@mercury-fw/channel-google-chat 0.1.3 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @mercury-fw/channel-google-chat
 
+## 0.3.0
+
+### Minor Changes
+
+- 521db42: Isolation between the people an agent talks to.
+
+  - The core keeps one identity per person, `<provider>:<id>`, so two providers issuing the same id are two people. Memory, the conversation archive, the tool log and pending confirmations are keyed on it.
+  - The wiki has a common area (`curated/`) everyone reads and an area per person (`users/<key>/`), which the model sees as `personal/`. Listing, reading and grepping reach the common area and the caller's own area, nothing else.
+  - Breaking: the model's `write_file` writes only under `personal/notes/`. The new `promote_note` tool copies one of the person's notes into `curated/`, and only once they confirm it with the token.
+  - A confirmation can only be confirmed by whoever staged it, in the same session. Its note is written once, in the person's area: a staged note no longer stays "pending" after it's resolved, for ids such as Google Chat's `users/<n>`.
+  - Breaking, `@mercury-fw/channel-types`: channel contract 3. `confirm` and `resolveConfirmation` take the caller's `Principal`, and so does every read getter except `manifest` and `health`. Channels written for contract 2 are refused.
+  - `@mercury-fw/confirm-engine`: the store's `stage`, `take` and `pending` take the owner's key.
+  - Breaking, `@mercury-fw/channel-http`: every read route returns only the caller's data. `/conversation?id=` takes one of the caller's `conversationId`s and `/conversations` lists them by `conversationId`. `/wiki/read` answers `404` outside what the caller can see, and `/memory/scroll` answers `400` for a collection that isn't kept per person.
+  - `@mercury-fw/channel-google-chat`: on channel contract 3.
+  - At startup, an instance's existing data moves to the new layout. Google Chat and terminal notes go into their areas, and Qdrant's ids go onto the new keys. Ids that don't say which provider they came from are left in place and logged.
+  - `mfw vault read` refuses a path outside the vault.
+  - The admin panel's wiki box edits the common area with the operator's tools (list, read, grep, `write_curated`), the same the nightly review uses.
+
+## 0.2.0
+
+### Minor Changes
+
+- 8bed46b: - A turn carries a `Principal` (the person behind it and the provider that vouched for them) instead of the opaque `userId` and `wikiUserId`; the core derives every per-person id from it.
+  - Episodic memory follows the principal, not the channel: a session is captured whenever a provider vouched for the person. Google Chat keeps the ids it had; the terminal and the HTTP channel (until it authenticates its callers) send a principal nobody vouched for, so they stay out of episodic memory as before.
+  - The HTTP channel accepts a `conversationId` on `/turn` and `/confirm` only made of letters, digits, `-` and `_`, up to 128 characters once trimmed, and answers `400` otherwise: a client-chosen id can no longer reach another user's wiki notes, forge log lines or break the turn. An existing HTTP conversation whose id has other characters can still be read with `/conversation`, but not continued. `/conversation` keeps opening any session key `/conversations` lists, whatever channel it came from.
+  - The model's wiki read tools refuse a per-user id that isn't one path segment, as writes already did.
+  - `CHANNEL_API_VERSION` is 2: a channel written for version 1 is refused at load.
+  - The first-party channels declare their channel api version as a literal, so an older channel can't claim a newer contract it doesn't implement.
+
 ## 0.1.3
 
 ### Patch Changes

package/dist/google-chat-provider.d.ts

@@ -21,7 +21,7 @@
  */
 import { sendMessage, sendCard, updateCard, getOrCreateDmSpace, type ServiceAccountCredentials, type TokenSource } from "./google-chat-app-client.ts";
 import { type PubSubSubscription } from "./google-chat-pubsub-stream.ts";
-import { type Provider } from "@mercury-fw/channel-types";
+import { type Provider, type Principal } from "@mercury-fw/channel-types";
 /**
  * Composite session key: space + sender. Deliberately does NOT include
  * `thread` — confirmed live (two consecutive messages in the same DM
@@ -69,7 +69,7 @@ export type GoogleChatProviderDeps = {
      * the channel's contact with confirmation — the store, vault and note-writer
      * stay in the core.
      */
-    confirm: (token: string, sessionKey: string, userId: string) => Promise<string | null>;
+    confirm: (token: string, sessionKey: string, principal: Principal) => Promise<string | null>;
     /**
      * Handles a `CARD_CLICKED` event's action parameters. Defaults to resolving
      * the confirm button's token through `deps.confirm` (the same path a bare

package/dist/index.d.ts

@@ -7,5 +7,5 @@
  * missing is a misconfiguration: `build()` throws and the loader skips this
  * channel fail-soft, leaving the rest of Mercury up.
  */
-import { type ChannelPlugin } from "@mercury-fw/channel-types";
+import type { ChannelPlugin } from "@mercury-fw/channel-types";
 export declare const googleChatChannel: ChannelPlugin;

package/google-chat-provider.ts

@@ -40,6 +40,7 @@ import {
   type Provider,
   type HandleTurn,
   type TurnSink,
+  type Principal,
 } from "@mercury-fw/channel-types";
 
 /**
@@ -257,7 +258,7 @@ export type GoogleChatProviderDeps = {
    * the channel's contact with confirmation — the store, vault and note-writer
    * stay in the core.
    */
-  confirm: (token: string, sessionKey: string, userId: string) => Promise<string | null>;
+  confirm: (token: string, sessionKey: string, principal: Principal) => Promise<string | null>;
   /**
    * Handles a `CARD_CLICKED` event's action parameters. Defaults to resolving
    * the confirm button's token through `deps.confirm` (the same path a bare
@@ -315,7 +316,7 @@ export function createGoogleChatProvider(deps: GoogleChatProviderDeps): GoogleCh
         log(`[chat] card click with no token parameter`);
         return;
       }
-      const reply = await deps.confirm(token, deriveSessionKey(space, sender), sender);
+      const reply = await deps.confirm(token, deriveSessionKey(space, sender), { id: sender, provider: "google-chat" });
       if (reply !== null) {
         log(`[chat:${space}] [out] ${reply}`);
         const sent = await sendMessageFn(space, reply, clientDeps);
@@ -478,7 +479,13 @@ export function createGoogleChatProvider(deps: GoogleChatProviderDeps): GoogleCh
     const sessionKey = deriveSessionKey(event.space, event.sender);
     const markedInput = event.senderDisplayName ? `[Da: ${event.senderDisplayName}]\n${event.text}` : event.text;
 
-    const confirmReply = await deps.confirm(event.text, sessionKey, event.sender);
+    const principal: Principal = {
+      id: event.sender,
+      provider: "google-chat",
+      ...(event.senderDisplayName ? { displayName: event.senderDisplayName } : {}),
+    };
+
+    const confirmReply = await deps.confirm(event.text, sessionKey, principal);
     if (confirmReply !== null) {
       log(`[chat:${event.space}] [out] ${confirmReply}`);
       const sent = await sendMessageFn(event.space, confirmReply, clientDeps);
@@ -505,8 +512,7 @@ export function createGoogleChatProvider(deps: GoogleChatProviderDeps): GoogleCh
           multiUser: !event.isDirectMessage,
           text: markedInput,
           sessionKey,
-          userId: event.sender,
-          wikiUserId: encodeURIComponent(event.sender),
+          principal,
           logPrefix: `[chat:${event.space}:${event.sender}] `,
         },
         sink,

package/index.ts

@@ -7,7 +7,7 @@
  * missing is a misconfiguration: `build()` throws and the loader skips this
  * channel fail-soft, leaving the rest of Mercury up.
  */
-import { CHANNEL_API_VERSION, type ChannelPlugin, type ChannelRuntimeContext } from "@mercury-fw/channel-types";
+import type { ChannelPlugin, ChannelRuntimeContext } from "@mercury-fw/channel-types";
 import { createGoogleChatProvider } from "./google-chat-provider.ts";
 
 /** Reads a required env var, failing loudly (caught by the channel loader) instead of silently degrading. */
@@ -20,7 +20,9 @@ function require(env: ChannelRuntimeContext["env"], name: string): string {
 }
 
 export const googleChatChannel: ChannelPlugin = {
-  apiVersion: CHANNEL_API_VERSION,
+  // The contract this channel is written for, as a literal: importing
+  // CHANNEL_API_VERSION would report whichever contract is installed.
+  apiVersion: 3,
   name: "google-chat",
   build: (ctx) => {
     // No subscription configured ⇒ this instance simply doesn't run Google Chat.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mercury-fw/channel-google-chat",
-  "version": "0.1.3",
+  "version": "0.3.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -31,10 +31,10 @@
     "@google-cloud/pubsub": "^5.3.1"
   },
   "peerDependencies": {
-    "@mercury-fw/channel-types": ">=0.24.0 <1.0.0"
+    "@mercury-fw/channel-types": ">=0.36.0 <1.0.0"
   },
   "devDependencies": {
-    "@mercury-fw/channel-types": "0.29.2",
+    "@mercury-fw/channel-types": "0.36.0",
     "@mercury-fw/typescript-config": "*",
     "@types/bun": "^1.4.2",
     "typescript": "^6.0.3"