@sentry/junior-google 0.238.0 → 0.239.0

package/README.md

@@ -8,18 +8,36 @@ This version supports Calendar only. Drive and Gmail are out of scope.
 
 ## Surfaces
 
-- `findMeetingTimes` finds times when every attendee is free. It reads
-  free/busy data only. It never reads event titles or details.
+- `findMeetingTimes` finds times when every required attendee is free and
+  inside working hours (09:00 to 17:00 by default) in the time zone of their
+  own calendar. It reads free/busy data and calendar time zones only. It never
+  reads event titles or details. Optional attendees do not block a slot.
+  Slots where they are free come first, and each slot names the optional
+  attendees who are busy or off hours. Slots are spread across days and
+  across each day, so the requester gets a real choice.
 - `createCalendarEvent` creates an event on Junior's own calendar. It sends
-  invites and can add a Google Meet link. A retry of the same tool call returns
-  the same event. It does not create a second invite.
-- `listCalendarEvents` reads the events on one colleague's calendar. It shows
-  only what the calendar's Google sharing settings let Junior's account see.
-  A calendar shared as free/busy only shows busy blocks without titles. It
-  never returns event descriptions.
-- `updateCalendarEvent` changes the title, description, time, or attendees of
-  an event that Junior organizes. Google emails the attendees about the
-  change. Only people invited to the event can ask for a change.
+  invites and can add a Google Meet link, a location, optional attendees, and
+  a simple repeat rule (weekdays, weekly, or monthly). A retry of the same
+  tool call returns the same event. It does not create a second invite.
+- `listCalendarEvents` reads the events on one colleague's calendar, or on
+  Junior's own calendar when no calendar is given. It shows only what the
+  calendar's Google sharing settings let Junior's account see. A calendar
+  shared as free/busy only shows busy blocks without titles. It never returns
+  event descriptions. Each event says whether Junior organizes it, and gives
+  attendee responses and the series id of a repeating event.
+- `updateCalendarEvent` and `cancelCalendarEvent` accept an event id or a
+  Google Calendar event link.
+- `updateCalendarEvent` changes the title, description, time, location, video
+  call, or attendees of an event that Junior organizes. Google emails the
+  attendees about the change. Only people invited to the event can ask for a
+  change.
+- `cancelCalendarEvent` deletes an event that Junior organizes. Google removes
+  it from every attendee's calendar and emails them a cancellation. Only
+  people invited to the event can ask to cancel it.
+- `createCalendarEvent` and `updateCalendarEvent` save a Calendar event
+  annotation on the Conversation. Junior shows its card with the next reply.
+  The card shows the title, time, and attendees, and links to the event. A
+  change to an event replaces its card.
 - The **Google account** page on the dashboard Admin page shows whether the
   account is connected. Its Connect button starts Google sign-in.
 - `junior google connect` and `junior google status` are the operator CLI.
@@ -56,18 +74,24 @@ admin to reconnect.
 - Junior checks and invites only people in the allowed domains. By default,
   the allowed domain is the domain of the account email.
 - Junior adds the requester to the attendees when it knows their email.
-- Junior changes only events that it organizes, and only for a requester who
-  is invited to the event.
+- Junior changes or cancels only events that it organizes, and only for a
+  requester who is invited to the event. The `calendar.events.owned` scope
+  also keeps events that other people organize out of reach.
 - Calendar scopes are `calendar.events.freebusy`, `calendar.events.readonly`,
   and `calendar.events.owned`. Junior also requests `openid email` to verify
   the account during sign-in.
 
 ## Setup
 
-1. In a Google Cloud project that the company owns, enable the Google Calendar
-   API.
-2. Configure the OAuth consent screen with user type **Internal**.
-3. Create an OAuth client of type **Web application**. Add these redirect URIs:
+The plugin uses the same Google OAuth client as dashboard sign-in. Each
+sign-in requests only its own scopes, so dashboard sign-in still asks only for
+identity.
+
+1. In the Google Cloud project of the dashboard OAuth client, enable the
+   Google Calendar API.
+2. On the OAuth consent screen, use user type **Internal** and add the
+   Calendar scopes above.
+3. On the OAuth client, add these redirect URIs:
    - `https://<junior host>/api/plugins/google/oauth/callback`
    - `http://127.0.0.1:8765/oauth/callback`, for the CLI. Use another port with
      `junior google connect --port`.
@@ -76,8 +100,8 @@ admin to reconnect.
 
 | Variable                           | Purpose                                         |
 | ---------------------------------- | ----------------------------------------------- |
-| `GOOGLE_WORKSPACE_CLIENT_ID`       | OAuth client id                                 |
-| `GOOGLE_WORKSPACE_CLIENT_SECRET`   | OAuth client secret                             |
+| `GOOGLE_CLIENT_ID`                 | OAuth client id, shared with dashboard sign-in  |
+| `GOOGLE_CLIENT_SECRET`             | OAuth client secret                             |
 | `GOOGLE_WORKSPACE_ACCOUNT_EMAIL`   | The account Junior acts as                      |
 | `GOOGLE_WORKSPACE_ALLOWED_DOMAINS` | Optional comma-separated domains to schedule in |
 
@@ -99,5 +123,11 @@ variables are set. The Admin page shows **Not configured** until then.
 - Anyone who can talk to Junior can ask it to read a colleague's calendar.
   Junior returns what its own account can see, so set the sharing default
   with that in mind.
+- Google does not expose the working hours that people set in Calendar.
+  Junior uses each calendar's time zone and one shared workday instead.
+- Junior cannot find or book meeting rooms. Room discovery needs the Admin
+  SDK `admin.directory.resource.calendar.readonly` scope and a Workspace
+  admin role on Junior's account. Room emails are also outside the allowed
+  domains. It cannot accept or decline invites for other people.
 - No disconnect command. To revoke access, remove the app grant from the
   Junior account in Google.

package/dist/config.d.ts

@@ -3,8 +3,9 @@
  *
  * Values come from host environment variables. They never reach the sandbox.
  */
-export declare const GOOGLE_CLIENT_ID_ENV = "GOOGLE_WORKSPACE_CLIENT_ID";
-export declare const GOOGLE_CLIENT_SECRET_ENV = "GOOGLE_WORKSPACE_CLIENT_SECRET";
+/** Dashboard sign-in uses the same OAuth client. */
+export declare const GOOGLE_CLIENT_ID_ENV = "GOOGLE_CLIENT_ID";
+export declare const GOOGLE_CLIENT_SECRET_ENV = "GOOGLE_CLIENT_SECRET";
 export declare const GOOGLE_ACCOUNT_EMAIL_ENV = "GOOGLE_WORKSPACE_ACCOUNT_EMAIL";
 export declare const GOOGLE_ALLOWED_DOMAINS_ENV = "GOOGLE_WORKSPACE_ALLOWED_DOMAINS";
 /**

package/dist/credentials.d.ts

@@ -14,6 +14,11 @@ export declare const GOOGLE_OPERATIONS: {
         readonly method: "POST";
         readonly path: RegExp;
     };
+    readonly "google.calendar.event.delete": {
+        readonly access: "write";
+        readonly method: "DELETE";
+        readonly path: RegExp;
+    };
     readonly "google.calendar.event.get": {
         readonly access: "read";
         readonly method: "GET";