@open-everywhere/provider-google-chat 0.0.0-stage → 0.8.0

package/dist/agent/docs-generated.js

@@ -0,0 +1,118 @@
+// GENERATED by `npx tsx scripts/docs-generate.ts` from docs/deploy/surfaces/google-chat.md — DO NOT HAND-EDIT.
+// Edit the markdown under docs/ and re-run the generator; `npm run lint:docs` fails the
+// build if this file and its sources ever disagree. See scripts/docs-generate.ts for why the
+// manual is compiled in at all (docs/ does not exist on disk in a hosted deployment).
+export const PROVIDER_DOCS = [
+    {
+        title: "Google Chat",
+        path: "docs/deploy/surfaces/google-chat.md",
+        summary: "Put the agent in Google Chat as a Chat app. People @mention it in a space or send it a direct message, and it answers in the same thread. Google Chat reaches the same two chiefs of staff as every other chat surface:",
+        markdown: [
+            "# Google Chat",
+            "",
+            "Put the agent in Google Chat as a Chat app. People @mention it in a space or send it a direct message, and it",
+            "answers in the same thread. Google Chat reaches the same two chiefs of staff as every other chat surface:",
+            "",
+            "- A **space** belongs to a domain. An @mention of the app in a space wakes that domain's standing seat, exactly as a",
+            "  message in one of the domain's Slack or Teams channels would.",
+            "- A **direct message** with the app wakes the person's own DM seat.",
+            "",
+            "Google Chat is the surface for an organisation that runs Google Workspace. It ships **off**: until a policy enables",
+            "it, the endpoint answers every delivery with `503`.",
+            "",
+            "## What it does and does not do",
+            "",
+            "- **Every event is verified before it is read.** Google Chat sends each event with a bearer token. The route checks",
+            "  the token's signature against Google's published keys, its issuer, its expiry, and its audience against the",
+            "  policy's `audience`. A token for any other audience, or (in endpoint-URL mode) from any Google account other than",
+            "  `chat@system.gserviceaccount.com`, is refused `401` and writes no audit row.",
+            "- **Addressed only.** The HTTP endpoint gets a space message only when it @-mentions the app, or invokes one of its",
+            "  slash commands. The surface has no ambient leg: room chatter never reaches it. (A Workspace Events subscription",
+            "  would deliver the rest; this surface does not use one yet.)",
+            "- **Trust comes from the policy, never from a name.** A sender binds `internal` only when Google's event names a",
+            "  Workspace domain id (`sender.domainId`) that the policy lists in `internalDomainIds`. Everyone else binds",
+            "  `external`: shared memory routes to the read-only `public` layer, and the turn is marked as carrying a",
+            "  non-member's words. ⚠ The mapping from your Workspace to its domain id is not documented as stable by Google.",
+            "  Read the id from a real event: every `google-chat.admitted` and `google-chat.refused` audit row records the",
+            "  sender's `domainId`. A DM-only deployment can start with an empty list: the first internal person's DM is refused",
+            "  `external-dm`, and its refused row carries their domain id.",
+            "- **Direct messages are for internal people only.** A DM seat reads its person's private layer, so a DM from an",
+            "  `external` sender is refused (`external-dm`). Set `directMessages: false` to refuse every DM (`dm-off`).",
+            "- **Group chats are refused** (`group-chat`). A group chat has no domain to own it and is not one person's DM.",
+            "- **A space with no seat is refused**, not dropped in silence (`no-domain`): put its surface key in a domain's",
+            "  `reach`, or run a standing-seat window that gives an undeclared space its own solo seat.",
+            "- **Bots never wake a seat.** A message from any bot, the app's own included, is dropped. That is the loop guard.",
+            "- **Replies only, into the conversation that woke the seat.** The reply posts into the trigger's space and thread,",
+            "  as the app. The space and thread are frozen at the gate from the verified event; the model never names one. The",
+            "  app can post only into a space it is a member of. A reply longer than one Chat message goes out as consecutive",
+            "  messages in the same thread.",
+            "",
+            "## How it fits the planes",
+            "",
+            "| Plane | What Google Chat uses |",
+            "|---|---|",
+            "| Surface | The `google-chat` provider bundle (`packages/providers/google-chat`): identity mapper, capability manifest, post arm, wake-origin codec, host-notice transport. A space's surface key is `google-chat/<workspace>/<space id>` and goes in a domain's `reach` like any channel. |",
+            "| Seat | A space mention diverts into the domain's standing seat through the same `divertInboundToUnifiedWindow` every chat surface uses; a DM diverts into the person's DM seat (`channels/dm-seat.ts`). Spend caps, the wake ingress row, provider selection and rate-limit retry ride the shared divert. |",
+            "| Identity | The principal is the sender's Chat user resource name (`users/<id>`). The workspace is the policy's `workspace` segment. Visibility is always `private`. |",
+            "| Audit | `google-chat.admitted` (space, seat kind, trust, the sender's domain id, whether it was a thread reply), `google-chat.refused` (the reason and the sender's domain id), and `google-chat.wake_failed`. The reply itself writes the shared `reply.post` row. |",
+            "| Egress | The reply and a host notice (an approval outcome note, the judge-lift notice) are the only outbound calls, to `chat.googleapis.com`, with a `chat.bot` token minted from the app's service-account key at `oauth2.googleapis.com`. The token endpoint is pinned: the key file's own `token_uri` is ignored. |",
+            "",
+            "## What an operator must provision",
+            "",
+            "Nothing below is created by Open Everywhere.",
+            "",
+            "1. **A Google Cloud project** with the Google Chat API enabled.",
+            "2. **A service account** in that project, and a JSON key for it. The app posts its replies as this account.",
+            "3. **The Chat app configuration** (Google Chat API → Configuration): give the app a name and avatar, turn on",
+            "   \"Receive 1:1 messages\" and \"Join spaces and group conversations\", choose **HTTP endpoint URL** as the connection",
+            "   setting, and set it to `https://<your deployment host>/eve/v1/google-chat`. Choose the **Authentication audience**:",
+            "   \"HTTP endpoint URL\" (recommended) or \"Project number\". Make the app visible to the people or groups who should",
+            "   use it.",
+            "4. **The secret**, in the secret store, never in a file or the environment of a commit:",
+            "   ```sh",
+            "   npx oe secret set GOOGLE_CHAT_SERVICE_ACCOUNT_KEY   # the service account's JSON key, whole",
+            "   ```",
+            "   (The resolver falls back to an environment variable of the same name, and warns when it does.)",
+            "5. **The policy**, in `agent/google-chat/policy.ts`, by pull request: set `enabled: true`, the `audience` that",
+            "   matches step 3 (`{ kind: \"endpoint-url\", url: \"https://<host>/eve/v1/google-chat\" }` or",
+            "   `{ kind: \"project-number\", projectNumber: \"<number>\" }`), your `workspace` segment, and your",
+            "   `internalDomainIds`.",
+            "6. **The seats.** For each space, add its surface key (`google-chat/<workspace>/<space id>`, the id after",
+            "   `spaces/` in the space's URL) to the owning domain's `reach` in `agent/memory/config/domains/`. A multi-source",
+            "   window requires every source vouched, so also declare the space in `agent/identity/surfaces.ts`. 🔴 The vouch",
+            "   does **not** make an outside sender internal: the mapper states each message's trust itself, from the policy.",
+            "7. **Add the app** to each space (`@<app name>` → Add).",
+            "",
+            "## Settings",
+            "",
+            "| Field | Meaning |",
+            "|---|---|",
+            "| `enabled` | The master switch. Off answers `503` to every delivery and refuses every reply. |",
+            "| `audience` | The audience every event's token must carry. `null` refuses every delivery; an enabled policy without one fails the boot. |",
+            "| `workspace` | The workspace segment of every surface key (lowercase, `a-z`, `0-9`, `-`). |",
+            "| `internalDomainIds` | The Workspace domain ids whose people bind `internal`. Empty: everybody binds `external`. |",
+            "| `directMessages` | May an internal person wake their own DM seat? |",
+            "",
+            "## What is not built yet",
+            "",
+            "- **Cards**: an approval asked from Google Chat takes the venue walk to a card-capable room in the same domain. A",
+            "  Chat card with a button needs the `CARD_CLICKED` tap answered.",
+            "- **Reading a space** (`read_channel`, `read_thread`) and a seat catch-up: listing a space's messages needs user",
+            "  authentication or the admin-approved `chat.app.messages.readonly` app scope, which the app does not request.",
+            "- **Ambient messages, name-drops and edits**: they need a Workspace Events subscription.",
+            "- **Edit, reactions, stop, files, proactive posts and routines.** Each is declared, with its reason, in the",
+            "  [chat-surface contract](../../extending/chat-surface-contract.md)'s parity tables.",
+            "- **The Workspace add-on event format.** The route reads the classic Chat app event; an app built as a Google",
+            "  Workspace add-on wraps its events differently and is not supported.",
+            "",
+            "## Verification",
+            "",
+            "The unit packs (`test:google-chat-auth`, `test:google-chat-front`, `test:google-chat-post-arm`) and the app-level",
+            "`test:google-chat-integration` drive the token check, the gate, the reply and the binding offline. There is no",
+            "live e2e leg yet: one needs a Google Workspace test tenant with the app published to it, a fixture this repository",
+            "cannot create.",
+            "",
+        ].join("\n"),
+    },
+];
+//# sourceMappingURL=docs-generated.js.map

package/dist/agent/docs-generated.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs-generated.js","sourceRoot":"","sources":["../../agent/docs-generated.ts"],"names":[],"mappings":"AAAA,+GAA+G;AAC/G,wFAAwF;AACxF,6FAA6F;AAC7F,sFAAsF;AAItF,MAAM,CAAC,MAAM,aAAa,GAAwB;IAChD;QACE,KAAK,EAAE,aAAa;QACpB,IAAI,EAAE,qCAAqC;QAC3C,OAAO,EAAE,yNAAyN;QAClO,QAAQ,EAAE;YACR,eAAe;YACf,EAAE;YACF,+GAA+G;YAC/G,2GAA2G;YAC3G,EAAE;YACF,sHAAsH;YACtH,iEAAiE;YACjE,qEAAqE;YACrE,EAAE;YACF,qHAAqH;YACrH,qDAAqD;YACrD,EAAE;YACF,iCAAiC;YACjC,EAAE;YACF,qHAAqH;YACrH,+GAA+G;YAC/G,qHAAqH;YACrH,gFAAgF;YAChF,qHAAqH;YACrH,mHAAmH;YACnH,+DAA+D;YAC/D,kHAAkH;YAClH,6GAA6G;YAC7G,0GAA0G;YAC1G,iHAAiH;YACjH,+GAA+G;YAC/G,qHAAqH;YACrH,+DAA+D;YAC/D,iHAAiH;YACjH,4GAA4G;YAC5G,gHAAgH;YAChH,gHAAgH;YAChH,4FAA4F;YAC5F,mHAAmH;YACnH,oHAAoH;YACpH,mHAAmH;YACnH,kHAAkH;YAClH,gCAAgC;YAChC,EAAE;YACF,2BAA2B;YAC3B,EAAE;YACF,mCAAmC;YACnC,WAAW;YACX,8RAA8R;YAC9R,+SAA+S;YAC/S,yKAAyK;YACzK,yQAAyQ;YACzQ,0TAA0T;YAC1T,EAAE;YACF,oCAAoC;YACpC,EAAE;YACF,8CAA8C;YAC9C,EAAE;YACF,iEAAiE;YACjE,6GAA6G;YAC7G,8GAA8G;YAC9G,yHAAyH;YACzH,wHAAwH;YACxH,uHAAuH;YACvH,YAAY;YACZ,yFAAyF;YACzF,UAAU;YACV,gGAAgG;YAChG,QAAQ;YACR,mGAAmG;YACnG,gHAAgH;YAChH,gGAAgG;YAChG,qGAAqG;YACrG,yBAAyB;YACzB,2GAA2G;YAC3G,mHAAmH;YACnH,kHAAkH;YAClH,kHAAkH;YAClH,yDAAyD;YACzD,EAAE;YACF,aAAa;YACb,EAAE;YACF,qBAAqB;YACrB,WAAW;YACX,iGAAiG;YACjG,4IAA4I;YAC5I,8FAA8F;YAC9F,qHAAqH;YACrH,uEAAuE;YACvE,EAAE;YACF,0BAA0B;YAC1B,EAAE;YACF,mHAAmH;YACnH,kEAAkE;YAClE,kHAAkH;YAClH,gHAAgH;YAChH,0FAA0F;YAC1F,6GAA6G;YAC7G,sFAAsF;YACtF,+GAA+G;YAC/G,uEAAuE;YACvE,EAAE;YACF,iBAAiB;YACjB,EAAE;YACF,mHAAmH;YACnH,gHAAgH;YAChH,oHAAoH;YACpH,gBAAgB;YAChB,EAAE;SACH,CAAC,IAAI,CAAC,IAAI,CAAC;KACb;CACF,CAAC"}

package/dist/agent/policy.d.ts

@@ -0,0 +1,38 @@
+/** Which audience Google Chat puts in the bearer token of each event — the app's "Authentication audience"
+ *  setting in the Google Cloud console. */
+export type GoogleChatAudience = 
+/** "Project number": the token is self-signed by `chat@system.gserviceaccount.com` for the project number. */
+{
+    readonly kind: "project-number";
+    readonly projectNumber: string;
+}
+/** "HTTP endpoint URL": the token is a Google OIDC id token for the exact endpoint URL. */
+ | {
+    readonly kind: "endpoint-url";
+    readonly url: string;
+};
+export interface GoogleChatPolicy {
+    /** The master switch. Off answers 503 to every delivery and refuses every reply. */
+    readonly enabled: boolean;
+    /** The audience every event's token must carry. Null refuses every delivery (fail closed). */
+    readonly audience: GoogleChatAudience | null;
+    /** The workspace segment of every Google Chat surface key (`google-chat/<workspace>/<space id>`). */
+    readonly workspace: string;
+    /**
+     * The Google Workspace domain ids (`sender.domainId` on a Chat event) whose people bind `internal`. Everyone
+     * else binds `external`. Empty: everybody binds external.
+     */
+    readonly internalDomainIds: readonly string[];
+    /** May a person wake their own DM seat by messaging the app directly? An `external` person never can. */
+    readonly directMessages: boolean;
+}
+export declare const DEFAULT_GOOGLE_CHAT_POLICY: GoogleChatPolicy;
+/** Every problem with `policy`, or empty when it is valid. Pure. */
+export declare function validateGoogleChatPolicy(policy: GoogleChatPolicy): readonly string[];
+/** Register this deployment's policy. Throws on an invalid policy, so a bad file fails the boot. */
+export declare function registerGoogleChatPolicy(policy: GoogleChatPolicy): void;
+/** The registered policy (the shipped default — off — until the app registers one). */
+export declare function googleChatPolicy(): GoogleChatPolicy;
+/** The surface key of one space: `google-chat/<workspace>/<space id>`. */
+export declare function googleChatSurfaceKey(policy: GoogleChatPolicy, space: string): string;
+//# sourceMappingURL=policy.d.ts.map

package/dist/agent/policy.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.d.ts","sourceRoot":"","sources":["../../agent/policy.ts"],"names":[],"mappings":"AAaA;2CAC2C;AAC3C,MAAM,MAAM,kBAAkB;AAC5B,8GAA8G;AAC5G;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAA;CAAE;AACrE,2FAA2F;GACzF;IAAE,QAAQ,CAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAA;CAAE,CAAC;AAE5D,MAAM,WAAW,gBAAgB;IAC/B,oFAAoF;IACpF,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;IAC1B,8FAA8F;IAC9F,QAAQ,CAAC,QAAQ,EAAE,kBAAkB,GAAG,IAAI,CAAC;IAC7C,qGAAqG;IACrG,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B;;;OAGG;IACH,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAC;IAC9C,yGAAyG;IACzG,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;CAClC;AAED,eAAO,MAAM,0BAA0B,EAAE,gBAMxC,CAAC;AAMF,oEAAoE;AACpE,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,SAAS,MAAM,EAAE,CA0BpF;AAID,oGAAoG;AACpG,wBAAgB,wBAAwB,CAAC,MAAM,EAAE,gBAAgB,GAAG,IAAI,CAIvE;AAED,uFAAuF;AACvF,wBAAgB,gBAAgB,IAAI,gBAAgB,CAEnD;AAED,0EAA0E;AAC1E,wBAAgB,oBAAoB,CAAC,MAAM,EAAE,gBAAgB,EAAE,KAAK,EAAE,MAAM,GAAG,MAAM,CAEpF"}

package/dist/agent/policy.js

@@ -0,0 +1,78 @@
+// THE GOOGLE CHAT POLICY (OPE-2442) — the schema, its validation and the registry. The app's own
+// `agent/google-chat/policy.ts` declares the values and calls `registerGoogleChatPolicy` at boot (through
+// `agent/lib/register-config.ts`), so every change is a reviewed pull request.
+//
+// 🔴 THE SURFACE SHIPS OFF. `DEFAULT_GOOGLE_CHAT_POLICY.enabled` is false, and the route answers 503 to every
+// delivery until a policy enables it AND names the audience Google signs each event for. An external ingress
+// that nobody configured must not be reachable.
+//
+// 🔴 TRUST IS TYPED CODE, NEVER AN ENVIRONMENT VARIABLE. `internalDomainIds` is the list of Google Workspace
+// domain ids whose people bind `internal`; it is a trust declaration, so it lives here and changes by pull
+// request. Nothing here is a secret: the app's service-account key lives in the secret store
+// (`npx oe secret set GOOGLE_CHAT_SERVICE_ACCOUNT_KEY`).
+export const DEFAULT_GOOGLE_CHAT_POLICY = {
+    enabled: false,
+    audience: null,
+    workspace: "workspace",
+    internalDomainIds: [],
+    directMessages: true,
+};
+const WORKSPACE_SEGMENT = /^[a-z0-9][a-z0-9-]{0,62}$/u;
+const PROJECT_NUMBER = /^[0-9]{1,20}$/u;
+const DOMAIN_ID = /^[A-Za-z0-9_-]{1,64}$/u;
+/** Every problem with `policy`, or empty when it is valid. Pure. */
+export function validateGoogleChatPolicy(policy) {
+    const problems = [];
+    if (!WORKSPACE_SEGMENT.test(policy.workspace)) {
+        problems.push(`workspace "${policy.workspace}" must be a lowercase segment (a-z, 0-9, "-"), at most 63 characters.`);
+    }
+    for (const id of policy.internalDomainIds) {
+        if (!DOMAIN_ID.test(id))
+            problems.push(`internalDomainIds entry "${id}" is not a Google Workspace domain id.`);
+    }
+    const a = policy.audience;
+    if (a !== null) {
+        if (a.kind === "project-number") {
+            if (!PROJECT_NUMBER.test(a.projectNumber))
+                problems.push("audience.projectNumber must be the numeric Google Cloud project number.");
+        }
+        else if (a.kind === "endpoint-url") {
+            let url;
+            try {
+                url = new URL(a.url);
+            }
+            catch {
+                url = undefined;
+            }
+            if (url?.protocol !== "https:")
+                problems.push("audience.url must be the app's https endpoint URL.");
+        }
+        else {
+            problems.push(`audience.kind must be "project-number" or "endpoint-url".`);
+        }
+    }
+    if (policy.enabled && a === null)
+        problems.push("an enabled policy must name its audience — without it no event can be verified.");
+    return problems;
+}
+let registered = DEFAULT_GOOGLE_CHAT_POLICY;
+/** Register this deployment's policy. Throws on an invalid policy, so a bad file fails the boot. */
+export function registerGoogleChatPolicy(policy) {
+    const problems = validateGoogleChatPolicy(policy);
+    if (problems.length > 0)
+        throw new Error(`agent/google-chat/policy.ts is invalid:\n  - ${problems.join("\n  - ")}`);
+    registered = policy;
+}
+/** The registered policy (the shipped default — off — until the app registers one). */
+export function googleChatPolicy() {
+    return registered;
+}
+/** The surface key of one space: `google-chat/<workspace>/<space id>`. */
+export function googleChatSurfaceKey(policy, space) {
+    return `google-chat/${policy.workspace}/${spaceId(space)}`;
+}
+/** The id after `spaces/`. */
+function spaceId(space) {
+    return space.slice(space.indexOf("/") + 1);
+}
+//# sourceMappingURL=policy.js.map

package/dist/agent/policy.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"policy.js","sourceRoot":"","sources":["../../agent/policy.ts"],"names":[],"mappings":"AAAA,iGAAiG;AACjG,0GAA0G;AAC1G,+EAA+E;AAC/E,EAAE;AACF,8GAA8G;AAC9G,6GAA6G;AAC7G,gDAAgD;AAChD,EAAE;AACF,6GAA6G;AAC7G,2GAA2G;AAC3G,6FAA6F;AAC7F,yDAAyD;AA0BzD,MAAM,CAAC,MAAM,0BAA0B,GAAqB;IAC1D,OAAO,EAAE,KAAK;IACd,QAAQ,EAAE,IAAI;IACd,SAAS,EAAE,WAAW;IACtB,iBAAiB,EAAE,EAAE;IACrB,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF,MAAM,iBAAiB,GAAG,4BAA4B,CAAC;AACvD,MAAM,cAAc,GAAG,gBAAgB,CAAC;AACxC,MAAM,SAAS,GAAG,wBAAwB,CAAC;AAE3C,oEAAoE;AACpE,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAC/D,MAAM,QAAQ,GAAa,EAAE,CAAC;IAC9B,IAAI,CAAC,iBAAiB,CAAC,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC;QAC9C,QAAQ,CAAC,IAAI,CAAC,cAAc,MAAM,CAAC,SAAS,uEAAuE,CAAC,CAAC;IACvH,CAAC;IACD,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,iBAAiB,EAAE,CAAC;QAC1C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;YAAE,QAAQ,CAAC,IAAI,CAAC,4BAA4B,EAAE,wCAAwC,CAAC,CAAC;IACjH,CAAC;IACD,MAAM,CAAC,GAAG,MAAM,CAAC,QAAQ,CAAC;IAC1B,IAAI,CAAC,KAAK,IAAI,EAAE,CAAC;QACf,IAAI,CAAC,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YAChC,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,aAAa,CAAC;gBAAE,QAAQ,CAAC,IAAI,CAAC,yEAAyE,CAAC,CAAC;QACtI,CAAC;aAAM,IAAI,CAAC,CAAC,IAAI,KAAK,cAAc,EAAE,CAAC;YACrC,IAAI,GAAoB,CAAC;YACzB,IAAI,CAAC;gBACH,GAAG,GAAG,IAAI,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;YACvB,CAAC;YAAC,MAAM,CAAC;gBACP,GAAG,GAAG,SAAS,CAAC;YAClB,CAAC;YACD,IAAI,GAAG,EAAE,QAAQ,KAAK,QAAQ;gBAAE,QAAQ,CAAC,IAAI,CAAC,oDAAoD,CAAC,CAAC;QACtG,CAAC;aAAM,CAAC;YACN,QAAQ,CAAC,IAAI,CAAC,2DAA2D,CAAC,CAAC;QAC7E,CAAC;IACH,CAAC;IACD,IAAI,MAAM,CAAC,OAAO,IAAI,CAAC,KAAK,IAAI;QAAE,QAAQ,CAAC,IAAI,CAAC,iFAAiF,CAAC,CAAC;IACnI,OAAO,QAAQ,CAAC;AAClB,CAAC;AAED,IAAI,UAAU,GAAqB,0BAA0B,CAAC;AAE9D,oGAAoG;AACpG,MAAM,UAAU,wBAAwB,CAAC,MAAwB;IAC/D,MAAM,QAAQ,GAAG,wBAAwB,CAAC,MAAM,CAAC,CAAC;IAClD,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC;QAAE,MAAM,IAAI,KAAK,CAAC,gDAAgD,QAAQ,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;IACpH,UAAU,GAAG,MAAM,CAAC;AACtB,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,gBAAgB;IAC9B,OAAO,UAAU,CAAC;AACpB,CAAC;AAED,0EAA0E;AAC1E,MAAM,UAAU,oBAAoB,CAAC,MAAwB,EAAE,KAAa;IAC1E,OAAO,eAAe,MAAM,CAAC,SAAS,IAAI,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC;AAC7D,CAAC;AAED,8BAA8B;AAC9B,SAAS,OAAO,CAAC,KAAa;IAC5B,OAAO,KAAK,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;AAC7C,CAAC"}

package/dist/agent/provider-events.d.ts

@@ -0,0 +1,3 @@
+import type { ProviderEventDeclaration } from "@open-everywhere/core/agent/adapter-api.js";
+export declare const GOOGLE_CHAT_PROVIDER_EVENTS: ProviderEventDeclaration;
+//# sourceMappingURL=provider-events.d.ts.map

package/dist/agent/provider-events.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-events.d.ts","sourceRoot":"","sources":["../../agent/provider-events.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAE3F,eAAO,MAAM,2BAA2B,EAAE,wBAQzC,CAAC"}

package/dist/agent/provider-events.js

@@ -0,0 +1,16 @@
+// GOOGLE CHAT's event inventory (OPE-2442). See the core module's header
+// (packages/core/agent/routines/provider-events.ts) for what the three routing states mean.
+//
+// 🔴 THE GOOGLE CHAT BUNDLE REGISTERS NO EVENT NORMALIZER, so every row is `routing: "none"` and the declaration
+// names no `source`. A message event is CONVERSATION — it wakes a seat through the surface's gate — and a routine
+// subscribed to raw Chat events would bypass that gate.
+export const GOOGLE_CHAT_PROVIDER_EVENTS = {
+    doc: "https://developers.google.com/workspace/chat/receive-respond-interactions",
+    events: [
+        { event: "MESSAGE", routing: "none", match: [], scope: [], note: "an @mention in a space or a direct message — the front's conversation leg, through the gate, never a routine" },
+        { event: "ADDED_TO_SPACE", routing: "none", match: [], scope: [], note: "the app was added to a space — acknowledged and dropped; a space wakes nothing until a domain's `reach` lists it" },
+        { event: "REMOVED_FROM_SPACE", routing: "none", match: [], scope: [], note: "the app was removed from a space — acknowledged and dropped" },
+        { event: "CARD_CLICKED", routing: "none", match: [], scope: [], note: "a card button tap — acknowledged and dropped; the surface posts no card yet" },
+    ],
+};
+//# sourceMappingURL=provider-events.js.map

package/dist/agent/provider-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"provider-events.js","sourceRoot":"","sources":["../../agent/provider-events.ts"],"names":[],"mappings":"AAAA,yEAAyE;AACzE,4FAA4F;AAC5F,EAAE;AACF,iHAAiH;AACjH,kHAAkH;AAClH,wDAAwD;AAIxD,MAAM,CAAC,MAAM,2BAA2B,GAA6B;IACnE,GAAG,EAAE,2EAA2E;IAChF,MAAM,EAAE;QACN,EAAE,KAAK,EAAE,SAAS,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,8GAA8G,EAAE;QACjL,EAAE,KAAK,EAAE,gBAAgB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,kHAAkH,EAAE;QAC5L,EAAE,KAAK,EAAE,oBAAoB,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,6DAA6D,EAAE;QAC3I,EAAE,KAAK,EAAE,cAAc,EAAE,OAAO,EAAE,MAAM,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,EAAE,EAAE,IAAI,EAAE,6EAA6E,EAAE;KACtJ;CACF,CAAC"}

package/dist/agent/register.d.ts

@@ -0,0 +1,3 @@
+/** Perform ALL of the Google Chat bundle's registrations. Idempotent (each register call replaces). */
+export declare function registerGoogleChatProvider(): void;
+//# sourceMappingURL=register.d.ts.map

package/dist/agent/register.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.d.ts","sourceRoot":"","sources":["../../agent/register.ts"],"names":[],"mappings":"AAoCA,uGAAuG;AACvG,wBAAgB,0BAA0B,IAAI,IAAI,CAUjD"}

package/dist/agent/register.js

@@ -0,0 +1,37 @@
+// registerGoogleChatProvider — the ONE boot entry of @open-everywhere/provider-google-chat (OPE-2442). The app's
+// generated selection table imports it STATICALLY and `registerDefaultAdapters()` calls it once at boot; every
+// seam the bundle implements registers here and nowhere else.
+//
+// What Google Chat registers (and what it deliberately does NOT):
+//   • identity mapper     — bindGoogleChat (channels/google-chat-identity.ts)
+//   • capability manifest — { midTurnPost: true, reactions: false, closingProseDropped: true }: `reply` is the
+//                           wired verb (the unified dispatch through the post arm), the app sets no reactions,
+//                           and a seat's turn-final text is dropped, so `reply` is the only way out
+//   • post arm            — googleChatPostArm: the reply, into the trigger's space and thread
+//   • wake-origin codec   — the stored-data google-chat arm (channels/google-chat-origin-codec.ts)
+//   • surface message ops — googleChatMessageOps: a host notice is one more message in the space
+//   • credential probe    — "configured" = the policy is enabled (no environment read)
+//   • NO read adapter (the app cannot list a space's messages), NO card poster, NO reaction surface, NO routine
+//     dispatch — each is declared, with its reason, in surface-parity.ts.
+import { registerCapabilityManifest, registerIdentityMapper, registerPostArm, registerProviderDocs, registerProviderEvents, registerSurfaceCredentialProbe, registerSurfaceMessageOps, registerSurfaceParity, registerWakeOriginCodec, } from "@open-everywhere/core/agent/adapter-api.js";
+import { PROVIDER_DOCS } from "./docs-generated.js";
+import { GOOGLE_CHAT_SURFACE_PARITY } from "./surface-parity.js";
+import { GOOGLE_CHAT_PROVIDER_EVENTS } from "./provider-events.js";
+import { googleChatPolicy } from "./policy.js";
+import { bindGoogleChat } from "./channels/google-chat-identity.js";
+import { googleChatPostArm } from "./channels/google-chat-post-arm.js";
+import { googleChatWakeOriginCodec } from "./channels/google-chat-origin-codec.js";
+import { googleChatMessageOps } from "./channels/google-chat-message-ops.js";
+/** Perform ALL of the Google Chat bundle's registrations. Idempotent (each register call replaces). */
+export function registerGoogleChatProvider() {
+    registerIdentityMapper("google-chat", bindGoogleChat);
+    registerCapabilityManifest("google-chat", { midTurnPost: true, reactions: false, closingProseDropped: true });
+    registerSurfaceParity("google-chat", GOOGLE_CHAT_SURFACE_PARITY);
+    registerProviderEvents("google-chat", GOOGLE_CHAT_PROVIDER_EVENTS);
+    registerPostArm(googleChatPostArm);
+    registerWakeOriginCodec("google-chat", googleChatWakeOriginCodec);
+    registerSurfaceMessageOps(googleChatMessageOps);
+    registerSurfaceCredentialProbe("google-chat", () => googleChatPolicy().enabled);
+    registerProviderDocs("google-chat", PROVIDER_DOCS);
+}
+//# sourceMappingURL=register.js.map

package/dist/agent/register.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register.js","sourceRoot":"","sources":["../../agent/register.ts"],"names":[],"mappings":"AAAA,iHAAiH;AACjH,+GAA+G;AAC/G,8DAA8D;AAC9D,EAAE;AACF,kEAAkE;AAClE,8EAA8E;AAC9E,+GAA+G;AAC/G,+GAA+G;AAC/G,oGAAoG;AACpG,8FAA8F;AAC9F,mGAAmG;AACnG,iGAAiG;AACjG,uFAAuF;AACvF,gHAAgH;AAChH,0EAA0E;AAE1E,OAAO,EACL,0BAA0B,EAC1B,sBAAsB,EACtB,eAAe,EACf,oBAAoB,EACpB,sBAAsB,EACtB,8BAA8B,EAC9B,yBAAyB,EACzB,qBAAqB,EACrB,uBAAuB,GACxB,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AACpD,OAAO,EAAE,0BAA0B,EAAE,MAAM,qBAAqB,CAAC;AACjE,OAAO,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AACnE,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAC;AACpE,OAAO,EAAE,iBAAiB,EAAE,MAAM,oCAAoC,CAAC;AACvE,OAAO,EAAE,yBAAyB,EAAE,MAAM,wCAAwC,CAAC;AACnF,OAAO,EAAE,oBAAoB,EAAE,MAAM,uCAAuC,CAAC;AAE7E,uGAAuG;AACvG,MAAM,UAAU,0BAA0B;IACxC,sBAAsB,CAAC,aAAa,EAAE,cAAc,CAAC,CAAC;IACtD,0BAA0B,CAAC,aAAa,EAAE,EAAE,WAAW,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,mBAAmB,EAAE,IAAI,EAAE,CAAC,CAAC;IAC9G,qBAAqB,CAAC,aAAa,EAAE,0BAA0B,CAAC,CAAC;IACjE,sBAAsB,CAAC,aAAa,EAAE,2BAA2B,CAAC,CAAC;IACnE,eAAe,CAAC,iBAAiB,CAAC,CAAC;IACnC,uBAAuB,CAAC,aAAa,EAAE,yBAAyB,CAAC,CAAC;IAClE,yBAAyB,CAAC,oBAAoB,CAAC,CAAC;IAChD,8BAA8B,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,gBAAgB,EAAE,CAAC,OAAO,CAAC,CAAC;IAChF,oBAAoB,CAAC,aAAa,EAAE,aAAa,CAAC,CAAC;AACrD,CAAC"}

package/dist/agent/surface-parity.d.ts

@@ -0,0 +1,3 @@
+import type { SurfaceParityDeclaration } from "@open-everywhere/core/agent/adapter-api.js";
+export declare const GOOGLE_CHAT_SURFACE_PARITY: SurfaceParityDeclaration;
+//# sourceMappingURL=surface-parity.d.ts.map

package/dist/agent/surface-parity.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-parity.d.ts","sourceRoot":"","sources":["../../agent/surface-parity.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAE,wBAAwB,EAAE,MAAM,4CAA4C,CAAC;AAE3F,eAAO,MAAM,0BAA0B,EAAE,wBAkDxC,CAAC"}

package/dist/agent/surface-parity.js

@@ -0,0 +1,60 @@
+// GOOGLE CHAT's surface-parity declaration (OPE-2442). See the core module's header
+// (packages/core/agent/identity/surface-parity.ts) for what the three cell shapes mean.
+//
+// The first cut is the addressed path: an @mention in a space or a direct message wakes a seat, and the seat
+// answers in the same thread. Google Chat's HTTP endpoint delivers a space message only when it @-mentions the
+// app. Ambient messages, edits and space reads need a Workspace Events subscription or the admin-approved
+// `chat.app.messages.readonly` scope, which this cut does not request. So every vendor-side gap below is "not
+// built yet": none of them is a platform limit. Two kinds of row are not gaps: `mpim` is a policy refusal (a group
+// chat has no domain to own it and is not one person's DM), and `search`, `origin-placement-carry`,
+// `engaged-row-promotion` and `seat-context-admission` do not apply to this surface by design.
+export const GOOGLE_CHAT_SURFACE_PARITY = {
+    // --- registration seams (§7.1) ---------------------------------------------------------------
+    "identity-mapper": "supported",
+    "capability-manifest": "supported",
+    "post-arm": "supported",
+    "wake-origin-codec": "supported",
+    "origin-placement-carry": {
+        unsupported: "the placement is INSIDE the conversation identity: `threadRef` keys on the thread name, the very thread a reply posts into, so two origins of one conversation already agree on placement",
+    },
+    "read-adapter": { unsupported: "not built yet — listing a space's messages needs user authentication or the admin-approved `chat.app.messages.readonly` app scope, which the app does not request" },
+    "reaction-feedback-ingest": { unsupported: "not built yet — the HTTP endpoint carries no reaction event; a Workspace Events subscription would" },
+    "ancillary-ops": { supported: "text only — a host notice is one more message in the space; no edit, file or reaction" },
+    "ambient-engagement-seam": { unsupported: "not built yet — the HTTP endpoint delivers a space message only on an @mention; a Workspace Events subscription would deliver the rest" },
+    "engaged-row-promotion": { unsupported: "no ambient leg — every Google Chat wake is addressed (`direct-mention`)" },
+    "owned-thread-ingress": { supported: "the space leg takes the inbound divert; only a reply inside an existing thread (`threadReply`) is thread-scoped" },
+    "thread-done-reaction": { unsupported: "not built yet — the app sets no reactions (no `setReaction` in the ancillary ops)" },
+    // --- wake legs and conversation shapes -------------------------------------------------------
+    "addressed-leg": "supported",
+    "ambient-leg": { unsupported: "not built yet — the HTTP endpoint delivers a space message only on an @mention; a Workspace Events subscription would deliver the rest" },
+    "seat-catch-up": { unsupported: "not built yet — the app does not list a space's messages (see the read adapter row)" },
+    "seat-context-admission": { unsupported: "the wake fills no context-line slot — the seat reads only the addressed message and its carried tail" },
+    "approval-card": {
+        unsupported: "not built yet — a Chat card with a button needs the CARD_CLICKED tap answered; a governed act asked from Google Chat takes the venue walk to a card-capable room in the same domain",
+    },
+    "judge-lift-notice": { supported: "the shared text render, posted into the space — no button yet, so the overrule is spelled out in words" },
+    "out-of-office-cover": { unsupported: "not built yet — the space route does not call `coverForWake`, and the surface takes no ambient messages" },
+    "name-drop-mention": { unsupported: "not built yet — a message that names the app without an @mention never reaches the HTTP endpoint; a Workspace Events subscription would deliver it" },
+    "message-edit-wake": { unsupported: "not built yet — the HTTP endpoint sends no event for an edited message; a Workspace Events subscription would" },
+    threads: { supported: "a reply posts into the trigger's own thread (`REPLY_MESSAGE_FALLBACK_TO_NEW_THREAD`)" },
+    rooms: { supported: "a space is a surface a domain's `reach` lists (`google-chat/<workspace>/<space id>`)" },
+    dm: { supported: "the person's own direct message with the app wakes their DM seat — internal people only" },
+    mpim: { unsupported: "policy: a group chat is refused (`group-chat`) — it has no domain to own it and is not one person's DM" },
+    // --- core verbs (§7.2) -----------------------------------------------------------------------
+    reply: "supported",
+    edit_reply: { unsupported: "not built yet — the arm registers no edit; Chat's `messages.patch` would carry one" },
+    react: { unsupported: "not built yet — no outbound reaction transport is wired" },
+    no_reply: "supported",
+    read_channel: { unsupported: "not built yet — listing a space's messages needs user authentication or the admin-approved `chat.app.messages.readonly` app scope, which the app does not request" },
+    read_thread: { unsupported: "not built yet — the same message-list scope as `read_channel`" },
+    search: { unsupported: "no work-search adapter — Google Chat is a chat surface, not a work corpus" },
+    post_message: { unsupported: "not built yet — no routine dispatch is registered, so the agent answers only in a conversation somebody started" },
+    dm_person: { unsupported: "not built yet — the app cannot open a DM a person did not start" },
+    set_dm_delivery: { unsupported: "not built yet — a Google Chat DM is never a proactive delivery channel" },
+    stop: { unsupported: "not built yet — the app reads no reactions, so there is no stop trigger" },
+    ack_stop_glyph: { unsupported: "not built yet — the app sets no reactions" },
+    ack_cancel_note: { supported: "a message in the space, through the host-notice transport" },
+    stand_down: { unsupported: "not built yet — remove the app from the space instead" },
+    post_file: { unsupported: "not built yet — the reply carries text only" },
+};
+//# sourceMappingURL=surface-parity.js.map

package/dist/agent/surface-parity.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"surface-parity.js","sourceRoot":"","sources":["../../agent/surface-parity.ts"],"names":[],"mappings":"AAAA,oFAAoF;AACpF,wFAAwF;AACxF,EAAE;AACF,6GAA6G;AAC7G,+GAA+G;AAC/G,0GAA0G;AAC1G,8GAA8G;AAC9G,mHAAmH;AACnH,oGAAoG;AACpG,+FAA+F;AAI/F,MAAM,CAAC,MAAM,0BAA0B,GAA6B;IAClE,gGAAgG;IAChG,iBAAiB,EAAE,WAAW;IAC9B,qBAAqB,EAAE,WAAW;IAClC,UAAU,EAAE,WAAW;IACvB,mBAAmB,EAAE,WAAW;IAChC,wBAAwB,EAAE;QACxB,WAAW,EAAE,2LAA2L;KACzM;IACD,cAAc,EAAE,EAAE,WAAW,EAAE,mKAAmK,EAAE;IACpM,0BAA0B,EAAE,EAAE,WAAW,EAAE,oGAAoG,EAAE;IACjJ,eAAe,EAAE,EAAE,SAAS,EAAE,uFAAuF,EAAE;IACvH,yBAAyB,EAAE,EAAE,WAAW,EAAE,wIAAwI,EAAE;IACpL,uBAAuB,EAAE,EAAE,WAAW,EAAE,yEAAyE,EAAE;IACnH,sBAAsB,EAAE,EAAE,SAAS,EAAE,iHAAiH,EAAE;IACxJ,sBAAsB,EAAE,EAAE,WAAW,EAAE,mFAAmF,EAAE;IAE5H,gGAAgG;IAChG,eAAe,EAAE,WAAW;IAC5B,aAAa,EAAE,EAAE,WAAW,EAAE,wIAAwI,EAAE;IACxK,eAAe,EAAE,EAAE,WAAW,EAAE,qFAAqF,EAAE;IACvH,wBAAwB,EAAE,EAAE,WAAW,EAAE,sGAAsG,EAAE;IACjJ,eAAe,EAAE;QACf,WAAW,EAAE,qLAAqL;KACnM;IACD,mBAAmB,EAAE,EAAE,SAAS,EAAE,wGAAwG,EAAE;IAC5I,qBAAqB,EAAE,EAAE,WAAW,EAAE,yGAAyG,EAAE;IACjJ,mBAAmB,EAAE,EAAE,WAAW,EAAE,oJAAoJ,EAAE;IAC1L,mBAAmB,EAAE,EAAE,WAAW,EAAE,+GAA+G,EAAE;IACrJ,OAAO,EAAE,EAAE,SAAS,EAAE,sFAAsF,EAAE;IAC9G,KAAK,EAAE,EAAE,SAAS,EAAE,sFAAsF,EAAE;IAC5G,EAAE,EAAE,EAAE,SAAS,EAAE,yFAAyF,EAAE;IAC5G,IAAI,EAAE,EAAE,WAAW,EAAE,wGAAwG,EAAE;IAE/H,gGAAgG;IAChG,KAAK,EAAE,WAAW;IAClB,UAAU,EAAE,EAAE,WAAW,EAAE,oFAAoF,EAAE;IACjH,KAAK,EAAE,EAAE,WAAW,EAAE,yDAAyD,EAAE;IACjF,QAAQ,EAAE,WAAW;IACrB,YAAY,EAAE,EAAE,WAAW,EAAE,mKAAmK,EAAE;IAClM,WAAW,EAAE,EAAE,WAAW,EAAE,+DAA+D,EAAE;IAC7F,MAAM,EAAE,EAAE,WAAW,EAAE,2EAA2E,EAAE;IACpG,YAAY,EAAE,EAAE,WAAW,EAAE,iHAAiH,EAAE;IAChJ,SAAS,EAAE,EAAE,WAAW,EAAE,iEAAiE,EAAE;IAC7F,eAAe,EAAE,EAAE,WAAW,EAAE,wEAAwE,EAAE;IAC1G,IAAI,EAAE,EAAE,WAAW,EAAE,yEAAyE,EAAE;IAChG,cAAc,EAAE,EAAE,WAAW,EAAE,2CAA2C,EAAE;IAC5E,eAAe,EAAE,EAAE,SAAS,EAAE,2DAA2D,EAAE;IAC3F,UAAU,EAAE,EAAE,WAAW,EAAE,uDAAuD,EAAE;IACpF,SAAS,EAAE,EAAE,WAAW,EAAE,6CAA6C,EAAE;CAC1E,CAAC"}

package/package.json

@@ -1,6 +1,118 @@
 {
   "name": "@open-everywhere/provider-google-chat",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+  "version": "0.8.0",
+  "description": "Open Everywhere Google Chat provider — the agent as a Google Chat app: mention and DM wakes, threaded replies.",
+  "keywords": [
+    "agent",
+    "google-chat",
+    "google-workspace",
+    "chat",
+    "eve"
+  ],
+  "license": "Apache-2.0",
+  "type": "module",
+  "homepage": "https://github.com/open-everywhere/open-everywhere/tree/main/packages/providers/google-chat",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/open-everywhere/open-everywhere.git",
+    "directory": "packages/providers/google-chat"
+  },
+  "bugs": {
+    "url": "https://github.com/open-everywhere/open-everywhere/issues"
+  },
+  "engines": {
+    "node": ">=24"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "files": [
+    "agent",
+    "dist",
+    "tsconfig.json",
+    "tsconfig.build.json",
+    "LICENSE",
+    "NOTICE"
+  ],
+  "exports": {
+    "./package.json": "./package.json",
+    "./agent/channels/google-chat-auth.js": {
+      "types": "./dist/agent/channels/google-chat-auth.d.ts",
+      "default": "./dist/agent/channels/google-chat-auth.js"
+    },
+    "./agent/channels/google-chat-front.js": {
+      "types": "./dist/agent/channels/google-chat-front.d.ts",
+      "default": "./dist/agent/channels/google-chat-front.js"
+    },
+    "./agent/channels/google-chat-identity.js": {
+      "types": "./dist/agent/channels/google-chat-identity.d.ts",
+      "default": "./dist/agent/channels/google-chat-identity.js"
+    },
+    "./agent/channels/google-chat-message-ops.js": {
+      "types": "./dist/agent/channels/google-chat-message-ops.d.ts",
+      "default": "./dist/agent/channels/google-chat-message-ops.js"
+    },
+    "./agent/channels/google-chat-origin-codec.js": {
+      "types": "./dist/agent/channels/google-chat-origin-codec.d.ts",
+      "default": "./dist/agent/channels/google-chat-origin-codec.js"
+    },
+    "./agent/channels/google-chat-post-arm.js": {
+      "types": "./dist/agent/channels/google-chat-post-arm.d.ts",
+      "default": "./dist/agent/channels/google-chat-post-arm.js"
+    },
+    "./agent/channels/google-chat-rest.js": {
+      "types": "./dist/agent/channels/google-chat-rest.d.ts",
+      "default": "./dist/agent/channels/google-chat-rest.js"
+    },
+    "./agent/channels/google-chat.js": {
+      "types": "./dist/agent/channels/google-chat.d.ts",
+      "default": "./dist/agent/channels/google-chat.js"
+    },
+    "./agent/contributions.js": {
+      "types": "./dist/agent/contributions.d.ts",
+      "default": "./dist/agent/contributions.js"
+    },
+    "./agent/docs-generated.js": {
+      "types": "./dist/agent/docs-generated.d.ts",
+      "default": "./dist/agent/docs-generated.js"
+    },
+    "./agent/policy.js": {
+      "types": "./dist/agent/policy.d.ts",
+      "default": "./dist/agent/policy.js"
+    },
+    "./agent/provider-events.js": {
+      "types": "./dist/agent/provider-events.d.ts",
+      "default": "./dist/agent/provider-events.js"
+    },
+    "./agent/register.js": {
+      "types": "./dist/agent/register.d.ts",
+      "default": "./dist/agent/register.js"
+    },
+    "./agent/surface-parity.js": {
+      "types": "./dist/agent/surface-parity.d.ts",
+      "default": "./dist/agent/surface-parity.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.build.json",
+    "prepack": "npm run build",
+    "typecheck": "tsc --noEmit -p tsconfig.json",
+    "test": "npm run test:chain",
+    "test:chain": "tsx ../../../scripts/chain/run-chain.ts",
+    "test:google-chat-auth": "NODE_NO_WARNINGS=1 tsx scripts/google-chat-auth-test.ts",
+    "test:google-chat-front": "NODE_NO_WARNINGS=1 tsx scripts/google-chat-front-test.ts",
+    "test:google-chat-post-arm": "NODE_NO_WARNINGS=1 tsx scripts/google-chat-post-arm-test.ts"
+  },
+  "dependencies": {
+    "@open-everywhere/core": "0.8.0",
+    "jose": "6.2.3"
+  },
+  "peerDependencies": {
+    "eve": "0.71.0"
+  },
+  "devDependencies": {
+    "@types/node": "latest",
+    "tsx": "latest",
+    "typescript": "latest"
+  }
+}

package/tsconfig.build.json

@@ -0,0 +1,22 @@
+{
+  // PUBLISH BUILD (OPE-406). See packages/core/tsconfig.build.json for the full rationale: the
+  // sibling tsconfig.json stays noEmit (it is the typecheck gate and covers scripts/** too); this
+  // config emits ONLY the published surface (agent/**) into dist/, because a registry install
+  // cannot execute raw TypeScript and "eve build" evaluates the authored agent modules.
+  "extends": "./tsconfig.json",
+  "compilerOptions": {
+    "noEmit": false,
+    // Incremental: these run from every pre-hook (pretypecheck/pretest/prebuild), so a no-op
+    // rebuild has to be near-free or the gate chain pays a full tsc on every invocation.
+    "incremental": true,
+    // OUTSIDE outDir on purpose: a tsbuildinfo left in dist/ gets swept up by the files
+    // allowlist and PUBLISHED (caught by the tarball listing, 2026-08-12).
+    "tsBuildInfoFile": "./.tsbuildinfo",
+    "declaration": true,
+    "declarationMap": true,
+    "sourceMap": true,
+    "outDir": "dist",
+    "rootDir": "."
+  },
+  "include": ["agent/**/*.ts"]
+}

package/tsconfig.json

@@ -0,0 +1,15 @@
+{
+  "compilerOptions": {
+    "target": "ES2023",
+    "module": "NodeNext",
+    "moduleResolution": "NodeNext",
+    "lib": ["ES2023"],
+    "strict": true,
+    "esModuleInterop": true,
+    "skipLibCheck": true,
+    "noEmit": true,
+    "resolveJsonModule": true,
+    "types": ["node"]
+  },
+  "include": ["agent/**/*.ts", "scripts/**/*.ts"]
+}