crewly 1.20.361 → 1.20.363

package/dist/backend/backend/src/services/google/gmail-reply-watch.service.js

@@ -0,0 +1,304 @@
+/**
+ * Gmail Reply Watch
+ *
+ * Wakes the agent that owns a Gmail thread when a new reply lands
+ * (CREW-257, specs/2026-10-06-gmail-approve-send-and-reply-wake.md §2).
+ *
+ * One `history.list` per connected account per tick
+ * ({@link GOOGLE_WORKSPACE_CONSTANTS.GMAIL_WATCH_POLL_MS}), however many
+ * threads are watched, and only while something is watched. New messages in
+ * watched threads are published as `gmail:reply_received` — ids only; the
+ * message text is outside input and the event never carries it.
+ *
+ * Cursor (`historyId` per account) and fired message ids are persisted
+ * before publishing: a restart never repeats a wake or re-reads old
+ * history. A 404 (cursor too old) re-seeds the cursor and resyncs each
+ * watched thread once. Every watch expires 14 days after its last reply and
+ * goes when its account is no longer connected.
+ *
+ * @module services/google/gmail-reply-watch
+ */
+import { promises as fs } from 'node:fs';
+import path from 'node:path';
+import { GOOGLE_WORKSPACE_CONSTANTS } from '../../constants.js';
+import { atomicWriteJson } from '../../utils/file-io.utils.js';
+import { LoggerService } from '../core/logger.service.js';
+/** Event-bus session name prefix; per thread so the bus never merges two threads. */
+export const GMAIL_EVENT_SESSION_PREFIX = 'gmail:';
+/** Seen ids kept per thread (oldest dropped). */
+const MAX_SEEN_PER_THREAD = 500;
+/**
+ * Whether a message is the owner's own mail or a draft, not a reply.
+ *
+ * @param m - Thread message
+ * @returns True for the owner's own mail
+ */
+export function isOwnMessage(m) {
+    return m.labelIds.includes('SENT') || m.labelIds.includes('DRAFT');
+}
+/**
+ * Watches Gmail threads for replies and publishes an event for each.
+ */
+export class GmailReplyWatchService {
+    deps;
+    logger;
+    state = null;
+    timer = null;
+    polling = false;
+    current = Promise.resolve();
+    running = false;
+    /** Consecutive not-connected ticks per account (memory only) */
+    misses = new Map();
+    constructor(deps) {
+        this.deps = deps;
+        this.logger = LoggerService.getInstance().createComponentLogger('GmailReplyWatch');
+    }
+    now() {
+        return this.deps.now ? this.deps.now() : Date.now();
+    }
+    /** Load persisted watches and arm the timer if there are any. */
+    async start() {
+        this.running = true;
+        await this.load();
+        this.arm();
+    }
+    /** Stop for good (shutdown). */
+    stop() {
+        this.running = false;
+        this.disarm();
+    }
+    /** The timer runs only while at least one thread is watched. */
+    arm() {
+        if (!this.running || this.timer || !this.state || this.state.watches.length === 0)
+            return;
+        this.timer = setInterval(() => void this.poll(), GOOGLE_WORKSPACE_CONSTANTS.GMAIL_WATCH_POLL_MS);
+        this.timer.unref?.();
+    }
+    disarm() {
+        if (this.timer)
+            clearInterval(this.timer);
+        this.timer = null;
+    }
+    /**
+     * Watch a thread for an agent. Existing messages are marked seen; an
+     * account's first watch seeds its cursor from the profile.
+     *
+     * @param threadId - Gmail thread id
+     * @param ownerSession - Agent to wake
+     * @param account - Google account; the default account when omitted
+     * @returns The watch
+     */
+    async watch(threadId, ownerSession, account) {
+        const acct = account?.trim() || (await this.deps.defaultAccount());
+        const st = await this.load();
+        const existing = st.watches.find((w) => w.threadId === threadId && w.account === acct);
+        if (existing) {
+            existing.ownerSession = ownerSession;
+            existing.lastActivityAt = new Date(this.now()).toISOString();
+            await this.save();
+            return existing;
+        }
+        const gmail = this.deps.gmailFor(acct);
+        const messages = await gmail.getThread(threadId);
+        if (!st.cursors[acct])
+            st.cursors[acct] = (await gmail.getProfile()).historyId;
+        const iso = new Date(this.now()).toISOString();
+        const entry = { threadId, ownerSession, account: acct, seen: messages.map((m) => m.id), createdAt: iso, lastActivityAt: iso };
+        st.watches.push(entry);
+        await this.save();
+        this.arm();
+        this.logger.info('Watching Gmail thread', { threadId, ownerSession, account: acct });
+        return entry;
+    }
+    /**
+     * Stop watching a thread.
+     *
+     * @param threadId - Gmail thread id
+     * @param ownerSession - Only the owning agent may remove it
+     * @returns True when a watch was removed
+     */
+    async unwatch(threadId, ownerSession) {
+        const st = await this.load();
+        const before = st.watches.length;
+        st.watches = st.watches.filter((w) => !(w.threadId === threadId && w.ownerSession === ownerSession));
+        if (st.watches.length === before)
+            return false;
+        this.prune(st);
+        await this.save();
+        return true;
+    }
+    /**
+     * The watches, optionally for one agent.
+     *
+     * @param ownerSession - Filter
+     * @returns Watches
+     */
+    async list(ownerSession) {
+        const st = await this.load();
+        return ownerSession ? st.watches.filter((w) => w.ownerSession === ownerSession) : [...st.watches];
+    }
+    /**
+     * One tick: expire old watches, then one `history.list` per account that
+     * has watches; publish an event per new reply.
+     *
+     * @returns Number of events published
+     */
+    poll() {
+        const p = this.doPoll();
+        this.current = p;
+        return p;
+    }
+    /**
+     * Resolves when the tick in progress (if any) has finished.
+     *
+     * @returns Nothing
+     */
+    async whenIdle() {
+        await this.current;
+    }
+    async doPoll() {
+        if (this.polling)
+            return 0;
+        this.polling = true;
+        let fired = 0;
+        try {
+            const st = await this.load();
+            await this.expire(st);
+            for (const account of [...new Set(st.watches.map((w) => w.account))]) {
+                if (!(await this.accountStillConnected(account, st)))
+                    continue;
+                try {
+                    fired += await this.pollAccount(account, st);
+                }
+                catch (err) {
+                    this.logger.warn('Gmail reply poll failed', { account, error: err instanceof Error ? err.message : String(err) });
+                }
+            }
+            this.prune(st);
+            if (st.watches.length === 0)
+                this.disarm();
+        }
+        finally {
+            this.polling = false;
+        }
+        return fired;
+    }
+    async pollAccount(account, st) {
+        const gmail = this.deps.gmailFor(account);
+        const mine = st.watches.filter((w) => w.account === account);
+        const cursor = st.cursors[account];
+        const fresh = new Map();
+        let nextCursor;
+        try {
+            if (!cursor)
+                throw Object.assign(new Error('no cursor'), { status: 404 });
+            const { historyId, added } = await gmail.listHistoryAdded(cursor);
+            nextCursor = historyId;
+            const watched = new Set(mine.map((w) => w.threadId));
+            for (const a of added) {
+                if (!watched.has(a.threadId) || mine.some((w) => w.threadId === a.threadId && w.seen.includes(a.id)) || fresh.has(a.id))
+                    continue;
+                const meta = await gmail.getMessageMeta(a.id);
+                fresh.set(a.id, { ...meta, threadId: a.threadId });
+            }
+        }
+        catch (err) {
+            if (err.status !== 404)
+                throw err;
+            // Cursor missing or too old: re-seed it, then look at each watched thread once.
+            this.logger.warn('Gmail history cursor expired — resyncing watched threads', { account });
+            nextCursor = (await gmail.getProfile()).historyId;
+            for (const w of mine) {
+                for (const m of await gmail.getThread(w.threadId)) {
+                    if (!w.seen.includes(m.id) && !fresh.has(m.id))
+                        fresh.set(m.id, { ...m, threadId: w.threadId });
+                }
+            }
+        }
+        // Persist cursor + fired ids BEFORE publishing (at-most-once).
+        const toFire = [];
+        for (const m of fresh.values()) {
+            const w = mine.find((x) => x.threadId === m.threadId);
+            if (!w)
+                continue;
+            w.seen = [...w.seen, m.id].slice(-MAX_SEEN_PER_THREAD);
+            if (!isOwnMessage(m)) {
+                w.lastActivityAt = new Date(this.now()).toISOString();
+                toFire.push({ w, m });
+            }
+        }
+        st.cursors[account] = nextCursor;
+        await this.save();
+        for (const { w, m } of toFire)
+            this.deps.publish(this.eventFor(w, m));
+        return toFire.length;
+    }
+    /** Drop watches idle for longer than the expiry. */
+    async expire(st) {
+        const limit = this.now() - GOOGLE_WORKSPACE_CONSTANTS.GMAIL_WATCH_EXPIRY_MS;
+        const keep = st.watches.filter((w) => Date.parse(w.lastActivityAt) > limit);
+        if (keep.length === st.watches.length)
+            return;
+        this.logger.info('Gmail thread watches expired', { removed: st.watches.length - keep.length });
+        st.watches = keep;
+        this.prune(st);
+        await this.save();
+    }
+    /** An account that stays disconnected loses its watches (after a few ticks, not one blip). */
+    async accountStillConnected(account, st) {
+        if (await this.deps.accountConnected(account)) {
+            this.misses.delete(account);
+            return true;
+        }
+        const n = (this.misses.get(account) ?? 0) + 1;
+        this.misses.set(account, n);
+        if (n >= GOOGLE_WORKSPACE_CONSTANTS.GMAIL_WATCH_DISCONNECT_MISSES) {
+            st.watches = st.watches.filter((w) => w.account !== account);
+            delete st.cursors[account];
+            this.misses.delete(account);
+            this.logger.info('Account disconnected — Gmail watches removed', { account });
+            await this.save();
+        }
+        return false;
+    }
+    /** Forget cursors of accounts with no watches. */
+    prune(st) {
+        for (const a of Object.keys(st.cursors))
+            if (!st.watches.some((w) => w.account === a))
+                delete st.cursors[a];
+    }
+    eventFor(w, m) {
+        return {
+            id: `gmail:reply:${m.id}`,
+            type: 'gmail:reply_received',
+            timestamp: new Date(this.now()).toISOString(),
+            teamId: '',
+            teamName: '',
+            memberId: '',
+            memberName: '',
+            sessionName: `${GMAIL_EVENT_SESSION_PREFIX}${w.threadId}`,
+            previousValue: '',
+            newValue: m.id,
+            changedField: 'gmailReply',
+            threadId: w.threadId,
+            target: w.ownerSession,
+        };
+    }
+    async load() {
+        if (this.state)
+            return this.state;
+        try {
+            const parsed = JSON.parse(await fs.readFile(this.deps.file, 'utf-8'));
+            this.state = { cursors: parsed.cursors ?? {}, watches: Array.isArray(parsed.watches) ? parsed.watches : [] };
+        }
+        catch {
+            this.state = { cursors: {}, watches: [] };
+        }
+        return this.state;
+    }
+    async save() {
+        await fs.mkdir(path.dirname(this.deps.file), { recursive: true });
+        await atomicWriteJson(this.deps.file, this.state);
+    }
+}
+//# sourceMappingURL=gmail-reply-watch.service.js.map

package/dist/backend/backend/src/services/google/gmail-reply-watch.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail-reply-watch.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/google/gmail-reply-watch.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,QAAQ,IAAI,EAAE,EAAE,MAAM,SAAS,CAAC;AACzC,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,0BAA0B,EAAE,MAAM,oBAAoB,CAAC;AAEhE,OAAO,EAAE,eAAe,EAAE,MAAM,8BAA8B,CAAC;AAC/D,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAGhF,qFAAqF;AACrF,MAAM,CAAC,MAAM,0BAA0B,GAAG,QAAQ,CAAC;AAEnD,iDAAiD;AACjD,MAAM,mBAAmB,GAAG,GAAG,CAAC;AA6ChC;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,CAAuC;IACnE,OAAO,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;AACpE,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,sBAAsB;IAUL;IATZ,MAAM,CAAkB;IACjC,KAAK,GAAqB,IAAI,CAAC;IAC/B,KAAK,GAA0B,IAAI,CAAC;IACpC,OAAO,GAAG,KAAK,CAAC;IAChB,OAAO,GAAqB,OAAO,CAAC,OAAO,EAAE,CAAC;IAC9C,OAAO,GAAG,KAAK,CAAC;IACxB,gEAAgE;IAC/C,MAAM,GAAG,IAAI,GAAG,EAAkB,CAAC;IAEpD,YAA6B,IAAyB;QAAzB,SAAI,GAAJ,IAAI,CAAqB;QACrD,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,iBAAiB,CAAC,CAAC;IACpF,CAAC;IAEO,GAAG;QACV,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;IACrD,CAAC;IAED,iEAAiE;IACjE,KAAK,CAAC,KAAK;QACV,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,GAAG,EAAE,CAAC;IACZ,CAAC;IAED,gCAAgC;IAChC,IAAI;QACH,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,MAAM,EAAE,CAAC;IACf,CAAC;IAED,gEAAgE;IACxD,GAAG;QACV,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,KAAK,IAAI,CAAC,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO;QAC1F,IAAI,CAAC,KAAK,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC,KAAK,IAAI,CAAC,IAAI,EAAE,EAAE,0BAA0B,CAAC,mBAAmB,CAAC,CAAC;QACjG,IAAI,CAAC,KAAK,CAAC,KAAK,EAAE,EAAE,CAAC;IACtB,CAAC;IAEO,MAAM;QACb,IAAI,IAAI,CAAC,KAAK;YAAE,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC;IACnB,CAAC;IAED;;;;;;;;OAQG;IACH,KAAK,CAAC,KAAK,CAAC,QAAgB,EAAE,YAAoB,EAAE,OAAgB;QACnE,MAAM,IAAI,GAAG,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,CAAC,CAAC;QACnE,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,QAAQ,GAAG,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,OAAO,KAAK,IAAI,CAAC,CAAC;QACvF,IAAI,QAAQ,EAAE,CAAC;YACd,QAAQ,CAAC,YAAY,GAAG,YAAY,CAAC;YACrC,QAAQ,CAAC,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;YAC7D,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAClB,OAAO,QAAQ,CAAC;QACjB,CAAC;QACD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,QAAQ,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;QACjD,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC;YAAE,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC;QAC/E,MAAM,GAAG,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;QAC/C,MAAM,KAAK,GAAqB,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;QAChJ,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACvB,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,IAAI,CAAC,GAAG,EAAE,CAAC;QACX,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uBAAuB,EAAE,EAAE,QAAQ,EAAE,YAAY,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;QACrF,OAAO,KAAK,CAAC;IACd,CAAC;IAED;;;;;;OAMG;IACH,KAAK,CAAC,OAAO,CAAC,QAAgB,EAAE,YAAoB;QACnD,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC;QACjC,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC;QACrG,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,MAAM;YAAE,OAAO,KAAK,CAAC;QAC/C,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,IAAI,CAAC,YAAqB;QAC/B,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,OAAO,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,YAAY,KAAK,YAAY,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,EAAE,CAAC,OAAO,CAAC,CAAC;IACnG,CAAC;IAED;;;;;OAKG;IACH,IAAI;QACH,MAAM,CAAC,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC;QACxB,IAAI,CAAC,OAAO,GAAG,CAAC,CAAC;QACjB,OAAO,CAAC,CAAC;IACV,CAAC;IAED;;;;OAIG;IACH,KAAK,CAAC,QAAQ;QACb,MAAM,IAAI,CAAC,OAAO,CAAC;IACpB,CAAC;IAEO,KAAK,CAAC,MAAM;QACnB,IAAI,IAAI,CAAC,OAAO;YAAE,OAAO,CAAC,CAAC;QAC3B,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC;QACpB,IAAI,KAAK,GAAG,CAAC,CAAC;QACd,IAAI,CAAC;YACJ,MAAM,EAAE,GAAG,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;YAC7B,MAAM,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;YACtB,KAAK,MAAM,OAAO,IAAI,CAAC,GAAG,IAAI,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtE,IAAI,CAAC,CAAC,MAAM,IAAI,CAAC,qBAAqB,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;oBAAE,SAAS;gBAC/D,IAAI,CAAC;oBACJ,KAAK,IAAI,MAAM,IAAI,CAAC,WAAW,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC;gBAC9C,CAAC;gBAAC,OAAO,GAAG,EAAE,CAAC;oBACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,yBAAyB,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;gBACnH,CAAC;YACF,CAAC;YACD,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;YACf,IAAI,EAAE,CAAC,OAAO,CAAC,MAAM,KAAK,CAAC;gBAAE,IAAI,CAAC,MAAM,EAAE,CAAC;QAC5C,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACtB,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAEO,KAAK,CAAC,WAAW,CAAC,OAAe,EAAE,EAAa;QACvD,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,OAAO,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;QAC7D,MAAM,MAAM,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QACnC,MAAM,KAAK,GAAG,IAAI,GAAG,EAA8B,CAAC;QAEpD,IAAI,UAAkB,CAAC;QACvB,IAAI,CAAC;YACJ,IAAI,CAAC,MAAM;gBAAE,MAAM,MAAM,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,WAAW,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;YAC1E,MAAM,EAAE,SAAS,EAAE,KAAK,EAAE,GAAG,MAAM,KAAK,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC;YAClE,UAAU,GAAG,SAAS,CAAC;YACvB,MAAM,OAAO,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC;YACrD,KAAK,MAAM,CAAC,IAAI,KAAK,EAAE,CAAC;gBACvB,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;oBAAE,SAAS;gBAClI,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,cAAc,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;gBAC9C,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAA+C,CAAC,CAAC;YACjG,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAK,GAA2B,CAAC,MAAM,KAAK,GAAG;gBAAE,MAAM,GAAG,CAAC;YAC3D,gFAAgF;YAChF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0DAA0D,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC1F,UAAU,GAAG,CAAC,MAAM,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,SAAS,CAAC;YAClD,KAAK,MAAM,CAAC,IAAI,IAAI,EAAE,CAAC;gBACtB,KAAK,MAAM,CAAC,IAAI,MAAM,KAAK,CAAC,SAAS,CAAC,CAAC,CAAC,QAAQ,CAAC,EAAE,CAAC;oBACnD,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;wBAAE,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,GAAG,CAAC,EAAE,QAAQ,EAAE,CAAC,CAAC,QAAQ,EAA+C,CAAC,CAAC;gBAC9I,CAAC;YACF,CAAC;QACF,CAAC;QAED,+DAA+D;QAC/D,MAAM,MAAM,GAA0D,EAAE,CAAC;QACzE,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;YAChC,MAAM,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,KAAM,CAA2B,CAAC,QAAQ,CAAC,CAAC;YACjF,IAAI,CAAC,CAAC;gBAAE,SAAS;YACjB,CAAC,CAAC,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,mBAAmB,CAAC,CAAC;YACvD,IAAI,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,CAAC;gBACtB,CAAC,CAAC,cAAc,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;gBACtD,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;YACvB,CAAC;QACF,CAAC;QACD,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,GAAG,UAAU,CAAC;QACjC,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QAClB,KAAK,MAAM,EAAE,CAAC,EAAE,CAAC,EAAE,IAAI,MAAM;YAAE,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC;QACtE,OAAO,MAAM,CAAC,MAAM,CAAC;IACtB,CAAC;IAED,oDAAoD;IAC5C,KAAK,CAAC,MAAM,CAAC,EAAa;QACjC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,0BAA0B,CAAC,qBAAqB,CAAC;QAC5E,MAAM,IAAI,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,cAAc,CAAC,GAAG,KAAK,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,MAAM,KAAK,EAAE,CAAC,OAAO,CAAC,MAAM;YAAE,OAAO;QAC9C,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8BAA8B,EAAE,EAAE,OAAO,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC;QAC/F,EAAE,CAAC,OAAO,GAAG,IAAI,CAAC;QAClB,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACf,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;IACnB,CAAC;IAED,8FAA8F;IACtF,KAAK,CAAC,qBAAqB,CAAC,OAAe,EAAE,EAAa;QACjE,IAAI,MAAM,IAAI,CAAC,IAAI,CAAC,gBAAgB,CAAC,OAAO,CAAC,EAAE,CAAC;YAC/C,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,CAAC,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC;QAC9C,IAAI,CAAC,MAAM,CAAC,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC;QAC5B,IAAI,CAAC,IAAI,0BAA0B,CAAC,6BAA6B,EAAE,CAAC;YACnE,EAAE,CAAC,OAAO,GAAG,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,OAAO,CAAC,CAAC;YAC7D,OAAO,EAAE,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YAC5B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8CAA8C,EAAE,EAAE,OAAO,EAAE,CAAC,CAAC;YAC9E,MAAM,IAAI,CAAC,IAAI,EAAE,CAAC;QACnB,CAAC;QACD,OAAO,KAAK,CAAC;IACd,CAAC;IAED,kDAAkD;IAC1C,KAAK,CAAC,EAAa;QAC1B,KAAK,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC;YAAE,IAAI,CAAC,EAAE,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,CAAC,CAAC;gBAAE,OAAO,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC;IAC7G,CAAC;IAEO,QAAQ,CAAC,CAAmB,EAAE,CAAqB;QAC1D,OAAO;YACN,EAAE,EAAE,eAAe,CAAC,CAAC,EAAE,EAAE;YACzB,IAAI,EAAE,sBAAsB;YAC5B,SAAS,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC,WAAW,EAAE;YAC7C,MAAM,EAAE,EAAE;YACV,QAAQ,EAAE,EAAE;YACZ,QAAQ,EAAE,EAAE;YACZ,UAAU,EAAE,EAAE;YACd,WAAW,EAAE,GAAG,0BAA0B,GAAG,CAAC,CAAC,QAAQ,EAAE;YACzD,aAAa,EAAE,EAAE;YACjB,QAAQ,EAAE,CAAC,CAAC,EAAE;YACd,YAAY,EAAE,YAAY;YAC1B,QAAQ,EAAE,CAAC,CAAC,QAAQ;YACpB,MAAM,EAAE,CAAC,CAAC,YAAY;SACtB,CAAC;IACH,CAAC;IAEO,KAAK,CAAC,IAAI;QACjB,IAAI,IAAI,CAAC,KAAK;YAAE,OAAO,IAAI,CAAC,KAAK,CAAC;QAClC,IAAI,CAAC;YACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO,CAAC,CAAuB,CAAC;YAC5F,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,OAAO,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;QAC9G,CAAC;QAAC,MAAM,CAAC;YACR,IAAI,CAAC,KAAK,GAAG,EAAE,OAAO,EAAE,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;QAC3C,CAAC;QACD,OAAO,IAAI,CAAC,KAAK,CAAC;IACnB,CAAC;IAEO,KAAK,CAAC,IAAI;QACjB,MAAM,EAAE,CAAC,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAClE,MAAM,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,KAAK,CAAC,CAAC;IACnD,CAAC;CACD"}

package/dist/backend/backend/src/services/google/gmail-send-approval.service.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Gmail Send Approval
+ *
+ * Puts a drafted email in front of the owner as a decision card and sends
+ * it only when the owner taps Send (CREW-257,
+ * specs/2026-10-06-gmail-approve-send-and-reply-wake.md).
+ *
+ * The send happens in exactly one place, {@link GmailSendApprovalService.onSettled},
+ * which the decision service calls when an owner answer settles a
+ * `gmail_send` card (button, reaction, thread reply, dashboard). Nothing an
+ * agent can call reaches it, so an agent cannot approve its own mail.
+ *
+ * Each approval is bound to one hold (`agent:draftId`) and to a fingerprint
+ * of the draft as the owner saw it. A hold settles once; a draft that was
+ * edited after the card was raised is not sent, a new card is raised for the
+ * edited text instead.
+ *
+ * @module services/google/gmail-send-approval
+ */
+import type { OwnerDecision, DecisionOption, GmailSendSubject } from '../../types/decision.types.js';
+import type { DecisionKindHandler } from '../decisions/decision.service.js';
+import type { GmailDraftContent, GmailSendResult } from './gmail.service.js';
+import { type HeldSend } from './gmail-send-gate.js';
+/** Option keys on the card. */
+export declare const GMAIL_SEND_KEYS: {
+    readonly SEND: "send";
+    readonly NOT_NOW: "not_now";
+};
+/** How long the card waits before the (safe) default, Discard, applies. */
+export declare const GMAIL_SEND_DEADLINE_MS: number;
+/** The Gmail calls the approval needs. */
+export interface GmailDraftApi {
+    getDraft(draftId: string): Promise<GmailDraftContent>;
+    sendDraft(draftId: string): Promise<GmailSendResult>;
+}
+/** The decision-service surface used here. */
+export interface GmailApprovalDecisions {
+    askPrebuilt(ask: {
+        kind: 'gmail_send';
+        asker: string;
+        question: string;
+        options: DecisionOption[];
+        defaultKey: string;
+        yesKey: string;
+        deadline: Date;
+        sensitive: 'email';
+        gmail: GmailSendSubject;
+    }): Promise<OwnerDecision>;
+    chooseFromDashboard(id: string, optionKey: string): Promise<OwnerDecision>;
+    replyInThread?(id: string, text: string): Promise<boolean>;
+    cancelWhere?(predicate: (d: OwnerDecision) => boolean, reason: string): Promise<unknown>;
+}
+/** Dependencies, injected so tests need no Slack or Google. */
+export interface GmailSendApprovalDeps {
+    /** Gmail access for the account the draft lives in */
+    gmailFor: (account?: string) => GmailDraftApi;
+    /** The decision service, once cards run */
+    decisions: () => GmailApprovalDecisions | null;
+    /** Whether a card can be posted at all */
+    canAskInSlack: () => boolean;
+    /** Tell the drafting agent what happened */
+    tellAgent: (session: string, message: string) => Promise<unknown>;
+    /** Display name for the card */
+    agentNameOf?: (session: string) => Promise<string | undefined>;
+    /** Called after a send so replies on the thread wake the agent */
+    onSent?: (info: {
+        threadId: string;
+        agentSession: string;
+        account?: string;
+    }) => Promise<void> | void;
+}
+/**
+ * sha256 of everything that gets sent: sender, every recipient (including
+ * Bcc, a recipient the other parties never see), subject, both bodies and
+ * the attachments' names and sizes. A change to any of them is a different
+ * email from the one the owner approved.
+ *
+ * @param d - Draft content
+ * @returns Hex digest
+ */
+export declare function fingerprintDraft(d: GmailDraftContent): string;
+/**
+ * The card question: who it goes to (all of them, Bcc included), what it says.
+ *
+ * @param agentName - Drafting agent
+ * @param d - The draft
+ * @returns mrkdwn
+ */
+export declare function approvalQuestion(agentName: string, d: GmailDraftContent): string;
+/**
+ * Raises the send card and applies the owner's answer.
+ */
+export declare class GmailSendApprovalService implements DecisionKindHandler {
+    private readonly deps;
+    private readonly logger;
+    /** Holds being discarded by the owner right now (their settle note says the draft is gone) */
+    private readonly discarding;
+    constructor(deps: GmailSendApprovalDeps);
+    /**
+     * A draft was held: read it, remember what the owner will be shown and ask.
+     *
+     * @param hold - The held send
+     * @returns True when a card was raised
+     */
+    onHeld(hold: HeldSend): Promise<boolean>;
+    /**
+     * The owner answered on the dashboard route: settle the card so it and the
+     * send agree.
+     *
+     * @param holdId - Hold id
+     * @param answer - What the owner chose
+     * @returns True when a card carried the answer
+     */
+    answerFromOwner(holdId: string, answer: 'send' | 'discard'): Promise<boolean>;
+    /**
+     * The owner discarded the draft on the owner-only route (which deletes it).
+     * Settles the card as "not now" and tells the agent the draft is gone.
+     *
+     * @param holdId - Hold id
+     */
+    discarded(holdId: string): Promise<void>;
+    /**
+     * A `gmail_send` card settled. The only place a held draft is sent.
+     *
+     * @param decision - The settled decision
+     * @returns Note for the drafting agent, or null
+     */
+    onSettled(decision: OwnerDecision): Promise<string | null>;
+}
+//# sourceMappingURL=gmail-send-approval.service.d.ts.map

package/dist/backend/backend/src/services/google/gmail-send-approval.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail-send-approval.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/google/gmail-send-approval.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACrG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAsF,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEzI,+BAA+B;AAC/B,eAAO,MAAM,eAAe;;;CAAgD,CAAC;AAE7E,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB,QAAsB,CAAC;AAK1D,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACrD;AAED,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACtC,WAAW,CAAC,GAAG,EAAE;QAChB,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,IAAI,CAAC;QACf,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,EAAE,gBAAgB,CAAC;KACxB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3B,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3E,aAAa,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzF;AAED,+DAA+D;AAC/D,MAAM,WAAW,qBAAqB;IACrC,sDAAsD;IACtD,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,aAAa,CAAC;IAC9C,2CAA2C;IAC3C,SAAS,EAAE,MAAM,sBAAsB,GAAG,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,aAAa,EAAE,MAAM,OAAO,CAAC;IAC7B,4CAA4C;IAC5C,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,gCAAgC;IAChC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/D,kEAAkE;IAClE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACtG;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAI7D;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAUhF;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,mBAAmB;IAKvD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;gBAEnB,IAAI,EAAE,qBAAqB;IAIxD;;;;;OAKG;IACG,MAAM,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA0B9C;;;;;;;OAOG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAQnF;;;;;OAKG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9C;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAmEhE"}

package/dist/backend/backend/src/services/google/gmail-send-approval.service.js

@@ -0,0 +1,216 @@
+/**
+ * Gmail Send Approval
+ *
+ * Puts a drafted email in front of the owner as a decision card and sends
+ * it only when the owner taps Send (CREW-257,
+ * specs/2026-10-06-gmail-approve-send-and-reply-wake.md).
+ *
+ * The send happens in exactly one place, {@link GmailSendApprovalService.onSettled},
+ * which the decision service calls when an owner answer settles a
+ * `gmail_send` card (button, reaction, thread reply, dashboard). Nothing an
+ * agent can call reaches it, so an agent cannot approve its own mail.
+ *
+ * Each approval is bound to one hold (`agent:draftId`) and to a fingerprint
+ * of the draft as the owner saw it. A hold settles once; a draft that was
+ * edited after the card was raised is not sent, a new card is raised for the
+ * edited text instead.
+ *
+ * @module services/google/gmail-send-approval
+ */
+import { createHash } from 'node:crypto';
+import { LoggerService } from '../core/logger.service.js';
+import { clearHeldSend, getHeldSend, holdGmailSend, markSettled, updateHeldSend, wasSettled } from './gmail-send-gate.js';
+/** Option keys on the card. */
+export const GMAIL_SEND_KEYS = { SEND: 'send', NOT_NOW: 'not_now' };
+/** How long the card waits before the (safe) default, Discard, applies. */
+export const GMAIL_SEND_DEADLINE_MS = 24 * 60 * 60 * 1000;
+/** Body characters shown on the card. */
+const PREVIEW_CHARS = 700;
+/**
+ * sha256 of everything that gets sent: sender, every recipient (including
+ * Bcc, a recipient the other parties never see), subject, both bodies and
+ * the attachments' names and sizes. A change to any of them is a different
+ * email from the one the owner approved.
+ *
+ * @param d - Draft content
+ * @returns Hex digest
+ */
+export function fingerprintDraft(d) {
+    return createHash('sha256')
+        .update(JSON.stringify([d.from, d.to, d.cc, d.bcc, d.subject, d.body, d.html, d.attachments.map((a) => [a.filename, a.size])]))
+        .digest('hex');
+}
+/**
+ * The card question: who it goes to (all of them, Bcc included), what it says.
+ *
+ * @param agentName - Drafting agent
+ * @param d - The draft
+ * @returns mrkdwn
+ */
+export function approvalQuestion(agentName, d) {
+    const body = d.body.length > PREVIEW_CHARS ? `${d.body.slice(0, PREVIEW_CHARS)}…` : d.body;
+    const lines = [`Send this to ${d.to}?`, `${agentName} drafted an email and wants it sent.`];
+    if (d.from)
+        lines.push(`*From:* ${d.from}`);
+    lines.push(`*To:* ${d.to}`);
+    if (d.cc)
+        lines.push(`*Cc:* ${d.cc}`);
+    if (d.bcc)
+        lines.push(`*Bcc:* ${d.bcc} _(the other recipients will not see this)_`);
+    lines.push(`*Subject:* ${d.subject}`);
+    if (d.attachments.length)
+        lines.push(`*Attachments:* ${d.attachments.map((a) => `${a.filename} (${a.size} B)`).join(', ')}`);
+    return `${lines.join('\n')}\n\n${body || '(no plain-text body)'}`;
+}
+/**
+ * Raises the send card and applies the owner's answer.
+ */
+export class GmailSendApprovalService {
+    deps;
+    logger;
+    /** Holds being discarded by the owner right now (their settle note says the draft is gone) */
+    discarding = new Set();
+    constructor(deps) {
+        this.deps = deps;
+        this.logger = LoggerService.getInstance().createComponentLogger('GmailSendApproval');
+    }
+    /**
+     * A draft was held: read it, remember what the owner will be shown and ask.
+     *
+     * @param hold - The held send
+     * @returns True when a card was raised
+     */
+    async onHeld(hold) {
+        const decisions = this.deps.decisions();
+        if (!decisions || !this.deps.canAskInSlack())
+            return false;
+        const gmail = this.deps.gmailFor(hold.account);
+        const draft = await gmail.getDraft(hold.draftId);
+        const fingerprint = fingerprintDraft(draft);
+        const agentName = (await this.deps.agentNameOf?.(hold.agentSession).catch(() => undefined)) ?? hold.agentSession;
+        const decision = await decisions.askPrebuilt({
+            kind: 'gmail_send',
+            asker: hold.agentSession,
+            question: approvalQuestion(agentName, draft),
+            options: [
+                { key: GMAIL_SEND_KEYS.SEND, label: 'Yes', detail: 'send exactly this email, once' },
+                { key: GMAIL_SEND_KEYS.NOT_NOW, label: 'Not now', detail: 'nothing is sent; the draft stays in Gmail' },
+            ],
+            defaultKey: GMAIL_SEND_KEYS.NOT_NOW,
+            yesKey: GMAIL_SEND_KEYS.SEND,
+            deadline: new Date(Date.now() + GMAIL_SEND_DEADLINE_MS),
+            sensitive: 'email',
+            gmail: { agentSession: hold.agentSession, agentName, holdId: hold.id, draftId: hold.draftId, to: hold.to, subject: hold.subject },
+        });
+        updateHeldSend(hold.id, { fingerprint, decisionId: decision.id });
+        this.logger.info('Asked the owner about a drafted email', { holdId: hold.id, decisionId: decision.id });
+        return true;
+    }
+    /**
+     * The owner answered on the dashboard route: settle the card so it and the
+     * send agree.
+     *
+     * @param holdId - Hold id
+     * @param answer - What the owner chose
+     * @returns True when a card carried the answer
+     */
+    async answerFromOwner(holdId, answer) {
+        const hold = getHeldSend(holdId);
+        const decisions = this.deps.decisions();
+        if (!hold?.decisionId || !decisions)
+            return false;
+        await decisions.chooseFromDashboard(hold.decisionId, answer === 'send' ? GMAIL_SEND_KEYS.SEND : GMAIL_SEND_KEYS.NOT_NOW);
+        return true;
+    }
+    /**
+     * The owner discarded the draft on the owner-only route (which deletes it).
+     * Settles the card as "not now" and tells the agent the draft is gone.
+     *
+     * @param holdId - Hold id
+     */
+    async discarded(holdId) {
+        this.discarding.add(holdId);
+        try {
+            await this.answerFromOwner(holdId, 'discard');
+        }
+        finally {
+            this.discarding.delete(holdId);
+        }
+    }
+    /**
+     * A `gmail_send` card settled. The only place a held draft is sent.
+     *
+     * @param decision - The settled decision
+     * @returns Note for the drafting agent, or null
+     */
+    async onSettled(decision) {
+        const subject = decision.gmail;
+        if (!subject)
+            return null;
+        const hold = getHeldSend(subject.holdId);
+        const sendChosen = decision.status === 'resolved' && decision.chosenKey === GMAIL_SEND_KEYS.SEND;
+        if (!hold || hold.decisionId !== decision.id) {
+            // Nothing to send. A Not now / expiry with no hold needs no news, but a
+            // Yes must never vanish: the card shows Yes, so say it was not sent.
+            if (!sendChosen || wasSettled(decision.id))
+                return null;
+            const why = !hold ? 'the pending send was lost (the draft is no longer held)' : 'this card was replaced by a newer one for the same draft';
+            const note = `Not sent: ${why}. The draft is still in Gmail.`;
+            this.logger.warn('Send approved but no matching hold — not sent', { holdId: subject.holdId, decisionId: decision.id, held: !!hold });
+            await this.deps.decisions()?.replyInThread?.(decision.id, note).catch(() => false);
+            return `[GMAIL] The owner tapped Yes on "${subject.subject}" to ${subject.to}, but it was NOT sent: ${why}. The draft is still in Gmail; ask the owner whether to try again.`;
+        }
+        markSettled(decision.id);
+        if (decision.status !== 'resolved' || decision.chosenKey !== GMAIL_SEND_KEYS.SEND) {
+            clearHeldSend(hold.id);
+            this.logger.info('Drafted email not sent', { holdId: hold.id, status: decision.status });
+            // Never deletes the draft: only an owner tap on Discard does (via discarded()).
+            if (this.discarding.has(hold.id))
+                return `[GMAIL] The owner discarded "${hold.subject}" to ${hold.to}; the draft was deleted. Do not send it another way.`;
+            if (decision.status === 'defaulted' || decision.status === 'expired') {
+                return `[GMAIL] "${hold.subject}" to ${hold.to} was not approved in 24h; nothing was sent and the draft is left in Gmail.`;
+            }
+            if (decision.status === 'resolved')
+                return `[GMAIL] The owner said not now to "${hold.subject}" to ${hold.to}. Nothing was sent; the draft stays in Gmail. Do not send it another way.`;
+            return `[GMAIL] The approval card for "${hold.subject}" to ${hold.to} was withdrawn. Nothing was sent; the draft is left in Gmail.`;
+        }
+        const gmail = this.deps.gmailFor(hold.account);
+        const current = await gmail.getDraft(hold.draftId);
+        if (!hold.fingerprint || fingerprintDraft(current) !== hold.fingerprint) {
+            // The text changed after the owner looked at it: that approval is for
+            // a different email. Ask again, with what is there now.
+            clearHeldSend(hold.id);
+            const reheld = holdGmailSend({
+                agentSession: hold.agentSession,
+                draftId: hold.draftId,
+                to: hold.to,
+                subject: hold.subject,
+                ...(hold.claim ? { claim: hold.claim } : {}),
+                ...(hold.account ? { account: hold.account } : {}),
+            });
+            await this.onHeld(reheld);
+            this.logger.warn('Drafted email changed after approval — not sent, asked again', { holdId: hold.id });
+            return `[GMAIL] "${hold.subject}" was edited after the owner approved it, so it was NOT sent. A new card with the edited text is waiting for the owner.`;
+        }
+        const sent = await gmail.sendDraft(hold.draftId);
+        clearHeldSend(hold.id);
+        // Audit line: who, what, to whom, on which owner decision.
+        this.logger.info('Owner approved a drafted email — sent', {
+            holdId: hold.id,
+            decisionId: decision.id,
+            to: hold.to,
+            subject: hold.subject,
+            messageId: sent.id,
+            threadId: sent.threadId,
+            agentSession: hold.agentSession,
+        });
+        try {
+            await this.deps.onSent?.({ threadId: sent.threadId, agentSession: hold.agentSession, ...(hold.account ? { account: hold.account } : {}) });
+        }
+        catch (err) {
+            this.logger.warn('Could not watch the thread after sending', { threadId: sent.threadId, error: err instanceof Error ? err.message : String(err) });
+        }
+        return `[GMAIL] The owner approved and "${hold.subject}" was sent to ${hold.to} (thread ${sent.threadId}). Replies on that thread will wake you.`;
+    }
+}
+//# sourceMappingURL=gmail-send-approval.service.js.map