@mercury-fw/channel-google-chat 0.2.0 → 0.3.0

package/CHANGELOG.md

@@ -1,5 +1,23 @@
 # @mercury-fw/channel-google-chat
 
+## 0.3.0
+
+### Minor Changes
+
+- 521db42: Isolation between the people an agent talks to.
+
+  - The core keeps one identity per person, `<provider>:<id>`, so two providers issuing the same id are two people. Memory, the conversation archive, the tool log and pending confirmations are keyed on it.
+  - The wiki has a common area (`curated/`) everyone reads and an area per person (`users/<key>/`), which the model sees as `personal/`. Listing, reading and grepping reach the common area and the caller's own area, nothing else.
+  - Breaking: the model's `write_file` writes only under `personal/notes/`. The new `promote_note` tool copies one of the person's notes into `curated/`, and only once they confirm it with the token.
+  - A confirmation can only be confirmed by whoever staged it, in the same session. Its note is written once, in the person's area: a staged note no longer stays "pending" after it's resolved, for ids such as Google Chat's `users/<n>`.
+  - Breaking, `@mercury-fw/channel-types`: channel contract 3. `confirm` and `resolveConfirmation` take the caller's `Principal`, and so does every read getter except `manifest` and `health`. Channels written for contract 2 are refused.
+  - `@mercury-fw/confirm-engine`: the store's `stage`, `take` and `pending` take the owner's key.
+  - Breaking, `@mercury-fw/channel-http`: every read route returns only the caller's data. `/conversation?id=` takes one of the caller's `conversationId`s and `/conversations` lists them by `conversationId`. `/wiki/read` answers `404` outside what the caller can see, and `/memory/scroll` answers `400` for a collection that isn't kept per person.
+  - `@mercury-fw/channel-google-chat`: on channel contract 3.
+  - At startup, an instance's existing data moves to the new layout. Google Chat and terminal notes go into their areas, and Qdrant's ids go onto the new keys. Ids that don't say which provider they came from are left in place and logged.
+  - `mfw vault read` refuses a path outside the vault.
+  - The admin panel's wiki box edits the common area with the operator's tools (list, read, grep, `write_curated`), the same the nightly review uses.
+
 ## 0.2.0
 
 ### Minor Changes

package/dist/google-chat-provider.d.ts

@@ -21,7 +21,7 @@
  */
 import { sendMessage, sendCard, updateCard, getOrCreateDmSpace, type ServiceAccountCredentials, type TokenSource } from "./google-chat-app-client.ts";
 import { type PubSubSubscription } from "./google-chat-pubsub-stream.ts";
-import { type Provider } from "@mercury-fw/channel-types";
+import { type Provider, type Principal } from "@mercury-fw/channel-types";
 /**
  * Composite session key: space + sender. Deliberately does NOT include
  * `thread` — confirmed live (two consecutive messages in the same DM
@@ -69,7 +69,7 @@ export type GoogleChatProviderDeps = {
      * the channel's contact with confirmation — the store, vault and note-writer
      * stay in the core.
      */
-    confirm: (token: string, sessionKey: string, userId: string) => Promise<string | null>;
+    confirm: (token: string, sessionKey: string, principal: Principal) => Promise<string | null>;
     /**
      * Handles a `CARD_CLICKED` event's action parameters. Defaults to resolving
      * the confirm button's token through `deps.confirm` (the same path a bare

package/google-chat-provider.ts

@@ -40,6 +40,7 @@ import {
   type Provider,
   type HandleTurn,
   type TurnSink,
+  type Principal,
 } from "@mercury-fw/channel-types";
 
 /**
@@ -257,7 +258,7 @@ export type GoogleChatProviderDeps = {
    * the channel's contact with confirmation — the store, vault and note-writer
    * stay in the core.
    */
-  confirm: (token: string, sessionKey: string, userId: string) => Promise<string | null>;
+  confirm: (token: string, sessionKey: string, principal: Principal) => Promise<string | null>;
   /**
    * Handles a `CARD_CLICKED` event's action parameters. Defaults to resolving
    * the confirm button's token through `deps.confirm` (the same path a bare
@@ -315,7 +316,7 @@ export function createGoogleChatProvider(deps: GoogleChatProviderDeps): GoogleCh
         log(`[chat] card click with no token parameter`);
         return;
       }
-      const reply = await deps.confirm(token, deriveSessionKey(space, sender), sender);
+      const reply = await deps.confirm(token, deriveSessionKey(space, sender), { id: sender, provider: "google-chat" });
       if (reply !== null) {
         log(`[chat:${space}] [out] ${reply}`);
         const sent = await sendMessageFn(space, reply, clientDeps);
@@ -478,7 +479,13 @@ export function createGoogleChatProvider(deps: GoogleChatProviderDeps): GoogleCh
     const sessionKey = deriveSessionKey(event.space, event.sender);
     const markedInput = event.senderDisplayName ? `[Da: ${event.senderDisplayName}]\n${event.text}` : event.text;
 
-    const confirmReply = await deps.confirm(event.text, sessionKey, event.sender);
+    const principal: Principal = {
+      id: event.sender,
+      provider: "google-chat",
+      ...(event.senderDisplayName ? { displayName: event.senderDisplayName } : {}),
+    };
+
+    const confirmReply = await deps.confirm(event.text, sessionKey, principal);
     if (confirmReply !== null) {
       log(`[chat:${event.space}] [out] ${confirmReply}`);
       const sent = await sendMessageFn(event.space, confirmReply, clientDeps);
@@ -505,11 +512,7 @@ export function createGoogleChatProvider(deps: GoogleChatProviderDeps): GoogleCh
           multiUser: !event.isDirectMessage,
           text: markedInput,
           sessionKey,
-          principal: {
-            id: event.sender,
-            provider: "google-chat",
-            ...(event.senderDisplayName ? { displayName: event.senderDisplayName } : {}),
-          },
+          principal,
           logPrefix: `[chat:${event.space}:${event.sender}] `,
         },
         sink,

package/index.ts

@@ -22,7 +22,7 @@ function require(env: ChannelRuntimeContext["env"], name: string): string {
 export const googleChatChannel: ChannelPlugin = {
   // The contract this channel is written for, as a literal: importing
   // CHANNEL_API_VERSION would report whichever contract is installed.
-  apiVersion: 2,
+  apiVersion: 3,
   name: "google-chat",
   build: (ctx) => {
     // No subscription configured ⇒ this instance simply doesn't run Google Chat.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mercury-fw/channel-google-chat",
-  "version": "0.2.0",
+  "version": "0.3.0",
   "license": "MIT",
   "repository": {
     "type": "git",
@@ -31,10 +31,10 @@
     "@google-cloud/pubsub": "^5.3.1"
   },
   "peerDependencies": {
-    "@mercury-fw/channel-types": ">=0.34.0 <1.0.0"
+    "@mercury-fw/channel-types": ">=0.36.0 <1.0.0"
   },
   "devDependencies": {
-    "@mercury-fw/channel-types": "0.34.0",
+    "@mercury-fw/channel-types": "0.36.0",
     "@mercury-fw/typescript-config": "*",
     "@types/bun": "^1.4.2",
     "typescript": "^6.0.3"