@framers/agentos-ext-gmail-source 0.3.0 → 0.5.0

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,oBAAoB,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EACrF,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,KAAK,iBAAiB,GACxE,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB,EAC3E,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EACpE,KAAK,qBAAqB,EAAE,KAAK,gBAAgB,GAClD,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,oBAAoB,EAAE,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,iBAAiB,EACrF,KAAK,gBAAgB,EAAE,KAAK,mBAAmB,EAAE,KAAK,iBAAiB,GACxE,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB,EAC3E,KAAK,eAAe,EAAE,KAAK,kBAAkB,EAAE,KAAK,gBAAgB,EACpE,KAAK,qBAAqB,EAAE,KAAK,gBAAgB,GAClD,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAE,KAAK,gBAAgB,EAAE,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAAE,KAAK,qBAAqB,EAAE,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAAE,KAAK,kBAAkB,EAAE,MAAM,WAAW,CAAC;AACvE,OAAO,EACL,QAAQ,EAAE,aAAa,EAAE,KAAK,eAAe,EAAE,KAAK,cAAc,EAClE,KAAK,YAAY,EAAE,KAAK,WAAW,EAAE,KAAK,gBAAgB,EAAE,KAAK,gBAAgB,GAClF,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAAE,KAAK,oBAAoB,EAAE,MAAM,YAAY,CAAC;AAC3F,OAAO,EACL,oBAAoB,EAAE,mBAAmB,EACzC,KAAK,mBAAmB,EAAE,KAAK,2BAA2B,GAC3D,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAAE,iBAAiB,EACrC,KAAK,qBAAqB,EAAE,KAAK,uBAAuB,GACzD,MAAM,WAAW,CAAC"}

package/dist/index.js

@@ -2,8 +2,11 @@
  * @fileoverview A read-only Gmail source's grant: Google's read-only scope on the AgentOS redirect OAuth flow and
  * sealed-token store, with capped, cancellable OAuth calls and fixed failures; its text helpers: bounded
  * pre-storage sanitization of mail text, allow-listed headers and metadata, and conservative trimming of reply history
- * and signatures; and its thread mapper: bounded MIME reading of one thread into a sanitized account-source document
- * with message provenance, attachment listings and an explicit cache decision.
+ * and signatures; its thread mapper: bounded MIME reading of one thread into a sanitized account-source document
+ * with message provenance, attachment listings and an explicit cache decision; its read-only API client: capped
+ * profile, label, list, history and thread calls through the host's grant and quota services, with fixed failures;
+ * and its connector: the bounded selected-id account-source interface and the resumable sync provider, with private
+ * mailbox verification, composed with the released durable coordinator and a one-time identity probe.
  * @module agentos-ext-gmail-source
  */
 export { GmailOAuthFlow } from './GmailOAuthFlow.js';
@@ -12,4 +15,8 @@ export { GmailTextFault, sanitizeMailText, sanitizeMailMetadata, sanitizeMailHea
 export { messageText } from './messageText.js';
 export { GmailThreadMapper } from './mapThread.js';
 export { GmailMappingFault } from './mime.js';
+export { GmailApi, GmailApiFault, } from './gmail.js';
+export { classifyGmailHttp, gmailOAuthFault } from './retry.js';
+export { GmailSourceConnector, GmailConnectorFault, } from './GmailSourceConnector.js';
+export { runGmailSourceSync, verifyGmailSource, } from './sync.js';
 //# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,oBAAoB,EAAE,eAAe,GAEtC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB,GAG5E,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAyB,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAA8B,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAA2B,MAAM,WAAW,CAAC"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AACrD,OAAO,EACL,oBAAoB,EAAE,eAAe,GAEtC,MAAM,YAAY,CAAC;AACpB,OAAO,EACL,cAAc,EAAE,gBAAgB,EAAE,oBAAoB,EAAE,mBAAmB,GAG5E,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EAAE,WAAW,EAAyB,MAAM,kBAAkB,CAAC;AACtE,OAAO,EAAE,iBAAiB,EAA8B,MAAM,gBAAgB,CAAC;AAC/E,OAAO,EAAE,iBAAiB,EAA2B,MAAM,WAAW,CAAC;AACvE,OAAO,EACL,QAAQ,EAAE,aAAa,GAExB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,eAAe,EAA6B,MAAM,YAAY,CAAC;AAC3F,OAAO,EACL,oBAAoB,EAAE,mBAAmB,GAE1C,MAAM,2BAA2B,CAAC;AACnC,OAAO,EACL,kBAAkB,EAAE,iBAAiB,GAEtC,MAAM,WAAW,CAAC"}

package/dist/retry.d.ts

@@ -0,0 +1,44 @@
+import { SourceSyncFault, type SourceQuotaMethod, type SourceSyncFailureCode } from '@framers/agentos-ext-account-sources';
+/**
+ * What one Gmail API answer calls for: `ok` for a success; `refresh` for a 401, which earns one fresh access token and
+ * one repeat of the same call; `gone` for a canonical thread read's 404; `retry` for a rate limit or a server failure,
+ * with the scope its wait applies to and whether it is the provider's daily limit; `fault` for a fixed failure.
+ */
+export type GmailHttpDisposition = {
+    readonly kind: 'ok' | 'refresh' | 'gone';
+} | {
+    readonly kind: 'retry';
+    readonly code: 'rate_limited' | 'provider_unavailable';
+    readonly scope: 'project' | 'mailbox';
+    readonly daily: boolean;
+} | {
+    readonly kind: 'fault';
+    readonly code: SourceSyncFailureCode;
+};
+/**
+ * Classifies one Gmail API answer by its status and, for a 403, the exact reason tokens of at most 32 error entries.
+ * A 429 or 5xx is retried whether or not its body parses. A 403 `domainPolicy` wins over any other reason, then
+ * `insufficientPermissions`, `dailyLimitExceeded` (the whole project, daily), `rateLimitExceeded` (the whole project)
+ * and `userRateLimitExceeded` (the mailbox). A 404 is `gone` for a thread read and `history_expired` for a history
+ * page. Any other answer, an unknown reason included, is the fixed `invalid_response`, never an inferred grant loss.
+ * Only exact reason tokens influence policy. Provider text never leaves this function.
+ *
+ * @param status The HTTP status.
+ * @param body The answer's parsed JSON, or null when it did not parse.
+ * @param method The kind of call that was answered.
+ */
+export declare function classifyGmailHttp(status: number, body: unknown, method: SourceQuotaMethod): GmailHttpDisposition;
+/**
+ * Translates a failure of an OAuth grant operation into a fixed account-source fault. A missing grant or Google's
+ * `invalid_grant` is `grant_rejected` and `invalid_scope` or a scope check is `insufficient_scope`, the two that start
+ * the coordinator's fenced grant-loss lifecycle; a 429 is `rate_limited`; a 5xx, `server_error` or
+ * `temporarily_unavailable` is `provider_unavailable`; a transport failure or deadline is `network`. A refused client
+ * (`invalid_client`, `unauthorized_client`) needs an operator's configuration fix and, like every other failure, is
+ * `invalid_response`: never a revoked mailbox. A `SourceSyncFault` is returned unchanged.
+ *
+ * Call inside withGrant so that its fixed-fault boundary preserves this distinction.
+ *
+ * @param error What the grant operation threw.
+ */
+export declare function gmailOAuthFault(error: unknown): SourceSyncFault;
+//# sourceMappingURL=retry.d.ts.map

package/dist/retry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.d.ts","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAOA,OAAO,EACL,eAAe,EAAE,KAAK,iBAAiB,EAAE,KAAK,qBAAqB,EACpE,MAAM,sCAAsC,CAAC;AAG9C;;;;GAIG;AACH,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,IAAI,GAAG,SAAS,GAAG,MAAM,CAAA;CAAE,GAC5C;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,cAAc,GAAG,sBAAsB,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,SAAS,GAAG,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,OAAO,CAAA;CAAE,GAClJ;IAAE,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAA;CAAE,CAAC;AAMrE;;;;;;;;;;;GAWG;AACH,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,OAAO,EAAE,MAAM,EAAE,iBAAiB,GAAG,oBAAoB,CA0BhH;AACD;;;;;;;;;;;GAWG;AACH,wBAAgB,eAAe,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,CAiB/D"}

package/dist/retry.js

@@ -0,0 +1,102 @@
+/**
+ * @fileoverview Fixed classification of Gmail API answers and OAuth refresh failures. Only an HTTP status and exact,
+ * allow-listed reason tokens decide a disposition; provider text, error bodies and causes never reach a result or an
+ * error. The durable account-source coordinator owns retry episodes, backoff and grant-loss handling.
+ * @module agentos-ext-gmail-source/retry
+ */
+import { OAuthGrantRefused } from '@framers/agentos/auth';
+import { SourceSyncFault, } from '@framers/agentos-ext-account-sources';
+import { GmailOAuthFault } from './types.js';
+// A plain object, or null for anything else.
+function record(value) {
+    return value !== null && typeof value === 'object' && !Array.isArray(value)
+        ? value : null;
+}
+/**
+ * Classifies one Gmail API answer by its status and, for a 403, the exact reason tokens of at most 32 error entries.
+ * A 429 or 5xx is retried whether or not its body parses. A 403 `domainPolicy` wins over any other reason, then
+ * `insufficientPermissions`, `dailyLimitExceeded` (the whole project, daily), `rateLimitExceeded` (the whole project)
+ * and `userRateLimitExceeded` (the mailbox). A 404 is `gone` for a thread read and `history_expired` for a history
+ * page. Any other answer, an unknown reason included, is the fixed `invalid_response`, never an inferred grant loss.
+ * Only exact reason tokens influence policy. Provider text never leaves this function.
+ *
+ * @param status The HTTP status.
+ * @param body The answer's parsed JSON, or null when it did not parse.
+ * @param method The kind of call that was answered.
+ */
+export function classifyGmailHttp(status, body, method) {
+    if (status === 200)
+        return { kind: 'ok' };
+    if (status === 401)
+        return { kind: 'refresh' };
+    if (status === 404 && method === 'read')
+        return { kind: 'gone' };
+    if (status === 404 && method === 'changes')
+        return { kind: 'fault', code: 'history_expired' };
+    const retry = (code, scope, daily = false) => ({ kind: 'retry', code, scope, daily });
+    if (status === 429)
+        return retry('rate_limited', 'mailbox');
+    if (status >= 500 && status <= 599)
+        return retry('provider_unavailable', 'mailbox');
+    if (status === 403) {
+        const entries = record(record(body)?.error)?.errors;
+        const reasons = new Set();
+        if (Array.isArray(entries) && entries.length <= 32) {
+            for (const entry of entries) {
+                const reason = record(entry)?.reason;
+                if (typeof reason === 'string' && ['domainPolicy', 'insufficientPermissions', 'dailyLimitExceeded',
+                    'rateLimitExceeded', 'userRateLimitExceeded'].includes(reason))
+                    reasons.add(reason);
+            }
+        }
+        if (reasons.has('domainPolicy'))
+            return { kind: 'fault', code: 'domain_policy' };
+        if (reasons.has('insufficientPermissions'))
+            return { kind: 'fault', code: 'insufficient_scope' };
+        if (reasons.has('dailyLimitExceeded'))
+            return retry('rate_limited', 'project', true);
+        if (reasons.has('rateLimitExceeded'))
+            return retry('rate_limited', 'project');
+        if (reasons.has('userRateLimitExceeded'))
+            return retry('rate_limited', 'mailbox');
+    }
+    return { kind: 'fault', code: 'invalid_response' };
+}
+/**
+ * Translates a failure of an OAuth grant operation into a fixed account-source fault. A missing grant or Google's
+ * `invalid_grant` is `grant_rejected` and `invalid_scope` or a scope check is `insufficient_scope`, the two that start
+ * the coordinator's fenced grant-loss lifecycle; a 429 is `rate_limited`; a 5xx, `server_error` or
+ * `temporarily_unavailable` is `provider_unavailable`; a transport failure or deadline is `network`. A refused client
+ * (`invalid_client`, `unauthorized_client`) needs an operator's configuration fix and, like every other failure, is
+ * `invalid_response`: never a revoked mailbox. A `SourceSyncFault` is returned unchanged.
+ *
+ * Call inside withGrant so that its fixed-fault boundary preserves this distinction.
+ *
+ * @param error What the grant operation threw.
+ */
+export function gmailOAuthFault(error) {
+    if (error instanceof SourceSyncFault)
+        return error;
+    if (error instanceof GmailOAuthFault) {
+        if (error.reason === 'scope')
+            return new SourceSyncFault('insufficient_scope');
+        if (error.reason === 'network' || error.reason === 'timeout')
+            return new SourceSyncFault('network');
+        if (error.reason === 'cancelled')
+            return new SourceSyncFault('cancelled');
+        return new SourceSyncFault('invalid_response');
+    }
+    if (error instanceof OAuthGrantRefused) {
+        if (error.reason === 'missing' || error.providerError === 'invalid_grant')
+            return new SourceSyncFault('grant_rejected');
+        if (error.providerError === 'invalid_scope')
+            return new SourceSyncFault('insufficient_scope');
+        if (error.status === 429)
+            return new SourceSyncFault('rate_limited');
+        if ((error.status !== undefined && error.status >= 500) || ['server_error', 'temporarily_unavailable'].includes(error.providerError ?? '')) {
+            return new SourceSyncFault('provider_unavailable');
+        }
+    }
+    return new SourceSyncFault('invalid_response');
+}
+//# sourceMappingURL=retry.js.map

package/dist/retry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"retry.js","sourceRoot":"","sources":["../src/retry.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAAE,iBAAiB,EAAE,MAAM,uBAAuB,CAAC;AAC1D,OAAO,EACL,eAAe,GAChB,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,eAAe,EAAE,MAAM,YAAY,CAAC;AAW7C,6CAA6C;AAC7C,SAAS,MAAM,CAAC,KAAc;IAC5B,OAAO,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QACzE,CAAC,CAAC,KAAgC,CAAC,CAAC,CAAC,IAAI,CAAC;AAC9C,CAAC;AACD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc,EAAE,IAAa,EAAE,MAAyB;IACxF,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC;IAC/C,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IACjE,IAAI,MAAM,KAAK,GAAG,IAAI,MAAM,KAAK,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC;IAC9F,MAAM,KAAK,GAAG,CAAC,IAA6C,EAAE,KAA4B,EAAE,KAAK,GAAG,KAAK,EAAwB,EAAE,CACjI,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IAC1C,IAAI,MAAM,KAAK,GAAG;QAAE,OAAO,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IAC5D,IAAI,MAAM,IAAI,GAAG,IAAI,MAAM,IAAI,GAAG;QAAE,OAAO,KAAK,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC;IACpF,IAAI,MAAM,KAAK,GAAG,EAAE,CAAC;QACnB,MAAM,OAAO,GAAG,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,KAAK,CAAC,EAAE,MAAM,CAAC;QACpD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;QAClC,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,IAAI,OAAO,CAAC,MAAM,IAAI,EAAE,EAAE,CAAC;YACnD,KAAK,MAAM,KAAK,IAAI,OAAO,EAAE,CAAC;gBAC5B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC;gBACrC,IAAI,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,cAAc,EAAE,yBAAyB,EAAE,oBAAoB;oBAChG,mBAAmB,EAAE,uBAAuB,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,OAAO,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;YACxF,CAAC;QACH,CAAC;QACD,IAAI,OAAO,CAAC,GAAG,CAAC,cAAc,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACjF,IAAI,OAAO,CAAC,GAAG,CAAC,yBAAyB,CAAC;YAAE,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,CAAC;QACjG,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,CAAC;YAAE,OAAO,KAAK,CAAC,cAAc,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;QACrF,IAAI,OAAO,CAAC,GAAG,CAAC,mBAAmB,CAAC;YAAE,OAAO,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;QAC9E,IAAI,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC;YAAE,OAAO,KAAK,CAAC,cAAc,EAAE,SAAS,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,kBAAkB,EAAE,CAAC;AACrD,CAAC;AACD;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,eAAe,CAAC,KAAc;IAC5C,IAAI,KAAK,YAAY,eAAe;QAAE,OAAO,KAAK,CAAC;IACnD,IAAI,KAAK,YAAY,eAAe,EAAE,CAAC;QACrC,IAAI,KAAK,CAAC,MAAM,KAAK,OAAO;YAAE,OAAO,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;QAC/E,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS;YAAE,OAAO,IAAI,eAAe,CAAC,SAAS,CAAC,CAAC;QACpG,IAAI,KAAK,CAAC,MAAM,KAAK,WAAW;YAAE,OAAO,IAAI,eAAe,CAAC,WAAW,CAAC,CAAC;QAC1E,OAAO,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACjD,CAAC;IACD,IAAI,KAAK,YAAY,iBAAiB,EAAE,CAAC;QACvC,IAAI,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,aAAa,KAAK,eAAe;YAAE,OAAO,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;QACxH,IAAI,KAAK,CAAC,aAAa,KAAK,eAAe;YAAE,OAAO,IAAI,eAAe,CAAC,oBAAoB,CAAC,CAAC;QAC9F,IAAI,KAAK,CAAC,MAAM,KAAK,GAAG;YAAE,OAAO,IAAI,eAAe,CAAC,cAAc,CAAC,CAAC;QACrE,IAAI,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,IAAI,KAAK,CAAC,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,cAAc,EAAE,yBAAyB,CAAC,CAAC,QAAQ,CAAC,KAAK,CAAC,aAAa,IAAI,EAAE,CAAC,EAAE,CAAC;YAC3I,OAAO,IAAI,eAAe,CAAC,sBAAsB,CAAC,CAAC;QACrD,CAAC;IACH,CAAC;IACD,OAAO,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;AACjD,CAAC"}

package/dist/sync.d.ts

@@ -0,0 +1,66 @@
+/**
+ * @fileoverview The Gmail connector composed with the released account-source coordinator: one durable sync run with
+ * a fresh connector that is disposed whatever the run's outcome, and the one-time identity probe a host runs after it
+ * installs a grant. Neither adds scheduling, retries, quota reservations or checkpoint state of its own.
+ * @module agentos-ext-gmail-source/sync
+ */
+import { type AccountSourceSyncOptions, type SourceSyncRunResult, type SourceSyncScope, type SourceSyncTrigger, type SourceRevocations, type SourceSyncRetryReason } from '@framers/agentos-ext-account-sources';
+import { type GmailSourceConnectorOptions } from './GmailSourceConnector.js';
+/**
+ * What a Gmail sync run and the identity probe are built from.
+ *
+ * @typeParam Prepared - The host's prepared-document type of its sync store and revocation service.
+ */
+export interface GmailSourceRunOptions<Prepared> {
+    /** The connection. */
+    readonly scope: SourceSyncScope;
+    /** The released coordinator's options without the provider and the lifecycle, which the run supplies. */
+    readonly coordinator: Omit<AccountSourceSyncOptions<Prepared>, 'provider' | 'lifecycle'>;
+    /** The released revocation service: the coordinator's lifecycle and the connector's grant operation. */
+    readonly revocations: SourceRevocations<Prepared>;
+    /** The connector's options without the store, the current-handle getter, the revocation service and the clock. */
+    readonly connector: Omit<GmailSourceConnectorOptions<Prepared>, 'store' | 'currentHandle' | 'revocations' | 'clock'>;
+}
+/**
+ * How an identity probe ended: `verified` once the bound mailbox accepted the profile; `busy` when another lease is
+ * held, which is no approval; `stale` when the generation or the lease moved on; `reconnect` after a refused grant or
+ * a different mailbox was fenced; `unavailable` when the store could not be reached; `cancelled`; `deferred` with the
+ * recorded retry; `failed` with a fixed reason.
+ */
+export type GmailSourceVerification = {
+    readonly kind: 'verified' | 'busy' | 'stale' | 'reconnect' | 'unavailable' | 'cancelled';
+} | {
+    readonly kind: 'deferred';
+    readonly reason: SourceSyncRetryReason;
+    readonly retryAt: number;
+} | {
+    readonly kind: 'failed';
+    readonly reason: 'domain_policy' | 'invalid_response';
+};
+/**
+ * Runs one durable sync of the connection with the released account-source coordinator and a fresh Gmail connector,
+ * which it disposes when the run ends, whatever the outcome. No extra scheduling, retries, quota reservation or
+ * checkpoint state.
+ *
+ * @param options The scope, the coordinator's options, the revocation service and the connector's options.
+ * @param trigger A scheduled poll or a person's request.
+ * @param signal Aborting it ends the run with `yielded`.
+ * @returns The coordinator's result.
+ */
+export declare function runGmailSourceSync<Prepared>(options: GmailSourceRunOptions<Prepared>, trigger: SourceSyncTrigger, signal?: AbortSignal): Promise<SourceSyncRunResult>;
+/**
+ * One post-install identity probe on a real lease; no enumeration, source write or cursor commit.
+ *
+ * It recovers the host's purges and the store's controls, claims a scheduled lease, checks the expected generation,
+ * reads the profile through the grant service and lets the host's binding accept the mailbox, then releases the
+ * lease. A refused grant or a different mailbox is fenced through the lifecycle; a transient failure records a retry
+ * no sooner than one polling interval away. It opens no cycle and sets no cursor or last sync time.
+ *
+ * @param options The scope, the coordinator's options, the revocation service and the connector's options.
+ * @param expectedGeneration The generation the host installed the grant into.
+ * @param signal Cancels the probe.
+ * @returns How the probe ended.
+ * @throws {SourceSyncFault} `invalid_response` for a generation that is not a nonnegative safe integer.
+ */
+export declare function verifyGmailSource<Prepared>(options: GmailSourceRunOptions<Prepared>, expectedGeneration: number, signal?: AbortSignal): Promise<GmailSourceVerification>;
+//# sourceMappingURL=sync.d.ts.map

package/dist/sync.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.d.ts","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EAEL,KAAK,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,KAAK,eAAe,EAC7E,KAAK,iBAAiB,EACtB,KAAK,iBAAiB,EAAE,KAAK,qBAAqB,EACnD,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAwB,KAAK,2BAA2B,EAAE,MAAM,2BAA2B,CAAC;AAEnG;;;;GAIG;AACH,MAAM,WAAW,qBAAqB,CAAC,QAAQ;IAC7C,sBAAsB;IACtB,QAAQ,CAAC,KAAK,EAAE,eAAe,CAAC;IAChC,yGAAyG;IACzG,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,wBAAwB,CAAC,QAAQ,CAAC,EAAE,UAAU,GAAG,WAAW,CAAC,CAAC;IACzF,wGAAwG;IACxG,QAAQ,CAAC,WAAW,EAAE,iBAAiB,CAAC,QAAQ,CAAC,CAAC;IAClD,kHAAkH;IAClH,QAAQ,CAAC,SAAS,EAAE,IAAI,CAAC,2BAA2B,CAAC,QAAQ,CAAC,EAAE,OAAO,GAAG,eAAe,GAAG,aAAa,GAAG,OAAO,CAAC,CAAC;CACtH;AACD;;;;;GAKG;AACH,MAAM,MAAM,uBAAuB,GAC/B;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,GAAG,MAAM,GAAG,OAAO,GAAG,WAAW,GAAG,aAAa,GAAG,WAAW,CAAA;CAAE,GAC5F;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,qBAAqB,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAC/F;IAAE,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,eAAe,GAAG,kBAAkB,CAAA;CAAE,CAAC;AAcvF;;;;;;;;;GASG;AACH,wBAAsB,kBAAkB,CAAC,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC,QAAQ,CAAC,EACzF,OAAO,EAAE,iBAAiB,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAYhF;AAED;;;;;;;;;;;;;GAaG;AACH,wBAAsB,iBAAiB,CAAC,QAAQ,EAAE,OAAO,EAAE,qBAAqB,CAAC,QAAQ,CAAC,EACxF,kBAAkB,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,WAAW,GAAG,OAAO,CAAC,uBAAuB,CAAC,CAyDpF"}

package/dist/sync.js

@@ -0,0 +1,145 @@
+/**
+ * @fileoverview The Gmail connector composed with the released account-source coordinator: one durable sync run with
+ * a fresh connector that is disposed whatever the run's outcome, and the one-time identity probe a host runs after it
+ * installs a grant. Neither adds scheduling, retries, quota reservations or checkpoint state of its own.
+ * @module agentos-ext-gmail-source/sync
+ */
+import { AccountSourceSync, SourceSyncFault, } from '@framers/agentos-ext-account-sources';
+import { GmailSourceConnector } from './GmailSourceConnector.js';
+// A connector on the coordinator's live handle getter, refusing a handle for any other connection.
+function connectorFor(options, current) {
+    const currentHandle = () => {
+        const handle = current();
+        const actual = handle.lease.scope;
+        if (actual.tenantId !== options.scope.tenantId || actual.ownerId !== options.scope.ownerId
+            || actual.connectionId !== options.scope.connectionId)
+            throw new SourceSyncFault('grant_rejected');
+        return handle;
+    };
+    return new GmailSourceConnector({ ...options.connector, store: options.coordinator.store,
+        revocations: options.revocations, currentHandle, clock: options.coordinator.clock });
+}
+/**
+ * Runs one durable sync of the connection with the released account-source coordinator and a fresh Gmail connector,
+ * which it disposes when the run ends, whatever the outcome. No extra scheduling, retries, quota reservation or
+ * checkpoint state.
+ *
+ * @param options The scope, the coordinator's options, the revocation service and the connector's options.
+ * @param trigger A scheduled poll or a person's request.
+ * @param signal Aborting it ends the run with `yielded`.
+ * @returns The coordinator's result.
+ */
+export async function runGmailSourceSync(options, trigger, signal) {
+    const connectors = [];
+    try {
+        const coordinator = new AccountSourceSync({ ...options.coordinator, lifecycle: options.revocations,
+            provider: async (currentHandle) => {
+                const connector = connectorFor(options, currentHandle);
+                connectors.push(connector);
+                return connector.sync;
+            } });
+        return await coordinator.run(options.scope, trigger, signal);
+    }
+    finally {
+        for (const connector of connectors)
+            connector.dispose();
+    }
+}
+/**
+ * One post-install identity probe on a real lease; no enumeration, source write or cursor commit.
+ *
+ * It recovers the host's purges and the store's controls, claims a scheduled lease, checks the expected generation,
+ * reads the profile through the grant service and lets the host's binding accept the mailbox, then releases the
+ * lease. A refused grant or a different mailbox is fenced through the lifecycle; a transient failure records a retry
+ * no sooner than one polling interval away. It opens no cycle and sets no cursor or last sync time.
+ *
+ * @param options The scope, the coordinator's options, the revocation service and the connector's options.
+ * @param expectedGeneration The generation the host installed the grant into.
+ * @param signal Cancels the probe.
+ * @returns How the probe ended.
+ * @throws {SourceSyncFault} `invalid_response` for a generation that is not a nonnegative safe integer.
+ */
+export async function verifyGmailSource(options, expectedGeneration, signal) {
+    if (!Number.isSafeInteger(expectedGeneration) || expectedGeneration < 0)
+        throw new SourceSyncFault('invalid_response');
+    if (signal?.aborted)
+        return { kind: 'cancelled' };
+    const store = options.coordinator.store;
+    const clock = options.coordinator.clock ?? Date.now;
+    let handle = null;
+    let connector = null;
+    let pollMs = 900_000;
+    let result = { kind: 'unavailable' };
+    const current = () => {
+        if (handle === null)
+            throw new SourceSyncFault('grant_rejected');
+        return handle;
+    };
+    try {
+        await options.revocations.recover(options.scope);
+        await store.recoverControl(options.scope);
+        handle = await store.claim(options.scope, 'scheduled');
+        if (handle === null)
+            result = { kind: 'busy' };
+        else if (handle.lease.generation !== expectedGeneration)
+            result = { kind: 'stale' };
+        else {
+            const snapshot = await store.snapshot(options.scope);
+            if (!snapshot || snapshot.state.generation !== expectedGeneration)
+                result = { kind: 'stale' };
+            else {
+                pollMs = snapshot.policy.pollMs;
+                connector = connectorFor(options, current);
+                const request = { scope: options.scope, generation: expectedGeneration,
+                    cycleId: 'identity-check', cutoff: clock(), policy: snapshot.policy, signal };
+                await connector.sync.begin(request);
+                result = { kind: 'verified' };
+            }
+        }
+    }
+    catch (error) {
+        try {
+            const fault = error instanceof SourceSyncFault ? error : new SourceSyncFault('storage_unavailable');
+            if (signal?.aborted || fault.code === 'cancelled')
+                result = { kind: 'cancelled' };
+            else if (handle === null)
+                result = { kind: 'unavailable' };
+            else if (fault.code === 'grant_rejected' || fault.code === 'insufficient_scope') {
+                const stopped = await options.revocations.loseGrant(handle, fault.code);
+                result = { kind: stopped ? 'reconnect' : 'stale' };
+                handle = null;
+            }
+            else if (fault.code === 'domain_policy' || fault.code === 'invalid_response' || fault.code === 'history_expired') {
+                const reason = fault.code === 'domain_policy' ? 'domain_policy' : 'invalid_response';
+                const released = await store.release(handle, { type: 'sync_failed', reason });
+                result = released ? { kind: 'failed', reason } : { kind: 'stale' };
+                handle = null;
+            }
+            else {
+                const reason = fault.code;
+                const now = clock();
+                const retryAt = Math.max(now + pollMs, fault.retryAt ?? 0);
+                const released = await store.release(handle, { type: 'sync_deferred', reason, retryAt });
+                result = released ? { kind: 'deferred', reason, retryAt } : { kind: 'stale' };
+                handle = null;
+            }
+        }
+        catch {
+            result = { kind: 'unavailable' };
+        }
+    }
+    finally {
+        connector?.dispose();
+        if (handle !== null) {
+            try {
+                if (!await store.release(handle))
+                    result = { kind: 'stale' };
+            }
+            catch {
+                result = { kind: 'unavailable' };
+            }
+        }
+    }
+    return result;
+}
+//# sourceMappingURL=sync.js.map

package/dist/sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sync.js","sourceRoot":"","sources":["../src/sync.ts"],"names":[],"mappings":"AAAA;;;;;GAKG;AACH,OAAO,EACL,iBAAiB,EAAE,eAAe,GAInC,MAAM,sCAAsC,CAAC;AAC9C,OAAO,EAAE,oBAAoB,EAAoC,MAAM,2BAA2B,CAAC;AA4BnG,mGAAmG;AACnG,SAAS,YAAY,CAAW,OAAwC,EAAE,OAA+B;IACvG,MAAM,aAAa,GAAG,GAAqB,EAAE;QAC3C,MAAM,MAAM,GAAG,OAAO,EAAE,CAAC;QAAC,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,KAAK,CAAC;QAC5D,IAAI,MAAM,CAAC,QAAQ,KAAK,OAAO,CAAC,KAAK,CAAC,QAAQ,IAAI,MAAM,CAAC,OAAO,KAAK,OAAO,CAAC,KAAK,CAAC,OAAO;eACrF,MAAM,CAAC,YAAY,KAAK,OAAO,CAAC,KAAK,CAAC,YAAY;YAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;QACrG,OAAO,MAAM,CAAC;IAChB,CAAC,CAAC;IACF,OAAO,IAAI,oBAAoB,CAAC,EAAE,GAAG,OAAO,CAAC,SAAS,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK;QACtF,WAAW,EAAE,OAAO,CAAC,WAAW,EAAE,aAAa,EAAE,KAAK,EAAE,OAAO,CAAC,WAAW,CAAC,KAAK,EAAE,CAAC,CAAC;AACzF,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,CAAC,KAAK,UAAU,kBAAkB,CAAW,OAAwC,EACzF,OAA0B,EAAE,MAAoB;IAChD,MAAM,UAAU,GAAqC,EAAE,CAAC;IACxD,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,IAAI,iBAAiB,CAAC,EAAE,GAAG,OAAO,CAAC,WAAW,EAAE,SAAS,EAAE,OAAO,CAAC,WAAW;YAChG,QAAQ,EAAE,KAAK,EAAE,aAAa,EAAE,EAAE;gBAChC,MAAM,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,aAAa,CAAC,CAAC;gBAAC,UAAU,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC;gBACnF,OAAO,SAAS,CAAC,IAAI,CAAC;YACxB,CAAC,EAAE,CAAC,CAAC;QACP,OAAO,MAAM,WAAW,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,OAAO,EAAE,MAAM,CAAC,CAAC;IAC/D,CAAC;YAAS,CAAC;QACT,KAAK,MAAM,SAAS,IAAI,UAAU;YAAE,SAAS,CAAC,OAAO,EAAE,CAAC;IAC1D,CAAC;AACH,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAW,OAAwC,EACxF,kBAA0B,EAAE,MAAoB;IAChD,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,kBAAkB,CAAC,IAAI,kBAAkB,GAAG,CAAC;QAAE,MAAM,IAAI,eAAe,CAAC,kBAAkB,CAAC,CAAC;IACvH,IAAI,MAAM,EAAE,OAAO;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAClD,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,CAAC;IACxC,MAAM,KAAK,GAAG,OAAO,CAAC,WAAW,CAAC,KAAK,IAAI,IAAI,CAAC,GAAG,CAAC;IACpD,IAAI,MAAM,GAA4B,IAAI,CAAC;IAC3C,IAAI,SAAS,GAA0C,IAAI,CAAC;IAC5D,IAAI,MAAM,GAAG,OAAO,CAAC;IACrB,IAAI,MAAM,GAA4B,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;IAC9D,MAAM,OAAO,GAAG,GAAqB,EAAE;QACrC,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,IAAI,eAAe,CAAC,gBAAgB,CAAC,CAAC;QAAC,OAAO,MAAM,CAAC;IAClF,CAAC,CAAC;IACF,IAAI,CAAC;QACH,MAAM,OAAO,CAAC,WAAW,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QACjD,MAAM,KAAK,CAAC,cAAc,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;QAC1C,MAAM,GAAG,MAAM,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,EAAE,WAAW,CAAC,CAAC;QACvD,IAAI,MAAM,KAAK,IAAI;YAAE,MAAM,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;aAC1C,IAAI,MAAM,CAAC,KAAK,CAAC,UAAU,KAAK,kBAAkB;YAAE,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;aAC/E,CAAC;YACJ,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;YACrD,IAAI,CAAC,QAAQ,IAAI,QAAQ,CAAC,KAAK,CAAC,UAAU,KAAK,kBAAkB;gBAAE,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;iBACzF,CAAC;gBACJ,MAAM,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC;gBAChC,SAAS,GAAG,YAAY,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;gBAC3C,MAAM,OAAO,GAAsB,EAAE,KAAK,EAAE,OAAO,CAAC,KAAK,EAAE,UAAU,EAAE,kBAAkB;oBACvF,OAAO,EAAE,gBAAgB,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,EAAE,CAAC;gBAChF,MAAM,SAAS,CAAC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;gBACpC,MAAM,GAAG,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC;YAChC,CAAC;QACH,CAAC;IACH,CAAC;IAAC,OAAO,KAAK,EAAE,CAAC;QACf,IAAI,CAAC;YACH,MAAM,KAAK,GAAG,KAAK,YAAY,eAAe,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,eAAe,CAAC,qBAAqB,CAAC,CAAC;YACpG,IAAI,MAAM,EAAE,OAAO,IAAI,KAAK,CAAC,IAAI,KAAK,WAAW;gBAAE,MAAM,GAAG,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;iBAC7E,IAAI,MAAM,KAAK,IAAI;gBAAE,MAAM,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;iBACtD,IAAI,KAAK,CAAC,IAAI,KAAK,gBAAgB,IAAI,KAAK,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;gBAChF,MAAM,OAAO,GAAG,MAAM,OAAO,CAAC,WAAW,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC;gBACxE,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YACpE,CAAC;iBAAM,IAAI,KAAK,CAAC,IAAI,KAAK,eAAe,IAAI,KAAK,CAAC,IAAI,KAAK,kBAAkB,IAAI,KAAK,CAAC,IAAI,KAAK,iBAAiB,EAAE,CAAC;gBACnH,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,KAAK,eAAe,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,kBAAkB,CAAC;gBACrF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC,CAAC;gBAC9E,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YACpF,CAAC;iBAAM,CAAC;gBACN,MAAM,MAAM,GAA0B,KAAK,CAAC,IAAI,CAAC;gBACjD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;gBAAC,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,GAAG,GAAG,MAAM,EAAE,KAAK,CAAC,OAAO,IAAI,CAAC,CAAC,CAAC;gBAChF,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,eAAe,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC;gBACzF,MAAM,GAAG,QAAQ,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;gBAAC,MAAM,GAAG,IAAI,CAAC;YAC/F,CAAC;QACH,CAAC;QAAC,MAAM,CAAC;YAAC,MAAM,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;QAAC,CAAC;IAC/C,CAAC;YAAS,CAAC;QACT,SAAS,EAAE,OAAO,EAAE,CAAC;QACrB,IAAI,MAAM,KAAK,IAAI,EAAE,CAAC;YACpB,IAAI,CAAC;gBAAC,IAAI,CAAC,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;oBAAE,MAAM,GAAG,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;YAAC,CAAC;YACrE,MAAM,CAAC;gBAAC,MAAM,GAAG,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAAC,CAAC;QAC7C,CAAC;IACH,CAAC;IACD,OAAO,MAAM,CAAC;AAChB,CAAC"}

package/manifest.json

@@ -2,7 +2,7 @@
   "$schema": "https://agentos.sh/schemas/extension-manifest-v1.json",
   "id": "com.framers.productivity.gmail-source",
   "name": "Gmail Source",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Read-only OAuth and bounded personal Gmail source helpers",
   "author": {
     "name": "Frame",
@@ -11,7 +11,7 @@
   },
   "license": "Apache-2.0",
   "keywords": ["gmail", "sources", "oauth"],
-  "agentosVersion": ">=0.13.134",
+  "agentosVersion": ">=0.13.146",
   "categories": ["productivity"],
   "repository": { "type": "git", "url": "https://github.com/framerslab/agentos-extensions" },
   "extensions": [{

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@framers/agentos-ext-gmail-source",
-  "version": "0.3.0",
+  "version": "0.5.0",
   "description": "Read-only OAuth and bounded personal Gmail source helpers",
   "type": "module",
   "sideEffects": false,
@@ -43,7 +43,7 @@
     "node": ">=20.19.0"
   },
   "peerDependencies": {
-    "@framers/agentos": ">=0.13.134",
+    "@framers/agentos": ">=0.13.146",
     "@framers/agentos-ext-account-sources": ">=0.7.0"
   },
   "devDependencies": {
@@ -51,8 +51,8 @@
     "@vitest/coverage-v8": "^3.2.7",
     "typescript": "5.4.5",
     "vitest": "^3.2.7",
-    "@framers/agentos": "^0.13.134",
-    "@framers/agentos-ext-account-sources": "^0.7.0"
+    "@framers/agentos-ext-account-sources": "^0.7.2",
+    "@framers/agentos": "^0.13.134"
   },
   "scripts": {
     "build": "tsc",