@open-mercato/channel-gmail 0.6.4

package/dist/modules/channel_gmail/widgets/injection-table.js

@@ -0,0 +1,14 @@
+const injectionTable = {
+  "profile:communication-channels:connect": [
+    {
+      widgetId: "channel_gmail.injection.connect",
+      priority: 120
+    }
+  ]
+};
+var injection_table_default = injectionTable;
+export {
+  injection_table_default as default,
+  injectionTable
+};
+//# sourceMappingURL=injection-table.js.map

package/dist/modules/channel_gmail/widgets/injection-table.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../src/modules/channel_gmail/widgets/injection-table.ts"],
+  "sourcesContent": ["import type { ModuleInjectionTable } from '@open-mercato/shared/modules/widgets/injection'\n\nexport const injectionTable: ModuleInjectionTable = {\n  'profile:communication-channels:connect': [\n    {\n      widgetId: 'channel_gmail.injection.connect',\n      priority: 120,\n    },\n  ],\n}\n\nexport default injectionTable\n"],
+  "mappings": "AAEO,MAAM,iBAAuC;AAAA,EAClD,0CAA0C;AAAA,IACxC;AAAA,MACE,UAAU;AAAA,MACV,UAAU;AAAA,IACZ;AAAA,EACF;AACF;AAEA,IAAO,0BAAQ;",
+  "names": []
+}

package/jest.config.cjs

@@ -0,0 +1,34 @@
+/** @type {import('jest').Config} */
+const base = require('../../jest.config.base.cjs')
+
+module.exports = {
+  ...base,
+  testEnvironment: 'node',
+  watchman: false,
+  rootDir: '.',
+  moduleFileExtensions: ['ts', 'tsx', 'js', 'jsx', 'json'],
+  moduleNameMapper: {
+    '^@open-mercato/channel-gmail/(.*)$': '<rootDir>/src/$1',
+    '^@open-mercato/core/(.*)$': '<rootDir>/../core/src/$1',
+    '^@open-mercato/shared/(.*)$': '<rootDir>/../shared/src/$1',
+    '^@open-mercato/queue/(.*)$': '<rootDir>/../queue/src/$1',
+    '^@open-mercato/ui/(.*)$': '<rootDir>/../ui/src/$1',
+  },
+  transform: {
+    '^.+\\.(t|j)sx?$': [
+      '<rootDir>/../../scripts/jest-mikroorm-transformer.cjs',
+      {
+        tsconfig: {
+          jsx: 'react-jsx',
+          rootDir: '.',
+          ignoreDeprecations: '6.0',
+        },
+      },
+    ],
+  },
+  transformIgnorePatterns: [
+    'node_modules/(?!(@mikro-orm|kysely)/)',
+  ],
+  testMatch: ['<rootDir>/src/**/__tests__/**/*.test.(ts|tsx)'],
+  passWithNoTests: true,
+}

package/package.json

@@ -0,0 +1,95 @@
+{
+  "name": "@open-mercato/channel-gmail",
+  "version": "0.6.4",
+  "type": "module",
+  "main": "./dist/index.js",
+  "scripts": {
+    "build": "node build.mjs",
+    "watch": "node watch.mjs",
+    "test": "jest --config jest.config.cjs",
+    "typecheck": "tsc --noEmit"
+  },
+  "exports": {
+    ".": "./dist/index.js",
+    "./*.ts": {
+      "types": "./src/*.ts",
+      "default": "./dist/*.js"
+    },
+    "./*.tsx": {
+      "types": "./src/*.tsx",
+      "default": "./dist/*.js"
+    },
+    "./*.json": "./src/*.json",
+    "./*": {
+      "types": [
+        "./src/*.ts",
+        "./src/*.tsx"
+      ],
+      "default": "./dist/*.js"
+    },
+    "./*/*.json": "./src/*/*.json",
+    "./*/*": {
+      "types": [
+        "./src/*/*.ts",
+        "./src/*/*.tsx"
+      ],
+      "default": "./dist/*/*.js"
+    },
+    "./*/*/*.json": "./src/*/*/*.json",
+    "./*/*/*": {
+      "types": [
+        "./src/*/*/*.ts",
+        "./src/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*.js"
+    },
+    "./*/*/*/*.json": "./src/*/*/*/*.json",
+    "./*/*/*/*": {
+      "types": [
+        "./src/*/*/*/*.ts",
+        "./src/*/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*/*.js"
+    },
+    "./*/*/*/*/*.json": "./src/*/*/*/*/*.json",
+    "./*/*/*/*/*": {
+      "types": [
+        "./src/*/*/*/*/*.ts",
+        "./src/*/*/*/*/*.tsx"
+      ],
+      "default": "./dist/*/*/*/*/*.js"
+    }
+  },
+  "dependencies": {
+    "@open-mercato/core": "0.6.4",
+    "@open-mercato/ui": "0.6.4",
+    "@types/mailparser": "^3.4.5",
+    "mailparser": "^3.7.1"
+  },
+  "peerDependencies": {
+    "@mikro-orm/postgresql": "^7.0.14",
+    "@open-mercato/shared": "0.6.4",
+    "react": "^19.0.0",
+    "react-dom": "^19.0.0"
+  },
+  "devDependencies": {
+    "@open-mercato/shared": "0.6.4",
+    "@types/jest": "^30.0.0",
+    "@types/react": "^19.2.17",
+    "@types/react-dom": "^19.2.3",
+    "esbuild": "^0.28.0",
+    "glob": "^13.0.6",
+    "jest": "^30.4.2",
+    "react": "19.2.7",
+    "react-dom": "19.2.7",
+    "ts-jest": "^29.4.11"
+  },
+  "publishConfig": {
+    "access": "public"
+  },
+  "repository": {
+    "type": "git",
+    "url": "https://github.com/open-mercato/open-mercato",
+    "directory": "packages/channel-gmail"
+  }
+}

package/src/index.ts

@@ -0,0 +1 @@
+export { metadata } from './modules/channel_gmail/index'

package/src/modules/channel_gmail/__integration__/TC-CHANNEL-EMAIL-006.spec.ts

@@ -0,0 +1,24 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'
+import { apiRequest } from '@open-mercato/core/helpers/integration/api'
+
+/**
+ * TC-CHANNEL-EMAIL-006 — Gmail provider visible to the hub's OAuth router.
+ *
+ * After slice 3f registers the `gmail` adapter, the OAuth initiate route must
+ * accept `provider=gmail`. Without a real Google client_id we exercise routing
+ * only — the adapter is reachable when the route does NOT 404.
+ */
+test.describe('TC-CHANNEL-EMAIL-006: Gmail OAuth router wiring', () => {
+  test('POST /oauth/gmail/initiate does not 404 on the provider', async ({ request }) => {
+    const token = await getAuthToken(request)
+    const response = await apiRequest(
+      request,
+      'POST',
+      '/api/communication_channels/oauth/gmail/initiate',
+      { token, data: { redirectUri: 'https://example.com/cb' } },
+    )
+    expect(response.status(), 'route should not 5xx').toBeLessThan(500)
+    expect(response.status(), 'Gmail provider should be registered').not.toBe(404)
+  })
+})

package/src/modules/channel_gmail/__integration__/TC-CHANNEL-EMAIL-007.spec.ts

@@ -0,0 +1,23 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'
+import { apiRequest } from '@open-mercato/core/helpers/integration/api'
+
+/**
+ * TC-CHANNEL-EMAIL-007 — Gmail webhook stays a no-op (Pub/Sub deferred to v2).
+ *
+ * The provider-generic webhook route exists at `/api/communication_channels/webhook/gmail`.
+ * Until Pub/Sub push is implemented, the adapter returns `eventType: 'other'` and the
+ * route must respond 2xx rather than 5xx-ing or 404-ing.
+ */
+test.describe('TC-CHANNEL-EMAIL-007: Gmail webhook is a no-op for now', () => {
+  test('POST /api/communication_channels/webhook/gmail does not 5xx', async ({ request }) => {
+    const token = await getAuthToken(request)
+    const response = await apiRequest(
+      request,
+      'POST',
+      '/api/communication_channels/webhook/gmail',
+      { token, data: { ping: true } },
+    )
+    expect(response.status()).toBeLessThan(500)
+  })
+})

package/src/modules/channel_gmail/__integration__/TC-CHANNEL-EMAIL-008.spec.ts

@@ -0,0 +1,23 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'
+import { apiRequest } from '@open-mercato/core/helpers/integration/api'
+
+/**
+ * TC-CHANNEL-EMAIL-008 — Profile page renders with both IMAP and Gmail providers installed.
+ *
+ * Confirms `@open-mercato/channel-gmail` does not break the per-user profile page
+ * (`/backend/profile/communication-channels`) — the page must still render even
+ * when more than one provider package is installed.
+ */
+test.describe('TC-CHANNEL-EMAIL-008: profile page with Gmail provider installed', () => {
+  test('GET /backend/profile/communication-channels does not 5xx', async ({ request }) => {
+    const token = await getAuthToken(request)
+    const response = await apiRequest(
+      request,
+      'GET',
+      '/backend/profile/communication-channels',
+      { token },
+    )
+    expect(response.status(), 'profile page should not 5xx').toBeLessThan(500)
+  })
+})

package/src/modules/channel_gmail/__integration__/TC-CHANNEL-EMAIL-A01-token-refresh.spec.ts

@@ -0,0 +1,39 @@
+import { expect, test } from '@playwright/test'
+import { getAuthToken } from '@open-mercato/core/helpers/integration/authFixtures'
+import { apiRequest } from '@open-mercato/core/helpers/integration/api'
+
+/**
+ * TC-CHANNEL-EMAIL-A01 — Gmail token refresh wiring (Spec A).
+ *
+ * Verifies that the OAuth refresh contract surface exists end-to-end:
+ *   - The /me/channels route is reachable for an authenticated user.
+ *   - The OAuth initiate route accepts `provider=gmail` (means the Gmail
+ *     adapter is registered and discoverable).
+ *
+ * The full token-refresh roundtrip requires a real connected Gmail
+ * mailbox with stored OAuth client config in `integration_credentials`
+ * for `oauth_gmail`. That manual verification is captured in
+ * `.ai/qa/scenarios/TC-CHANNEL-EMAIL-A01-gmail-token-refresh.md`.
+ *
+ * The wiring itself (resolution of `oauth_gmail` -> `oauthClient` field
+ * on `RefreshCredentialsInput`) is thoroughly covered by unit tests:
+ *   - packages/core/src/modules/communication_channels/lib/__tests__/credential-refresh.test.ts
+ *   - packages/channel-gmail/src/modules/channel_gmail/lib/__tests__/adapter.test.ts
+ */
+test.describe('TC-CHANNEL-EMAIL-A01: Gmail token refresh wiring', () => {
+  test('OAuth initiate route for gmail is registered (refresh contract is reachable)', async ({ request }) => {
+    const token = await getAuthToken(request)
+    const response = await apiRequest(
+      request,
+      'POST',
+      '/api/communication_channels/oauth/gmail/initiate',
+      { token, data: { redirectUri: 'https://example.com/cb' } },
+    )
+    // Smoke test only: the Gmail adapter being registered is necessary for the
+    // refresh path to ever fire. A 4xx (missing oauth_gmail row) or 2xx
+    // (initiate succeeds) both prove the adapter is wired. A 404/5xx would
+    // indicate the route or provider is gone — block-level regression.
+    expect(response.status(), 'route should not 5xx').toBeLessThan(500)
+    expect(response.status(), 'Gmail provider should be registered').not.toBe(404)
+  })
+})

package/src/modules/channel_gmail/__integration__/TC-CHANNEL-EMAIL-C01.spec.ts

@@ -0,0 +1,48 @@
+import { expect, test } from '@playwright/test'
+import { apiRequest } from '@open-mercato/core/helpers/integration/api'
+
+/**
+ * TC-CHANNEL-EMAIL-C01 — Gmail Pub/Sub webhook authentication
+ *
+ * Verifies that `POST /api/communication_channels/webhooks/gmail` rejects
+ * unauthenticated / unsigned requests. The full happy-path (publish to
+ * Pub/Sub → webhook fires → history sync → message appears in CRM) is the
+ * manual QA scenario `TC-CHANNEL-EMAIL-C01-gmail-push-delivery.md` since it
+ * requires a real GCP project and connected Gmail mailbox.
+ *
+ * Unit-level coverage of the JWT verifier + envelope decoder lives in
+ * `packages/core/src/modules/communication_channels/lib/__tests__/gmail-pubsub-jwt.test.ts`.
+ */
+test.describe('TC-CHANNEL-EMAIL-C01: Gmail Pub/Sub webhook', () => {
+  test('rejects requests missing the bearer JWT', async ({ request }) => {
+    const response = await apiRequest(
+      request,
+      'POST',
+      '/api/communication_channels/webhooks/gmail',
+      // Webhook auth is the Pub/Sub JWT in `Authorization`, not the platform
+      // session token. `apiRequest` requires a token field; empty is fine —
+      // the route ignores Authorization unless the JWT validator can decode it.
+      { token: '', data: { message: { data: '', messageId: 'm1' } } },
+    )
+    // 401 when expectedAudience/expectedEmail are configured;
+    // 503 when env vars aren't set (acceptable for a smoke test against an
+    // unconfigured CI environment).
+    expect([401, 503]).toContain(response.status())
+  })
+
+  test('rejects malformed JSON body when JWT is absent', async ({ request }) => {
+    const response = await apiRequest(
+      request,
+      'POST',
+      '/api/communication_channels/webhooks/gmail',
+      { token: '', data: 'not-json' as unknown as Record<string, unknown> },
+    )
+    // A request without a Pub/Sub JWT is rejected at the config/verification gate
+    // BEFORE the body is parsed, so the malformed body never reaches the decoder:
+    // 503 when the verifier env vars aren't set (the unconfigured CI case — same as
+    // the sibling test above) and 401 when they are. The body-decode 400 path is
+    // covered by the gmail-pubsub-jwt unit tests; here we only assert a controlled
+    // rejection, never an uncontrolled 5xx crash.
+    expect([401, 503]).toContain(response.status())
+  })
+})

package/src/modules/channel_gmail/acl.ts

@@ -0,0 +1,6 @@
+export const features = [
+  { id: 'channel_gmail.view', title: 'View Gmail channel configuration', module: 'channel_gmail' },
+  { id: 'channel_gmail.configure', title: 'Configure Gmail OAuth defaults', module: 'channel_gmail' },
+]
+
+export default features

package/src/modules/channel_gmail/di.ts

@@ -0,0 +1,21 @@
+import { asValue } from 'awilix'
+import type { AppContainer } from '@open-mercato/shared/lib/di/container'
+import {
+  hasChannelAdapter,
+  registerChannelAdapter,
+} from '@open-mercato/core/modules/communication_channels/lib/adapter-registry-singleton'
+import { getGmailChannelAdapter } from './lib/adapter'
+import { channelGmailHealthCheck } from './lib/health'
+
+export function register(container: AppContainer): void {
+  if (!hasChannelAdapter('gmail')) {
+    registerChannelAdapter(getGmailChannelAdapter())
+  }
+  container.register({
+    channelGmailAdapter: asValue(getGmailChannelAdapter()),
+    // Registered under the exact service name declared in `integration.ts`
+    // (`healthCheck.service`). Without this, the hub's `container.resolve(...)`
+    // throws and the channel reports permanently 'unhealthy'.
+    channelGmailHealthCheck: asValue(channelGmailHealthCheck),
+  })
+}

package/src/modules/channel_gmail/index.ts

@@ -0,0 +1,6 @@
+export const metadata = {
+  id: 'channel_gmail',
+  title: 'Gmail Email Channel',
+  description:
+    'Connect per-user Gmail accounts via OAuth2. Outbound via gmail.users.messages.send; inbound via History API polling. Pairs with the Communications Hub.',
+}

package/src/modules/channel_gmail/integration.ts

@@ -0,0 +1,67 @@
+import { buildIntegrationDetailWidgetSpotId, type IntegrationBundle, type IntegrationDefinition } from '@open-mercato/shared/modules/integrations/types'
+
+export const channelGmailDetailWidgetSpotId = buildIntegrationDetailWidgetSpotId('channel_gmail')
+
+export const integration: IntegrationDefinition = {
+  id: 'channel_gmail',
+  title: 'Gmail',
+  description:
+    'Connect per-user Gmail accounts via OAuth2. Outbound via gmail.users.messages.send; inbound via History API polling (5-min default).',
+  category: 'communication',
+  hub: 'communication_channels',
+  providerKey: 'gmail',
+  icon: 'gmail',
+  docsUrl: 'https://developers.google.com/gmail/api',
+  package: '@open-mercato/channel-gmail',
+  version: '0.1.0',
+  author: 'Open Mercato Team',
+  company: 'Open Mercato',
+  license: 'MIT',
+  tags: ['email', 'gmail', 'oauth2', 'polling', 'communication'],
+  detailPage: {
+    widgetSpotId: channelGmailDetailWidgetSpotId,
+  },
+  apiVersions: [
+    {
+      id: 'v1',
+      label: 'Gmail API v1',
+      status: 'stable',
+      default: true,
+      changelog: 'Gmail API v1 with History API incremental sync and OAuth2.',
+    },
+  ],
+  credentials: {
+    fields: [
+      {
+        key: 'clientId',
+        label: 'OAuth Client ID',
+        type: 'text',
+        required: true,
+        placeholder: '1234567890-abcdef.apps.googleusercontent.com',
+        helpText:
+          'Google Cloud Console -> APIs & Services -> Credentials -> OAuth 2.0 Client ID. Configure Authorized Redirect URI to <yourdomain>/api/communication_channels/oauth/gmail/callback.',
+      },
+      {
+        key: 'clientSecret',
+        label: 'OAuth Client Secret',
+        type: 'secret',
+        required: true,
+        helpText: 'Paired with the Client ID above. Stored encrypted at rest.',
+      },
+      {
+        key: 'scopes',
+        label: 'OAuth Scopes (comma-separated)',
+        type: 'text',
+        required: false,
+        placeholder: 'https://www.googleapis.com/auth/gmail.modify,https://www.googleapis.com/auth/userinfo.email',
+        helpText:
+          'Defaults to gmail.modify + userinfo.email which is enough for send + receive + label management. Leave blank to use defaults.',
+      },
+    ],
+  },
+  healthCheck: { service: 'channelGmailHealthCheck' },
+}
+
+export const integrations: IntegrationDefinition[] = [integration]
+export const bundles: IntegrationBundle[] = []
+export const bundle: IntegrationBundle | undefined = undefined