@opengeni/api-router 3.0.0-canary.0 → 3.0.1

package/dist/app.js

@@ -24,7 +24,7 @@ import {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession,
   workspaceActorContextExempt
-} from "./chunk-7IAWEYBH.js";
+} from "./chunk-AJ62T5QN.js";
 export {
   API_MAX_REQUEST_BODY_BYTES,
   allowedCorsOrigin,

package/dist/{chunk-7IAWEYBH.js → chunk-AJ62T5QN.js}

@@ -63503,6 +63503,14 @@ function registerConnectRoutes(app, deps) {
         ownership: ["workspace"],
         setup: ["oauth"]
       }),
+      ConnectProvider.parse({
+        id: "gmail",
+        label: "Gmail",
+        family: "google",
+        readiness: !external || !canWrite2 || !personal ? "unsupported" : mcpConfigured ? "available" : "needs_configuration",
+        ownership: personal ? ["personal"] : [],
+        setup: ["oauth"]
+      }),
       ConnectProvider.parse({
         id: "slack-personal",
         label: "My Slack account",
@@ -63706,7 +63714,7 @@ function registerConnectRoutes(app, deps) {
             ConnectAccount.parse({
               id: connection.id,
               version: connection.version,
-              providerId: connection.metadata.mcpUrl === OPENGENI_PERSONAL_SLACK_MCP_URL2 ? "slack-personal" : "mcp-oauth",
+              providerId: connection.metadata.mcpUrl === OPENGENI_PERSONAL_SLACK_MCP_URL2 ? "slack-personal" : connection.metadata.mcpUrl === OFFICIAL_GMAIL_MCP_URL ? "gmail" : "mcp-oauth",
               label: connection.providerDomain,
               ownership: connection.subjectId === null ? "workspace" : "personal",
               status: connection.status === "revoked" ? "disabled" : connection.status === "active" ? "connected" : "auth_needed"
@@ -64062,10 +64070,10 @@ function registerConnectRoutes(app, deps) {
         })
       );
     }
-    if (["mcp-oauth", "slack-personal"].includes(before.providerId)) {
+    if (["mcp-oauth", "slack-personal", "gmail"].includes(before.providerId)) {
       if (action.type !== "credentials")
         throw new HTTPException38(422, { message: "MCP OAuth requires a server URL" });
-      const values = before.providerId === "slack-personal" ? { mcpUrl: OPENGENI_PERSONAL_SLACK_MCP_URL2 } : z18.object({ mcpUrl: z18.string().url().max(4096) }).strict().parse(action.values);
+      const values = before.providerId === "slack-personal" ? { mcpUrl: OPENGENI_PERSONAL_SLACK_MCP_URL2 } : before.providerId === "gmail" ? { mcpUrl: OFFICIAL_GMAIL_MCP_URL } : z18.object({ mcpUrl: z18.string().url().max(4096) }).strict().parse(action.values);
       return c.json(
         await executeConnectOperation({
           db: deps.db,
@@ -64501,6 +64509,7 @@ function registerConnectRoutes(app, deps) {
         if (input.installationTarget && [
           "mcp-oauth",
           "slack-personal",
+          "gmail",
           "mcp-bearer",
           "mcp-headers",
           "fiken-token",
@@ -64514,17 +64523,26 @@ function registerConnectRoutes(app, deps) {
           throw new HTTPException38(422, {
             message: "MCP credential setup does not install an API integration instance"
           });
-        if (["mcp-oauth", "slack-personal", "mcp-bearer", "mcp-headers", "fiken-token"].includes(
-          input.providerId
-        )) {
+        if ([
+          "mcp-oauth",
+          "slack-personal",
+          "gmail",
+          "mcp-bearer",
+          "mcp-headers",
+          "fiken-token"
+        ].includes(input.providerId)) {
           if (input.providerId === "slack-personal" && input.ownership !== "personal")
             throw new HTTPException38(422, {
               message: "Hosted Slack MCP requires personal ownership"
             });
+          if (input.providerId === "gmail" && input.ownership !== "personal")
+            throw new HTTPException38(422, {
+              message: "Gmail requires personal ownership; each user connects their own account"
+            });
           if (input.providerId === "fiken-token" && input.ownership !== "workspace")
             throw new HTTPException38(422, { message: "Fiken is workspace-owned" });
           requireEnvironmentEncryption11(deps.settings);
-          if (["mcp-oauth", "slack-personal"].includes(input.providerId))
+          if (["mcp-oauth", "slack-personal", "gmail"].includes(input.providerId))
             requireIntegrationsStateSecret(deps.settings);
           const existing = input.reconnectAccountId ? await getConnectionMetadata10(
             tx,
@@ -64532,7 +64550,7 @@ function registerConnectRoutes(app, deps) {
             input.reconnectAccountId,
             scope.subjectId
           ) : null;
-          if (input.reconnectAccountId && (!existing || (input.providerId === "fiken-token" ? !isFikenConnection2(existing) : ["mcp-oauth", "slack-personal"].includes(input.providerId) ? existing.kind !== "oauth2" || !existing.metadata.oauthDiscovery || input.providerId === "slack-personal" && existing.metadata.mcpUrl !== OPENGENI_PERSONAL_SLACK_MCP_URL2 : existing.kind !== "api_key" || existing.metadata.connectAdapter !== input.providerId) || (existing.subjectId === null ? "workspace" : "personal") !== input.ownership))
+          if (input.reconnectAccountId && (!existing || (input.providerId === "fiken-token" ? !isFikenConnection2(existing) : ["mcp-oauth", "slack-personal", "gmail"].includes(input.providerId) ? existing.kind !== "oauth2" || !existing.metadata.oauthDiscovery || input.providerId === "slack-personal" && existing.metadata.mcpUrl !== OPENGENI_PERSONAL_SLACK_MCP_URL2 || input.providerId === "gmail" && existing.metadata.mcpUrl !== OFFICIAL_GMAIL_MCP_URL : existing.kind !== "api_key" || existing.metadata.connectAdapter !== input.providerId) || (existing.subjectId === null ? "workspace" : "personal") !== input.ownership))
             throw new HTTPException38(404, { message: "MCP account not found for this ownership" });
           if (input.ownership === "personal" && !isPersonalConnectionOwnerPrincipal(authorization))
             throw new HTTPException38(403, { message: "personal ownership unavailable" });
@@ -64563,7 +64581,7 @@ function registerConnectRoutes(app, deps) {
               } : {},
               nextAction: {
                 type: "credentials",
-                fields: input.providerId === "slack-personal" ? [] : input.providerId === "fiken-token" ? [
+                fields: ["slack-personal", "gmail"].includes(input.providerId) ? [] : input.providerId === "fiken-token" ? [
                   {
                     name: "apiToken",
                     label: "Fiken API token",
@@ -105677,4 +105695,4 @@ export {
   withDefaultEnabledCapabilityMcpTools,
   workflowIdForSession4 as workflowIdForSession
 };
-//# sourceMappingURL=chunk-7IAWEYBH.js.map
+//# sourceMappingURL=chunk-AJ62T5QN.js.map