCS_PROXY_ARN: inputs.googleDocsProxyFunctionArn }
+      : {}),
     ...(inputs.emailProxyFunctionArn !== undefined && inputs.emailProxyFunctionArn !== ""
       ? { FOUNDATION_EMAIL_PROXY_FUNCTION_ARN: inputs.emailProxyFunctionArn }
       : {}),

package/src/stacks/agent-stack.ts

@@ -400,6 +400,29 @@ export class FoundationAgent extends cdk.Stack {
       }),
     );
   }
+  /**
+   * Google Docs drafting grants, like personal Gmail grants, are readable only
+   * by their proxy. Both shell-reachable roles explicitly deny every
+   * owner-derived name, so a future broad grant cannot reach one.
+   */
+  private denyDirectDocsSecretAccess(role: iam.Role, docsSecretPrefix: string): void {
+    role.addToPolicy(
+      new iam.PolicyStatement({
+        sid: "DenyGoogleDocsSecrets",
+        effect: iam.Effect.DENY,
+        actions: ["secretsmanager:*"],
+        resources: [
+          cdk.Stack.of(this).formatArn({
+            service: "secretsmanager",
+            resource: "secret",
+            resourceName: `${docsSecretPrefix}/personal/*-??????`,
+            arnFormat: cdk.ArnFormat.COLON_RESOURCE_NAME,
+          }),
+        ],
+      }),
+    );
+  }
+
   /**
    * The execution role and its ReadOnlyAccess escape hatch are both
    * shell-reachable. Keep Gmail credentials behind the proxy even if a future
@@ -590,6 +613,7 @@ export class FoundationAgent extends cdk.Stack {
       props.secrets.googleEmail,
       namesFor(props.instance).secretGoogleEmail,
     );
+    this.denyDirectDocsSecretAccess(role, namesFor(props.instance).secretGoogleDocs);
     this.denyDirectUpworkApprovalAccess(role, props.upworkApprovalTable);
     this.denyDirectEtradeAccess(role, props);
     this.pagesPolicy("AgentReadOnlyPagesPolicy", role, props.instance, { invoke: false });
@@ -689,6 +713,7 @@ export class FoundationAgent extends cdk.Stack {
       props.secrets.googleEmail,
       namesFor(props.instance).secretGoogleEmail,
     );
+    this.denyDirectDocsSecretAccess(role, namesFor(props.instance).secretGoogleDocs);
     this.denyDirectEtradeAccess(role, props);
     this.pagesPolicy("AgentExecutionPagesPolicy", role, props.instance, { invoke: true });
 
@@ -792,6 +817,22 @@ export class FoundationAgent extends cdk.Stack {
     // already depends on this stack for the runtime ARN, so referring to its
     // output here would close a cycle. The function name is derived from the
     // instance file, so both stacks compute the same string.
+    // The Docs drafts proxy is the agent's only Google Docs grant; named, not
+    // referenced, for the same cycle reason as the email proxy below.
+    role.addToPolicy(
+      new iam.PolicyStatement({
+        sid: "GoogleDocsProxyInvoke",
+        actions: ["lambda:InvokeFunction"],
+        resources: [
+          cdk.Stack.of(this).formatArn({
+            service: "lambda",
+            resource: "function",
+            resourceName: namesFor(props.instance).googleDocsProxyFunctionName,
+            arnFormat: cdk.ArnFormat.COLON_RESOURCE_NAME,
+          }),
+        ],
+      }),
+    );
     role.addToPolicy(
       new iam.PolicyStatement({
         sid: "EmailProxyInvoke",

package/src/stacks/api-stack.ts

@@ -2,6 +2,7 @@ import { readFileSync } from "node:fs";
 import {
   type CrmOutreachConfig,
   type EmailIdentity,
+  type GoogleDocsIdentity,
   type ScheduledJobBinding,
   type ScheduledJobConfig,
   type WebhookJobBinding,
@@ -116,6 +117,8 @@ export class FoundationApi extends cdk.Stack {
   public readonly invokeDlq: sqs.Queue;
   /** The email proxy: the agent role's only email grant is to invoke this. */
   public readonly emailProxyFunction: lambda.Function;
+  /** The Google Docs drafts proxy, present only when an identity is configured. */
+  public readonly googleDocsProxyFunction?: lambda.Function;
   /** Isolated policy boundary for AgentCore Browser; absent when the capability is disabled. */
   public readonly browserProxyFunction?: lambda.Function;
   /** Read-only Otter proxy, present only when the instance opts in. */
@@ -134,6 +137,7 @@ export class FoundationApi extends cdk.Stack {
     const names = namesFor(props.instance);
     const display = props.instance.displayName;
     const emailIdentities = emailIdentitiesFor(props.configPath);
+    const docsIdentities = googleDocsIdentitiesFor(props.configPath);
     const personalEmailIdentities = emailIdentities.filter(
       (identity): identity is EmailIdentity & { owner: string } => identity.owner !== undefined,
     );
@@ -212,6 +216,22 @@ export class FoundationApi extends cdk.Stack {
         }),
     );
 
+    // Google Docs drafting grants: one deployment-owned shell per configured
+    // owner, written by the gateway's connect callback and read only by the
+    // docs proxy. Removing an identity deletes its grant.
+    const docsSecrets = docsIdentities.map(
+      (identity) =>
+        new secretsmanager.Secret(this, `GoogleDocsSecret${identity.owner}`, {
+          secretName: `${namesFor(props.instance).secretGoogleDocs}/personal/${identity.owner}`,
+          description: `${display} Google Docs drafting grant for Slack ${identity.owner}; gateway writes and the docs proxy reads`,
+          removalPolicy: cdk.RemovalPolicy.DESTROY,
+          generateSecretString: {
+            secretStringTemplate: "{}",
+            generateStringKey: "placeholder",
+          },
+        }),
+    );
+
     const gatewayRole = new iam.Role(this, "GatewayRole", {
       assumedBy: new iam.ServicePrincipal("lambda.amazonaws.com"),
       description: `${display} gateway Lambda role (least privilege)`,
@@ -262,6 +282,17 @@ export class FoundationApi extends cdk.Stack {
         ],
       }),
     );
+    if (docsSecrets.length > 0) {
+      gatewayRole.addToPolicy(
+        new iam.PolicyStatement({
+          sid: "GoogleDocsIdentityConnect",
+          // Write-only, on these exact owner shells: the gateway completes a
+          // connection but can never read a grant back.
+          actions: ["secretsmanager:PutSecretValue"],
+          resources: docsSecrets.map(secretArnPattern),
+        }),
+      );
+    }
     if (props.secrets.knockCredential !== undefined) {
       gatewayRole.addToPolicy(
         new iam.PolicyStatement({
@@ -418,6 +449,12 @@ export class FoundationApi extends cdk.Stack {
               })),
             ),
           }),
+      ...(docsIdentities.length === 0
+        ? {}
+        : {
+            FOUNDATION_GOOGLE_DOCS_SECRET_ID: namesFor(props.instance).secretGoogleDocs,
+            FOUNDATION_GOOGLE_DOCS_IDENTITIES: JSON.stringify(docsIdentities),
+          }),
       ...(props.secrets.knockOauthClient === undefined
         ? {}
         : { FOUNDATION_KNOCK_OAUTH_CLIENT_SECRET_ID: props.secrets.knockOauthClient.secretName }),
@@ -689,6 +726,58 @@ export class FoundationApi extends cdk.Stack {
       },
     });
 
+    // --- Google Docs drafts proxy ---------------------------------------
+    // The only reader of a Docs grant. Provisioned only when an identity is
+    // configured; the identities it serves are baked in here at synth.
+    if (docsIdentities.length > 0) {
+      const docsProxyRole = new iam.Role(this, "GoogleDocsProxyRole", {
+        assumedBy: new iam.ServicePrincipal("lambda.amazonaws.com"),
+        description: `${display} Google Docs drafts proxy role (the only reader of a docs grant)`,
+        managedPolicies: [
+          iam.ManagedPolicy.fromAwsManagedPolicyName("service-role/AWSLambdaBasicExecutionRole"),
+        ],
+      });
+      docsProxyRole.addToPolicy(
+        new iam.PolicyStatement({
+          sid: "GoogleDocsProxyCredentials",
+          actions: ["secretsmanager:GetSecretValue"],
+          resources: [
+            ...docsSecrets.map(secretArnPattern),
+            secretArnPattern(props.secrets.googleOauth),
+            secretArnPattern(props.secrets.signing),
+          ],
+        }),
+      );
+      docsProxyRole.addToPolicy(
+        new iam.PolicyStatement({
+          sid: "GoogleDocsProxyDataKey",
+          actions: ["kms:Decrypt"],
+          resources: [props.dataKey.keyArn],
+        }),
+      );
+      this.googleDocsProxyFunction = new lambda.Function(this, "GoogleDocsProxyFunction", {
+        functionName: namesFor(props.instance).googleDocsProxyFunctionName,
+        runtime: lambda.Runtime.NODEJS_22_X,
+        handler: "index.handler",
+        code: lambdaCode(this, "google-docs-proxy"),
+        role: docsProxyRole,
+        timeout: cdk.Duration.seconds(30),
+        memorySize: 256,
+        environment: {
+          FOUNDATION_GOOGLE_DOCS_SECRET_ID: namesFor(props.instance).secretGoogleDocs,
+          FOUNDATION_GOOGLE_OAUTH_SECRET_ID: namesFor(props.instance).secretGoogleOauth,
+          FOUNDATION_SLACK_SIGNING_SECRET_ID: props.secrets.signing.secretName,
+          FOUNDATION_SLACK_TEAM_ID: props.instance.slack.teamId,
+          FOUNDATION_GOOGLE_DOCS_IDENTITIES: JSON.stringify(docsIdentities),
+          FOUNDATION_GOOGLE_DOCS_FOLDER: `${props.instance.displayName} drafts`,
+        },
+      });
+      new cdk.CfnOutput(this, "GoogleDocsProxyFunctionArn", {
+        value: this.googleDocsProxyFunction.functionArn,
+        description: "The Google Docs drafts proxy the agent invokes",
+      });
+    }
+
     // --- AgentCore Browser proxy ----------------------------------------
     // The model-facing runtime can invoke this Lambda but has no Browser API grants. The proxy
     // owns those grants and re-validates a gateway-signed DM/user scope plus this deploy-time
@@ -1346,6 +1435,14 @@ function configTimezoneFor(configPath: string): string {
  * malformed owner/channel bindings a deployment failure rather than allowing a
  * looser raw YAML shape into an IAM policy or Lambda environment.
  */
+/** The Google Docs drafting identities to provision, read from the instance config at synth. */
+export function googleDocsIdentitiesFor(configPath: string): GoogleDocsIdentity[] {
+  const docs = parseInstanceConfig(readFileSync(configPath, "utf8")).capabilities.googleDocs;
+  return docs.enabled
+    ? docs.identities.map(({ address, channel, owner }) => ({ address, channel, owner }))
+    : [];
+}
+
 export function emailIdentitiesFor(configPath: string): EmailIdentity[] {
   const email = parseInstanceConfig(readFileSync(configPath, "utf8")).capabilities.email;
   return email.enabled ? email.identities : [];