@openclaw/googlechat 2026.5.12 → 2026.5.14-beta.2

package/dist/{actions-nBGKFgiH.js → actions-Cp9JuEzB.js}

@@ -1,7 +1,7 @@
-import { i as resolveGoogleChatAccount, t as listEnabledGoogleChatAccounts } from "./accounts-Dt3H6z0l.js";
-import { P as getGoogleChatRuntime } from "./runtime-api-CAQFEJsQ.js";
-import { c as sendGoogleChatMessage, o as listGoogleChatReactions, r as deleteGoogleChatReaction, t as createGoogleChatReaction, u as uploadGoogleChatAttachment } from "./api-DubPSfme.js";
-import { i as resolveGoogleChatOutboundSpace } from "./targets-C_U5SbnT.js";
+import { o as resolveGoogleChatAccount, r as listEnabledGoogleChatAccounts } from "./setup-surface-BlDqtKML.js";
+import { P as getGoogleChatRuntime } from "./runtime-api-DuEfWHnr.js";
+import { c as sendGoogleChatMessage, o as listGoogleChatReactions, r as deleteGoogleChatReaction, t as createGoogleChatReaction, u as uploadGoogleChatAttachment } from "./api-BJ9DOsBR.js";
+import { n as resolveGoogleChatOutboundSpace } from "./channel-DzmqN0DY.js";
 import { extractToolSend } from "openclaw/plugin-sdk/tool-send";
 import { createActionGate, jsonResult, readNumberParam, readReactionParams, readStringParam } from "openclaw/plugin-sdk/channel-actions";
 import { loadOutboundMediaFromUrl } from "openclaw/plugin-sdk/outbound-media";
@@ -19,7 +19,7 @@ function resolveAppUserNames(account) {
 }
 async function loadGoogleChatActionMedia(params) {
 	const runtime = getGoogleChatRuntime();
-	return /^https?:\/\//i.test(params.mediaUrl) ? await runtime.channel.media.fetchRemoteMedia({
+	return /^https?:\/\//i.test(params.mediaUrl) ? await runtime.channel.media.readRemoteMediaBuffer({
 		url: params.mediaUrl,
 		maxBytes: params.maxBytes
 	}) : await loadOutboundMediaFromUrl(params.mediaUrl, {

package/dist/{api-DubPSfme.js → api-BJ9DOsBR.js}

@@ -1,7 +1,8 @@
-import { m as fetchWithSsrFGuard$1 } from "./runtime-api-CAQFEJsQ.js";
+import { p as fetchWithSsrFGuard$1 } from "./runtime-api-DuEfWHnr.js";
 import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
 import crypto from "node:crypto";
 import { formatErrorMessage } from "openclaw/plugin-sdk/error-runtime";
+import { readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
 import { buildHostnameAllowlistPolicyFromSuffixAllowlist, fetchWithSsrFGuard } from "openclaw/plugin-sdk/ssrf-runtime";
 import fs from "node:fs/promises";
 import { resolveUserPath } from "openclaw/plugin-sdk/text-utility-runtime";
@@ -313,6 +314,13 @@ const CHAT_SCOPE = "https://www.googleapis.com/auth/chat.bot";
 const CHAT_ISSUER = "chat@system.gserviceaccount.com";
 const ADDON_ISSUER_PATTERN = /^service-\d+@gcp-sa-gsuiteaddons\.iam\.gserviceaccount\.com$/;
 const CHAT_CERTS_URL = "https://www.googleapis.com/service_accounts/v1/metadata/x509/chat@system.gserviceaccount.com";
+async function readGoogleChatCertsResponse(response) {
+	try {
+		return await response.json();
+	} catch (cause) {
+		throw new Error("Google Chat cert fetch failed: malformed JSON response", { cause });
+	}
+}
 const MAX_AUTH_CACHE_SIZE = 32;
 const authCache = /* @__PURE__ */ new Map();
 let cachedCerts = null;
@@ -377,7 +385,7 @@ async function fetchChatCerts() {
 	});
 	try {
 		if (!response.ok) throw new Error(`Failed to fetch Chat certs (${response.status})`);
-		const certs = await response.json();
+		const certs = await readGoogleChatCertsResponse(response);
 		cachedCerts = {
 			fetchedAt: now,
 			certs
@@ -451,6 +459,13 @@ async function verifyGoogleChatRequest(params) {
 //#region extensions/googlechat/src/api.ts
 const CHAT_API_BASE = "https://chat.googleapis.com/v1";
 const CHAT_UPLOAD_BASE = "https://chat.googleapis.com/upload/v1";
+async function readGoogleChatJsonResponse(response, label) {
+	try {
+		return await response.json();
+	} catch (cause) {
+		throw new Error(`${label}: malformed JSON response`, { cause });
+	}
+}
 const headersToObject = (headers) => headers instanceof Headers ? Object.fromEntries(headers.entries()) : Array.isArray(headers) ? Object.fromEntries(headers) : headers || {};
 async function withGoogleChatResponse(params) {
 	const { account, url, init, auditContext, errorPrefix = "Google Chat API", handleResponse } = params;
@@ -488,7 +503,7 @@ async function fetchJson(account, url, init) {
 			}
 		},
 		auditContext: "googlechat.api.json",
-		handleResponse: async (response) => await response.json()
+		handleResponse: async (response) => await readGoogleChatJsonResponse(response, "Google Chat API request failed")
 	});
 }
 async function fetchOk(account, url, init) {
@@ -513,26 +528,12 @@ async function fetchBuffer(account, url, init, options) {
 				const length = Number(lengthHeader);
 				if (Number.isFinite(length) && length > maxBytes) throw new Error(`Google Chat media exceeds max bytes (${maxBytes})`);
 			}
-			if (!maxBytes || !res.body) return {
+			if (!maxBytes) return {
 				buffer: Buffer.from(await res.arrayBuffer()),
 				contentType: res.headers.get("content-type") ?? void 0
 			};
-			const reader = res.body.getReader();
-			const chunks = [];
-			let total = 0;
-			while (true) {
-				const { done, value } = await reader.read();
-				if (done) break;
-				if (!value) continue;
-				total += value.length;
-				if (total > maxBytes) {
-					await reader.cancel();
-					throw new Error(`Google Chat media exceeds max bytes (${maxBytes})`);
-				}
-				chunks.push(Buffer.from(value));
-			}
 			return {
-				buffer: Buffer.concat(chunks, total),
+				buffer: await readResponseWithLimit(res, maxBytes, { onOverflow: () => /* @__PURE__ */ new Error(`Google Chat media exceeds max bytes (${maxBytes})`) }),
 				contentType: res.headers.get("content-type") ?? void 0
 			};
 		}
@@ -585,7 +586,7 @@ async function uploadGoogleChatAttachment(params) {
 		},
 		auditContext: "googlechat.upload",
 		errorPrefix: "Google Chat upload",
-		handleResponse: async (response) => await response.json()
+		handleResponse: async (response) => await readGoogleChatJsonResponse(response, "Google Chat upload failed")
 	})).attachmentDataRef?.attachmentUploadToken };
 }
 async function downloadGoogleChatMedia(params) {

package/dist/api.js

@@ -1,3 +1,3 @@
-import { t as googlechatPlugin } from "./channel-DoEjIr9p.js";
-import { n as googlechatSetupAdapter, t as googlechatSetupWizard } from "./setup-surface-HU4P5FzD.js";
+import { n as googlechatSetupAdapter, t as googlechatSetupWizard } from "./setup-surface-BlDqtKML.js";
+import { t as googlechatPlugin } from "./channel-DzmqN0DY.js";
 export { googlechatPlugin, googlechatSetupAdapter, googlechatSetupWizard };

package/dist/{channel-DoEjIr9p.js → channel-DzmqN0DY.js}

@@ -1,9 +1,8 @@
-import { a as resolveGoogleChatConfigAccessorAccount, i as resolveGoogleChatAccount, n as listGoogleChatAccountIds, r as resolveDefaultGoogleChatAccountId } from "./accounts-Dt3H6z0l.js";
-import { T as resolveChannelMediaMaxBytes, _ as loadOutboundMediaFromUrl, a as buildChannelConfigSchema, i as PAIRING_APPROVED_MESSAGE, o as chunkTextForOutbound, p as fetchRemoteMedia, r as GoogleChatConfigSchema, t as DEFAULT_ACCOUNT_ID, v as missingTargetError } from "./runtime-api-CAQFEJsQ.js";
-import { i as resolveGoogleChatOutboundSpace, n as isGoogleChatUserTarget, r as normalizeGoogleChatTarget, t as isGoogleChatSpaceTarget } from "./targets-C_U5SbnT.js";
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BsERSjSe.js";
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DLAG2_NI.js";
-import { n as googlechatSetupAdapter, t as googlechatSetupWizard } from "./setup-surface-HU4P5FzD.js";
+import { a as resolveDefaultGoogleChatAccountId, i as listGoogleChatAccountIds, n as googlechatSetupAdapter, o as resolveGoogleChatAccount, s as resolveGoogleChatConfigAccessorAccount, t as googlechatSetupWizard } from "./setup-surface-BlDqtKML.js";
+import { T as resolveChannelMediaMaxBytes, _ as missingTargetError, a as buildChannelConfigSchema, g as loadOutboundMediaFromUrl, i as PAIRING_APPROVED_MESSAGE, o as chunkTextForOutbound, r as GoogleChatConfigSchema, t as DEFAULT_ACCOUNT_ID, x as readRemoteMediaBuffer } from "./runtime-api-DuEfWHnr.js";
+import { a as findGoogleChatDirectMessage } from "./api-BJ9DOsBR.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-CG1sLToP.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DtQ_IO7J.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatNormalizedAllowFromEntries } from "openclaw/plugin-sdk/allow-from";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";
@@ -19,6 +18,46 @@ import { createMessageReceiptFromOutboundResults, defineChannelMessageAdapter }
 import { composeAccountWarningCollectors, createAllowlistProviderOpenWarningCollector, createDangerousNameMatchingMutableAllowlistWarningCollector, resolveChannelGroupRequireMention } from "openclaw/plugin-sdk/channel-policy";
 import { createChannelDirectoryAdapter, listResolvedDirectoryGroupEntriesFromMapKeys, listResolvedDirectoryUserEntriesFromAllowFrom } from "openclaw/plugin-sdk/directory-runtime";
 import { sanitizeForPlainText } from "openclaw/plugin-sdk/outbound-runtime";
+//#region extensions/googlechat/src/targets.ts
+function normalizeGoogleChatTarget(raw) {
+	const trimmed = raw?.trim();
+	if (!trimmed) return;
+	const normalized = trimmed.replace(/^(googlechat|google-chat|gchat):/i, "").replace(/^user:(users\/)?/i, "users/").replace(/^space:(spaces\/)?/i, "spaces/");
+	if (isGoogleChatUserTarget(normalized)) {
+		const suffix = normalized.slice(6);
+		return suffix.includes("@") ? `users/${normalizeLowercaseStringOrEmpty(suffix)}` : normalized;
+	}
+	if (isGoogleChatSpaceTarget(normalized)) return normalized;
+	if (normalized.includes("@")) return `users/${normalizeLowercaseStringOrEmpty(normalized)}`;
+	return normalized;
+}
+function isGoogleChatUserTarget(value) {
+	return normalizeLowercaseStringOrEmpty(value).startsWith("users/");
+}
+function isGoogleChatSpaceTarget(value) {
+	return normalizeLowercaseStringOrEmpty(value).startsWith("spaces/");
+}
+function stripMessageSuffix(target) {
+	const index = target.indexOf("/messages/");
+	if (index === -1) return target;
+	return target.slice(0, index);
+}
+async function resolveGoogleChatOutboundSpace(params) {
+	const normalized = normalizeGoogleChatTarget(params.target);
+	if (!normalized) throw new Error("Missing Google Chat target.");
+	const base = stripMessageSuffix(normalized);
+	if (isGoogleChatSpaceTarget(base)) return base;
+	if (isGoogleChatUserTarget(base)) {
+		const dm = await findGoogleChatDirectMessage({
+			account: params.account,
+			userName: base
+		});
+		if (!dm?.name) throw new Error(`No Google Chat DM found for ${base}`);
+		return dm.name;
+	}
+	return base;
+}
+//#endregion
 //#region extensions/googlechat/src/approval-auth.ts
 function normalizeGoogleChatApproverId(value) {
 	const normalized = normalizeGoogleChatTarget(String(value));
@@ -54,7 +93,7 @@ function resolveGoogleChatGroupRequireMention(params) {
 }
 //#endregion
 //#region extensions/googlechat/src/channel.adapters.ts
-const loadGoogleChatChannelRuntime$2 = createLazyRuntimeNamedExport(() => import("./channel.runtime-DMNTL2NR.js"), "googleChatChannelRuntime");
+const loadGoogleChatChannelRuntime$2 = createLazyRuntimeNamedExport(() => import("./channel.runtime-DFdC1y3n.js"), "googleChatChannelRuntime");
 function createGoogleChatSendReceipt(params) {
 	const messageId = params.messageId?.trim();
 	return createMessageReceiptFromOutboundResults({
@@ -204,7 +243,7 @@ const googlechatOutboundAdapter = {
 				resolveChannelLimitMb: ({ cfg, accountId }) => (cfg.channels?.googlechat)?.accounts?.[accountId]?.mediaMaxMb ?? (cfg.channels?.googlechat)?.mediaMaxMb,
 				accountId
 			}) ?? (account.config.mediaMaxMb ?? 20) * 1024 * 1024;
-			const loaded = /^https?:\/\//i.test(mediaUrl) ? await fetchRemoteMedia({
+			const loaded = /^https?:\/\//i.test(mediaUrl) ? await readRemoteMediaBuffer({
 				url: mediaUrl,
 				maxBytes: effectiveMaxBytes
 			}) : await loadOutboundMediaFromUrl(mediaUrl, {
@@ -295,7 +334,7 @@ const collectGoogleChatMutableAllowlistWarnings = createDangerousNameMatchingMut
 });
 //#endregion
 //#region extensions/googlechat/src/gateway.ts
-const loadGoogleChatChannelRuntime$1 = createLazyRuntimeNamedExport(() => import("./channel.runtime-DMNTL2NR.js"), "googleChatChannelRuntime");
+const loadGoogleChatChannelRuntime$1 = createLazyRuntimeNamedExport(() => import("./channel.runtime-DFdC1y3n.js"), "googleChatChannelRuntime");
 async function startGoogleChatGatewayAccount(ctx) {
 	const account = ctx.account;
 	const statusSink = createAccountStatusSink({
@@ -335,7 +374,7 @@ async function startGoogleChatGatewayAccount(ctx) {
 }
 //#endregion
 //#region extensions/googlechat/src/channel.ts
-const loadGoogleChatChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-DMNTL2NR.js"), "googleChatChannelRuntime");
+const loadGoogleChatChannelRuntime = createLazyRuntimeNamedExport(() => import("./channel.runtime-DFdC1y3n.js"), "googleChatChannelRuntime");
 const meta = {
 	id: "googlechat",
 	label: "Google Chat",
@@ -391,7 +430,7 @@ const googlechatActions = {
 	},
 	extractToolSend: ({ args }) => extractToolSend(args, "sendMessage"),
 	handleAction: async (ctx) => {
-		const { googlechatMessageActions } = await import("./actions-nBGKFgiH.js");
+		const { googlechatMessageActions } = await import("./actions-Cp9JuEzB.js");
 		if (!googlechatMessageActions.handleAction) throw new Error("Google Chat actions are not available.");
 		return await googlechatMessageActions.handleAction(ctx);
 	}
@@ -542,4 +581,4 @@ const googlechatPlugin = createChatChannelPlugin({
 	outbound: googlechatOutboundAdapter
 });
 //#endregion
-export { googlechatPlugin as t };
+export { resolveGoogleChatOutboundSpace as n, googlechatPlugin as t };

package/dist/channel-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as googlechatPlugin } from "./channel-DoEjIr9p.js";
+import { t as googlechatPlugin } from "./channel-DzmqN0DY.js";
 export { googlechatPlugin };

package/dist/{channel.runtime-DMNTL2NR.js → channel.runtime-DFdC1y3n.js}

@@ -1,8 +1,11 @@
-import { E as resolveDefaultGroupPolicy, M as warnMissingProviderGroupPolicyFallbackOnce, O as resolveInboundRouteEnvelopeBuilderWithRuntime, P as getGoogleChatRuntime, h as isDangerousNameMatchingEnabled, k as resolveWebhookPath, n as GROUP_POLICY_BLOCKED_LABEL, u as createChannelPairingController, w as resolveAllowlistProviderRuntimeGroupPolicy } from "./runtime-api-CAQFEJsQ.js";
-import { c as sendGoogleChatMessage, d as verifyGoogleChatRequest, i as downloadGoogleChatMedia, l as updateGoogleChatMessage, n as deleteGoogleChatMessage, s as probeGoogleChat, u as uploadGoogleChatAttachment } from "./api-DubPSfme.js";
+import { E as resolveDefaultGroupPolicy, M as warnMissingProviderGroupPolicyFallbackOnce, O as resolveInboundRouteEnvelopeBuilderWithRuntime, P as getGoogleChatRuntime, k as resolveWebhookPath, m as isDangerousNameMatchingEnabled, n as GROUP_POLICY_BLOCKED_LABEL, u as createChannelPairingController, w as resolveAllowlistProviderRuntimeGroupPolicy } from "./runtime-api-DuEfWHnr.js";
+import { c as sendGoogleChatMessage, d as verifyGoogleChatRequest, i as downloadGoogleChatMedia, l as updateGoogleChatMessage, n as deleteGoogleChatMessage, s as probeGoogleChat, u as uploadGoogleChatAttachment } from "./api-BJ9DOsBR.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalLowercaseString, normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { mergePairLoopGuardConfig } from "openclaw/plugin-sdk/pair-loop-guard-runtime";
+import { WEBHOOK_RATE_LIMIT_DEFAULTS, createFixedWindowRateLimiter, normalizeWebhookPath, resolveRequestClientIp } from "openclaw/plugin-sdk/webhook-ingress";
 import { registerWebhookTargetWithPluginRoute, resolveWebhookTargetWithAuthOrReject, withResolvedWebhookRequestPipeline } from "openclaw/plugin-sdk/webhook-targets";
 import { createWebhookInFlightLimiter, readJsonWebhookBodyOrReject } from "openclaw/plugin-sdk/webhook-request-guards";
+import { recordChannelBotPairLoopAndCheckSuppression } from "openclaw/plugin-sdk/inbound-reply-dispatch";
 import { channelIngressRoutes, createChannelIngressResolver, defineStableChannelIngressIdentity } from "openclaw/plugin-sdk/channel-ingress-runtime";
 import { deliverTextOrMediaReply, resolveSendableOutboundReplyParts } from "openclaw/plugin-sdk/reply-payload";
 //#region extensions/googlechat/src/monitor-access.ts
@@ -277,6 +280,7 @@ async function applyGoogleChatInboundAccessPolicy(params) {
 		ok: true,
 		commandAuthorized,
 		effectiveWasMentioned,
+		groupBotLoopProtection: groupEntry?.botLoopProtection,
 		groupSystemPrompt: normalizeOptionalString(groupEntry?.systemPrompt)
 	};
 }
@@ -368,7 +372,7 @@ async function deliverGoogleChatReply(params) {
 		},
 		sendMedia: async ({ mediaUrl, caption }) => {
 			try {
-				const loaded = await core.channel.media.fetchRemoteMedia({
+				const loaded = await core.channel.media.readRemoteMediaBuffer({
 					url: mediaUrl,
 					maxBytes: (account.config.mediaMaxMb ?? 20) * 1024 * 1024
 				});
@@ -512,12 +516,17 @@ function warnAppPrincipalMisconfiguration(params) {
 }
 function createGoogleChatWebhookRequestHandler(params) {
 	return async (req, res) => {
+		const path = normalizeWebhookPath(new URL(req.url ?? "/", "http://localhost").pathname);
+		const config = params.webhookTargets.get(path)?.[0]?.config;
+		const clientIp = resolveRequestClientIp(req, config?.gateway?.trustedProxies, config?.gateway?.allowRealIpFallback === true) ?? "unknown";
 		return await withResolvedWebhookRequestPipeline({
 			req,
 			res,
 			targetsByPath: params.webhookTargets,
 			allowMethods: ["POST"],
 			requireJsonContentType: true,
+			rateLimiter: params.webhookRateLimiter,
+			rateLimitKey: `${path}:${clientIp}`,
 			inFlightLimiter: params.webhookInFlightLimiter,
 			handle: async ({ targets }) => {
 				const headerBearer = extractBearerToken(req.headers.authorization);
@@ -587,6 +596,11 @@ function createGoogleChatWebhookRequestHandler(params) {
 //#endregion
 //#region extensions/googlechat/src/monitor-routing.ts
 const webhookTargets = /* @__PURE__ */ new Map();
+const webhookRateLimiter = createFixedWindowRateLimiter({
+	windowMs: WEBHOOK_RATE_LIMIT_DEFAULTS.windowMs,
+	maxRequests: WEBHOOK_RATE_LIMIT_DEFAULTS.maxRequests,
+	maxTrackedKeys: WEBHOOK_RATE_LIMIT_DEFAULTS.maxTrackedKeys
+});
 const webhookInFlightLimiter = createWebhookInFlightLimiter();
 let processGoogleChatEvent$1 = async () => {};
 function setGoogleChatWebhookEventProcessor(processEvent) {
@@ -594,6 +608,7 @@ function setGoogleChatWebhookEventProcessor(processEvent) {
 }
 const googleChatWebhookRequestHandler = createGoogleChatWebhookRequestHandler({
 	webhookTargets,
+	webhookRateLimiter,
 	webhookInFlightLimiter,
 	processEvent: async (event, target) => {
 		await processGoogleChatEvent$1(event, target);
@@ -634,6 +649,33 @@ function normalizeAudienceType(value) {
 	if (normalized === "app-url" || normalized === "app_url" || normalized === "app") return "app-url";
 	if (normalized === "project-number" || normalized === "project_number" || normalized === "project") return "project-number";
 }
+function resolveGoogleChatTimestampMs(eventTime) {
+	if (!eventTime) return;
+	const parsed = Date.parse(eventTime);
+	return Number.isFinite(parsed) ? parsed : void 0;
+}
+function resolveGoogleChatBotLoopProtection(params) {
+	if (!params.allowBots || !params.isBotSender || !params.senderId || params.senderId === params.appUserId) return;
+	return {
+		scopeId: params.accountId,
+		conversationId: params.conversationId,
+		senderId: params.senderId,
+		receiverId: params.appUserId,
+		config: params.config,
+		defaultsConfig: params.defaultsConfig,
+		defaultEnabled: true,
+		nowMs: resolveGoogleChatTimestampMs(params.eventTime)
+	};
+}
+function resolveGoogleChatBotLoopProtectionConfig(params) {
+	return mergePairLoopGuardConfig(params.accountConfig, params.groupConfig);
+}
+function shouldSuppressGoogleChatBotLoop(params) {
+	if (!params.botLoopProtection) return false;
+	if (!recordChannelBotPairLoopAndCheckSuppression(params.botLoopProtection).suppressed) return false;
+	logVerbose(params.core, params.runtime, `skip bot-to-bot loop in ${params.botLoopProtection.conversationId}`);
+	return true;
+}
 async function processGoogleChatEvent(event, target) {
 	if ((event.type ?? event.eventType) !== "MESSAGE") return;
 	if (!event.message || !event.space) return;
@@ -672,8 +714,11 @@ async function processMessageWithPipeline(params) {
 	const senderId = sender?.name ?? "";
 	const senderName = sender?.displayName ?? "";
 	const senderEmail = sender?.email ?? void 0;
-	if (!(account.config.allowBots === true)) {
-		if (sender?.type?.toUpperCase() === "BOT") {
+	const isBotSender = sender?.type?.toUpperCase() === "BOT";
+	const appUserId = account.config.botUser?.trim() || "users/app";
+	const allowBots = account.config.allowBots === true;
+	if (!allowBots) {
+		if (isBotSender) {
 			logVerbose(core, runtime, `skip bot-authored message (${senderId || "unknown"})`);
 			return;
 		}
@@ -702,7 +747,25 @@ async function processMessageWithPipeline(params) {
 		logVerbose: (message) => logVerbose(core, runtime, message)
 	});
 	if (!access.ok) return;
-	const { commandAuthorized, effectiveWasMentioned, groupSystemPrompt } = access;
+	const { commandAuthorized, effectiveWasMentioned, groupBotLoopProtection, groupSystemPrompt } = access;
+	if (shouldSuppressGoogleChatBotLoop({
+		botLoopProtection: resolveGoogleChatBotLoopProtection({
+			allowBots,
+			isBotSender,
+			senderId,
+			appUserId,
+			accountId: account.accountId,
+			conversationId: spaceId,
+			config: resolveGoogleChatBotLoopProtectionConfig({
+				accountConfig: account.config.botLoopProtection,
+				groupConfig: groupBotLoopProtection
+			}),
+			defaultsConfig: config.channels?.defaults?.botLoopProtection,
+			eventTime: event.eventTime
+		}),
+		core,
+		runtime
+	})) return;
 	const { route, buildEnvelope } = resolveInboundRouteEnvelopeBuilderWithRuntime({
 		cfg: config,
 		channel: "googlechat",

package/dist/contract-api.js

@@ -1,3 +1,3 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BsERSjSe.js";
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DLAG2_NI.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-CG1sLToP.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries } from "./secret-contract-DtQ_IO7J.js";
 export { collectRuntimeConfigAssignments, legacyConfigRules, normalizeCompatibilityConfig, secretTargetRegistryEntries };

package/dist/doctor-contract-api.js

@@ -1,2 +1,2 @@
-import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-BsERSjSe.js";
+import { n as normalizeCompatibilityConfig, t as legacyConfigRules } from "./doctor-contract-CG1sLToP.js";
 export { legacyConfigRules, normalizeCompatibilityConfig };

package/dist/{runtime-api-CAQFEJsQ.js → runtime-api-DuEfWHnr.js}

@@ -12,7 +12,7 @@ import { chunkTextForOutbound } from "openclaw/plugin-sdk/text-chunking";
 import { GoogleChatConfigSchema } from "openclaw/plugin-sdk/bundled-channel-config-schema";
 import { GROUP_POLICY_BLOCKED_LABEL, resolveAllowlistProviderRuntimeGroupPolicy, resolveDefaultGroupPolicy, warnMissingProviderGroupPolicyFallbackOnce } from "openclaw/plugin-sdk/runtime-group-policy";
 import { isDangerousNameMatchingEnabled } from "openclaw/plugin-sdk/dangerous-name-runtime";
-import { fetchRemoteMedia, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/media-runtime";
+import { readRemoteMediaBuffer, resolveChannelMediaMaxBytes } from "openclaw/plugin-sdk/media-runtime";
 import { loadOutboundMediaFromUrl as loadOutboundMediaFromUrl$1 } from "openclaw/plugin-sdk/outbound-media";
 import { resolveInboundMentionDecision } from "openclaw/plugin-sdk/channel-inbound";
 import { resolveInboundRouteEnvelopeBuilderWithRuntime } from "openclaw/plugin-sdk/inbound-envelope";
@@ -26,4 +26,4 @@ const { setRuntime: setGoogleChatRuntime, getRuntime: getGoogleChatRuntime } = c
 	errorMessage: "Google Chat runtime not initialized"
 });
 //#endregion
-export { resolveWebhookTargetWithAuthOrReject$1 as A, registerWebhookTargetWithPluginRoute$1 as C, resolveInboundMentionDecision as D, resolveDefaultGroupPolicy as E, setGoogleChatRuntime as F, warnMissingProviderGroupPolicyFallbackOnce as M, withResolvedWebhookRequestPipeline$1 as N, resolveInboundRouteEnvelopeBuilderWithRuntime as O, getGoogleChatRuntime as P, readStringParam$1 as S, resolveChannelMediaMaxBytes as T, loadOutboundMediaFromUrl$1 as _, buildChannelConfigSchema as a, readNumberParam$1 as b, createActionGate$1 as c, createWebhookInFlightLimiter$1 as d, extractToolSend$1 as f, jsonResult$1 as g, isDangerousNameMatchingEnabled as h, PAIRING_APPROVED_MESSAGE as i, runPassiveAccountLifecycle$1 as j, resolveWebhookPath as k, createChannelMessageReplyPipeline as l, fetchWithSsrFGuard$1 as m, GROUP_POLICY_BLOCKED_LABEL as n, chunkTextForOutbound as o, fetchRemoteMedia as p, GoogleChatConfigSchema as r, createAccountStatusSink$1 as s, DEFAULT_ACCOUNT_ID as t, createChannelPairingController as u, missingTargetError as v, resolveAllowlistProviderRuntimeGroupPolicy as w, readReactionParams$1 as x, readJsonWebhookBodyOrReject$1 as y };
+export { resolveWebhookTargetWithAuthOrReject$1 as A, registerWebhookTargetWithPluginRoute$1 as C, resolveInboundMentionDecision as D, resolveDefaultGroupPolicy as E, setGoogleChatRuntime as F, warnMissingProviderGroupPolicyFallbackOnce as M, withResolvedWebhookRequestPipeline$1 as N, resolveInboundRouteEnvelopeBuilderWithRuntime as O, getGoogleChatRuntime as P, readStringParam$1 as S, resolveChannelMediaMaxBytes as T, missingTargetError as _, buildChannelConfigSchema as a, readReactionParams$1 as b, createActionGate$1 as c, createWebhookInFlightLimiter$1 as d, extractToolSend$1 as f, loadOutboundMediaFromUrl$1 as g, jsonResult$1 as h, PAIRING_APPROVED_MESSAGE as i, runPassiveAccountLifecycle$1 as j, resolveWebhookPath as k, createChannelMessageReplyPipeline as l, isDangerousNameMatchingEnabled as m, GROUP_POLICY_BLOCKED_LABEL as n, chunkTextForOutbound as o, fetchWithSsrFGuard$1 as p, GoogleChatConfigSchema as r, createAccountStatusSink$1 as s, DEFAULT_ACCOUNT_ID as t, createChannelPairingController as u, readJsonWebhookBodyOrReject$1 as v, resolveAllowlistProviderRuntimeGroupPolicy as w, readRemoteMediaBuffer as x, readNumberParam$1 as y };

package/dist/runtime-api.js

@@ -1,2 +1,2 @@
-import { A as resolveWebhookTargetWithAuthOrReject, C as registerWebhookTargetWithPluginRoute, D as resolveInboundMentionDecision, E as resolveDefaultGroupPolicy, F as setGoogleChatRuntime, M as warnMissingProviderGroupPolicyFallbackOnce, N as withResolvedWebhookRequestPipeline, O as resolveInboundRouteEnvelopeBuilderWithRuntime, S as readStringParam, T as resolveChannelMediaMaxBytes, _ as loadOutboundMediaFromUrl, a as buildChannelConfigSchema, b as readNumberParam, c as createActionGate, d as createWebhookInFlightLimiter, f as extractToolSend, g as jsonResult, h as isDangerousNameMatchingEnabled, i as PAIRING_APPROVED_MESSAGE, j as runPassiveAccountLifecycle, k as resolveWebhookPath, l as createChannelMessageReplyPipeline, m as fetchWithSsrFGuard, n as GROUP_POLICY_BLOCKED_LABEL, o as chunkTextForOutbound, p as fetchRemoteMedia, r as GoogleChatConfigSchema, s as createAccountStatusSink, t as DEFAULT_ACCOUNT_ID, u as createChannelPairingController, v as missingTargetError, w as resolveAllowlistProviderRuntimeGroupPolicy, x as readReactionParams, y as readJsonWebhookBodyOrReject } from "./runtime-api-CAQFEJsQ.js";
-export { DEFAULT_ACCOUNT_ID, GROUP_POLICY_BLOCKED_LABEL, GoogleChatConfigSchema, PAIRING_APPROVED_MESSAGE, buildChannelConfigSchema, chunkTextForOutbound, createAccountStatusSink, createActionGate, createChannelMessageReplyPipeline, createChannelPairingController, createWebhookInFlightLimiter, extractToolSend, fetchRemoteMedia, fetchWithSsrFGuard, isDangerousNameMatchingEnabled, jsonResult, loadOutboundMediaFromUrl, missingTargetError, readJsonWebhookBodyOrReject, readNumberParam, readReactionParams, readStringParam, registerWebhookTargetWithPluginRoute, resolveAllowlistProviderRuntimeGroupPolicy, resolveChannelMediaMaxBytes, resolveDefaultGroupPolicy, resolveInboundMentionDecision, resolveInboundRouteEnvelopeBuilderWithRuntime, resolveWebhookPath, resolveWebhookTargetWithAuthOrReject, runPassiveAccountLifecycle, setGoogleChatRuntime, warnMissingProviderGroupPolicyFallbackOnce, withResolvedWebhookRequestPipeline };
+import { A as resolveWebhookTargetWithAuthOrReject, C as registerWebhookTargetWithPluginRoute, D as resolveInboundMentionDecision, E as resolveDefaultGroupPolicy, F as setGoogleChatRuntime, M as warnMissingProviderGroupPolicyFallbackOnce, N as withResolvedWebhookRequestPipeline, O as resolveInboundRouteEnvelopeBuilderWithRuntime, S as readStringParam, T as resolveChannelMediaMaxBytes, _ as missingTargetError, a as buildChannelConfigSchema, b as readReactionParams, c as createActionGate, d as createWebhookInFlightLimiter, f as extractToolSend, g as loadOutboundMediaFromUrl, h as jsonResult, i as PAIRING_APPROVED_MESSAGE, j as runPassiveAccountLifecycle, k as resolveWebhookPath, l as createChannelMessageReplyPipeline, m as isDangerousNameMatchingEnabled, n as GROUP_POLICY_BLOCKED_LABEL, o as chunkTextForOutbound, p as fetchWithSsrFGuard, r as GoogleChatConfigSchema, s as createAccountStatusSink, t as DEFAULT_ACCOUNT_ID, u as createChannelPairingController, v as readJsonWebhookBodyOrReject, w as resolveAllowlistProviderRuntimeGroupPolicy, x as readRemoteMediaBuffer, y as readNumberParam } from "./runtime-api-DuEfWHnr.js";
+export { DEFAULT_ACCOUNT_ID, GROUP_POLICY_BLOCKED_LABEL, GoogleChatConfigSchema, PAIRING_APPROVED_MESSAGE, buildChannelConfigSchema, chunkTextForOutbound, createAccountStatusSink, createActionGate, createChannelMessageReplyPipeline, createChannelPairingController, createWebhookInFlightLimiter, extractToolSend, fetchWithSsrFGuard, isDangerousNameMatchingEnabled, jsonResult, loadOutboundMediaFromUrl, missingTargetError, readJsonWebhookBodyOrReject, readNumberParam, readReactionParams, readRemoteMediaBuffer, readStringParam, registerWebhookTargetWithPluginRoute, resolveAllowlistProviderRuntimeGroupPolicy, resolveChannelMediaMaxBytes, resolveDefaultGroupPolicy, resolveInboundMentionDecision, resolveInboundRouteEnvelopeBuilderWithRuntime, resolveWebhookPath, resolveWebhookTargetWithAuthOrReject, runPassiveAccountLifecycle, setGoogleChatRuntime, warnMissingProviderGroupPolicyFallbackOnce, withResolvedWebhookRequestPipeline };

package/dist/secret-contract-api.js

@@ -1,2 +1,2 @@
-import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DLAG2_NI.js";
+import { n as collectRuntimeConfigAssignments, r as secretTargetRegistryEntries, t as channelSecrets } from "./secret-contract-DtQ_IO7J.js";
 export { channelSecrets, collectRuntimeConfigAssignments, secretTargetRegistryEntries };

package/dist/setup-plugin-api.js

@@ -1,5 +1,4 @@
-import { a as resolveGoogleChatConfigAccessorAccount, i as resolveGoogleChatAccount, n as listGoogleChatAccountIds, r as resolveDefaultGoogleChatAccountId } from "./accounts-Dt3H6z0l.js";
-import { n as googlechatSetupAdapter, t as googlechatSetupWizard } from "./setup-surface-HU4P5FzD.js";
+import { a as resolveDefaultGoogleChatAccountId, i as listGoogleChatAccountIds, n as googlechatSetupAdapter, o as resolveGoogleChatAccount, s as resolveGoogleChatConfigAccessorAccount, t as googlechatSetupWizard } from "./setup-surface-BlDqtKML.js";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
 import { formatNormalizedAllowFromEntries } from "openclaw/plugin-sdk/allow-from";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter } from "openclaw/plugin-sdk/channel-config-helpers";

package/dist/{setup-surface-HU4P5FzD.js → setup-surface-BlDqtKML.js}

@@ -1,7 +1,103 @@
-import { i as resolveGoogleChatAccount, r as resolveDefaultGoogleChatAccountId } from "./accounts-Dt3H6z0l.js";
+import { safeParseJsonWithSchema, safeParseWithSchema } from "openclaw/plugin-sdk/extension-shared";
 import { normalizeOptionalString, normalizeStringifiedOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { DEFAULT_ACCOUNT_ID, createAccountListHelpers, normalizeAccountId, resolveAccountEntry, resolveMergedAccountConfig } from "openclaw/plugin-sdk/account-resolution";
+import { mergePairLoopGuardConfig } from "openclaw/plugin-sdk/pair-loop-guard-runtime";
+import { isSecretRef } from "openclaw/plugin-sdk/secret-input";
+import { z } from "zod";
 import { createPatchedAccountSetupAdapter, createSetupInputPresenceValidator } from "openclaw/plugin-sdk/setup-runtime";
-import { DEFAULT_ACCOUNT_ID, addWildcardAllowFrom, applySetupAccountConfigPatch, createPromptParsedAllowFromForAccount, createStandardChannelSetupStatus, formatDocsLink, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, splitSetupEntries } from "openclaw/plugin-sdk/setup";
+import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, addWildcardAllowFrom, applySetupAccountConfigPatch, createPromptParsedAllowFromForAccount, createStandardChannelSetupStatus, formatDocsLink, mergeAllowFromEntries, migrateBaseNameToDefaultAccount, splitSetupEntries } from "openclaw/plugin-sdk/setup";
+//#region extensions/googlechat/src/accounts.ts
+const ENV_SERVICE_ACCOUNT$1 = "GOOGLE_CHAT_SERVICE_ACCOUNT";
+const ENV_SERVICE_ACCOUNT_FILE$1 = "GOOGLE_CHAT_SERVICE_ACCOUNT_FILE";
+const JsonRecordSchema = z.record(z.string(), z.unknown());
+const { listAccountIds: listGoogleChatAccountIds, resolveDefaultAccountId: resolveDefaultGoogleChatAccountId } = createAccountListHelpers("googlechat");
+function mergeGoogleChatAccountConfig(cfg, accountId) {
+	const raw = cfg.channels?.["googlechat"] ?? {};
+	const base = resolveMergedAccountConfig({
+		channelConfig: raw,
+		accounts: raw.accounts,
+		accountId,
+		omitKeys: ["defaultAccount"],
+		nestedObjectKeys: ["botLoopProtection"]
+	});
+	const defaultAccountConfig = resolveAccountEntry(raw.accounts, DEFAULT_ACCOUNT_ID) ?? {};
+	if (accountId === DEFAULT_ACCOUNT_ID) return base;
+	const { enabled: _ignoredEnabled, dangerouslyAllowNameMatching: _ignoredDangerouslyAllowNameMatching, serviceAccount: _ignoredServiceAccount, serviceAccountRef: _ignoredServiceAccountRef, serviceAccountFile: _ignoredServiceAccountFile, ...defaultAccountShared } = defaultAccountConfig;
+	const botLoopProtection = mergePairLoopGuardConfig(defaultAccountShared.botLoopProtection, base.botLoopProtection);
+	return {
+		...defaultAccountShared,
+		...base,
+		...botLoopProtection ? { botLoopProtection } : {}
+	};
+}
+function resolveGoogleChatConfigAccessorAccount(params) {
+	const accountId = normalizeAccountId(params.accountId ?? params.cfg.channels?.googlechat?.defaultAccount);
+	return { config: mergeGoogleChatAccountConfig(params.cfg, accountId) };
+}
+function parseServiceAccount(value) {
+	if (isSecretRef(value)) return null;
+	if (typeof value === "string") {
+		const trimmed = value.trim();
+		if (!trimmed) return null;
+		return safeParseJsonWithSchema(JsonRecordSchema, trimmed);
+	}
+	return safeParseWithSchema(JsonRecordSchema, value);
+}
+function resolveCredentialsFromConfig(params) {
+	const { account, accountId } = params;
+	const inline = parseServiceAccount(account.serviceAccount);
+	if (inline) return {
+		credentials: inline,
+		source: "inline"
+	};
+	if (isSecretRef(account.serviceAccount)) throw new Error(`channels.googlechat.accounts.${accountId}.serviceAccount: unresolved SecretRef "${account.serviceAccount.source}:${account.serviceAccount.provider}:${account.serviceAccount.id}". Resolve this command against an active gateway runtime snapshot before reading it.`);
+	if (isSecretRef(account.serviceAccountRef)) throw new Error(`channels.googlechat.accounts.${accountId}.serviceAccount: unresolved SecretRef "${account.serviceAccountRef.source}:${account.serviceAccountRef.provider}:${account.serviceAccountRef.id}". Resolve this command against an active gateway runtime snapshot before reading it.`);
+	const file = normalizeOptionalString(account.serviceAccountFile);
+	if (file) return {
+		credentialsFile: file,
+		source: "file"
+	};
+	if (accountId === DEFAULT_ACCOUNT_ID) {
+		const envJson = process.env[ENV_SERVICE_ACCOUNT$1];
+		const envInline = parseServiceAccount(envJson);
+		if (envInline) return {
+			credentials: envInline,
+			source: "env"
+		};
+		const envFile = normalizeOptionalString(process.env[ENV_SERVICE_ACCOUNT_FILE$1]);
+		if (envFile) return {
+			credentialsFile: envFile,
+			source: "env"
+		};
+	}
+	return { source: "none" };
+}
+function resolveGoogleChatAccount(params) {
+	const accountId = normalizeAccountId(params.accountId ?? params.cfg.channels?.["googlechat"]?.defaultAccount);
+	const baseEnabled = params.cfg.channels?.["googlechat"]?.enabled !== false;
+	const merged = mergeGoogleChatAccountConfig(params.cfg, accountId);
+	const accountEnabled = merged.enabled !== false;
+	const enabled = baseEnabled && accountEnabled;
+	const credentials = resolveCredentialsFromConfig({
+		accountId,
+		account: merged
+	});
+	return {
+		accountId,
+		name: normalizeOptionalString(merged.name),
+		enabled,
+		config: merged,
+		credentialSource: credentials.source,
+		credentials: credentials.credentials,
+		credentialsFile: credentials.credentialsFile
+	};
+}
+function listEnabledGoogleChatAccounts(cfg) {
+	return listGoogleChatAccountIds(cfg).map((accountId) => resolveGoogleChatAccount({
+		cfg,
+		accountId
+	})).filter((account) => account.enabled);
+}
 const googlechatSetupAdapter = createPatchedAccountSetupAdapter({
 	channelKey: "googlechat",
 	validateInput: createSetupInputPresenceValidator({
@@ -38,7 +134,7 @@ const googlechatDmPolicy = {
 	channel,
 	policyKey: "channels.googlechat.dm.policy",
 	allowFromKey: "channels.googlechat.dm.allowFrom",
-	resolveConfigKeys: (cfg, accountId) => (accountId ?? resolveDefaultGoogleChatAccountId(cfg)) !== DEFAULT_ACCOUNT_ID ? {
+	resolveConfigKeys: (cfg, accountId) => (accountId ?? resolveDefaultGoogleChatAccountId(cfg)) !== DEFAULT_ACCOUNT_ID$1 ? {
 		policyKey: `channels.googlechat.accounts.${accountId ?? resolveDefaultGoogleChatAccountId(cfg)}.dm.policy`,
 		allowFromKey: `channels.googlechat.accounts.${accountId ?? resolveDefaultGoogleChatAccountId(cfg)}.dm.allowFrom`
 	} : {
@@ -129,7 +225,7 @@ const googlechatSetupWizard = {
 		]
 	},
 	prepare: async ({ cfg, accountId, credentialValues, prompter }) => {
-		if (accountId === DEFAULT_ACCOUNT_ID && (Boolean(process.env[ENV_SERVICE_ACCOUNT]) || Boolean(process.env[ENV_SERVICE_ACCOUNT_FILE]))) {
+		if (accountId === DEFAULT_ACCOUNT_ID$1 && (Boolean(process.env[ENV_SERVICE_ACCOUNT]) || Boolean(process.env[ENV_SERVICE_ACCOUNT_FILE]))) {
 			if (await prompter.confirm({
 				message: "Use GOOGLE_CHAT_SERVICE_ACCOUNT env vars?",
 				initialValue: true
@@ -214,4 +310,4 @@ const googlechatSetupWizard = {
 	dmPolicy: googlechatDmPolicy
 };
 //#endregion
-export { googlechatSetupAdapter as n, googlechatSetupWizard as t };
+export { resolveDefaultGoogleChatAccountId as a, listGoogleChatAccountIds as i, googlechatSetupAdapter as n, resolveGoogleChatAccount as o, listEnabledGoogleChatAccounts as r, resolveGoogleChatConfigAccessorAccount as s, googlechatSetupWizard as t };

package/dist/test-api.js

@@ -1,3 +1,3 @@
-import { F as setGoogleChatRuntime } from "./runtime-api-CAQFEJsQ.js";
-import { t as googlechatPlugin } from "./channel-DoEjIr9p.js";
+import { F as setGoogleChatRuntime } from "./runtime-api-DuEfWHnr.js";
+import { t as googlechatPlugin } from "./channel-DzmqN0DY.js";
 export { googlechatPlugin, setGoogleChatRuntime };

package/openclaw.plugin.json

@@ -41,6 +41,30 @@
           "allowBots": {
             "type": "boolean"
           },
+          "botLoopProtection": {
+            "type": "object",
+            "properties": {
+              "enabled": {
+                "type": "boolean"
+              },
+              "maxEventsPerWindow": {
+                "type": "integer",
+                "exclusiveMinimum": 0,
+                "maximum": 9007199254740991
+              },
+              "windowSeconds": {
+                "type": "integer",
+                "exclusiveMinimum": 0,
+                "maximum": 9007199254740991
+              },
+              "cooldownSeconds": {
+                "type": "integer",
+                "exclusiveMinimum": 0,
+                "maximum": 9007199254740991
+              }
+            },
+            "additionalProperties": false
+          },
           "dangerouslyAllowNameMatching": {
             "type": "boolean"
           },
@@ -83,6 +107,30 @@
                 "requireMention": {
                   "type": "boolean"
                 },
+                "botLoopProtection": {
+                  "type": "object",
+                  "properties": {
+                    "enabled": {
+                      "type": "boolean"
+                    },
+                    "maxEventsPerWindow": {
+                      "type": "integer",
+                      "exclusiveMinimum": 0,
+                      "maximum": 9007199254740991
+                    },
+                    "windowSeconds": {
+                      "type": "integer",
+                      "exclusiveMinimum": 0,
+                      "maximum": 9007199254740991
+                    },
+                    "cooldownSeconds": {
+                      "type": "integer",
+                      "exclusiveMinimum": 0,
+                      "maximum": 9007199254740991
+                    }
+                  },
+                  "additionalProperties": false
+                },
                 "users": {
                   "type": "array",
                   "items": {
@@ -464,6 +512,30 @@
                 "allowBots": {
                   "type": "boolean"
                 },
+                "botLoopProtection": {
+                  "type": "object",
+                  "properties": {
+                    "enabled": {
+                      "type": "boolean"
+                    },
+                    "maxEventsPerWindow": {
+                      "type": "integer",
+                      "exclusiveMinimum": 0,
+                      "maximum": 9007199254740991
+                    },
+                    "windowSeconds": {
+                      "type": "integer",
+                      "exclusiveMinimum": 0,
+                      "maximum": 9007199254740991
+                    },
+                    "cooldownSeconds": {
+                      "type": "integer",
+                      "exclusiveMinimum": 0,
+                      "maximum": 9007199254740991
+                    }
+                  },
+                  "additionalProperties": false
+                },
                 "dangerouslyAllowNameMatching": {
                   "type": "boolean"
                 },
@@ -506,6 +578,30 @@
                       "requireMention": {
                         "type": "boolean"
                       },
+                      "botLoopProtection": {
+                        "type": "object",
+                        "properties": {
+                          "enabled": {
+                            "type": "boolean"
+                          },
+                          "maxEventsPerWindow": {
+                            "type": "integer",
+                            "exclusiveMinimum": 0,
+                            "maximum": 9007199254740991
+                          },
+                          "windowSeconds": {
+                            "type": "integer",
+                            "exclusiveMinimum": 0,
+                            "maximum": 9007199254740991
+                          },
+                          "cooldownSeconds": {
+                            "type": "integer",
+                            "exclusiveMinimum": 0,
+                            "maximum": 9007199254740991
+                          }
+                        },
+                        "additionalProperties": false
+                      },
                       "users": {
                         "type": "array",
                         "items": {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@openclaw/googlechat",
-  "version": "2026.5.12",
+  "version": "2026.5.14-beta.2",
   "description": "OpenClaw Google Chat channel plugin",
   "repository": {
     "type": "git",
@@ -17,7 +17,7 @@
     "openclaw": "workspace:*"
   },
   "peerDependencies": {
-    "openclaw": ">=2026.5.12"
+    "openclaw": ">=2026.5.14-beta.2"
   },
   "peerDependenciesMeta": {
     "openclaw": {
@@ -75,10 +75,10 @@
       "minHostVersion": ">=2026.4.10"
     },
     "compat": {
-      "pluginApi": ">=2026.5.12"
+      "pluginApi": ">=2026.5.14-beta.2"
     },
     "build": {
-      "openclawVersion": "2026.5.12"
+      "openclawVersion": "2026.5.14-beta.2"
     },
     "release": {
       "publishToClawHub": true,

package/dist/accounts-Dt3H6z0l.js

@@ -1,96 +0,0 @@
-import { safeParseJsonWithSchema, safeParseWithSchema } from "openclaw/plugin-sdk/extension-shared";
-import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
-import { DEFAULT_ACCOUNT_ID, createAccountListHelpers, normalizeAccountId, resolveAccountEntry, resolveMergedAccountConfig } from "openclaw/plugin-sdk/account-resolution";
-import { isSecretRef } from "openclaw/plugin-sdk/secret-input";
-import { z } from "zod";
-//#region extensions/googlechat/src/accounts.ts
-const ENV_SERVICE_ACCOUNT = "GOOGLE_CHAT_SERVICE_ACCOUNT";
-const ENV_SERVICE_ACCOUNT_FILE = "GOOGLE_CHAT_SERVICE_ACCOUNT_FILE";
-const JsonRecordSchema = z.record(z.string(), z.unknown());
-const { listAccountIds: listGoogleChatAccountIds, resolveDefaultAccountId: resolveDefaultGoogleChatAccountId } = createAccountListHelpers("googlechat");
-function mergeGoogleChatAccountConfig(cfg, accountId) {
-	const raw = cfg.channels?.["googlechat"] ?? {};
-	const base = resolveMergedAccountConfig({
-		channelConfig: raw,
-		accounts: raw.accounts,
-		accountId,
-		omitKeys: ["defaultAccount"]
-	});
-	const defaultAccountConfig = resolveAccountEntry(raw.accounts, DEFAULT_ACCOUNT_ID) ?? {};
-	if (accountId === DEFAULT_ACCOUNT_ID) return base;
-	const { enabled: _ignoredEnabled, dangerouslyAllowNameMatching: _ignoredDangerouslyAllowNameMatching, serviceAccount: _ignoredServiceAccount, serviceAccountRef: _ignoredServiceAccountRef, serviceAccountFile: _ignoredServiceAccountFile, ...defaultAccountShared } = defaultAccountConfig;
-	return {
-		...defaultAccountShared,
-		...base
-	};
-}
-function resolveGoogleChatConfigAccessorAccount(params) {
-	const accountId = normalizeAccountId(params.accountId ?? params.cfg.channels?.googlechat?.defaultAccount);
-	return { config: mergeGoogleChatAccountConfig(params.cfg, accountId) };
-}
-function parseServiceAccount(value) {
-	if (isSecretRef(value)) return null;
-	if (typeof value === "string") {
-		const trimmed = value.trim();
-		if (!trimmed) return null;
-		return safeParseJsonWithSchema(JsonRecordSchema, trimmed);
-	}
-	return safeParseWithSchema(JsonRecordSchema, value);
-}
-function resolveCredentialsFromConfig(params) {
-	const { account, accountId } = params;
-	const inline = parseServiceAccount(account.serviceAccount);
-	if (inline) return {
-		credentials: inline,
-		source: "inline"
-	};
-	if (isSecretRef(account.serviceAccount)) throw new Error(`channels.googlechat.accounts.${accountId}.serviceAccount: unresolved SecretRef "${account.serviceAccount.source}:${account.serviceAccount.provider}:${account.serviceAccount.id}". Resolve this command against an active gateway runtime snapshot before reading it.`);
-	if (isSecretRef(account.serviceAccountRef)) throw new Error(`channels.googlechat.accounts.${accountId}.serviceAccount: unresolved SecretRef "${account.serviceAccountRef.source}:${account.serviceAccountRef.provider}:${account.serviceAccountRef.id}". Resolve this command against an active gateway runtime snapshot before reading it.`);
-	const file = normalizeOptionalString(account.serviceAccountFile);
-	if (file) return {
-		credentialsFile: file,
-		source: "file"
-	};
-	if (accountId === DEFAULT_ACCOUNT_ID) {
-		const envJson = process.env[ENV_SERVICE_ACCOUNT];
-		const envInline = parseServiceAccount(envJson);
-		if (envInline) return {
-			credentials: envInline,
-			source: "env"
-		};
-		const envFile = normalizeOptionalString(process.env[ENV_SERVICE_ACCOUNT_FILE]);
-		if (envFile) return {
-			credentialsFile: envFile,
-			source: "env"
-		};
-	}
-	return { source: "none" };
-}
-function resolveGoogleChatAccount(params) {
-	const accountId = normalizeAccountId(params.accountId ?? params.cfg.channels?.["googlechat"]?.defaultAccount);
-	const baseEnabled = params.cfg.channels?.["googlechat"]?.enabled !== false;
-	const merged = mergeGoogleChatAccountConfig(params.cfg, accountId);
-	const accountEnabled = merged.enabled !== false;
-	const enabled = baseEnabled && accountEnabled;
-	const credentials = resolveCredentialsFromConfig({
-		accountId,
-		account: merged
-	});
-	return {
-		accountId,
-		name: normalizeOptionalString(merged.name),
-		enabled,
-		config: merged,
-		credentialSource: credentials.source,
-		credentials: credentials.credentials,
-		credentialsFile: credentials.credentialsFile
-	};
-}
-function listEnabledGoogleChatAccounts(cfg) {
-	return listGoogleChatAccountIds(cfg).map((accountId) => resolveGoogleChatAccount({
-		cfg,
-		accountId
-	})).filter((account) => account.enabled);
-}
-//#endregion
-export { resolveGoogleChatConfigAccessorAccount as a, resolveGoogleChatAccount as i, listGoogleChatAccountIds as n, resolveDefaultGoogleChatAccountId as r, listEnabledGoogleChatAccounts as t };

package/dist/targets-C_U5SbnT.js

@@ -1,43 +0,0 @@
-import { a as findGoogleChatDirectMessage } from "./api-DubPSfme.js";
-import { normalizeLowercaseStringOrEmpty } from "openclaw/plugin-sdk/string-coerce-runtime";
-//#region extensions/googlechat/src/targets.ts
-function normalizeGoogleChatTarget(raw) {
-	const trimmed = raw?.trim();
-	if (!trimmed) return;
-	const normalized = trimmed.replace(/^(googlechat|google-chat|gchat):/i, "").replace(/^user:(users\/)?/i, "users/").replace(/^space:(spaces\/)?/i, "spaces/");
-	if (isGoogleChatUserTarget(normalized)) {
-		const suffix = normalized.slice(6);
-		return suffix.includes("@") ? `users/${normalizeLowercaseStringOrEmpty(suffix)}` : normalized;
-	}
-	if (isGoogleChatSpaceTarget(normalized)) return normalized;
-	if (normalized.includes("@")) return `users/${normalizeLowercaseStringOrEmpty(normalized)}`;
-	return normalized;
-}
-function isGoogleChatUserTarget(value) {
-	return normalizeLowercaseStringOrEmpty(value).startsWith("users/");
-}
-function isGoogleChatSpaceTarget(value) {
-	return normalizeLowercaseStringOrEmpty(value).startsWith("spaces/");
-}
-function stripMessageSuffix(target) {
-	const index = target.indexOf("/messages/");
-	if (index === -1) return target;
-	return target.slice(0, index);
-}
-async function resolveGoogleChatOutboundSpace(params) {
-	const normalized = normalizeGoogleChatTarget(params.target);
-	if (!normalized) throw new Error("Missing Google Chat target.");
-	const base = stripMessageSuffix(normalized);
-	if (isGoogleChatSpaceTarget(base)) return base;
-	if (isGoogleChatUserTarget(base)) {
-		const dm = await findGoogleChatDirectMessage({
-			account: params.account,
-			userName: base
-		});
-		if (!dm?.name) throw new Error(`No Google Chat DM found for ${base}`);
-		return dm.name;
-	}
-	return base;
-}
-//#endregion
-export { resolveGoogleChatOutboundSpace as i, isGoogleChatUserTarget as n, normalizeGoogleChatTarget as r, isGoogleChatSpaceTarget as t };