@symerian/symi 2.7.8 → 2.7.10

package/docs/connections/email.md

@@ -0,0 +1,143 @@
+# Email
+
+Symi connects to email through two integrations. Pick based on which account you have and what you want to do with it.
+
+| Integration     | Best for                                                                                  | Setup effort                               |
+| --------------- | ----------------------------------------------------------------------------------------- | ------------------------------------------ |
+| **Outlook 365** | Microsoft 365 work/school accounts, `outlook.com`, `hotmail.com`, `live.com`              | Two minutes — one chat command             |
+| **Gmail**       | Google Workspace, personal Gmail, and you want incoming mail to auto-create Symi sessions | 15–30 minutes — Google Cloud Pub/Sub setup |
+
+## Outlook 365
+
+Ships bundled and auto-enabled. To connect:
+
+1. Open any chat surface (Glass UI, Telegram, WhatsApp, etc.).
+2. Type `/outlook login`.
+3. Symi replies with a device-code URL and an 8-character code.
+4. Open the URL in a browser, sign in with your Microsoft account, paste the code, approve access.
+5. Credentials are stored at `~/.symi/credentials/outlook.json` (mode 0600) and the tools below are live immediately.
+
+### Tools the agent gains
+
+- `outlook_list` — list messages in a folder (`inbox`, `sentitems`, `drafts`, `archive`, `junkemail`). Optional unread filter.
+- `outlook_read` — fetch the full body of a message by id (auto-marks read).
+- `outlook_send` — new message with To, CC, subject, body.
+- `outlook_reply` — reply or reply-all to an existing message id.
+- `outlook_search` — keyword search across subject, body, sender.
+- `outlook_folders` — list folders with unread and total counts.
+- `outlook_move` — move a message to another folder.
+
+### Commands
+
+- `/outlook login` — connect (device-code flow).
+- `/outlook status` — show current account, token state, last update timestamp.
+- `/outlook logout` — disconnect and delete stored credentials.
+
+### Limitations
+
+- Plain-text body only. No HTML formatting, no attachments.
+- **Pull-only.** Outlook does not create Symi sessions for incoming mail. You have to ask Symi ("any new mail?") and it calls `outlook_list` / `outlook_search`. If you want inbound-triggered sessions, use Gmail instead.
+- No automatic retry on transient Graph 5xx errors — re-running a tool usually succeeds.
+
+## Gmail
+
+Gmail inbound uses Google Cloud Pub/Sub so new email triggers a webhook into Symi and creates a `hook:gmail:<id>` session.
+
+### Prerequisites
+
+- Access to a **Google Cloud project** — free at [console.cloud.google.com](https://console.cloud.google.com).
+- `gcloud` CLI installed.
+  - macOS: `brew install --cask google-cloud-sdk`
+  - Linux: see [Google's install guide](https://cloud.google.com/sdk/docs/install).
+- OAuth credentials for the Gmail API, managed via `gogcli`. See the `gog` skill for setup.
+- Symi's webhook endpoint reachable by Google's push service — either a publicly reachable host or a Tailscale serve/funnel.
+
+### Setup
+
+1. **Authenticate gcloud**
+
+   ```bash
+   gcloud auth login
+   gcloud config set project <project-id>
+   ```
+
+2. **Set up gogcli OAuth**
+
+   ```bash
+   gog auth credentials /path/to/client_secret.json
+   gog auth add <your-email> --services gmail
+   ```
+
+3. **Create the Pub/Sub topic**
+
+   ```bash
+   gcloud pubsub topics create symi-gmail
+   ```
+
+4. **Grant Gmail permission to publish to the topic**
+
+   ```bash
+   gcloud pubsub topics add-iam-policy-binding symi-gmail \
+     --member=serviceAccount:gmail-api-push@system.gserviceaccount.com \
+     --role=roles/pubsub.publisher
+   ```
+
+5. **Create the push subscription** (points at Symi's webhook)
+
+   ```bash
+   gcloud pubsub subscriptions create symi-gmail-sub \
+     --topic=symi-gmail \
+     --push-endpoint=<SYMI_WEBHOOK_URL>/gmail-pubsub
+   ```
+
+6. **Register the Gmail watch** on the inbox label. The helpers in `src/hooks/gmail-setup-utils.ts` can do this from the gateway, or call the Gmail API's `users.watch` method directly with `curl`.
+
+7. **Add `hooks.gmail` to `~/.symi/symi.json`**:
+
+   ```json
+   {
+     "hooks": {
+       "gmail": {
+         "account": "user@example.com",
+         "label": "INBOX",
+         "topic": "projects/<project-id>/topics/symi-gmail",
+         "subscription": "projects/<project-id>/subscriptions/symi-gmail-sub",
+         "pushToken": "<random-shared-secret>",
+         "hookUrl": "http://127.0.0.1:8788/gmail-pubsub",
+         "includeBody": true,
+         "maxBytes": 20480,
+         "renewEveryMinutes": 720,
+         "serve": { "bind": "127.0.0.1", "port": 8788, "path": "/gmail-pubsub" },
+         "tailscale": { "mode": "off" }
+       }
+     }
+   }
+   ```
+
+8. **Restart the gateway** to pick up the new hook config. `hooks.gmail` is not hot-reloaded.
+
+9. **Verify** — send a test email. Google publishes to the topic → Pub/Sub pushes to Symi's endpoint → a `hook:gmail:<id>` session appears in the Glass UI feed.
+
+### Config field reference
+
+- `account` — the Gmail address being watched.
+- `label` — Gmail label/folder to watch. Default `INBOX`.
+- `topic` / `subscription` — fully-qualified Pub/Sub resource names.
+- `pushToken` — shared secret Symi verifies on incoming push requests.
+- `hookUrl` — URL the push subscription posts to. Must match `serve.bind` + `serve.port` + `serve.path` (or a Tailscale serve/funnel exposing them).
+- `includeBody` — include the email body in the prompt. `maxBytes` truncates oversized emails.
+- `renewEveryMinutes` — Gmail `watch` expires after ~7 days. Default 720 (12 hours) re-registers well ahead.
+- `tailscale.mode` — `"off"` if Symi is publicly reachable, `"serve"` for a private tailnet webhook, `"funnel"` for a Tailscale-exposed public endpoint.
+- `allowUnsafeExternalContent` — leave unset. Setting `true` disables the external-content safety wrapper on email content.
+
+### Limitations
+
+- Inbound only works while the Gmail watch is live. If `renewEveryMinutes` lapses, the Pub/Sub subscription fails, or the IAM binding is removed, mail stops arriving.
+- Outgoing mail goes through the reply path of whichever session handles the inbound — there is no native Gmail send tool. For outgoing from scratch, Outlook is simpler.
+- Very large messages are truncated at `maxBytes` so the prompt stays usable.
+
+## Which one should you pick?
+
+- **Send and read on demand from a Microsoft account** — Outlook.
+- **Incoming mail auto-creates sessions** — Gmail (only option today).
+- **You want both send and auto-receive in Outlook** — not available yet; push for Outlook is not implemented.

package/docs/connections/msteams.md

@@ -0,0 +1,80 @@
+# Microsoft Teams
+
+Symi connects to Microsoft Teams via the **Bot Framework** — you register a bot in Azure, configure a messaging endpoint, and the Symi gateway receives activities over HTTPS.
+
+## Prerequisites
+
+- An Azure account with permission to create an Azure Bot resource (free tier works for development).
+- An Entra ID (Azure AD) tenant. Can be your work tenant or a personal "Microsoft 365 Developer Program" tenant.
+- A publicly reachable HTTPS endpoint for Symi. During development you can use a Tailscale funnel or ngrok; for production, any TLS-terminated host works.
+- Teams admin approval to sideload or publish the bot in your org (the sideload path is simplest for personal/dev use).
+
+## Setup
+
+1. **Create the Azure Bot**
+   In the Azure Portal: _Create a resource_ → search _Azure Bot_ → Create. Choose:
+   - Bot handle (e.g., `symi-bot`)
+   - Subscription + resource group
+   - Pricing tier (F0 Free is fine)
+   - Microsoft App ID type: _Multi Tenant_ (easiest) or _Single Tenant_
+   - Creation type: _Create new Microsoft App ID_
+
+2. **Grab credentials**
+   After creation → _Configuration_ tab. Note:
+   - _Microsoft App ID_ (`appId`)
+   - _Tenant ID_ (`tenantId`) — shown if Single Tenant
+     _Manage Password_ → generate a client secret. Copy the secret value **immediately** — Azure only shows it once. That's your `appPassword`.
+
+3. **Set the messaging endpoint**
+   Same _Configuration_ tab → _Messaging endpoint_ → enter `https://<your-symi-host>/msteams/messages`. Save.
+
+4. **Enable the Teams channel**
+   Left sidebar → _Channels_ → _Microsoft Teams_ → _Apply_. Accept the terms.
+
+5. **Add to `~/.symi/symi.json`**
+
+   ```json
+   {
+     "channels": {
+       "msteams": {
+         "appId": "...",
+         "appPassword": "...",
+         "tenantId": "..."
+       }
+     }
+   }
+   ```
+
+   Omit `tenantId` if the bot is multi-tenant.
+
+6. **Restart the gateway** to load the new config.
+
+## Install the bot in Teams
+
+Azure's bot registration isn't automatically visible inside Teams — you need an app package.
+
+1. Go to [Teams Developer Portal](https://dev.teams.microsoft.com/) → _Apps_ → _New app_.
+2. Under _Basic information_ fill in the app name, descriptions, etc.
+3. Under _App features_ → _Bot_ → select _Enter a bot ID_ and paste your `appId` from step 2.
+4. Scope: _Personal_, _Team_, and/or _Group Chat_ depending on where you want to use it.
+5. _Preview in Teams_ → install to yourself or your team.
+
+For organization-wide rollout, submit the app via the Teams admin center's custom app catalog.
+
+## Pairing
+
+Like Slack, Teams DMs default to pairing mode — first-time users receive a pairing prompt so unauthorized people can't invoke the agent. Configure in `channels.msteams.pairing` (see full channel docs).
+
+## Troubleshooting
+
+- **Bot responds in Azure test but not in Teams** — Teams channel is not enabled yet (step 4), or the app package wasn't installed to Teams (above).
+- **401 Unauthorized on incoming activities** — `appId` / `appPassword` mismatch, or `tenantId` set but the bot is actually multi-tenant (remove it).
+- **Bot installed but silent** — check that the messaging endpoint is publicly reachable over HTTPS. Azure must be able to POST to it. Test with `curl -X POST https://<your-host>/msteams/messages` — you should see a 401 or 400 from Symi (meaning the route exists), not a connection failure.
+- **Secret expired** — client secrets in Entra ID expire (default 2 years). Generate a new one in _Manage Password_ and update `appPassword`.
+
+## Limitations
+
+- Adaptive Cards beyond simple text are experimental.
+- File attachments and inline images are not fully supported in all flows.
+- Meeting and call actions (join, transcribe, etc.) are out of scope — Teams voice is handled separately.
+- Each bot is tied to a specific Azure tenant's App ID — you can't share one bot registration across disconnected tenants without using multi-tenant mode.

package/docs/connections/slack.md

@@ -0,0 +1,91 @@
+# Slack
+
+Symi connects to Slack through a Slack App you create in your workspace. Default mode is **Socket Mode** (no public webhook required); HTTP Events API mode is also supported.
+
+## Prerequisites
+
+- A Slack workspace where you can create and install an app. Workspace admin approval may be required depending on org policy.
+- The Symi gateway running locally or on a reachable host. Socket Mode does not require the gateway to be publicly reachable.
+
+## Socket Mode setup (recommended)
+
+1. **Create the Slack app**
+   Go to [api.slack.com/apps](https://api.slack.com/apps) → _Create New App_ → _From scratch_. Name it (e.g., "Symi"), pick your workspace.
+
+2. **Enable Socket Mode**
+   Left sidebar → _Socket Mode_ → toggle on. Generate an app-level token with the `connections:write` scope — this is your `appToken` (starts with `xapp-`).
+
+3. **Add bot scopes**
+   Left sidebar → _OAuth & Permissions_ → _Bot Token Scopes_. Add at minimum:
+   - `chat:write` — send messages
+   - `im:history` — read DMs
+   - `im:read` — list DMs
+   - `users:read` — look up user info
+   - `app_mentions:read` — respond to @mentions in channels
+   - `channels:history` — read channel messages (for channel integrations)
+
+4. **Subscribe to events**
+   Left sidebar → _Event Subscriptions_ → toggle on. Under _Subscribe to bot events_ add:
+   - `message.im` — direct messages
+   - `app_mention` — @mentions in channels
+   - `message.channels` (optional) — messages in public channels the bot is in
+
+5. **Install to workspace**
+   Left sidebar → _Install App_ → _Install to Workspace_. Approve the scopes. Copy the bot token that appears (starts with `xoxb-`) — this is your `botToken`.
+
+6. **Add to `~/.symi/symi.json`**
+
+   ```json
+   {
+     "channels": {
+       "slack": {
+         "botToken": "xoxb-...",
+         "appToken": "xapp-...",
+         "mode": "socket"
+       }
+     }
+   }
+   ```
+
+7. **Restart the gateway** to pick up the config. You should see `channel=slack socket connected` in the logs.
+
+## HTTP Events API mode
+
+Use this when your Symi host is publicly reachable (or via a Tailscale funnel) and you'd rather not hold a WebSocket open.
+
+1. Complete steps 1, 3, and 4 above.
+2. _Event Subscriptions_ → _Request URL_ → enter `https://<your-symi-host>/slack/events`. Slack will verify.
+3. `~/.symi/symi.json`:
+   ```json
+   {
+     "channels": {
+       "slack": {
+         "botToken": "xoxb-...",
+         "signingSecret": "<from-Basic-Information>",
+         "mode": "http"
+       }
+     }
+   }
+   ```
+4. Restart the gateway.
+
+## Pairing (DMs)
+
+By default, Slack DMs require pairing. The first time a user DMs the bot, they'll receive a pairing code prompt. This prevents unauthorized users from invoking your agent. Configure pairing behaviour in `channels.slack.pairing` (see full channel docs for the exact schema).
+
+## Slash commands
+
+Symi exposes a catalog of slash commands in Slack (`/symi`, `/new`, `/outlook login`, etc.) once the bot is installed. The exact command set depends on which plugins are enabled in your config.
+
+## Troubleshooting
+
+- **"not_in_channel" when sending** — invite the bot to the channel first: `/invite @Symi`.
+- **No events arriving in Socket Mode** — verify `appToken` has `connections:write`, and that the app is installed (not just created).
+- **HTTP 401 on events** — signing secret mismatch. Re-copy from _Basic Information_ → _Signing Secret_.
+- **DMs silently ignored** — check pairing status. New users must complete pairing before DMs flow to the agent.
+
+## Limitations
+
+- File uploads/attachments are not yet fully handled in all flows — text messages are the primary supported shape.
+- Reaction-based commands depend on the workspace's reaction configuration and Slack plan tier.
+- Threaded messages are supported but require the bot to be in the channel where the thread lives.

package/extensions/bluebubbles/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/bluebubbles",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi BlueBubbles channel plugin",
   "type": "module",
   "devDependencies": {

package/extensions/copilot-proxy/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/copilot-proxy",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Copilot Proxy provider plugin",
   "type": "module",

package/extensions/diagnostics-otel/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/diagnostics-otel",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi diagnostics OpenTelemetry exporter",
   "type": "module",
   "dependencies": {

package/extensions/discord/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/discord",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi Discord channel plugin",
   "type": "module",
   "devDependencies": {

package/extensions/feishu/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/feishu",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi Feishu/Lark channel plugin (community maintained by @m1heng)",
   "type": "module",
   "dependencies": {

package/extensions/google-antigravity-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/google-antigravity-auth",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Google Antigravity OAuth provider plugin",
   "type": "module",

package/extensions/google-gemini-cli-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/google-gemini-cli-auth",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Gemini CLI OAuth provider plugin",
   "type": "module",

package/extensions/googlechat/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/googlechat",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Google Chat channel plugin",
   "type": "module",

package/extensions/imessage/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/imessage",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi iMessage channel plugin",
   "type": "module",

package/extensions/irc/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/irc",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi IRC channel plugin",
   "type": "module",
   "devDependencies": {

package/extensions/learning-loop/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/learning-loop",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Closed-loop learning extension with deterministic quality scoring and vector-indexed learning storage",
   "type": "module",

package/extensions/line/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/line",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi LINE channel plugin",
   "type": "module",

package/extensions/llm-task/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/llm-task",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi JSON-only LLM task plugin",
   "type": "module",

package/extensions/matrix/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.7.10
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.7.9
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.7.8
 
 ### Changes

package/extensions/matrix/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/matrix",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi Matrix channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/mattermost/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/mattermost",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Mattermost channel plugin",
   "type": "module",

package/extensions/memory-core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/memory-core",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi core memory search plugin",
   "type": "module",

package/extensions/memory-lancedb/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/memory-lancedb",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi LanceDB-backed long-term memory plugin with auto-recall/capture",
   "type": "module",

package/extensions/minimax-portal-auth/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/minimax-portal-auth",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi MiniMax Portal OAuth provider plugin",
   "type": "module",

package/extensions/msteams/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.7.10
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.7.9
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.7.8
 
 ### Changes

package/extensions/msteams/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/msteams",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi Microsoft Teams channel plugin",
   "type": "module",
   "dependencies": {

package/extensions/nextcloud-talk/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/nextcloud-talk",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi Nextcloud Talk channel plugin",
   "type": "module",
   "devDependencies": {

package/extensions/nostr/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.7.10
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.7.9
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.7.8
 
 ### Changes

package/extensions/nostr/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/nostr",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Symi Nostr channel plugin for NIP-04 encrypted DMs",
   "type": "module",
   "dependencies": {

package/extensions/open-prose/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/open-prose",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "OpenProse VM skill pack plugin (slash command + telemetry).",
   "type": "module",

package/extensions/outlook/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/outlook",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Outlook 365 email integration via Microsoft Graph API",
   "type": "module",

package/extensions/pipeline/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/pipeline",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "description": "Pipeline workflow tool plugin (typed pipelines + resumable approvals)",
   "type": "module",
   "symi": {

package/extensions/signal/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/signal",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Signal channel plugin",
   "type": "module",

package/extensions/slack/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/slack",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Slack channel plugin",
   "type": "module",

package/extensions/telegram/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/telegram",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Telegram channel plugin",
   "type": "module",

package/extensions/tlon/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/tlon",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Tlon/Urbit channel plugin",
   "type": "module",

package/extensions/twitch/CHANGELOG.md

@@ -1,5 +1,17 @@
 # Changelog
 
+## 2.7.10
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
+## 2.7.9
+
+### Changes
+
+- Version alignment with core Symi release numbers.
+
 ## 2.7.8
 
 ### Changes

package/extensions/twitch/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symi/twitch",
-  "version": "2.7.8",
+  "version": "2.7.10",
   "private": true,
   "description": "Symi Twitch channel plugin",
   "type": "module",