@particle-academy/gmail-inbox-js 0.1.0 → 0.2.0

package/CHANGELOG.md

@@ -12,6 +12,41 @@ derived — somebody has to write what changed — but writing it in the
 provider repo would be a hand-edit that `.weaver.json` flags and the next
 sync destroys.
 
+## [0.2.0] — 2026-11-08
+
+### Added
+
+- **`message_received`: a trigger for new Gmail mail, still read-only**
+  (`gmail.readonly` is the only scope). `mailbox_watch` makes Gmail publish
+  mailbox changes to a Cloud Pub/Sub topic in YOUR app's own Google Cloud
+  project, and a push subscription delivers each change to your host.
+  - **Every push is verified before anything reads it.** It carries a
+    Google-signed token in `Authorization`, checked for Google's issuer, the
+    subscription's audience (`pushAudience`), and the push service account
+    with `email_verified` true (`pushServiceAccount`). The service-account
+    check is what refuses a stranger's subscription aimed at your URL.
+  - **Routing.** The Pub/Sub envelope is unwrapped, then the push is routed by
+    `emailAddress`, only after verification. One topic serves every mailbox.
+  - **What arrives.** A push carries only the mailbox's NEW position, so the
+    trigger reads `history.list` from the cursor YOUR HOST stored. It reads
+    every page and publishes the changes under `history` with `cursor: {used,
+    next}`. Your host persists `cursor.next` when a run succeeds.
+  - **Received mail only, by default:** `labelId: INBOX` and `historyTypes:
+    messageAdded`, so no sent mail or drafts. Widen either in the trigger's
+    config.
+  - **A lapsed cursor** (Gmail's 404) or more than 20 pages fails by name, as
+    `cursor-expired` or `cursor-overflow`. Each carries a bounded resync query
+    (`newer_than:7d`; `resyncWindowDays` sets it, default 7). Watch again
+    first, then list with that query. The mailbox is never fully re-pulled.
+  - **The watch is a lease:** Gmail's `expiration` is in epoch milliseconds,
+    renewed by watching again, a day early. Google requires at least once
+    every 7 days and recommends daily.
+  - **Read state is never changed.**
+
+  New actions: `mailbox_watch`, `mailbox_stop` and `history_list`. New
+  credentials: `pushAudience` and `pushServiceAccount`, needed only for the
+  trigger. Requires fancy-connector-core 0.14.0.
+
 ## [0.1.0] — 2026-10-01
 
 ### Added

package/README.md

@@ -35,7 +35,7 @@ Everything below is generated from `provider/manifest.json`, so it cannot disagr
 
 ### Credentials
 
-A Gmail Inbox connection holds 4 values.
+A Gmail Inbox connection holds 6 values.
 
 **Two kinds of value, and mixing them up matters.** A `provider` credential is ONE value for the whole installation — an OAuth app's client secret serves every connected account. An `account` credential is one per connected account. A host that stores the second where it stores the first lets one account's credentials reach another's.
 
@@ -45,6 +45,8 @@ A Gmail Inbox connection holds 4 values.
 | **OAuth client secret** | per installation | **secret** | The client secret for the same OAuth app. One value for the whole installation. |
 | **Access token** | per connected account | **secret** | Per connected Google account, and it expires after ONE HOUR. The host refreshes it with the refresh token. |
 | **Refresh token** | per connected account | **secret** | Per connected Google account. Google issues one only when the consent request asks for offline access; without it the connection dies within the hour. |
+| **Push audience** *(optional)* | per installation | not secret | The audience set on the Pub/Sub PUSH subscription (normally the endpoint URL your host mounts for message_received). Every push's Google-signed token must name it; an unchecked audience accepts any token Google signs for anyone. Needed only for the message_received trigger. |
+| **Push service account** *(optional)* | per installation | not secret | The service account the push subscription authenticates as (its email). Every push's token must be for exactly this account: a stranger's subscription aimed at your URL carries a token Google signed correctly, and only this check refuses it. Needed only for message_received. |
 
 ### Authorising
 
@@ -67,6 +69,21 @@ The refresh tokens do **not** rotate: the same one is reusable, so a refresh may
 
 ### Actions
 
+#### `history_list` — List Gmail mailbox history
+
+List what changed in a mailbox since a history id: messages added or deleted, labels added or removed.
+
+`GET /gmail/v1/users/{userId}/history` · reads only — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | `me` is the connected account and is almost always what you want. |
+| `startHistoryId` | yes | Changes AFTER this id. Take it from a watch, a message, or a previous list's historyId. Out of Gmail's range (typically older than a week) it answers 404. |
+| `historyTypes` | no | Blank: every kind. messageAdded is new mail (and sent mail and drafts, unless a label narrows it). |
+| `labelId` | no | Only messages with this label, e.g. INBOX for received mail. |
+| `maxResults` | no | Gmail's own maximum is 500. |
+| `pageToken` | no | From a previous page's nextPageToken. |
+
 #### `label_list` — List Gmail labels
 
 List every label on the mailbox, system and user-created.
@@ -77,6 +94,29 @@ List every label on the mailbox, system and user-created.
 |---|---|---|
 | `userId` | yes | Mailbox |
 
+#### `mailbox_stop` — Stop watching a Gmail mailbox
+
+Turn off push notifications for a mailbox.
+
+`POST /gmail/v1/users/{userId}/stop` · idempotent — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | `me` is the connected account and is almost always what you want. |
+
+#### `mailbox_watch` — Watch a Gmail mailbox
+
+Start (or renew) push notifications for a mailbox to a Cloud Pub/Sub topic.
+
+`POST /gmail/v1/users/{userId}/watch` · idempotent — safe to replay
+
+| Input | Required | What it is |
+|---|---|---|
+| `userId` | yes | `me` is the connected account and is almost always what you want. |
+| `topicName` | yes | The full topic name, in YOUR app's own Google Cloud project: Google requires its project id to match the project whose OAuth client makes this call. One topic serves every mailbox. |
+| `labelIds` | no | Comma-separated label ids to restrict notifications to (e.g. INBOX). Blank: every change is pushed. |
+| `labelFilterBehavior` | no | Whether the labels above are the ONLY ones notified (include) or the ones NOT notified (exclude). |
+
 #### `message_get` — Gmail message
 
 Read one message's headers and preview. The body's plain/HTML text is NOT decoded -- see the raw payload for that.
@@ -114,6 +154,18 @@ Read every message in a conversation thread, oldest first.
 | `userId` | yes | Mailbox |
 | `id` | yes | A message's threadId, from message_list or message_get. |
 
+### Triggers
+
+#### `message_received` — Gmail message received
+
+Start when new mail arrives in a watched mailbox, with every new message since the last run.
+
+A SUBSCRIPTION: Gmail Inbox delivers to your endpoint only while a subscription it issued is alive, at most 168 hours at a time. Its expiry is read from the `mailbox_watch` response (`expiration`); 86400 seconds before it, the host renews it (`mailbox_watch`). A lease that lapses is re-listed AND re-subscribed, because notifications during the gap are gone. Every delivery: the signature is verified before anything runs. The delivery only names what arrived, so the run's first step reads it: `history_list` with , published under `history`. A failed read fails the run.
+
+**You have to set this up with the provider first:**
+
+In YOUR app's Google Cloud project (the one owning the OAuth client): create a Pub/Sub topic, grant publish on it to gmail-api-push@system.gserviceaccount.com, and create a PUSH subscription to the route your host mounts for this trigger, with authentication on (a service account you choose; the endpoint URL as the audience). Put that audience and service account on the connection as pushAudience and pushServiceAccount, and fetch Google's signing keys for verification. Then call mailbox_watch with the topic for each mailbox and store its historyId as the trigger's cursor (startHistoryId); renew the watch daily. ONE topic serves every mailbox: route each push by its emailAddress, and only after the token verifies, to a mailbox you watched; drop an unmapped address with a 2xx. Persist cursor.next when a run succeeds. On cursor-expired or cursor-overflow, watch again for a fresh historyId FIRST, then list with message_list using the resyncQuery, and match it against the mail you already handled. This trigger never changes read state.
+
 ## Run it before you have credentials
 
 Every operation ships a **faker**, whether or not Gmail Inbox has a sandbox. Set a

package/dist/chunk-2PSRTESV.js

@@ -0,0 +1,550 @@
+import { callConnector, readWithCursor, verifyDelivery, decodeDelivery } from '@particle-academy/fancy-connector-core';
+
+// src/faker.ts
+function fakeHistoryList({ config, fake }) {
+  return {
+    "history": [
+      {
+        "id": "1234567891",
+        "messagesAdded": [
+          {
+            "message": {
+              "id": fake.hex(16),
+              "threadId": fake.hex(16),
+              "labelIds": [
+                "INBOX",
+                "UNREAD"
+              ]
+            }
+          }
+        ]
+      }
+    ],
+    "historyId": "1234567891"
+  };
+}
+function fakeLabelList({ config, fake }) {
+  return {
+    "labels": [
+      {
+        "id": "INBOX",
+        "name": "INBOX",
+        "type": "system"
+      },
+      {
+        "id": "UNREAD",
+        "name": "UNREAD",
+        "type": "system"
+      },
+      {
+        "id": "IMPORTANT",
+        "name": "IMPORTANT",
+        "type": "system",
+        "messagesTotal": 412,
+        "messagesUnread": 18,
+        "threadsTotal": 203,
+        "threadsUnread": 11
+      },
+      {
+        "id": fake.id("Label"),
+        "name": "Design Reviews",
+        "type": "user",
+        "messageListVisibility": "show",
+        "labelListVisibility": "labelShow",
+        "messagesTotal": 27,
+        "messagesUnread": 2,
+        "threadsTotal": 9,
+        "threadsUnread": 1
+      }
+    ]
+  };
+}
+function fakeMailboxStop({ config, fake }) {
+  return {};
+}
+function fakeMailboxWatch({ config, fake }) {
+  return {
+    "historyId": "1234567890",
+    "expiration": "1767312000000"
+  };
+}
+function fakeMessageGet({ config, fake }) {
+  return {
+    "id": config.id !== void 0 && config.id !== null && config.id !== "" ? String(config.id) : fake.hex(16),
+    "threadId": fake.hex(16),
+    "labelIds": [
+      "INBOX",
+      "UNREAD",
+      "IMPORTANT"
+    ],
+    "snippet": "Hi Ada, just confirming the design review is still on for Thursday at 2pm. Let me know if...",
+    "internalDate": "1790712000000",
+    "payload": {
+      "mimeType": "text/plain",
+      "headers": [
+        {
+          "name": "From",
+          "value": "Grace Hopper <grace@example.test>"
+        },
+        {
+          "name": "To",
+          "value": "Ada Lovelace <ada@example.test>"
+        },
+        {
+          "name": "Subject",
+          "value": "Re: Design review Thursday"
+        },
+        {
+          "name": "Date",
+          "value": "Tue, 29 Sep 2026 14:03:00 -0400"
+        }
+      ],
+      "body": {
+        "size": 612,
+        "data": fake.id("base64url_body")
+      }
+    }
+  };
+}
+function fakeMessageList({ config, fake }) {
+  return {
+    "messages": [
+      {
+        "id": fake.hex(16),
+        "threadId": fake.hex(16)
+      },
+      {
+        "id": fake.hex(16),
+        "threadId": fake.hex(16)
+      }
+    ],
+    "resultSizeEstimate": 2
+  };
+}
+function fakeThreadGet({ config, fake }) {
+  return {
+    "id": config.id !== void 0 && config.id !== null && config.id !== "" ? String(config.id) : fake.hex(16),
+    "historyId": Array.from({ length: 10 }, () => fake.int(0, 9)).join(""),
+    "messages": [
+      {
+        "id": fake.hex(16),
+        "labelIds": [
+          "INBOX",
+          "IMPORTANT"
+        ],
+        "snippet": "Hey team, scheduling the Q3 design review for Thursday at 2pm. Conference room B...",
+        "internalDate": "1790625600000",
+        "payload": {
+          "mimeType": "text/plain",
+          "headers": [
+            {
+              "name": "From",
+              "value": "Ada Lovelace <ada@example.test>"
+            },
+            {
+              "name": "To",
+              "value": "Grace Hopper <grace@example.test>"
+            },
+            {
+              "name": "Subject",
+              "value": "Design review Thursday"
+            },
+            {
+              "name": "Date",
+              "value": "Mon, 28 Sep 2026 09:00:00 -0400"
+            }
+          ],
+          "body": {
+            "size": 540,
+            "data": fake.id("base64url_body")
+          }
+        }
+      },
+      {
+        "id": fake.hex(16),
+        "labelIds": [
+          "INBOX",
+          "UNREAD",
+          "IMPORTANT"
+        ],
+        "snippet": "Hi Ada, just confirming the design review is still on for Thursday at 2pm. Let me know if...",
+        "internalDate": "1790712000000",
+        "payload": {
+          "mimeType": "text/plain",
+          "headers": [
+            {
+              "name": "From",
+              "value": "Grace Hopper <grace@example.test>"
+            },
+            {
+              "name": "To",
+              "value": "Ada Lovelace <ada@example.test>"
+            },
+            {
+              "name": "Subject",
+              "value": "Re: Design review Thursday"
+            },
+            {
+              "name": "Date",
+              "value": "Tue, 29 Sep 2026 14:03:00 -0400"
+            }
+          ],
+          "body": {
+            "size": 612,
+            "data": fake.id("base64url_body")
+          }
+        }
+      }
+    ]
+  };
+}
+function fakeMessageReceived({ config, fake }) {
+  return {
+    "subscription": "projects/my-project/subscriptions/gmail-push",
+    "messageId": Array.from({ length: 16 }, () => fake.int(0, 9)).join(""),
+    "publishTime": "2026-11-08T09:00:00.000Z",
+    "attributes": {},
+    "deliveryAttempt": null,
+    "data": {
+      "emailAddress": "user@example.test",
+      "historyId": 1234567891
+    }
+  };
+}
+var gmailInboxFaker = (operation, request) => {
+  switch (operation) {
+    case "history_list":
+      return fakeHistoryList(request);
+    case "label_list":
+      return fakeLabelList(request);
+    case "mailbox_stop":
+      return fakeMailboxStop(request);
+    case "mailbox_watch":
+      return fakeMailboxWatch(request);
+    case "message_get":
+      return fakeMessageGet(request);
+    case "message_list":
+      return fakeMessageList(request);
+    case "thread_get":
+      return fakeThreadGet(request);
+    case "message_received":
+      return fakeMessageReceived(request);
+    default:
+      throw new Error(
+        `gmail_inbox: no fake response is defined for "${operation}". Add a fixture under provider/fixtures/ and regenerate \u2014 a connector without a faker cannot be developed against, tested, or demonstrated.`
+      );
+  }
+};
+
+// src/service.ts
+var CONNECTOR_API_VERSION = 1;
+var GMAIL_INBOX_BASE_URLS = {
+  "live": "https://gmail.googleapis.com"
+};
+var GMAIL_INBOX_REQUIRES = [
+  "accessToken",
+  "refreshToken",
+  "clientId",
+  "clientSecret"
+];
+function gmailInboxAuthorize(credentials, request, _mode) {
+  request.headers.Authorization = `Bearer ${credentials.accessToken ?? ""}`;
+}
+var GMAIL_INBOX = {
+  service: "gmail_inbox",
+  title: "Gmail Inbox",
+  sandbox: "none",
+  baseUrls: { ...GMAIL_INBOX_BASE_URLS },
+  requires: [...GMAIL_INBOX_REQUIRES],
+  authorize: gmailInboxAuthorize,
+  faker: gmailInboxFaker
+};
+var HISTORY_LIST_OPERATION = "history_list";
+async function gmailInboxHistoryList(options) {
+  const config = options.config ?? {};
+  if (config.userId === void 0 || config.userId === null || config.userId === "") {
+    throw new Error(`history_list: "userId" is required (Mailbox).`);
+  }
+  if (config.startHistoryId === void 0 || config.startHistoryId === null || config.startHistoryId === "") {
+    throw new Error(`history_list: "startHistoryId" is required (Start history id).`);
+  }
+  {
+    const n = Number(config.maxResults);
+    const given = config.maxResults !== void 0 && config.maxResults !== null && config.maxResults !== "";
+    if (given && !(Number.isInteger(n) && n >= 1 && n <= 500)) {
+      throw new Error(
+        `history_list: "maxResults" must be a integer, got ${JSON.stringify(config.maxResults)}.`
+      );
+    }
+  }
+  return callConnector(GMAIL_INBOX, {
+    operation: HISTORY_LIST_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "GET",
+      path: `/gmail/v1/users/${encodeURIComponent(String(config.userId))}/history`,
+      query: {
+        "startHistoryId": String(config.startHistoryId),
+        ...config.historyTypes !== void 0 && config.historyTypes !== null && config.historyTypes !== "" ? { "historyTypes": String(config.historyTypes) } : {},
+        ...config.labelId !== void 0 && config.labelId !== null && config.labelId !== "" ? { "labelId": String(config.labelId) } : {},
+        "maxResults": config.maxResults !== void 0 && config.maxResults !== null && config.maxResults !== "" ? Math.trunc(Number(config.maxResults)) : 100,
+        ...config.pageToken !== void 0 && config.pageToken !== null && config.pageToken !== "" ? { "pageToken": String(config.pageToken) } : {}
+      }
+    }
+  });
+}
+var LABEL_LIST_OPERATION = "label_list";
+async function gmailInboxLabelList(options) {
+  const config = options.config ?? {};
+  if (config.userId === void 0 || config.userId === null || config.userId === "") {
+    throw new Error(`label_list: "userId" is required (Mailbox).`);
+  }
+  return callConnector(GMAIL_INBOX, {
+    operation: LABEL_LIST_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "GET",
+      path: `/gmail/v1/users/${encodeURIComponent(String(config.userId))}/labels`,
+      query: {}
+    }
+  });
+}
+var MAILBOX_STOP_OPERATION = "mailbox_stop";
+async function gmailInboxMailboxStop(options) {
+  const config = options.config ?? {};
+  if (config.userId === void 0 || config.userId === null || config.userId === "") {
+    throw new Error(`mailbox_stop: "userId" is required (Mailbox).`);
+  }
+  return callConnector(GMAIL_INBOX, {
+    operation: MAILBOX_STOP_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "POST",
+      path: `/gmail/v1/users/${encodeURIComponent(String(config.userId))}/stop`,
+      json: {}
+    }
+  });
+}
+var MAILBOX_WATCH_OPERATION = "mailbox_watch";
+async function gmailInboxMailboxWatch(options) {
+  const config = options.config ?? {};
+  if (config.userId === void 0 || config.userId === null || config.userId === "") {
+    throw new Error(`mailbox_watch: "userId" is required (Mailbox).`);
+  }
+  if (config.topicName === void 0 || config.topicName === null || config.topicName === "") {
+    throw new Error(`mailbox_watch: "topicName" is required (Pub/Sub topic).`);
+  }
+  return callConnector(GMAIL_INBOX, {
+    operation: MAILBOX_WATCH_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "POST",
+      path: `/gmail/v1/users/${encodeURIComponent(String(config.userId))}/watch`,
+      json: {
+        "topicName": String(config.topicName).trim(),
+        ...config.labelIds !== void 0 && config.labelIds !== null && config.labelIds !== "" ? { "labelIds": labelidsList(config.labelIds) } : {},
+        ...config.labelFilterBehavior !== void 0 && config.labelFilterBehavior !== null && config.labelFilterBehavior !== "" ? { "labelFilterBehavior": String(config.labelFilterBehavior) } : {}
+      }
+    }
+  });
+}
+function labelidsList(value) {
+  const items = Array.isArray(value) ? value.map(String) : typeof value === "string" ? value.split(",") : [];
+  return items.map((item) => item.trim()).filter(Boolean);
+}
+var MESSAGE_GET_OPERATION = "message_get";
+async function gmailInboxMessageGet(options) {
+  const config = options.config ?? {};
+  if (config.userId === void 0 || config.userId === null || config.userId === "") {
+    throw new Error(`message_get: "userId" is required (Mailbox).`);
+  }
+  if (config.id === void 0 || config.id === null || config.id === "") {
+    throw new Error(`message_get: "id" is required (Message ID).`);
+  }
+  return callConnector(GMAIL_INBOX, {
+    operation: MESSAGE_GET_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "GET",
+      path: `/gmail/v1/users/${encodeURIComponent(String(config.userId))}/messages/${encodeURIComponent(String(config.id))}`,
+      query: {
+        "format": "full"
+      }
+    }
+  });
+}
+var MESSAGE_LIST_OPERATION = "message_list";
+async function gmailInboxMessageList(options) {
+  const config = options.config ?? {};
+  if (config.userId === void 0 || config.userId === null || config.userId === "") {
+    throw new Error(`message_list: "userId" is required (Mailbox).`);
+  }
+  {
+    const n = Number(config.maxResults);
+    const given = config.maxResults !== void 0 && config.maxResults !== null && config.maxResults !== "";
+    if (given && !(Number.isInteger(n) && n >= 1 && n <= 500)) {
+      throw new Error(
+        `message_list: "maxResults" must be a integer, got ${JSON.stringify(config.maxResults)}.`
+      );
+    }
+  }
+  return callConnector(GMAIL_INBOX, {
+    operation: MESSAGE_LIST_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "GET",
+      path: `/gmail/v1/users/${encodeURIComponent(String(config.userId))}/messages`,
+      query: {
+        ...config.q !== void 0 && config.q !== null && config.q !== "" ? { "q": String(config.q) } : {},
+        ...config.labelId !== void 0 && config.labelId !== null && config.labelId !== "" ? { "labelIds": String(config.labelId) } : {},
+        ...config.includeSpamTrash !== void 0 && config.includeSpamTrash !== null && config.includeSpamTrash !== "" ? { "includeSpamTrash": Boolean(config.includeSpamTrash) } : {},
+        "maxResults": config.maxResults !== void 0 && config.maxResults !== null && config.maxResults !== "" ? Math.trunc(Number(config.maxResults)) : 100,
+        ...config.pageToken !== void 0 && config.pageToken !== null && config.pageToken !== "" ? { "pageToken": String(config.pageToken) } : {}
+      }
+    }
+  });
+}
+var THREAD_GET_OPERATION = "thread_get";
+async function gmailInboxThreadGet(options) {
+  const config = options.config ?? {};
+  if (config.userId === void 0 || config.userId === null || config.userId === "") {
+    throw new Error(`thread_get: "userId" is required (Mailbox).`);
+  }
+  if (config.id === void 0 || config.id === null || config.id === "") {
+    throw new Error(`thread_get: "id" is required (Thread ID).`);
+  }
+  return callConnector(GMAIL_INBOX, {
+    operation: THREAD_GET_OPERATION,
+    config,
+    input: options.input,
+    ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+    ...options.mode === void 0 ? {} : { mode: options.mode },
+    ...options.connectionId === void 0 ? {} : { connectionId: options.connectionId },
+    ...options.attempts === void 0 ? {} : { attempts: options.attempts },
+    ...options.transport === void 0 ? {} : { transport: options.transport },
+    request: {
+      method: "GET",
+      path: `/gmail/v1/users/${encodeURIComponent(String(config.userId))}/threads/${encodeURIComponent(String(config.id))}`,
+      query: {
+        "format": "full"
+      }
+    }
+  });
+}
+var GMAIL_INBOX_MESSAGE_RECEIVED_OIDC_SCHEME = {
+  kind: "oidc-jwt",
+  header: "Authorization",
+  issuers: ["https://accounts.google.com", "accounts.google.com"],
+  principalClaim: "email",
+  verifiedClaim: "email_verified"
+};
+var GMAIL_INBOX_MESSAGE_RECEIVED_LEASE = {
+  expiresAtFrom: "expiration",
+  expiresAtUnit: "epoch-ms",
+  renewBeforeSeconds: 86400,
+  renewOperation: "mailbox_watch"
+};
+var GMAIL_INBOX_MESSAGE_RECEIVED_SUBSCRIPTION = { create: "mailbox_watch", renew: "mailbox_watch", stop: "mailbox_stop" };
+var GMAIL_INBOX_MESSAGE_RECEIVED_DECODE = {
+  kind: "pubsub-push"
+};
+var GMAIL_INBOX_MESSAGE_RECEIVED = {
+  service: "gmail_inbox",
+  operation: "message_received",
+  delivery: "subscription",
+  setup: "In YOUR app's Google Cloud project (the one owning the OAuth client): create a Pub/Sub topic, grant publish on it to gmail-api-push@system.gserviceaccount.com, and create a PUSH subscription to the route your host mounts for this trigger, with authentication on (a service account you choose; the endpoint URL as the audience). Put that audience and service account on the connection as pushAudience and pushServiceAccount, and fetch Google's signing keys for verification. Then call mailbox_watch with the topic for each mailbox and store its historyId as the trigger's cursor (startHistoryId); renew the watch daily. ONE topic serves every mailbox: route each push by its emailAddress, and only after the token verifies, to a mailbox you watched; drop an unmapped address with a 2xx. Persist cursor.next when a run succeeds. On cursor-expired or cursor-overflow, watch again for a fresh historyId FIRST, then list with message_list using the resyncQuery, and match it against the mail you already handled. This trigger never changes read state.",
+  subscriptionTtl: 604800,
+  lease: GMAIL_INBOX_MESSAGE_RECEIVED_LEASE,
+  verification: {
+    scheme: GMAIL_INBOX_MESSAGE_RECEIVED_OIDC_SCHEME
+  },
+  decode: GMAIL_INBOX_MESSAGE_RECEIVED_DECODE,
+  route: { by: "emailAddress", path: "data.emailAddress" },
+  faker: gmailInboxFaker
+};
+var GMAIL_INBOX_MESSAGE_RECEIVED_CURSOR = {
+  param: "startHistoryId",
+  advanceFrom: "historyId",
+  page: { param: "pageToken", from: "nextPageToken", collect: "history", maxPages: 20 },
+  expiredStatus: 404
+};
+async function readGmailInboxMessageReceivedAfter(event, config, options = {}) {
+  const stored = config.startHistoryId ?? (config.mode === "fake" ? "1" : void 0);
+  const read = await readWithCursor(
+    GMAIL_INBOX_MESSAGE_RECEIVED_CURSOR,
+    stored,
+    async (params) => {
+      const result = await gmailInboxHistoryList({
+        config: {
+          userId: "me",
+          maxResults: 100,
+          ...config.connection === void 0 || config.connection === null ? {} : { connection: config.connection },
+          ...config.mode === void 0 || config.mode === null ? {} : { mode: config.mode },
+          labelId: config.labelId ?? "INBOX",
+          historyTypes: config.historyTypes ?? "messageAdded",
+          ...params
+        },
+        input: event,
+        ...options.credentials === void 0 ? {} : { credentials: options.credentials },
+        ...options.transport === void 0 ? {} : { transport: options.transport }
+      });
+      return result.data;
+    },
+    { resyncQuery: `newer_than:${String(config.resyncWindowDays ?? 7)}d` }
+  );
+  return {
+    ...event !== null && typeof event === "object" ? event : {},
+    history: read.data,
+    cursor: read.cursor
+  };
+}
+function verifyGmailInboxDelivery(delivery, expected, now) {
+  return verifyDelivery(GMAIL_INBOX_MESSAGE_RECEIVED, delivery, void 0, now, {
+    keys: expected.keys,
+    audience: expected.pushAudience ?? null,
+    principal: expected.pushServiceAccount ?? null
+  });
+}
+function decodeGmailInboxDelivery(raw) {
+  return decodeDelivery(GMAIL_INBOX_MESSAGE_RECEIVED_DECODE, raw);
+}
+
+export { CONNECTOR_API_VERSION, GMAIL_INBOX, GMAIL_INBOX_BASE_URLS, GMAIL_INBOX_MESSAGE_RECEIVED, GMAIL_INBOX_MESSAGE_RECEIVED_CURSOR, GMAIL_INBOX_MESSAGE_RECEIVED_DECODE, GMAIL_INBOX_MESSAGE_RECEIVED_LEASE, GMAIL_INBOX_MESSAGE_RECEIVED_OIDC_SCHEME, GMAIL_INBOX_MESSAGE_RECEIVED_SUBSCRIPTION, GMAIL_INBOX_REQUIRES, HISTORY_LIST_OPERATION, LABEL_LIST_OPERATION, MAILBOX_STOP_OPERATION, MAILBOX_WATCH_OPERATION, MESSAGE_GET_OPERATION, MESSAGE_LIST_OPERATION, THREAD_GET_OPERATION, decodeGmailInboxDelivery, gmailInboxAuthorize, gmailInboxFaker, gmailInboxHistoryList, gmailInboxLabelList, gmailInboxMailboxStop, gmailInboxMailboxWatch, gmailInboxMessageGet, gmailInboxMessageList, gmailInboxThreadGet, readGmailInboxMessageReceivedAfter, verifyGmailInboxDelivery };
+//# sourceMappingURL=chunk-2PSRTESV.js.map
+//# sourceMappingURL=chunk-2PSRTESV.js.map