@open-everywhere/provider-google-chat 0.0.0-stage → 0.8.0

package/dist/agent/channels/google-chat-auth.js

@@ -0,0 +1,118 @@
+// google-chat-auth — the two credentials the Google Chat surface handles, and nothing else:
+//
+//   1. INBOUND: every event Google Chat POSTs to the app carries `Authorization: Bearer <JWT>`. The token is
+//      checked fully — signature against Google's published keys, issuer, audience and expiry — before the
+//      body is read as an event. The audience is the policy's (agent/google-chat/policy.ts in the app), never
+//      the request's own Host header, so a token minted for another app cannot open this route.
+//   2. OUTBOUND: the app's service-account key (an operator secret, `GOOGLE_CHAT_SERVICE_ACCOUNT_KEY`) signs a
+//      JWT-bearer grant for a short-lived access token with the `chat.bot` scope. The token endpoint is PINNED
+//      here: the key file's own `token_uri` is ignored, so an edited key cannot send the signed grant elsewhere.
+//
+// Error messages name the failed check only. They never echo a token, a claim value or the key.
+import { createRemoteJWKSet, importPKCS8, jwtVerify, SignJWT } from "jose";
+import { getOperatorSecret } from "@open-everywhere/core/agent/adapter-api.js";
+/** The service account Google Chat signs its events as. */
+export const CHAT_ISSUER_ACCOUNT = "chat@system.gserviceaccount.com";
+/** The JWKS of {@link CHAT_ISSUER_ACCOUNT} — the keys of a "project number" audience token. */
+const CHAT_SYSTEM_JWKS_URL = "https://www.googleapis.com/service_accounts/v1/jwk/chat@system.gserviceaccount.com";
+/** Google's OIDC keys — the keys of an "HTTP endpoint URL" audience token. */
+const GOOGLE_OIDC_JWKS_URL = "https://www.googleapis.com/oauth2/v3/certs";
+const GOOGLE_OIDC_ISSUERS = ["https://accounts.google.com", "accounts.google.com"];
+/** The pinned token endpoint of the JWT-bearer grant. */
+const GOOGLE_TOKEN_URL = "https://oauth2.googleapis.com/token";
+/** The one scope the app asks for: act as the Chat app (post into spaces it is a member of). */
+const CHAT_BOT_SCOPE = "https://www.googleapis.com/auth/chat.bot";
+/** The operator secret holding the service-account key JSON. */
+const SERVICE_ACCOUNT_SECRET = "GOOGLE_CHAT_SERVICE_ACCOUNT_KEY";
+let liveChatKeys;
+let liveOidcKeys;
+function bearer(authorization) {
+    const m = /^Bearer\s+([A-Za-z0-9._-]+)$/u.exec(authorization?.trim() ?? "");
+    return m?.[1];
+}
+/**
+ * Verify one event's bearer token against the policy's audience. Fail closed: no header, a malformed token,
+ * a bad signature, a wrong issuer or audience, an expired token, or (endpoint-URL mode) a token for any
+ * account but Google Chat's own is refused.
+ */
+export async function verifyGoogleChatToken(authorization, audience, deps = {}) {
+    if (audience === null)
+        return { ok: false, reason: "no audience is configured" };
+    const token = bearer(authorization);
+    if (token === undefined)
+        return { ok: false, reason: "no bearer token" };
+    try {
+        if (audience.kind === "project-number") {
+            const keys = deps.chatSystemKeys ?? (liveChatKeys ??= createRemoteJWKSet(new URL(CHAT_SYSTEM_JWKS_URL)));
+            await jwtVerify(token, keys, { issuer: CHAT_ISSUER_ACCOUNT, audience: audience.projectNumber, algorithms: ["RS256"] });
+            return { ok: true };
+        }
+        const keys = deps.googleOidcKeys ?? (liveOidcKeys ??= createRemoteJWKSet(new URL(GOOGLE_OIDC_JWKS_URL)));
+        const { payload } = await jwtVerify(token, keys, { issuer: GOOGLE_OIDC_ISSUERS, audience: audience.url, algorithms: ["RS256"] });
+        // Any Google account can mint an id token for any audience URL, so the token must name Chat's own account.
+        if (payload["email"] !== CHAT_ISSUER_ACCOUNT || payload["email_verified"] !== true) {
+            return { ok: false, reason: "the token is not Google Chat's" };
+        }
+        return { ok: true };
+    }
+    catch (e) {
+        const code = e.code;
+        return { ok: false, reason: `the token did not verify${typeof code === "string" ? ` (${code})` : ""}` };
+    }
+}
+/** Parse the key JSON. Throws a key-free error on anything that is not a service-account key. */
+export function parseServiceAccountKey(raw) {
+    let j;
+    try {
+        j = JSON.parse(raw);
+    }
+    catch {
+        throw new Error(`${SERVICE_ACCOUNT_SECRET} is not JSON.`);
+    }
+    const o = (typeof j === "object" && j !== null ? j : {});
+    if (o["type"] !== "service_account" || typeof o["client_email"] !== "string" || typeof o["private_key"] !== "string") {
+        throw new Error(`${SERVICE_ACCOUNT_SECRET} is not a Google service-account key.`);
+    }
+    return { clientEmail: o["client_email"], privateKey: o["private_key"] };
+}
+let cached;
+/** Forget the cached access token (tests). */
+export function resetGoogleChatTokenCache() {
+    cached = undefined;
+}
+/** A `chat.bot` access token for the app's service account, cached until a minute before it expires. */
+export async function googleChatAccessToken(deps = {}) {
+    const now = (deps.now ?? Date.now)();
+    const key = parseServiceAccountKey(await (deps.serviceAccountKey ?? (async () => (await getOperatorSecret(SERVICE_ACCOUNT_SECRET)).value))());
+    if (cached && cached.account === key.clientEmail && cached.expiresAt - 60_000 > now)
+        return cached.token;
+    let signingKey;
+    try {
+        signingKey = await importPKCS8(key.privateKey, "RS256");
+    }
+    catch {
+        throw new Error(`${SERVICE_ACCOUNT_SECRET} holds a private key that does not import.`);
+    }
+    const iat = Math.floor(now / 1000);
+    const assertion = await new SignJWT({ scope: CHAT_BOT_SCOPE })
+        .setProtectedHeader({ alg: "RS256", typ: "JWT" })
+        .setIssuer(key.clientEmail)
+        .setAudience(GOOGLE_TOKEN_URL)
+        .setIssuedAt(iat)
+        .setExpirationTime(iat + 3600)
+        .sign(signingKey);
+    const res = await (deps.fetch ?? fetch)(GOOGLE_TOKEN_URL, {
+        method: "POST",
+        headers: { "content-type": "application/x-www-form-urlencoded" },
+        body: new URLSearchParams({ grant_type: "urn:ietf:params:oauth:grant-type:jwt-bearer", assertion }).toString(),
+    });
+    if (!res.ok)
+        throw new Error(`the Google token endpoint refused the service-account grant (HTTP ${res.status}).`);
+    const body = (await res.json().catch(() => ({})));
+    if (typeof body.access_token !== "string" || body.access_token === "")
+        throw new Error("the Google token endpoint returned no access token.");
+    const ttl = typeof body.expires_in === "number" && body.expires_in > 0 ? body.expires_in : 3600;
+    cached = { token: body.access_token, expiresAt: now + ttl * 1000, account: key.clientEmail };
+    return body.access_token;
+}
+//# sourceMappingURL=google-chat-auth.js.map

package/dist/agent/channels/google-chat-auth.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-chat-auth.js","sourceRoot":"","sources":["../../../agent/channels/google-chat-auth.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,EAAE;AACF,6GAA6G;AAC7G,2GAA2G;AAC3G,8GAA8G;AAC9G,gGAAgG;AAChG,+GAA+G;AAC/G,+GAA+G;AAC/G,iHAAiH;AACjH,EAAE;AACF,gGAAgG;AAEhG,OAAO,EAAE,kBAAkB,EAAE,WAAW,EAAE,SAAS,EAAE,OAAO,EAAwB,MAAM,MAAM,CAAC;AACjG,OAAO,EAAE,iBAAiB,EAAE,MAAM,4CAA4C,CAAC;AAG/E,2DAA2D;AAC3D,MAAM,CAAC,MAAM,mBAAmB,GAAG,iCAAiC,CAAC;AACrE,+FAA+F;AAC/F,MAAM,oBAAoB,GAAG,oFAAoF,CAAC;AAClH,8EAA8E;AAC9E,MAAM,oBAAoB,GAAG,4CAA4C,CAAC;AAC1E,MAAM,mBAAmB,GAAG,CAAC,6BAA6B,EAAE,qBAAqB,CAAC,CAAC;AACnF,yDAAyD;AACzD,MAAM,gBAAgB,GAAG,qCAAqC,CAAC;AAC/D,gGAAgG;AAChG,MAAM,cAAc,GAAG,0CAA0C,CAAC;AAClE,gEAAgE;AAChE,MAAM,sBAAsB,GAAG,iCAAiC,CAAC;AAUjE,IAAI,YAAyC,CAAC;AAC9C,IAAI,YAAyC,CAAC;AAE9C,SAAS,MAAM,CAAC,aAAiC;IAC/C,MAAM,CAAC,GAAG,+BAA+B,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC,CAAC;IAC5E,OAAO,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;AAChB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,qBAAqB,CACzC,aAAiC,EACjC,QAAmC,EACnC,IAAI,GAAyB,EAAE;IAE/B,IAAI,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,EAAE,CAAC;IACjF,MAAM,KAAK,GAAG,MAAM,CAAC,aAAa,CAAC,CAAC;IACpC,IAAI,KAAK,KAAK,SAAS;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IACzE,IAAI,CAAC;QACH,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACvC,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY,KAAK,kBAAkB,CAAC,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;YACzG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,CAAC,aAAa,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACvH,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QACD,MAAM,IAAI,GAAG,IAAI,CAAC,cAAc,IAAI,CAAC,YAAY,KAAK,kBAAkB,CAAC,IAAI,GAAG,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;QACzG,MAAM,EAAE,OAAO,EAAE,GAAG,MAAM,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE,MAAM,EAAE,mBAAmB,EAAE,QAAQ,EAAE,QAAQ,CAAC,GAAG,EAAE,UAAU,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACjI,2GAA2G;QAC3G,IAAI,OAAO,CAAC,OAAO,CAAC,KAAK,mBAAmB,IAAI,OAAO,CAAC,gBAAgB,CAAC,KAAK,IAAI,EAAE,CAAC;YACnF,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,gCAAgC,EAAE,CAAC;QACjE,CAAC;QACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;IACtB,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,MAAM,IAAI,GAAI,CAAwB,CAAC,IAAI,CAAC;QAC5C,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,MAAM,EAAE,2BAA2B,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,KAAK,IAAI,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC;IAC1G,CAAC;AACH,CAAC;AASD,iGAAiG;AACjG,MAAM,UAAU,sBAAsB,CAAC,GAAW;IAChD,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;IACtB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,sBAAsB,eAAe,CAAC,CAAC;IAC5D,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAA4B,CAAC;IACpF,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,iBAAiB,IAAI,OAAO,CAAC,CAAC,cAAc,CAAC,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,aAAa,CAAC,KAAK,QAAQ,EAAE,CAAC;QACrH,MAAM,IAAI,KAAK,CAAC,GAAG,sBAAsB,uCAAuC,CAAC,CAAC;IACpF,CAAC;IACD,OAAO,EAAE,WAAW,EAAE,CAAC,CAAC,cAAc,CAAC,EAAE,UAAU,EAAE,CAAC,CAAC,aAAa,CAAC,EAAE,CAAC;AAC1E,CAAC;AASD,IAAI,MAAoG,CAAC;AAEzG,8CAA8C;AAC9C,MAAM,UAAU,yBAAyB;IACvC,MAAM,GAAG,SAAS,CAAC;AACrB,CAAC;AAED,wGAAwG;AACxG,MAAM,CAAC,KAAK,UAAU,qBAAqB,CAAC,IAAI,GAAwB,EAAE;IACxE,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;IACrC,MAAM,GAAG,GAAG,sBAAsB,CAAC,MAAM,CAAC,IAAI,CAAC,iBAAiB,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,iBAAiB,CAAC,sBAAsB,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC;IAC9I,IAAI,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,GAAG,CAAC,WAAW,IAAI,MAAM,CAAC,SAAS,GAAG,MAAM,GAAG,GAAG;QAAE,OAAO,MAAM,CAAC,KAAK,CAAC;IACzG,IAAI,UAAqB,CAAC;IAC1B,IAAI,CAAC;QACH,UAAU,GAAG,MAAM,WAAW,CAAC,GAAG,CAAC,UAAU,EAAE,OAAO,CAAC,CAAC;IAC1D,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,IAAI,KAAK,CAAC,GAAG,sBAAsB,4CAA4C,CAAC,CAAC;IACzF,CAAC;IACD,MAAM,GAAG,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,GAAG,IAAI,CAAC,CAAC;IACnC,MAAM,SAAS,GAAG,MAAM,IAAI,OAAO,CAAC,EAAE,KAAK,EAAE,cAAc,EAAE,CAAC;SAC3D,kBAAkB,CAAC,EAAE,GAAG,EAAE,OAAO,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;SAChD,SAAS,CAAC,GAAG,CAAC,WAAW,CAAC;SAC1B,WAAW,CAAC,gBAAgB,CAAC;SAC7B,WAAW,CAAC,GAAG,CAAC;SAChB,iBAAiB,CAAC,GAAG,GAAG,IAAI,CAAC;SAC7B,IAAI,CAAC,UAAU,CAAC,CAAC;IACpB,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,CAAC,gBAAgB,EAAE;QACxD,MAAM,EAAE,MAAM;QACd,OAAO,EAAE,EAAE,cAAc,EAAE,mCAAmC,EAAE;QAChE,IAAI,EAAE,IAAI,eAAe,CAAC,EAAE,UAAU,EAAE,6CAA6C,EAAE,SAAS,EAAE,CAAC,CAAC,QAAQ,EAAE;KAC/G,CAAC,CAAC;IACH,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qEAAqE,GAAG,CAAC,MAAM,IAAI,CAAC,CAAC;IAClH,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,CAAqD,CAAC;IACtG,IAAI,OAAO,IAAI,CAAC,YAAY,KAAK,QAAQ,IAAI,IAAI,CAAC,YAAY,KAAK,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,qDAAqD,CAAC,CAAC;IAC9I,MAAM,GAAG,GAAG,OAAO,IAAI,CAAC,UAAU,KAAK,QAAQ,IAAI,IAAI,CAAC,UAAU,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,IAAI,CAAC;IAChG,MAAM,GAAG,EAAE,KAAK,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,GAAG,GAAG,GAAG,GAAG,IAAI,EAAE,OAAO,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC;IAC7F,OAAO,IAAI,CAAC,YAAY,CAAC;AAC3B,CAAC"}

package/dist/agent/channels/google-chat-front.d.ts

@@ -0,0 +1,102 @@
+import { type IngestedChatMessage, type UnifiedWakeOrigin, type WakeMessageInput, type WakeTrust } from "@open-everywhere/core/agent/adapter-api.js";
+import { type GoogleChatPolicy } from "../policy.js";
+import { type GoogleChatVerifyDeps } from "./google-chat-auth.js";
+import { type OpenEverywhereGoogleChatAuth } from "./google-chat-identity.js";
+import type { AuditDetail } from "@open-everywhere/core/agent/adapter-api.js";
+type GoogleChatOrigin = Extract<UnifiedWakeOrigin, {
+    platform: "google-chat";
+}>;
+/** Why the front refused a verified message. */
+export type GoogleChatRefusal = "group-chat" | "dm-off" | "external-dm" | "no-domain";
+export type GoogleChatFrontOutcome = {
+    readonly kind: "not-configured";
+} | {
+    readonly kind: "unauthorized";
+    readonly reason: string;
+} | {
+    readonly kind: "ignored";
+    readonly why: string;
+} | {
+    readonly kind: "duplicate";
+} | {
+    readonly kind: "refused";
+    readonly reason: GoogleChatRefusal;
+} | {
+    readonly kind: "admitted";
+    readonly route: "room" | "dm";
+    readonly surfaceKey: string;
+};
+/** The parsed facts of one MESSAGE event — only what the gate and the wake read. */
+export interface GoogleChatMessageEvent {
+    readonly space: string;
+    readonly spaceKind: "space" | "dm" | "group";
+    readonly messageName: string;
+    readonly thread?: string;
+    readonly threadReply: boolean;
+    readonly sender: string;
+    readonly senderName?: string;
+    readonly domainId?: string;
+    /** The text with the app's mention removed (`argumentText`), else the whole text. */
+    readonly text: string;
+    /** Did the message @-mention the app, or invoke one of its slash commands? */
+    readonly addressed: boolean;
+    readonly createTime: string;
+}
+/** Everything one admitted message's dispatch needs. */
+export interface GoogleChatWakePlan {
+    readonly surfaceKey: string;
+    readonly route: "room" | "dm";
+    readonly auth: OpenEverywhereGoogleChatAuth;
+    readonly origin: GoogleChatOrigin;
+    readonly trigger: WakeMessageInput;
+    readonly trust: "internal" | "external";
+    readonly ingested: readonly IngestedChatMessage[];
+    readonly event: GoogleChatMessageEvent;
+}
+export interface GoogleChatFrontDeps extends GoogleChatVerifyDeps {
+    readonly policy: () => GoogleChatPolicy;
+    /** Durable first-sighting claim (true = first time). */
+    readonly markSeen: (key: string) => Promise<boolean>;
+    /** Does a windowed domain own this space's surface key? (supervisorGrainFor + grainUsesUnifiedWindow.) */
+    readonly roomHasSeat: (surfaceKey: string) => boolean;
+    /** The per-message trust tier, resolved through the shared resolver over this auth. */
+    readonly wakeTrust: (auth: OpenEverywhereGoogleChatAuth, sender: string) => WakeTrust;
+    readonly dispatchRoom: (plan: GoogleChatWakePlan) => Promise<void>;
+    readonly dispatchDm: (plan: GoogleChatWakePlan) => Promise<void>;
+    readonly audit: (row: {
+        readonly action: string;
+        readonly workspace: string;
+        readonly surface?: string;
+        readonly principalId?: string;
+        readonly detail: AuditDetail;
+    }) => Promise<void>;
+}
+/**
+ * Parse one event body. Undefined (with a reason) for anything this surface does not take: not JSON, not a
+ * MESSAGE, a malformed name, or a sender that is not a human. Pure.
+ */
+export declare function parseGoogleChatEvent(rawBody: string): {
+    readonly event: GoogleChatMessageEvent;
+} | {
+    readonly ignored: string;
+};
+/** Render a plan's wake. */
+export declare function renderGoogleChatWake(plan: GoogleChatWakePlan, wakeId: string, tail?: readonly WakeMessageInput[]): {
+    message: string;
+    context: readonly string[];
+};
+/** The whole path in one call (the tests' entry): verify, then process. */
+export declare function handleGoogleChatDelivery(authorization: string | undefined, rawBody: string, deps: GoogleChatFrontDeps): Promise<GoogleChatFrontOutcome>;
+/** The largest event body the route reads. A Chat message is at most 32 KB; the event wraps it. */
+export declare const GOOGLE_CHAT_INGRESS_MAX_BODY_BYTES: number;
+/**
+ * The whole HTTP route, eve-free so a test drives it. 🔴 THE ORDER IS THE DEFENCE: the policy (503) and the token
+ * (401) are checked BEFORE the body is read, so an unconfigured or unauthenticated caller cannot make the route
+ * read a byte. Then the body cap (413), then `{}` with the rest in the background (`waitUntil`).
+ */
+export declare function handleGoogleChatRequest(req: Request, waitUntil: (p: Promise<unknown>) => void, deps: GoogleChatFrontDeps, hooks?: {
+    readonly log?: (msg: string) => void;
+    readonly onFailure?: (err: unknown, policy: GoogleChatPolicy) => Promise<void>;
+}): Promise<Response>;
+export {};
+//# sourceMappingURL=google-chat-front.d.ts.map

package/dist/agent/channels/google-chat-front.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-chat-front.d.ts","sourceRoot":"","sources":["../../../agent/channels/google-chat-front.ts"],"names":[],"mappings":"AAoBA,OAAO,EAKL,KAAK,mBAAmB,EAExB,KAAK,iBAAiB,EACtB,KAAK,gBAAgB,EACrB,KAAK,SAAS,EACf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAwB,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAyB,KAAK,oBAAoB,EAAE,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAuB,KAAK,4BAA4B,EAAE,MAAM,2BAA2B,CAAC;AAEnG,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,4CAA4C,CAAC;AAE9E,KAAK,gBAAgB,GAAG,OAAO,CAAC,iBAAiB,EAAE;IAAE,QAAQ,EAAE,aAAa,CAAA;CAAE,CAAC,CAAC;AAKhF,gDAAgD;AAChD,MAAM,MAAM,iBAAiB,GAAG,YAAY,GAAG,QAAQ,GAAG,aAAa,GAAG,WAAW,CAAC;AAEtF,MAAM,MAAM,sBAAsB,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAA;CAAE,GACnC;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GAC1D;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,GAClD;IAAE,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAA;CAAE,GAC9B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,iBAAiB,CAAA;CAAE,GAChE;IAAE,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;CAAE,CAAC;AAE9F,oFAAoF;AACpF,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,OAAO,GAAG,IAAI,GAAG,OAAO,CAAC;IAC7C,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAC;IAC9B,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAC3B,qFAAqF;IACrF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8EAA8E;IAC9E,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,wDAAwD;AACxD,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAC9B,QAAQ,CAAC,IAAI,EAAE,4BAA4B,CAAC;IAC5C,QAAQ,CAAC,MAAM,EAAE,gBAAgB,CAAC;IAClC,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IACnC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAAC;IACxC,QAAQ,CAAC,QAAQ,EAAE,SAAS,mBAAmB,EAAE,CAAC;IAClD,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAC;CACxC;AAED,MAAM,WAAW,mBAAoB,SAAQ,oBAAoB;IAC/D,QAAQ,CAAC,MAAM,EAAE,MAAM,gBAAgB,CAAC;IACxC,wDAAwD;IACxD,QAAQ,CAAC,QAAQ,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IACrD,0GAA0G;IAC1G,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,EAAE,MAAM,KAAK,OAAO,CAAC;IACtD,uFAAuF;IACvF,QAAQ,CAAC,SAAS,EAAE,CAAC,IAAI,EAAE,4BAA4B,EAAE,MAAM,EAAE,MAAM,KAAK,SAAS,CAAC;IACtF,QAAQ,CAAC,YAAY,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACnE,QAAQ,CAAC,UAAU,EAAE,CAAC,IAAI,EAAE,kBAAkB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;IACjE,QAAQ,CAAC,KAAK,EAAE,CAAC,GAAG,EAAE;QAAE,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACzL;AAUD;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,OAAO,EAAE,MAAM,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,sBAAsB,CAAA;CAAE,GAAG;IAAE,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAA;CAAE,CAiD/H;AA2ED,4BAA4B;AAC5B,wBAAgB,oBAAoB,CAAC,IAAI,EAAE,kBAAkB,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,SAAS,gBAAgB,EAAE,GAAG;IAAE,OAAO,EAAE,MAAM,CAAC;IAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAGlK;AAwDD,2EAA2E;AAC3E,wBAAsB,wBAAwB,CAAC,aAAa,EAAE,MAAM,GAAG,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,mBAAmB,GAAG,OAAO,CAAC,sBAAsB,CAAC,CAI7J;AAED,mGAAmG;AACnG,eAAO,MAAM,kCAAkC,QAAa,CAAC;AAE7D;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,GAAG,EAAE,OAAO,EACZ,SAAS,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,EACxC,IAAI,EAAE,mBAAmB,EACzB,KAAK,GAAE;IAAE,QAAQ,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAI,CAAC;IAAC,QAAQ,CAAC,SAAS,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,MAAM,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,CAAA;CAAO,GACnI,OAAO,CAAC,QAAQ,CAAC,CA0BnB"}

package/dist/agent/channels/google-chat-front.js

@@ -0,0 +1,258 @@
+// google-chat-front — the eve-free core of the Google Chat surface's inbound path. One delivery in, one outcome
+// out: not configured, unauthorized, acknowledged and ignored, a duplicate, refused (audited, no model turn), or
+// admitted and delivered into a seat. The live wiring (google-chat.ts) supplies the store, the config and the two
+// seat dispatches.
+//
+// THE ORDER IS LOAD-BEARING:
+//   1. policy  — the surface SHIPS OFF. A disabled policy, or one with no audience, answers "not configured"
+//                before the body is read: an external ingress nobody configured is not reachable.
+//   2. verify  — the bearer token is checked against Google's keys and the policy's audience (fail closed).
+//                Nothing before it reads the body, and an unverified delivery writes no audit row.
+//   3. parse   — anything that is not a well-formed MESSAGE event from a HUMAN sender is acknowledged and
+//                dropped (an ADDED_TO_SPACE, a bot's own message, a CARD_CLICKED this surface does not use).
+//   4. dedupe  — the message's resource name is claimed once, so a retried event never wakes twice.
+//   5. route   — the person's own DM with the app wakes their DM seat (internal people only, and only while
+//                the policy allows direct messages); a group chat is refused; a space wakes the standing seat
+//                that owns `google-chat/<workspace>/<space id>`, only when the message @-mentions the app or
+//                is a slash command. With no standing-seat window for the space it is refused `no-domain`.
+//   6. wake    — the message's own text (the mention removed) renders as the graded trigger. An outside sender
+//                stamps the non-member carriage, exactly as a guest's message does on every chat surface.
+import { mkMessageTrigger, readCappedBody, renderWake, stampNonMemberChatAuth, } from "@open-everywhere/core/agent/adapter-api.js";
+import { googleChatSurfaceKey } from "../policy.js";
+import { verifyGoogleChatToken } from "./google-chat-auth.js";
+import { buildGoogleChatAuth } from "./google-chat-identity.js";
+import { isMessageNameIn, isSpaceName, isThreadNameIn } from "./google-chat-rest.js";
+/** The largest message text that reaches the model; the rest is cut and the cut is said. */
+const GOOGLE_CHAT_MAX_INBOUND_CHARS = 20_000;
+function rec(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
+}
+function str(v) {
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+/**
+ * Parse one event body. Undefined (with a reason) for anything this surface does not take: not JSON, not a
+ * MESSAGE, a malformed name, or a sender that is not a human. Pure.
+ */
+export function parseGoogleChatEvent(rawBody) {
+    let j;
+    try {
+        j = JSON.parse(rawBody);
+    }
+    catch {
+        return { ignored: "not-json" };
+    }
+    const e = rec(j);
+    if (!e || e["type"] !== "MESSAGE")
+        return { ignored: "not-a-message" };
+    const space = rec(e["space"]);
+    const message = rec(e["message"]);
+    const sender = rec(message?.["sender"]);
+    const spaceName = space?.["name"];
+    if (!space || !isSpaceName(spaceName) || !message)
+        return { ignored: "malformed" };
+    const messageName = message["name"];
+    if (!isMessageNameIn(messageName, spaceName))
+        return { ignored: "malformed" };
+    const threadName = rec(message["thread"])?.["name"];
+    if (threadName !== undefined && !isThreadNameIn(threadName, spaceName))
+        return { ignored: "malformed" };
+    // A bot's message (including this app's own) never wakes a seat: that is the loop guard.
+    if (sender?.["type"] !== "HUMAN")
+        return { ignored: "not-a-human" };
+    const senderName = str(sender["name"]);
+    if (senderName === undefined || !/^users\/[A-Za-z0-9_-]{1,128}$/u.test(senderName))
+        return { ignored: "malformed" };
+    const spaceType = str(space["spaceType"]) ?? (space["type"] === "DM" ? "DIRECT_MESSAGE" : "SPACE");
+    const spaceKind = spaceType === "DIRECT_MESSAGE" ? (space["singleUserBotDm"] === true ? "dm" : "group") : spaceType === "GROUP_CHAT" ? "group" : "space";
+    const annotations = Array.isArray(message["annotations"]) ? message["annotations"] : [];
+    const mentionsApp = annotations.some((a) => {
+        const an = rec(a);
+        return an?.["type"] === "USER_MENTION" && rec(rec(an["userMention"])?.["user"])?.["type"] === "BOT";
+    });
+    const slash = rec(message["slashCommand"]) !== undefined;
+    const text = (str(message["argumentText"]) ?? str(message["text"]) ?? "").trim();
+    const domainId = str(sender["domainId"]);
+    const displayName = str(sender["displayName"]);
+    return {
+        event: {
+            space: spaceName,
+            spaceKind,
+            messageName,
+            ...(threadName !== undefined ? { thread: threadName } : {}),
+            threadReply: message["threadReply"] === true && threadName !== undefined,
+            sender: senderName,
+            ...(displayName !== undefined ? { senderName: displayName } : {}),
+            ...(domainId !== undefined ? { domainId } : {}),
+            text,
+            addressed: mentionsApp || slash,
+            createTime: str(message["createTime"]) ?? str(e["eventTime"]) ?? new Date(0).toISOString(),
+        },
+    };
+}
+/** The sender's trust: internal only for a domain id the policy lists. */
+function googleChatSenderTrust(policy, domainId) {
+    return domainId !== undefined && policy.internalDomainIds.includes(domainId) ? "internal" : "external";
+}
+/** Build the wake plan for a message the gate admitted. Pure apart from the trust resolver dep. */
+function planGoogleChatWake(input, wakeTrust) {
+    const { event, policy, route } = input;
+    const trustTier = googleChatSenderTrust(policy, event.domainId);
+    const surfaceKey = googleChatSurfaceKey(policy, event.space);
+    const base = buildGoogleChatAuth({
+        workspace: policy.workspace,
+        space: event.space,
+        mode: route === "dm" ? "dm" : "channel",
+        trust: trustTier,
+        sender: event.sender,
+        ...(event.thread !== undefined ? { thread: event.thread } : {}),
+        messageName: event.messageName,
+    });
+    const trust = wakeTrust(base, event.sender);
+    const ingested = [{ trust, refuted: trustTier === "external" }];
+    const auth = stampNonMemberChatAuth(base, ingested, route === "dm" ? { dm: true } : { surfaceKey });
+    const body = event.text === ""
+        ? "(the message had no text)"
+        : event.text.length > GOOGLE_CHAT_MAX_INBOUND_CHARS
+            ? `${event.text.slice(0, GOOGLE_CHAT_MAX_INBOUND_CHARS)}\n[… the message was cut at ${GOOGLE_CHAT_MAX_INBOUND_CHARS} characters]`
+            : event.text;
+    return {
+        surfaceKey,
+        route,
+        auth,
+        origin: {
+            platform: "google-chat",
+            workspace: policy.workspace,
+            space: event.space,
+            ...(event.thread !== undefined ? { thread: event.thread } : {}),
+            messageName: event.messageName,
+            ...(event.threadReply ? { threadReply: true } : {}),
+        },
+        trigger: {
+            from: "human",
+            author: event.senderName ?? event.sender,
+            authorId: event.sender,
+            id: event.messageName,
+            sentAt: event.createTime,
+            trust,
+            mention: true,
+            body,
+        },
+        trust: trustTier,
+        ingested,
+        event,
+    };
+}
+/** The NormalizedWake for an admitted message. */
+function buildGoogleChatWake(plan, wakeId, tail) {
+    return {
+        platform: "google-chat",
+        reason: plan.route === "dm" ? "dm" : "mention",
+        addressing: "direct-mention",
+        containerNoun: "space",
+        wakeId,
+        locus: { channel: { id: plan.origin.space }, ...(plan.origin.thread !== undefined ? { thread: { ts: plan.origin.thread } } : {}) },
+        backscroll: tail && tail.length > 0 ? tail : undefined,
+        trigger: mkMessageTrigger(plan.trigger),
+    };
+}
+/** Render a plan's wake. */
+export function renderGoogleChatWake(plan, wakeId, tail) {
+    const r = renderWake(buildGoogleChatWake(plan, wakeId, tail));
+    return { message: r.message, context: r.context ?? [] };
+}
+/** Steps 1 and 2: is the surface configured, and is this delivery Google Chat's? */
+async function verifyGoogleChatDelivery(authorization, deps) {
+    const policy = deps.policy();
+    if (!policy.enabled || policy.audience === null)
+        return { ok: false, outcome: { kind: "not-configured" } };
+    const verdict = await verifyGoogleChatToken(authorization, policy.audience, deps);
+    if (!verdict.ok)
+        return { ok: false, outcome: { kind: "unauthorized", reason: verdict.reason } };
+    return { ok: true, policy };
+}
+/** Steps 3 to 6 for a delivery already VERIFIED. Never throws for a bad event; a dispatch failure propagates. */
+async function processVerifiedGoogleChatEvent(policy, rawBody, deps) {
+    const parsed = parseGoogleChatEvent(rawBody);
+    if ("ignored" in parsed)
+        return { kind: "ignored", why: parsed.ignored };
+    const event = parsed.event;
+    if (event.spaceKind === "space" && !event.addressed)
+        return { kind: "ignored", why: "not-addressed" };
+    if (!(await deps.markSeen(`google-chat:${event.messageName}`)))
+        return { kind: "duplicate" };
+    const surfaceKey = googleChatSurfaceKey(policy, event.space);
+    const refuse = async (reason) => {
+        await deps.audit({
+            action: "google-chat.refused",
+            workspace: policy.workspace,
+            surface: surfaceKey,
+            principalId: event.sender,
+            detail: { reason, space: event.space, domainId: event.domainId ?? null },
+        });
+        return { kind: "refused", reason };
+    };
+    if (event.spaceKind === "group")
+        return refuse("group-chat");
+    const route = event.spaceKind === "dm" ? "dm" : "room";
+    if (route === "dm") {
+        if (!policy.directMessages)
+            return refuse("dm-off");
+        // A DM seat reads its person's private layer; an outside person never gets one.
+        if (googleChatSenderTrust(policy, event.domainId) !== "internal")
+            return refuse("external-dm");
+    }
+    else if (!deps.roomHasSeat(surfaceKey)) {
+        return refuse("no-domain");
+    }
+    const plan = planGoogleChatWake({ event, policy, route }, deps.wakeTrust);
+    if (route === "room")
+        await deps.dispatchRoom(plan);
+    else
+        await deps.dispatchDm(plan);
+    await deps.audit({
+        action: "google-chat.admitted",
+        workspace: policy.workspace,
+        surface: plan.surfaceKey,
+        principalId: event.sender,
+        detail: { space: event.space, route, trust: plan.trust, domainId: event.domainId ?? null, threadReply: event.threadReply },
+    });
+    return { kind: "admitted", route, surfaceKey: plan.surfaceKey };
+}
+/** The whole path in one call (the tests' entry): verify, then process. */
+export async function handleGoogleChatDelivery(authorization, rawBody, deps) {
+    const v = await verifyGoogleChatDelivery(authorization, deps);
+    if (!v.ok)
+        return v.outcome;
+    return processVerifiedGoogleChatEvent(v.policy, rawBody, deps);
+}
+/** The largest event body the route reads. A Chat message is at most 32 KB; the event wraps it. */
+export const GOOGLE_CHAT_INGRESS_MAX_BODY_BYTES = 512 * 1024;
+/**
+ * The whole HTTP route, eve-free so a test drives it. 🔴 THE ORDER IS THE DEFENCE: the policy (503) and the token
+ * (401) are checked BEFORE the body is read, so an unconfigured or unauthenticated caller cannot make the route
+ * read a byte. Then the body cap (413), then `{}` with the rest in the background (`waitUntil`).
+ */
+export async function handleGoogleChatRequest(req, waitUntil, deps, hooks = {}) {
+    const log = hooks.log ?? (() => undefined);
+    const verified = await verifyGoogleChatDelivery(req.headers.get("authorization") ?? undefined, deps);
+    if (!verified.ok) {
+        if (verified.outcome.kind === "unauthorized") {
+            log(`delivery refused (401): ${verified.outcome.reason}`);
+            return new Response("unauthorized", { status: 401 });
+        }
+        return new Response("google chat surface not configured", { status: 503 });
+    }
+    const read = await readCappedBody(req, GOOGLE_CHAT_INGRESS_MAX_BODY_BYTES);
+    if ("tooLarge" in read)
+        return new Response(`payload exceeds ${GOOGLE_CHAT_INGRESS_MAX_BODY_BYTES} bytes`, { status: 413 });
+    waitUntil(processVerifiedGoogleChatEvent(verified.policy, read.body, deps)
+        .then((outcome) => log(`event ${outcome.kind}${outcome.kind === "refused" ? ` (${outcome.reason})` : outcome.kind === "admitted" ? ` → ${outcome.route} ${outcome.surfaceKey}` : outcome.kind === "ignored" ? ` (${outcome.why})` : ""}`))
+        .catch(async (err) => {
+        log(`event FAILED after the ack: ${err instanceof Error ? err.name : "error"}`);
+        await hooks.onFailure?.(err, verified.policy);
+    }));
+    // `{}` = no synchronous message. The seat answers through the post arm.
+    return new Response("{}", { status: 200, headers: { "content-type": "application/json" } });
+}
+//# sourceMappingURL=google-chat-front.js.map

package/dist/agent/channels/google-chat-front.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-chat-front.js","sourceRoot":"","sources":["../../../agent/channels/google-chat-front.ts"],"names":[],"mappings":"AAAA,gHAAgH;AAChH,iHAAiH;AACjH,kHAAkH;AAClH,mBAAmB;AACnB,EAAE;AACF,6BAA6B;AAC7B,6GAA6G;AAC7G,kGAAkG;AAClG,4GAA4G;AAC5G,mGAAmG;AACnG,0GAA0G;AAC1G,6GAA6G;AAC7G,oGAAoG;AACpG,4GAA4G;AAC5G,8GAA8G;AAC9G,6GAA6G;AAC7G,2GAA2G;AAC3G,+GAA+G;AAC/G,0GAA0G;AAE1G,OAAO,EACL,gBAAgB,EAChB,cAAc,EACd,UAAU,EACV,sBAAsB,GAMvB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,oBAAoB,EAAyB,MAAM,cAAc,CAAC;AAC3E,OAAO,EAAE,qBAAqB,EAA6B,MAAM,uBAAuB,CAAC;AACzF,OAAO,EAAE,mBAAmB,EAAqC,MAAM,2BAA2B,CAAC;AACnG,OAAO,EAAE,eAAe,EAAE,WAAW,EAAE,cAAc,EAAE,MAAM,uBAAuB,CAAC;AAKrF,4FAA4F;AAC5F,MAAM,6BAA6B,GAAG,MAAM,CAAC;AAuD7C,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/G,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,CAAU,CAAC;IACf,IAAI,CAAC;QACH,CAAC,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IACjC,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACjB,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,SAAS;QAAE,OAAO,EAAE,OAAO,EAAE,eAAe,EAAE,CAAC;IACvE,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC;IACxC,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC;IAClC,IAAI,CAAC,KAAK,IAAI,CAAC,WAAW,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACnF,MAAM,WAAW,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC;IACpC,IAAI,CAAC,eAAe,CAAC,WAAW,EAAE,SAAS,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IAC9E,MAAM,UAAU,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC;IACpD,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,cAAc,CAAC,UAAU,EAAE,SAAS,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACxG,yFAAyF;IACzF,IAAI,MAAM,EAAE,CAAC,MAAM,CAAC,KAAK,OAAO;QAAE,OAAO,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC;IACpE,MAAM,UAAU,GAAG,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,IAAI,UAAU,KAAK,SAAS,IAAI,CAAC,gCAAgC,CAAC,IAAI,CAAC,UAAU,CAAC;QAAE,OAAO,EAAE,OAAO,EAAE,WAAW,EAAE,CAAC;IACpH,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;IACnG,MAAM,SAAS,GACb,SAAS,KAAK,gBAAgB,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,iBAAiB,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,KAAK,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IACzI,MAAM,WAAW,GAAG,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IACxF,MAAM,WAAW,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE;QACzC,MAAM,EAAE,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;QAClB,OAAO,EAAE,EAAE,CAAC,MAAM,CAAC,KAAK,cAAc,IAAI,GAAG,CAAC,GAAG,CAAC,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,MAAM,CAAC,KAAK,KAAK,CAAC;IACtG,CAAC,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,KAAK,SAAS,CAAC;IACzD,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC,IAAI,GAAG,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IACjF,MAAM,QAAQ,GAAG,GAAG,CAAC,MAAM,CAAC,UAAU,CAAC,CAAC,CAAC;IACzC,MAAM,WAAW,GAAG,GAAG,CAAC,MAAM,CAAC,aAAa,CAAC,CAAC,CAAC;IAC/C,OAAO;QACL,KAAK,EAAE;YACL,KAAK,EAAE,SAAS;YAChB,SAAS;YACT,WAAW;YACX,GAAG,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3D,WAAW,EAAE,OAAO,CAAC,aAAa,CAAC,KAAK,IAAI,IAAI,UAAU,KAAK,SAAS;YACxE,MAAM,EAAE,UAAU;YAClB,GAAG,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACjE,GAAG,CAAC,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/C,IAAI;YACJ,SAAS,EAAE,WAAW,IAAI,KAAK;YAC/B,UAAU,EAAE,GAAG,CAAC,OAAO,CAAC,YAAY,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,IAAI,IAAI,IAAI,CAAC,CAAC,CAAC,CAAC,WAAW,EAAE;SAC3F;KACF,CAAC;AACJ,CAAC;AAED,0EAA0E;AAC1E,SAAS,qBAAqB,CAAC,MAAwB,EAAE,QAA4B;IACnF,OAAO,QAAQ,KAAK,SAAS,IAAI,MAAM,CAAC,iBAAiB,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC;AACzG,CAAC;AAED,mGAAmG;AACnG,SAAS,kBAAkB,CACzB,KAAmH,EACnH,SAA2C;IAE3C,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC;IACvC,MAAM,SAAS,GAAG,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC;IAChE,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,IAAI,GAAG,mBAAmB,CAAC;QAC/B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;QAClB,IAAI,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACvC,KAAK,EAAE,SAAS;QAChB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC/D,WAAW,EAAE,KAAK,CAAC,WAAW;KAC/B,CAAC,CAAC;IACH,MAAM,KAAK,GAAG,SAAS,CAAC,IAAI,EAAE,KAAK,CAAC,MAAM,CAAC,CAAC;IAC5C,MAAM,QAAQ,GAA0B,CAAC,EAAE,KAAK,EAAE,OAAO,EAAE,SAAS,KAAK,UAAU,EAAE,CAAC,CAAC;IACvF,MAAM,IAAI,GAAG,sBAAsB,CAAC,IAA8E,EAAE,QAAQ,EAAE,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,CAAiC,CAAC;IAC9M,MAAM,IAAI,GACR,KAAK,CAAC,IAAI,KAAK,EAAE;QACf,CAAC,CAAC,2BAA2B;QAC7B,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,GAAG,6BAA6B;YACjD,CAAC,CAAC,GAAG,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,6BAA6B,CAAC,+BAA+B,6BAA6B,cAAc;YACjI,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC;IACnB,OAAO;QACL,UAAU;QACV,KAAK;QACL,IAAI;QACJ,MAAM,EAAE;YACN,QAAQ,EAAE,aAAa;YACvB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,KAAK,EAAE,KAAK,CAAC,KAAK;YAClB,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/D,WAAW,EAAE,KAAK,CAAC,WAAW;YAC9B,GAAG,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,IAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC7D;QACD,OAAO,EAAE;YACP,IAAI,EAAE,OAAO;YACb,MAAM,EAAE,KAAK,CAAC,UAAU,IAAI,KAAK,CAAC,MAAM;YACxC,QAAQ,EAAE,KAAK,CAAC,MAAM;YACtB,EAAE,EAAE,KAAK,CAAC,WAAW;YACrB,MAAM,EAAE,KAAK,CAAC,UAAU;YACxB,KAAK;YACL,OAAO,EAAE,IAAI;YACb,IAAI;SACL;QACD,KAAK,EAAE,SAAS;QAChB,QAAQ;QACR,KAAK;KACN,CAAC;AACJ,CAAC;AAED,kDAAkD;AAClD,SAAS,mBAAmB,CAAC,IAAwB,EAAE,MAAc,EAAE,IAAkC;IACvG,OAAO;QACL,QAAQ,EAAE,aAAa;QACvB,MAAM,EAAE,IAAI,CAAC,KAAK,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QAC9C,UAAU,EAAE,gBAAgB;QAC5B,aAAa,EAAE,OAAO;QACtB,MAAM;QACN,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,KAAK,EAAE,EAAE,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE;QAClI,UAAU,EAAE,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS;QACtD,OAAO,EAAE,gBAAgB,CAAC,IAAI,CAAC,OAAO,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,4BAA4B;AAC5B,MAAM,UAAU,oBAAoB,CAAC,IAAwB,EAAE,MAAc,EAAE,IAAkC;IAC/G,MAAM,CAAC,GAAG,UAAU,CAAC,mBAAmB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,EAAE,OAAO,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,EAAE,CAAC;AAC1D,CAAC;AAED,oFAAoF;AACpF,KAAK,UAAU,wBAAwB,CACrC,aAAiC,EACjC,IAA+E;IAE/E,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,OAAO,IAAI,MAAM,CAAC,QAAQ,KAAK,IAAI;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,gBAAgB,EAAE,EAAE,CAAC;IAC3G,MAAM,OAAO,GAAG,MAAM,qBAAqB,CAAC,aAAa,EAAE,MAAM,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClF,IAAI,CAAC,OAAO,CAAC,EAAE;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,cAAc,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC;IACjG,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;AAC9B,CAAC;AAED,iHAAiH;AACjH,KAAK,UAAU,8BAA8B,CAAC,MAAwB,EAAE,OAAe,EAAE,IAAyB;IAChH,MAAM,MAAM,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;IAC7C,IAAI,SAAS,IAAI,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,MAAM,CAAC,OAAO,EAAE,CAAC;IACzE,MAAM,KAAK,GAAG,MAAM,CAAC,KAAK,CAAC;IAC3B,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO,IAAI,CAAC,KAAK,CAAC,SAAS;QAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,eAAe,EAAE,CAAC;IACtG,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,QAAQ,CAAC,eAAe,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,WAAW,EAAE,CAAC;IAE7F,MAAM,UAAU,GAAG,oBAAoB,CAAC,MAAM,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC;IAC7D,MAAM,MAAM,GAAG,KAAK,EAAE,MAAyB,EAAmC,EAAE;QAClF,MAAM,IAAI,CAAC,KAAK,CAAC;YACf,MAAM,EAAE,qBAAqB;YAC7B,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,OAAO,EAAE,UAAU;YACnB,WAAW,EAAE,KAAK,CAAC,MAAM;YACzB,MAAM,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE;SACzE,CAAC,CAAC;QACH,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACrC,CAAC,CAAC;IACF,IAAI,KAAK,CAAC,SAAS,KAAK,OAAO;QAAE,OAAO,MAAM,CAAC,YAAY,CAAC,CAAC;IAC7D,MAAM,KAAK,GAAkB,KAAK,CAAC,SAAS,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC;IACtE,IAAI,KAAK,KAAK,IAAI,EAAE,CAAC;QACnB,IAAI,CAAC,MAAM,CAAC,cAAc;YAAE,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC;QACpD,gFAAgF;QAChF,IAAI,qBAAqB,CAAC,MAAM,EAAE,KAAK,CAAC,QAAQ,CAAC,KAAK,UAAU;YAAE,OAAO,MAAM,CAAC,aAAa,CAAC,CAAC;IACjG,CAAC;SAAM,IAAI,CAAC,IAAI,CAAC,WAAW,CAAC,UAAU,CAAC,EAAE,CAAC;QACzC,OAAO,MAAM,CAAC,WAAW,CAAC,CAAC;IAC7B,CAAC;IAED,MAAM,IAAI,GAAG,kBAAkB,CAAC,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;IAC1E,IAAI,KAAK,KAAK,MAAM;QAAE,MAAM,IAAI,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC;;QAC/C,MAAM,IAAI,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC;IACjC,MAAM,IAAI,CAAC,KAAK,CAAC;QACf,MAAM,EAAE,sBAAsB;QAC9B,SAAS,EAAE,MAAM,CAAC,SAAS;QAC3B,OAAO,EAAE,IAAI,CAAC,UAAU;QACxB,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,MAAM,EAAE,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,IAAI,IAAI,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE;KAC3H,CAAC,CAAC;IACH,OAAO,EAAE,IAAI,EAAE,UAAU,EAAE,KAAK,EAAE,UAAU,EAAE,IAAI,CAAC,UAAU,EAAE,CAAC;AAClE,CAAC;AAED,2EAA2E;AAC3E,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,aAAiC,EAAE,OAAe,EAAE,IAAyB;IAC1H,MAAM,CAAC,GAAG,MAAM,wBAAwB,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAC9D,IAAI,CAAC,CAAC,CAAC,EAAE;QAAE,OAAO,CAAC,CAAC,OAAO,CAAC;IAC5B,OAAO,8BAA8B,CAAC,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,IAAI,CAAC,CAAC;AACjE,CAAC;AAED,mGAAmG;AACnG,MAAM,CAAC,MAAM,kCAAkC,GAAG,GAAG,GAAG,IAAI,CAAC;AAE7D;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,uBAAuB,CAC3C,GAAY,EACZ,SAAwC,EACxC,IAAyB,EACzB,KAAK,GAA6H,EAAE;IAEpI,MAAM,GAAG,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC;IAC3C,MAAM,QAAQ,GAAG,MAAM,wBAAwB,CAAC,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC,IAAI,SAAS,EAAE,IAAI,CAAC,CAAC;IACrG,IAAI,CAAC,QAAQ,CAAC,EAAE,EAAE,CAAC;QACjB,IAAI,QAAQ,CAAC,OAAO,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YAC7C,GAAG,CAAC,2BAA2B,QAAQ,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC;YAC1D,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,OAAO,IAAI,QAAQ,CAAC,oCAAoC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC7E,CAAC;IACD,MAAM,IAAI,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAC3E,IAAI,UAAU,IAAI,IAAI;QAAE,OAAO,IAAI,QAAQ,CAAC,mBAAmB,kCAAkC,QAAQ,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5H,SAAS,CACP,8BAA8B,CAAC,QAAQ,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC;SAC7D,IAAI,CAAC,CAAC,OAAO,EAAE,EAAE,CAChB,GAAG,CACD,SAAS,OAAO,CAAC,IAAI,GAAG,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,UAAU,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,KAAK,IAAI,OAAO,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,KAAK,OAAO,CAAC,GAAG,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAClN,CACF;SACA,KAAK,CAAC,KAAK,EAAE,GAAY,EAAE,EAAE;QAC5B,GAAG,CAAC,+BAA+B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;QAChF,MAAM,KAAK,CAAC,SAAS,EAAE,CAAC,GAAG,EAAE,QAAQ,CAAC,MAAM,CAAC,CAAC;IAChD,CAAC,CAAC,CACL,CAAC;IACF,wEAAwE;IACxE,OAAO,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAC9F,CAAC"}

package/dist/agent/channels/google-chat-identity.d.ts

@@ -0,0 +1,28 @@
+import type { IdentityMapper } from "@open-everywhere/core/agent/adapter-api.js";
+/** The structural match for eve's SessionAuthContext. */
+export interface OpenEverywhereGoogleChatAuth {
+    readonly authenticator: string;
+    readonly principalId: string;
+    readonly principalType: string;
+    readonly attributes: Record<string, string>;
+}
+export interface GoogleChatIdentityInput {
+    readonly workspace: string;
+    /** The space resource name (`spaces/<id>`). */
+    readonly space: string;
+    readonly mode: "channel" | "dm";
+    readonly trust: "internal" | "external";
+    /** The sender's user resource name (`users/<id>`). */
+    readonly sender: string;
+    readonly thread?: string;
+    readonly messageName: string;
+}
+/** Build the auth context the Google Chat surface dispatches with. */
+export declare function buildGoogleChatAuth(input: GoogleChatIdentityInput): OpenEverywhereGoogleChatAuth;
+/**
+ * The Google Chat identity mapper. FAIL CLOSED on every field it cannot read: no mode reads `channel`, no trust
+ * attribute reads `external`, and visibility is always `private`. `trustVerified` is set for a DM only when the
+ * front verified the sender internal, so a DM never lights the internal `dm` layer for an outsider.
+ */
+export declare const bindGoogleChat: IdentityMapper;
+//# sourceMappingURL=google-chat-identity.d.ts.map

package/dist/agent/channels/google-chat-identity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-chat-identity.d.ts","sourceRoot":"","sources":["../../../agent/channels/google-chat-identity.ts"],"names":[],"mappings":"AAiBA,OAAO,KAAK,EAAmB,cAAc,EAAe,MAAM,4CAA4C,CAAC;AAE/G,yDAAyD;AACzD,MAAM,WAAW,4BAA4B;IAC3C,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;CAC7C;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,+CAA+C;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,SAAS,GAAG,IAAI,CAAC;IAChC,QAAQ,CAAC,KAAK,EAAE,UAAU,GAAG,UAAU,CAAC;IACxC,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;CAC9B;AAED,sEAAsE;AACtE,wBAAgB,mBAAmB,CAAC,KAAK,EAAE,uBAAuB,GAAG,4BAA4B,CAehG;AAcD;;;;GAIG;AACH,eAAO,MAAM,cAAc,EAAE,cAsB5B,CAAC"}

package/dist/agent/channels/google-chat-identity.js

@@ -0,0 +1,70 @@
+// Pure Google Chat → Open Everywhere identity capture. The front (google-chat-front.ts) stows the HOST-DECIDED
+// facts of one admitted event into the wake's auth `attributes`, and the mapper below interprets them into the
+// binding. The security-load-bearing reading lives here, in one tested place.
+//
+// THE GRAIN:
+//   • workspace  = the policy's `workspace` segment — one Google Workspace per deployment;
+//   • surface    = the space id (`spaces/<id>` → `<id>`), so a domain's `reach` lists `google-chat/<ws>/<id>`;
+//   • mode       = `dm` for the person's own direct message with the app, else `channel`;
+//   • visibility = ALWAYS `private`. A Chat space may be discoverable inside the org, but the event does not
+//                  prove it, so nothing said in a space flows up to a shared tier by visibility alone;
+//   • trust      = `internal` ONLY when the sender is a human whose Workspace domain id is one of the policy's
+//                  `internalDomainIds`. Everyone else is `external`;
+//   • principal  = the sender's Chat user resource name (`users/<id>`), never a display name or an email.
+//
+// §AUTH-ATTRIBUTE PROVENANCE: every attribute below is written by the front from the token-verified event and
+// the policy, never from the message text and never by a model.
+/** Build the auth context the Google Chat surface dispatches with. */
+export function buildGoogleChatAuth(input) {
+    return {
+        authenticator: "google-chat",
+        principalId: input.sender,
+        principalType: "google-chat-user",
+        attributes: {
+            gchat_workspace: input.workspace,
+            gchat_space: input.space,
+            gchat_surface: input.space.slice(input.space.indexOf("/") + 1),
+            gchat_mode: input.mode,
+            gchat_trust: input.trust,
+            gchat_message: input.messageName,
+            ...(input.thread !== undefined ? { gchat_thread: input.thread } : {}),
+        },
+    };
+}
+function authOf(ctx) {
+    return ctx.session?.auth?.current ?? ctx.session?.auth?.initiator ?? null;
+}
+function attr(a, key) {
+    const v = a?.[key];
+    const first = Array.isArray(v) ? v[0] : v;
+    return typeof first === "string" && first.length > 0 ? first : undefined;
+}
+/**
+ * The Google Chat identity mapper. FAIL CLOSED on every field it cannot read: no mode reads `channel`, no trust
+ * attribute reads `external`, and visibility is always `private`. `trustVerified` is set for a DM only when the
+ * front verified the sender internal, so a DM never lights the internal `dm` layer for an outsider.
+ */
+export const bindGoogleChat = (ctx) => {
+    const auth = authOf(ctx);
+    const a = auth?.attributes;
+    const mode = attr(a, "gchat_mode") === "dm" ? "dm" : "channel";
+    const internal = attr(a, "gchat_trust") === "internal";
+    const space = attr(a, "gchat_space");
+    const thread = attr(a, "gchat_thread");
+    const messageName = attr(a, "gchat_message");
+    const principalId = typeof auth?.principalId === "string" && auth.principalId.length > 0 ? auth.principalId : undefined;
+    return {
+        workspace: attr(a, "gchat_workspace"),
+        surface: attr(a, "gchat_surface"),
+        mode,
+        visibility: "private",
+        ...(internal ? { trust: "internal", ...(mode === "dm" ? { trustVerified: true } : {}) } : { trust: "external" }),
+        ...(principalId ? { principalId } : {}),
+        // `channelId` is the space: the one address every shared room-notice path (an approval outcome note, a
+        // judge-lift notice) posts to through the surface message ops.
+        ...(space
+            ? { target: { space, channelId: space, ...(thread ? { thread } : {}), ...(messageName ? { messageName } : {}) } }
+            : {}),
+    };
+};
+//# sourceMappingURL=google-chat-identity.js.map

package/dist/agent/channels/google-chat-identity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"google-chat-identity.js","sourceRoot":"","sources":["../../../agent/channels/google-chat-identity.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,+GAA+G;AAC/G,8EAA8E;AAC9E,EAAE;AACF,aAAa;AACb,2FAA2F;AAC3F,+GAA+G;AAC/G,0FAA0F;AAC1F,6GAA6G;AAC7G,uGAAuG;AACvG,+GAA+G;AAC/G,qEAAqE;AACrE,0GAA0G;AAC1G,EAAE;AACF,8GAA8G;AAC9G,gEAAgE;AAwBhE,sEAAsE;AACtE,MAAM,UAAU,mBAAmB,CAAC,KAA8B;IAChE,OAAO;QACL,aAAa,EAAE,aAAa;QAC5B,WAAW,EAAE,KAAK,CAAC,MAAM;QACzB,aAAa,EAAE,kBAAkB;QACjC,UAAU,EAAE;YACV,eAAe,EAAE,KAAK,CAAC,SAAS;YAChC,WAAW,EAAE,KAAK,CAAC,KAAK;YACxB,aAAa,EAAE,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;YAC9D,UAAU,EAAE,KAAK,CAAC,IAAI;YACtB,WAAW,EAAE,KAAK,CAAC,KAAK;YACxB,aAAa,EAAE,KAAK,CAAC,WAAW;YAChC,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACtE;KACF,CAAC;AACJ,CAAC;AAID,SAAS,MAAM,CAAC,GAAoB;IAClC,OAAO,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,IAAI,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,SAAS,IAAI,IAAI,CAAC;AAC5E,CAAC;AAED,SAAS,IAAI,CAAC,CAAY,EAAE,GAAW;IACrC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,CAAC,CAAC;IACnB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAC1C,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,MAAM,cAAc,GAAmB,CAAC,GAAG,EAAe,EAAE;IACjE,MAAM,IAAI,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IACzB,MAAM,CAAC,GAAG,IAAI,EAAE,UAAU,CAAC;IAC3B,MAAM,IAAI,GAAG,IAAI,CAAC,CAAC,EAAE,YAAY,CAAC,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,MAAM,QAAQ,GAAG,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,KAAK,UAAU,CAAC;IACvD,MAAM,KAAK,GAAG,IAAI,CAAC,CAAC,EAAE,aAAa,CAAC,CAAC;IACrC,MAAM,MAAM,GAAG,IAAI,CAAC,CAAC,EAAE,cAAc,CAAC,CAAC;IACvC,MAAM,WAAW,GAAG,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC,CAAC;IAC7C,MAAM,WAAW,GAAG,OAAO,IAAI,EAAE,WAAW,KAAK,QAAQ,IAAI,IAAI,CAAC,WAAW,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,CAAC,SAAS,CAAC;IACxH,OAAO;QACL,SAAS,EAAE,IAAI,CAAC,CAAC,EAAE,iBAAiB,CAAC;QACrC,OAAO,EAAE,IAAI,CAAC,CAAC,EAAE,eAAe,CAAC;QACjC,IAAI;QACJ,UAAU,EAAE,SAAS;QACrB,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAmB,EAAE,GAAG,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,UAAmB,EAAE,CAAC;QAClI,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACvC,uGAAuG;QACvG,+DAA+D;QAC/D,GAAG,CAAC,KAAK;YACP,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;YACjH,CAAC,CAAC,EAAE,CAAC;KACR,CAAC;AACJ,CAAC,CAAC"}