crewly 1.20.362 → 1.20.364

package/dist/backend/backend/src/services/google/gmail-send-approval.service.d.ts

@@ -0,0 +1,130 @@
+/**
+ * Gmail Send Approval
+ *
+ * Puts a drafted email in front of the owner as a decision card and sends
+ * it only when the owner taps Send (CREW-257,
+ * specs/2026-10-06-gmail-approve-send-and-reply-wake.md).
+ *
+ * The send happens in exactly one place, {@link GmailSendApprovalService.onSettled},
+ * which the decision service calls when an owner answer settles a
+ * `gmail_send` card (button, reaction, thread reply, dashboard). Nothing an
+ * agent can call reaches it, so an agent cannot approve its own mail.
+ *
+ * Each approval is bound to one hold (`agent:draftId`) and to a fingerprint
+ * of the draft as the owner saw it. A hold settles once; a draft that was
+ * edited after the card was raised is not sent, a new card is raised for the
+ * edited text instead.
+ *
+ * @module services/google/gmail-send-approval
+ */
+import type { OwnerDecision, DecisionOption, GmailSendSubject } from '../../types/decision.types.js';
+import type { DecisionKindHandler } from '../decisions/decision.service.js';
+import type { GmailDraftContent, GmailSendResult } from './gmail.service.js';
+import { type HeldSend } from './gmail-send-gate.js';
+/** Option keys on the card. */
+export declare const GMAIL_SEND_KEYS: {
+    readonly SEND: "send";
+    readonly NOT_NOW: "not_now";
+};
+/** How long the card waits before the (safe) default, Discard, applies. */
+export declare const GMAIL_SEND_DEADLINE_MS: number;
+/** The Gmail calls the approval needs. */
+export interface GmailDraftApi {
+    getDraft(draftId: string): Promise<GmailDraftContent>;
+    sendDraft(draftId: string): Promise<GmailSendResult>;
+}
+/** The decision-service surface used here. */
+export interface GmailApprovalDecisions {
+    askPrebuilt(ask: {
+        kind: 'gmail_send';
+        asker: string;
+        question: string;
+        options: DecisionOption[];
+        defaultKey: string;
+        yesKey: string;
+        deadline: Date;
+        sensitive: 'email';
+        gmail: GmailSendSubject;
+    }): Promise<OwnerDecision>;
+    chooseFromDashboard(id: string, optionKey: string): Promise<OwnerDecision>;
+    replyInThread?(id: string, text: string): Promise<boolean>;
+    cancelWhere?(predicate: (d: OwnerDecision) => boolean, reason: string): Promise<unknown>;
+}
+/** Dependencies, injected so tests need no Slack or Google. */
+export interface GmailSendApprovalDeps {
+    /** Gmail access for the account the draft lives in */
+    gmailFor: (account?: string) => GmailDraftApi;
+    /** The decision service, once cards run */
+    decisions: () => GmailApprovalDecisions | null;
+    /** Whether a card can be posted at all */
+    canAskInSlack: () => boolean;
+    /** Tell the drafting agent what happened */
+    tellAgent: (session: string, message: string) => Promise<unknown>;
+    /** Display name for the card */
+    agentNameOf?: (session: string) => Promise<string | undefined>;
+    /** Called after a send so replies on the thread wake the agent */
+    onSent?: (info: {
+        threadId: string;
+        agentSession: string;
+        account?: string;
+    }) => Promise<void> | void;
+}
+/**
+ * sha256 of everything that gets sent: sender, every recipient (including
+ * Bcc, a recipient the other parties never see), subject, both bodies and
+ * the attachments' names and sizes. A change to any of them is a different
+ * email from the one the owner approved.
+ *
+ * @param d - Draft content
+ * @returns Hex digest
+ */
+export declare function fingerprintDraft(d: GmailDraftContent): string;
+/**
+ * The card question: who it goes to (all of them, Bcc included), what it says.
+ *
+ * @param agentName - Drafting agent
+ * @param d - The draft
+ * @returns mrkdwn
+ */
+export declare function approvalQuestion(agentName: string, d: GmailDraftContent): string;
+/**
+ * Raises the send card and applies the owner's answer.
+ */
+export declare class GmailSendApprovalService implements DecisionKindHandler {
+    private readonly deps;
+    private readonly logger;
+    /** Holds being discarded by the owner right now (their settle note says the draft is gone) */
+    private readonly discarding;
+    constructor(deps: GmailSendApprovalDeps);
+    /**
+     * A draft was held: read it, remember what the owner will be shown and ask.
+     *
+     * @param hold - The held send
+     * @returns True when a card was raised
+     */
+    onHeld(hold: HeldSend): Promise<boolean>;
+    /**
+     * The owner answered on the dashboard route: settle the card so it and the
+     * send agree.
+     *
+     * @param holdId - Hold id
+     * @param answer - What the owner chose
+     * @returns True when a card carried the answer
+     */
+    answerFromOwner(holdId: string, answer: 'send' | 'discard'): Promise<boolean>;
+    /**
+     * The owner discarded the draft on the owner-only route (which deletes it).
+     * Settles the card as "not now" and tells the agent the draft is gone.
+     *
+     * @param holdId - Hold id
+     */
+    discarded(holdId: string): Promise<void>;
+    /**
+     * A `gmail_send` card settled. The only place a held draft is sent.
+     *
+     * @param decision - The settled decision
+     * @returns Note for the drafting agent, or null
+     */
+    onSettled(decision: OwnerDecision): Promise<string | null>;
+}
+//# sourceMappingURL=gmail-send-approval.service.d.ts.map

package/dist/backend/backend/src/services/google/gmail-send-approval.service.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail-send-approval.service.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/google/gmail-send-approval.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,KAAK,EAAE,aAAa,EAAE,cAAc,EAAE,gBAAgB,EAAE,MAAM,+BAA+B,CAAC;AACrG,OAAO,KAAK,EAAE,mBAAmB,EAAE,MAAM,kCAAkC,CAAC;AAE5E,OAAO,KAAK,EAAE,iBAAiB,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC;AAC7E,OAAO,EAAsF,KAAK,QAAQ,EAAE,MAAM,sBAAsB,CAAC;AAEzI,+BAA+B;AAC/B,eAAO,MAAM,eAAe;;;CAAgD,CAAC;AAE7E,2EAA2E;AAC3E,eAAO,MAAM,sBAAsB,QAAsB,CAAC;AAK1D,0CAA0C;AAC1C,MAAM,WAAW,aAAa;IAC7B,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,iBAAiB,CAAC,CAAC;IACtD,SAAS,CAAC,OAAO,EAAE,MAAM,GAAG,OAAO,CAAC,eAAe,CAAC,CAAC;CACrD;AAED,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACtC,WAAW,CAAC,GAAG,EAAE;QAChB,IAAI,EAAE,YAAY,CAAC;QACnB,KAAK,EAAE,MAAM,CAAC;QACd,QAAQ,EAAE,MAAM,CAAC;QACjB,OAAO,EAAE,cAAc,EAAE,CAAC;QAC1B,UAAU,EAAE,MAAM,CAAC;QACnB,MAAM,EAAE,MAAM,CAAC;QACf,QAAQ,EAAE,IAAI,CAAC;QACf,SAAS,EAAE,OAAO,CAAC;QACnB,KAAK,EAAE,gBAAgB,CAAC;KACxB,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3B,mBAAmB,CAAC,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,aAAa,CAAC,CAAC;IAC3E,aAAa,CAAC,CAAC,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;IAC3D,WAAW,CAAC,CAAC,SAAS,EAAE,CAAC,CAAC,EAAE,aAAa,KAAK,OAAO,EAAE,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,OAAO,CAAC,CAAC;CACzF;AAED,+DAA+D;AAC/D,MAAM,WAAW,qBAAqB;IACrC,sDAAsD;IACtD,QAAQ,EAAE,CAAC,OAAO,CAAC,EAAE,MAAM,KAAK,aAAa,CAAC;IAC9C,2CAA2C;IAC3C,SAAS,EAAE,MAAM,sBAAsB,GAAG,IAAI,CAAC;IAC/C,0CAA0C;IAC1C,aAAa,EAAE,MAAM,OAAO,CAAC;IAC7B,4CAA4C;IAC5C,SAAS,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,OAAO,CAAC,CAAC;IAClE,gCAAgC;IAChC,WAAW,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,KAAK,OAAO,CAAC,MAAM,GAAG,SAAS,CAAC,CAAC;IAC/D,kEAAkE;IAClE,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,QAAQ,EAAE,MAAM,CAAC;QAAC,YAAY,EAAE,MAAM,CAAC;QAAC,OAAO,CAAC,EAAE,MAAM,CAAA;KAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAC;CACtG;AAED;;;;;;;;GAQG;AACH,wBAAgB,gBAAgB,CAAC,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAI7D;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,EAAE,iBAAiB,GAAG,MAAM,CAUhF;AAED;;GAEG;AACH,qBAAa,wBAAyB,YAAW,mBAAmB;IAKvD,OAAO,CAAC,QAAQ,CAAC,IAAI;IAJjC,OAAO,CAAC,QAAQ,CAAC,MAAM,CAAkB;IACzC,8FAA8F;IAC9F,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAqB;gBAEnB,IAAI,EAAE,qBAAqB;IAIxD;;;;;OAKG;IACG,MAAM,CAAC,IAAI,EAAE,QAAQ,GAAG,OAAO,CAAC,OAAO,CAAC;IA0B9C;;;;;;;OAOG;IACG,eAAe,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,OAAO,CAAC;IAQnF;;;;;OAKG;IACG,SAAS,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC;IAS9C;;;;;OAKG;IACG,SAAS,CAAC,QAAQ,EAAE,aAAa,GAAG,OAAO,CAAC,MAAM,GAAG,IAAI,CAAC;CAmEhE"}

package/dist/backend/backend/src/services/google/gmail-send-approval.service.js

@@ -0,0 +1,216 @@
+/**
+ * Gmail Send Approval
+ *
+ * Puts a drafted email in front of the owner as a decision card and sends
+ * it only when the owner taps Send (CREW-257,
+ * specs/2026-10-06-gmail-approve-send-and-reply-wake.md).
+ *
+ * The send happens in exactly one place, {@link GmailSendApprovalService.onSettled},
+ * which the decision service calls when an owner answer settles a
+ * `gmail_send` card (button, reaction, thread reply, dashboard). Nothing an
+ * agent can call reaches it, so an agent cannot approve its own mail.
+ *
+ * Each approval is bound to one hold (`agent:draftId`) and to a fingerprint
+ * of the draft as the owner saw it. A hold settles once; a draft that was
+ * edited after the card was raised is not sent, a new card is raised for the
+ * edited text instead.
+ *
+ * @module services/google/gmail-send-approval
+ */
+import { createHash } from 'node:crypto';
+import { LoggerService } from '../core/logger.service.js';
+import { clearHeldSend, getHeldSend, holdGmailSend, markSettled, updateHeldSend, wasSettled } from './gmail-send-gate.js';
+/** Option keys on the card. */
+export const GMAIL_SEND_KEYS = { SEND: 'send', NOT_NOW: 'not_now' };
+/** How long the card waits before the (safe) default, Discard, applies. */
+export const GMAIL_SEND_DEADLINE_MS = 24 * 60 * 60 * 1000;
+/** Body characters shown on the card. */
+const PREVIEW_CHARS = 700;
+/**
+ * sha256 of everything that gets sent: sender, every recipient (including
+ * Bcc, a recipient the other parties never see), subject, both bodies and
+ * the attachments' names and sizes. A change to any of them is a different
+ * email from the one the owner approved.
+ *
+ * @param d - Draft content
+ * @returns Hex digest
+ */
+export function fingerprintDraft(d) {
+    return createHash('sha256')
+        .update(JSON.stringify([d.from, d.to, d.cc, d.bcc, d.subject, d.body, d.html, d.attachments.map((a) => [a.filename, a.size])]))
+        .digest('hex');
+}
+/**
+ * The card question: who it goes to (all of them, Bcc included), what it says.
+ *
+ * @param agentName - Drafting agent
+ * @param d - The draft
+ * @returns mrkdwn
+ */
+export function approvalQuestion(agentName, d) {
+    const body = d.body.length > PREVIEW_CHARS ? `${d.body.slice(0, PREVIEW_CHARS)}…` : d.body;
+    const lines = [`Send this to ${d.to}?`, `${agentName} drafted an email and wants it sent.`];
+    if (d.from)
+        lines.push(`*From:* ${d.from}`);
+    lines.push(`*To:* ${d.to}`);
+    if (d.cc)
+        lines.push(`*Cc:* ${d.cc}`);
+    if (d.bcc)
+        lines.push(`*Bcc:* ${d.bcc} _(the other recipients will not see this)_`);
+    lines.push(`*Subject:* ${d.subject}`);
+    if (d.attachments.length)
+        lines.push(`*Attachments:* ${d.attachments.map((a) => `${a.filename} (${a.size} B)`).join(', ')}`);
+    return `${lines.join('\n')}\n\n${body || '(no plain-text body)'}`;
+}
+/**
+ * Raises the send card and applies the owner's answer.
+ */
+export class GmailSendApprovalService {
+    deps;
+    logger;
+    /** Holds being discarded by the owner right now (their settle note says the draft is gone) */
+    discarding = new Set();
+    constructor(deps) {
+        this.deps = deps;
+        this.logger = LoggerService.getInstance().createComponentLogger('GmailSendApproval');
+    }
+    /**
+     * A draft was held: read it, remember what the owner will be shown and ask.
+     *
+     * @param hold - The held send
+     * @returns True when a card was raised
+     */
+    async onHeld(hold) {
+        const decisions = this.deps.decisions();
+        if (!decisions || !this.deps.canAskInSlack())
+            return false;
+        const gmail = this.deps.gmailFor(hold.account);
+        const draft = await gmail.getDraft(hold.draftId);
+        const fingerprint = fingerprintDraft(draft);
+        const agentName = (await this.deps.agentNameOf?.(hold.agentSession).catch(() => undefined)) ?? hold.agentSession;
+        const decision = await decisions.askPrebuilt({
+            kind: 'gmail_send',
+            asker: hold.agentSession,
+            question: approvalQuestion(agentName, draft),
+            options: [
+                { key: GMAIL_SEND_KEYS.SEND, label: 'Yes', detail: 'send exactly this email, once' },
+                { key: GMAIL_SEND_KEYS.NOT_NOW, label: 'Not now', detail: 'nothing is sent; the draft stays in Gmail' },
+            ],
+            defaultKey: GMAIL_SEND_KEYS.NOT_NOW,
+            yesKey: GMAIL_SEND_KEYS.SEND,
+            deadline: new Date(Date.now() + GMAIL_SEND_DEADLINE_MS),
+            sensitive: 'email',
+            gmail: { agentSession: hold.agentSession, agentName, holdId: hold.id, draftId: hold.draftId, to: hold.to, subject: hold.subject },
+        });
+        updateHeldSend(hold.id, { fingerprint, decisionId: decision.id });
+        this.logger.info('Asked the owner about a drafted email', { holdId: hold.id, decisionId: decision.id });
+        return true;
+    }
+    /**
+     * The owner answered on the dashboard route: settle the card so it and the
+     * send agree.
+     *
+     * @param holdId - Hold id
+     * @param answer - What the owner chose
+     * @returns True when a card carried the answer
+     */
+    async answerFromOwner(holdId, answer) {
+        const hold = getHeldSend(holdId);
+        const decisions = this.deps.decisions();
+        if (!hold?.decisionId || !decisions)
+            return false;
+        await decisions.chooseFromDashboard(hold.decisionId, answer === 'send' ? GMAIL_SEND_KEYS.SEND : GMAIL_SEND_KEYS.NOT_NOW);
+        return true;
+    }
+    /**
+     * The owner discarded the draft on the owner-only route (which deletes it).
+     * Settles the card as "not now" and tells the agent the draft is gone.
+     *
+     * @param holdId - Hold id
+     */
+    async discarded(holdId) {
+        this.discarding.add(holdId);
+        try {
+            await this.answerFromOwner(holdId, 'discard');
+        }
+        finally {
+            this.discarding.delete(holdId);
+        }
+    }
+    /**
+     * A `gmail_send` card settled. The only place a held draft is sent.
+     *
+     * @param decision - The settled decision
+     * @returns Note for the drafting agent, or null
+     */
+    async onSettled(decision) {
+        const subject = decision.gmail;
+        if (!subject)
+            return null;
+        const hold = getHeldSend(subject.holdId);
+        const sendChosen = decision.status === 'resolved' && decision.chosenKey === GMAIL_SEND_KEYS.SEND;
+        if (!hold || hold.decisionId !== decision.id) {
+            // Nothing to send. A Not now / expiry with no hold needs no news, but a
+            // Yes must never vanish: the card shows Yes, so say it was not sent.
+            if (!sendChosen || wasSettled(decision.id))
+                return null;
+            const why = !hold ? 'the pending send was lost (the draft is no longer held)' : 'this card was replaced by a newer one for the same draft';
+            const note = `Not sent: ${why}. The draft is still in Gmail.`;
+            this.logger.warn('Send approved but no matching hold — not sent', { holdId: subject.holdId, decisionId: decision.id, held: !!hold });
+            await this.deps.decisions()?.replyInThread?.(decision.id, note).catch(() => false);
+            return `[GMAIL] The owner tapped Yes on "${subject.subject}" to ${subject.to}, but it was NOT sent: ${why}. The draft is still in Gmail; ask the owner whether to try again.`;
+        }
+        markSettled(decision.id);
+        if (decision.status !== 'resolved' || decision.chosenKey !== GMAIL_SEND_KEYS.SEND) {
+            clearHeldSend(hold.id);
+            this.logger.info('Drafted email not sent', { holdId: hold.id, status: decision.status });
+            // Never deletes the draft: only an owner tap on Discard does (via discarded()).
+            if (this.discarding.has(hold.id))
+                return `[GMAIL] The owner discarded "${hold.subject}" to ${hold.to}; the draft was deleted. Do not send it another way.`;
+            if (decision.status === 'defaulted' || decision.status === 'expired') {
+                return `[GMAIL] "${hold.subject}" to ${hold.to} was not approved in 24h; nothing was sent and the draft is left in Gmail.`;
+            }
+            if (decision.status === 'resolved')
+                return `[GMAIL] The owner said not now to "${hold.subject}" to ${hold.to}. Nothing was sent; the draft stays in Gmail. Do not send it another way.`;
+            return `[GMAIL] The approval card for "${hold.subject}" to ${hold.to} was withdrawn. Nothing was sent; the draft is left in Gmail.`;
+        }
+        const gmail = this.deps.gmailFor(hold.account);
+        const current = await gmail.getDraft(hold.draftId);
+        if (!hold.fingerprint || fingerprintDraft(current) !== hold.fingerprint) {
+            // The text changed after the owner looked at it: that approval is for
+            // a different email. Ask again, with what is there now.
+            clearHeldSend(hold.id);
+            const reheld = holdGmailSend({
+                agentSession: hold.agentSession,
+                draftId: hold.draftId,
+                to: hold.to,
+                subject: hold.subject,
+                ...(hold.claim ? { claim: hold.claim } : {}),
+                ...(hold.account ? { account: hold.account } : {}),
+            });
+            await this.onHeld(reheld);
+            this.logger.warn('Drafted email changed after approval — not sent, asked again', { holdId: hold.id });
+            return `[GMAIL] "${hold.subject}" was edited after the owner approved it, so it was NOT sent. A new card with the edited text is waiting for the owner.`;
+        }
+        const sent = await gmail.sendDraft(hold.draftId);
+        clearHeldSend(hold.id);
+        // Audit line: who, what, to whom, on which owner decision.
+        this.logger.info('Owner approved a drafted email — sent', {
+            holdId: hold.id,
+            decisionId: decision.id,
+            to: hold.to,
+            subject: hold.subject,
+            messageId: sent.id,
+            threadId: sent.threadId,
+            agentSession: hold.agentSession,
+        });
+        try {
+            await this.deps.onSent?.({ threadId: sent.threadId, agentSession: hold.agentSession, ...(hold.account ? { account: hold.account } : {}) });
+        }
+        catch (err) {
+            this.logger.warn('Could not watch the thread after sending', { threadId: sent.threadId, error: err instanceof Error ? err.message : String(err) });
+        }
+        return `[GMAIL] The owner approved and "${hold.subject}" was sent to ${hold.to} (thread ${sent.threadId}). Replies on that thread will wake you.`;
+    }
+}
+//# sourceMappingURL=gmail-send-approval.service.js.map

package/dist/backend/backend/src/services/google/gmail-send-approval.service.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"gmail-send-approval.service.js","sourceRoot":"","sources":["../../../../../../backend/src/services/google/gmail-send-approval.service.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AAGzC,OAAO,EAAE,aAAa,EAAwB,MAAM,2BAA2B,CAAC;AAEhF,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,aAAa,EAAE,WAAW,EAAE,cAAc,EAAE,UAAU,EAAiB,MAAM,sBAAsB,CAAC;AAEzI,+BAA+B;AAC/B,MAAM,CAAC,MAAM,eAAe,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAW,CAAC;AAE7E,2EAA2E;AAC3E,MAAM,CAAC,MAAM,sBAAsB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAE1D,yCAAyC;AACzC,MAAM,aAAa,GAAG,GAAG,CAAC;AA0C1B;;;;;;;;GAQG;AACH,MAAM,UAAU,gBAAgB,CAAC,CAAoB;IACpD,OAAO,UAAU,CAAC,QAAQ,CAAC;SACzB,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC;SAC9H,MAAM,CAAC,KAAK,CAAC,CAAC;AACjB,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,gBAAgB,CAAC,SAAiB,EAAE,CAAoB;IACvE,MAAM,IAAI,GAAG,CAAC,CAAC,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;IAC3F,MAAM,KAAK,GAAG,CAAC,gBAAgB,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,SAAS,sCAAsC,CAAC,CAAC;IAC5F,IAAI,CAAC,CAAC,IAAI;QAAE,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;IAC5C,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IAC5B,IAAI,CAAC,CAAC,EAAE;QAAE,KAAK,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,GAAG;QAAE,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,GAAG,6CAA6C,CAAC,CAAC;IACpF,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,OAAO,EAAE,CAAC,CAAC;IACtC,IAAI,CAAC,CAAC,WAAW,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,GAAG,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC7H,OAAO,GAAG,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,sBAAsB,EAAE,CAAC;AACnE,CAAC;AAED;;GAEG;AACH,MAAM,OAAO,wBAAwB;IAKP;IAJZ,MAAM,CAAkB;IACzC,8FAA8F;IAC7E,UAAU,GAAG,IAAI,GAAG,EAAU,CAAC;IAEhD,YAA6B,IAA2B;QAA3B,SAAI,GAAJ,IAAI,CAAuB;QACvD,IAAI,CAAC,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,mBAAmB,CAAC,CAAC;IACtF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,MAAM,CAAC,IAAc;QAC1B,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC,SAAS,IAAI,CAAC,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE;YAAE,OAAO,KAAK,CAAC;QAC3D,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,MAAM,WAAW,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC5C,MAAM,SAAS,GAAG,CAAC,MAAM,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,CAAC,IAAI,CAAC,YAAY,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,SAAS,CAAC,CAAC,IAAI,IAAI,CAAC,YAAY,CAAC;QACjH,MAAM,QAAQ,GAAG,MAAM,SAAS,CAAC,WAAW,CAAC;YAC5C,IAAI,EAAE,YAAY;YAClB,KAAK,EAAE,IAAI,CAAC,YAAY;YACxB,QAAQ,EAAE,gBAAgB,CAAC,SAAS,EAAE,KAAK,CAAC;YAC5C,OAAO,EAAE;gBACR,EAAE,GAAG,EAAE,eAAe,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,EAAE,+BAA+B,EAAE;gBACpF,EAAE,GAAG,EAAE,eAAe,CAAC,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,MAAM,EAAE,2CAA2C,EAAE;aACvG;YACD,UAAU,EAAE,eAAe,CAAC,OAAO;YACnC,MAAM,EAAE,eAAe,CAAC,IAAI;YAC5B,QAAQ,EAAE,IAAI,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,sBAAsB,CAAC;YACvD,SAAS,EAAE,OAAO;YAClB,KAAK,EAAE,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,EAAE,EAAE,IAAI,CAAC,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE;SACjI,CAAC,CAAC;QACH,cAAc,CAAC,IAAI,CAAC,EAAE,EAAE,EAAE,WAAW,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QAClE,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,CAAC,CAAC;QACxG,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;;;OAOG;IACH,KAAK,CAAC,eAAe,CAAC,MAAc,EAAE,MAA0B;QAC/D,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,CAAC;QACjC,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,EAAE,UAAU,IAAI,CAAC,SAAS;YAAE,OAAO,KAAK,CAAC;QAClD,MAAM,SAAS,CAAC,mBAAmB,CAAC,IAAI,CAAC,UAAU,EAAE,MAAM,KAAK,MAAM,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,CAAC,CAAC,eAAe,CAAC,OAAO,CAAC,CAAC;QACzH,OAAO,IAAI,CAAC;IACb,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,MAAc;QAC7B,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC5B,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,eAAe,CAAC,MAAM,EAAE,SAAS,CAAC,CAAC;QAC/C,CAAC;gBAAS,CAAC;YACV,IAAI,CAAC,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IAED;;;;;OAKG;IACH,KAAK,CAAC,SAAS,CAAC,QAAuB;QACtC,MAAM,OAAO,GAAG,QAAQ,CAAC,KAAK,CAAC;QAC/B,IAAI,CAAC,OAAO;YAAE,OAAO,IAAI,CAAC;QAC1B,MAAM,IAAI,GAAG,WAAW,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;QACzC,MAAM,UAAU,GAAG,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,SAAS,KAAK,eAAe,CAAC,IAAI,CAAC;QACjG,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,UAAU,KAAK,QAAQ,CAAC,EAAE,EAAE,CAAC;YAC9C,wEAAwE;YACxE,qEAAqE;YACrE,IAAI,CAAC,UAAU,IAAI,UAAU,CAAC,QAAQ,CAAC,EAAE,CAAC;gBAAE,OAAO,IAAI,CAAC;YACxD,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,yDAAyD,CAAC,CAAC,CAAC,0DAA0D,CAAC;YAC3I,MAAM,IAAI,GAAG,aAAa,GAAG,gCAAgC,CAAC;YAC9D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,+CAA+C,EAAE,EAAE,MAAM,EAAE,OAAO,CAAC,MAAM,EAAE,UAAU,EAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;YACrI,MAAM,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,EAAE,CAAC,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC;YACnF,OAAO,oCAAoC,OAAO,CAAC,OAAO,QAAQ,OAAO,CAAC,EAAE,0BAA0B,GAAG,oEAAoE,CAAC;QAC/K,CAAC;QAED,WAAW,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACzB,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU,IAAI,QAAQ,CAAC,SAAS,KAAK,eAAe,CAAC,IAAI,EAAE,CAAC;YACnF,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,wBAAwB,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACzF,gFAAgF;YAChF,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,IAAI,CAAC,EAAE,CAAC;gBAAE,OAAO,gCAAgC,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,EAAE,sDAAsD,CAAC;YAC3J,IAAI,QAAQ,CAAC,MAAM,KAAK,WAAW,IAAI,QAAQ,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;gBACtE,OAAO,YAAY,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,EAAE,4EAA4E,CAAC;YAC5H,CAAC;YACD,IAAI,QAAQ,CAAC,MAAM,KAAK,UAAU;gBAAE,OAAO,sCAAsC,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,EAAE,2EAA2E,CAAC;YACxL,OAAO,kCAAkC,IAAI,CAAC,OAAO,QAAQ,IAAI,CAAC,EAAE,+DAA+D,CAAC;QACrI,CAAC;QAED,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,OAAO,GAAG,MAAM,KAAK,CAAC,QAAQ,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACnD,IAAI,CAAC,IAAI,CAAC,WAAW,IAAI,gBAAgB,CAAC,OAAO,CAAC,KAAK,IAAI,CAAC,WAAW,EAAE,CAAC;YACzE,sEAAsE;YACtE,wDAAwD;YACxD,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;YACvB,MAAM,MAAM,GAAG,aAAa,CAAC;gBAC5B,YAAY,EAAE,IAAI,CAAC,YAAY;gBAC/B,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,EAAE,EAAE,IAAI,CAAC,EAAE;gBACX,OAAO,EAAE,IAAI,CAAC,OAAO;gBACrB,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;gBAC5C,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAClD,CAAC,CAAC;YACH,MAAM,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;YAC1B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,8DAA8D,EAAE,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,EAAE,CAAC,CAAC;YACtG,OAAO,YAAY,IAAI,CAAC,OAAO,yHAAyH,CAAC;QAC1J,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,KAAK,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACjD,aAAa,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACvB,2DAA2D;QAC3D,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,uCAAuC,EAAE;YACzD,MAAM,EAAE,IAAI,CAAC,EAAE;YACf,UAAU,EAAE,QAAQ,CAAC,EAAE;YACvB,EAAE,EAAE,IAAI,CAAC,EAAE;YACX,OAAO,EAAE,IAAI,CAAC,OAAO;YACrB,SAAS,EAAE,IAAI,CAAC,EAAE;YAClB,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,YAAY,EAAE,IAAI,CAAC,YAAY;SAC/B,CAAC,CAAC;QACH,IAAI,CAAC;YACJ,MAAM,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,GAAG,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;QAC5I,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,0CAA0C,EAAE,EAAE,QAAQ,EAAE,IAAI,CAAC,QAAQ,EAAE,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QACpJ,CAAC;QACD,OAAO,mCAAmC,IAAI,CAAC,OAAO,iBAAiB,IAAI,CAAC,EAAE,YAAY,IAAI,CAAC,QAAQ,0CAA0C,CAAC;IACnJ,CAAC;CACD"}

package/dist/backend/backend/src/services/google/gmail-send-gate.d.ts

@@ -57,7 +57,25 @@ export interface HeldSend {
     claim?: string;
     /** When it was held (epoch ms) */
     heldAt: number;
+    /** Google account the draft lives in (X-Google-Account), when not the default */
+    account?: string;
+    /** sha256 of the draft's to/cc/subject/body when the owner was asked; an edit changes it */
+    fingerprint?: string;
+    /** The decision card the owner answers */
+    decisionId?: string;
 }
+/** Remember that a card's answer has been acted on. */
+export declare function markSettled(decisionId: string): void;
+/** True when this card's answer was already acted on. */
+export declare function wasSettled(decisionId: string): boolean;
+/**
+ * Persist holds to `file` and load whatever is already there (call once at
+ * startup, before cards can settle).
+ *
+ * @param file - JSON file, e.g. ~/.crewly/gmail-send-holds.json
+ * @returns Number of holds loaded
+ */
+export declare function loadHeldSends(file: string): number;
 /**
  * Record an attempted send and the instruction the agent cites for it.
  *
@@ -70,20 +88,8 @@ export declare function holdGmailSend(input: {
     to: string;
     subject: string;
     claim?: string;
+    account?: string;
 }): HeldSend;
-/**
- * Spend an approval the owner gave for this agent.
- *
- * @param agentSession - The agent attempting to send
- * @returns True when an approval was available and has now been used up
- */
-export declare function consumeSendApproval(agentSession: string): boolean;
-/**
- * Grant one send to an agent.
- *
- * @param agentSession - The agent allowed to send
- */
-export declare function grantSendApproval(agentSession: string): void;
 /**
  * Everything waiting on the owner, oldest first.
  *
@@ -97,6 +103,15 @@ export declare function listHeldSends(): HeldSend[];
  * @returns The hold, or undefined
  */
 export declare function getHeldSend(id: string): HeldSend | undefined;
+/**
+ * Merge fields into a hold (the fingerprint and card id once the owner has
+ * been asked).
+ *
+ * @param id - Hold id
+ * @param patch - Fields to set
+ * @returns The updated hold, or undefined when there is none
+ */
+export declare function updateHeldSend(id: string, patch: Partial<Pick<HeldSend, 'fingerprint' | 'decisionId'>>): HeldSend | undefined;
 /**
  * Drop a hold once it has been answered.
  *

package/dist/backend/backend/src/services/google/gmail-send-gate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"gmail-send-gate.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/google/gmail-send-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAMH,8CAA8C;AAC9C,MAAM,WAAW,QAAQ;IACxB,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;CACf;AAaD;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;CACf,GAAG,QAAQ,CAYX;AAED;;;;;GAKG;AACH,wBAAgB,mBAAmB,CAAC,YAAY,EAAE,MAAM,GAAG,OAAO,CAKjE;AAED;;;;GAIG;AACH,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAE5D;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,QAAQ,EAAE,CAE1C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAE5D;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAEjD;AAED,+BAA+B;AAC/B,wBAAgB,kBAAkB,IAAI,IAAI,CAGzC"}
+{"version":3,"file":"gmail-send-gate.d.ts","sourceRoot":"","sources":["../../../../../../backend/src/services/google/gmail-send-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAKH,8CAA8C;AAC9C,MAAM,WAAW,QAAQ;IACxB,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,gCAAgC;IAChC,YAAY,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,OAAO,EAAE,MAAM,CAAC;IAChB,8CAA8C;IAC9C,EAAE,EAAE,MAAM,CAAC;IACX,mBAAmB;IACnB,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;OAKG;IACH,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,kCAAkC;IAClC,MAAM,EAAE,MAAM,CAAC;IACf,iFAAiF;IACjF,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,4FAA4F;IAC5F,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,0CAA0C;IAC1C,UAAU,CAAC,EAAE,MAAM,CAAC;CACpB;AAYD,uDAAuD;AACvD,wBAAgB,WAAW,CAAC,UAAU,EAAE,MAAM,GAAG,IAAI,CAGpD;AAED,yDAAyD;AACzD,wBAAgB,UAAU,CAAC,UAAU,EAAE,MAAM,GAAG,OAAO,CAEtD;AAoBD;;;;;;GAMG;AACH,wBAAgB,aAAa,CAAC,IAAI,EAAE,MAAM,GAAG,MAAM,CAclD;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,KAAK,EAAE;IACpC,YAAY,EAAE,MAAM,CAAC;IACrB,OAAO,EAAE,MAAM,CAAC;IAChB,EAAE,EAAE,MAAM,CAAC;IACX,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB,GAAG,QAAQ,CAcX;AAED;;;;GAIG;AACH,wBAAgB,aAAa,IAAI,QAAQ,EAAE,CAE1C;AAED;;;;;GAKG;AACH,wBAAgB,WAAW,CAAC,EAAE,EAAE,MAAM,GAAG,QAAQ,GAAG,SAAS,CAE5D;AAED;;;;;;;GAOG;AACH,wBAAgB,cAAc,CAAC,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,CAAC,IAAI,CAAC,QAAQ,EAAE,aAAa,GAAG,YAAY,CAAC,CAAC,GAAG,QAAQ,GAAG,SAAS,CAO7H;AAED;;;;;GAKG;AACH,wBAAgB,aAAa,CAAC,EAAE,EAAE,MAAM,GAAG,OAAO,CAIjD;AAED,+BAA+B;AAC/B,wBAAgB,kBAAkB,IAAI,IAAI,CAIzC"}

package/dist/backend/backend/src/services/google/gmail-send-gate.js

@@ -36,17 +36,68 @@
  *
  * @module services/google/gmail-send-gate
  */
-import { LoggerService } from '../core/logger.service.js';
-const logger = LoggerService.getInstance().createComponentLogger('GmailSendGate');
+import fs from 'node:fs';
+import path from 'node:path';
 /** Held sends, newest last, keyed by hold id. */
 const held = new Map();
+/** Where holds are persisted (set at startup); undefined = memory only. */
+let storeFile;
+/** Decision ids already acted on (bounded, persisted) so a repeat settle is not mistaken for a lost hold. */
+const SETTLED_MAX = 200;
+let settled = [];
+/** Remember that a card's answer has been acted on. */
+export function markSettled(decisionId) {
+    settled = [...settled.filter((d) => d !== decisionId), decisionId].slice(-SETTLED_MAX);
+    persist();
+}
+/** True when this card's answer was already acted on. */
+export function wasSettled(decisionId) {
+    return settled.includes(decisionId);
+}
+/**
+ * Write the holds to disk (tmp + rename). A card waits up to 24 h and every
+ * release restarts the backend, so a hold kept only in memory would be lost
+ * while its card still shows Yes. Failure is swallowed: the in-memory hold
+ * still works until the next restart.
+ */
+function persist() {
+    if (!storeFile)
+        return;
+    try {
+        fs.mkdirSync(path.dirname(storeFile), { recursive: true });
+        const tmp = `${storeFile}.${process.pid}.tmp`;
+        fs.writeFileSync(tmp, JSON.stringify({ holds: Array.from(held.values()), settled }, null, 2));
+        fs.renameSync(tmp, storeFile);
+    }
+    catch {
+        /* best effort */
+    }
+}
 /**
- * Agents holding a one-shot approval.
+ * Persist holds to `file` and load whatever is already there (call once at
+ * startup, before cards can settle).
  *
- * Consumed by the next send from that agent, so approving one message does
- * not leave the account open.
+ * @param file - JSON file, e.g. ~/.crewly/gmail-send-holds.json
+ * @returns Number of holds loaded
  */
-const approved = new Set();
+export function loadHeldSends(file) {
+    storeFile = file;
+    held.clear();
+    settled = [];
+    try {
+        const parsed = JSON.parse(fs.readFileSync(file, 'utf-8'));
+        if (Array.isArray(parsed.settled))
+            settled = parsed.settled.filter((x) => typeof x === 'string');
+        for (const h of Array.isArray(parsed.holds) ? parsed.holds : []) {
+            if (h && typeof h.id === 'string' && typeof h.draftId === 'string')
+                held.set(h.id, h);
+        }
+    }
+    catch {
+        /* no file yet */
+    }
+    return held.size;
+}
 /**
  * Record an attempted send and the instruction the agent cites for it.
  *
@@ -61,32 +112,13 @@ export function holdGmailSend(input) {
         to: input.to,
         subject: input.subject,
         ...(input.claim ? { claim: input.claim } : {}),
+        ...(input.account ? { account: input.account } : {}),
         heldAt: Date.now(),
     };
     held.set(entry.id, entry);
+    persist();
     return entry;
 }
-/**
- * Spend an approval the owner gave for this agent.
- *
- * @param agentSession - The agent attempting to send
- * @returns True when an approval was available and has now been used up
- */
-export function consumeSendApproval(agentSession) {
-    if (!approved.has(agentSession))
-        return false;
-    approved.delete(agentSession);
-    logger.info('Agent spent an owner approval to send mail', { agentSession });
-    return true;
-}
-/**
- * Grant one send to an agent.
- *
- * @param agentSession - The agent allowed to send
- */
-export function grantSendApproval(agentSession) {
-    approved.add(agentSession);
-}
 /**
  * Everything waiting on the owner, oldest first.
  *
@@ -104,6 +136,23 @@ export function listHeldSends() {
 export function getHeldSend(id) {
     return held.get(id);
 }
+/**
+ * Merge fields into a hold (the fingerprint and card id once the owner has
+ * been asked).
+ *
+ * @param id - Hold id
+ * @param patch - Fields to set
+ * @returns The updated hold, or undefined when there is none
+ */
+export function updateHeldSend(id, patch) {
+    const cur = held.get(id);
+    if (!cur)
+        return undefined;
+    const next = { ...cur, ...patch };
+    held.set(id, next);
+    persist();
+    return next;
+}
 /**
  * Drop a hold once it has been answered.
  *
@@ -111,11 +160,15 @@ export function getHeldSend(id) {
  * @returns True when there was one to drop
  */
 export function clearHeldSend(id) {
-    return held.delete(id);
+    const had = held.delete(id);
+    if (had)
+        persist();
+    return had;
 }
 /** Drops all state (tests). */
 export function resetGmailSendGate() {
     held.clear();
-    approved.clear();
+    settled = [];
+    storeFile = undefined;
 }
 //# sourceMappingURL=gmail-send-gate.js.map

package/dist/backend/backend/src/services/google/gmail-send-gate.js.map

@@ -1 +1 @@
-{"version":3,"file":"gmail-send-gate.js","sourceRoot":"","sources":["../../../../../../backend/src/services/google/gmail-send-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAE1D,MAAM,MAAM,GAAG,aAAa,CAAC,WAAW,EAAE,CAAC,qBAAqB,CAAC,eAAe,CAAC,CAAC;AAyBlF,iDAAiD;AACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;AAEzC;;;;;GAKG;AACH,MAAM,QAAQ,GAAG,IAAI,GAAG,EAAU,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAM7B;IACA,MAAM,KAAK,GAAa;QACvB,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE;KAClB,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mBAAmB,CAAC,YAAoB;IACvD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC;QAAE,OAAO,KAAK,CAAC;IAC9C,QAAQ,CAAC,MAAM,CAAC,YAAY,CAAC,CAAC;IAC9B,MAAM,CAAC,IAAI,CAAC,4CAA4C,EAAE,EAAE,YAAY,EAAE,CAAC,CAAC;IAC5E,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,YAAoB;IACrD,QAAQ,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AAC5B,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACrC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACrB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,EAAU;IACvC,OAAO,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;AACxB,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,kBAAkB;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,QAAQ,CAAC,KAAK,EAAE,CAAC;AAClB,CAAC"}
+{"version":3,"file":"gmail-send-gate.js","sourceRoot":"","sources":["../../../../../../backend/src/services/google/gmail-send-gate.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,MAAM,SAAS,CAAC;AACzB,OAAO,IAAI,MAAM,WAAW,CAAC;AA+B7B,iDAAiD;AACjD,MAAM,IAAI,GAAG,IAAI,GAAG,EAAoB,CAAC;AAEzC,2EAA2E;AAC3E,IAAI,SAA6B,CAAC;AAElC,6GAA6G;AAC7G,MAAM,WAAW,GAAG,GAAG,CAAC;AACxB,IAAI,OAAO,GAAa,EAAE,CAAC;AAE3B,uDAAuD;AACvD,MAAM,UAAU,WAAW,CAAC,UAAkB;IAC7C,OAAO,GAAG,CAAC,GAAG,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,UAAU,CAAC,EAAE,UAAU,CAAC,CAAC,KAAK,CAAC,CAAC,WAAW,CAAC,CAAC;IACvF,OAAO,EAAE,CAAC;AACX,CAAC;AAED,yDAAyD;AACzD,MAAM,UAAU,UAAU,CAAC,UAAkB;IAC5C,OAAO,OAAO,CAAC,QAAQ,CAAC,UAAU,CAAC,CAAC;AACrC,CAAC;AAED;;;;;GAKG;AACH,SAAS,OAAO;IACf,IAAI,CAAC,SAAS;QAAE,OAAO;IACvB,IAAI,CAAC;QACJ,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QAC3D,MAAM,GAAG,GAAG,GAAG,SAAS,IAAI,OAAO,CAAC,GAAG,MAAM,CAAC;QAC9C,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC9F,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACR,iBAAiB;IAClB,CAAC;AACF,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,aAAa,CAAC,IAAY;IACzC,SAAS,GAAG,IAAI,CAAC;IACjB,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,OAAO,GAAG,EAAE,CAAC;IACb,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAA+C,CAAC;QACxG,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,OAAO,CAAC;YAAE,OAAO,GAAG,MAAM,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC;QACjG,KAAK,MAAM,CAAC,IAAI,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACjE,IAAI,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,OAAO,CAAC,CAAC,OAAO,KAAK,QAAQ;gBAAE,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC;QACvF,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,iBAAiB;IAClB,CAAC;IACD,OAAO,IAAI,CAAC,IAAI,CAAC;AAClB,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,KAO7B;IACA,MAAM,KAAK,GAAa;QACvB,EAAE,EAAE,GAAG,KAAK,CAAC,YAAY,IAAI,KAAK,CAAC,OAAO,EAAE;QAC5C,YAAY,EAAE,KAAK,CAAC,YAAY;QAChC,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,EAAE,EAAE,KAAK,CAAC,EAAE;QACZ,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,GAAG,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9C,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACpD,MAAM,EAAE,IAAI,CAAC,GAAG,EAAE;KAClB,CAAC;IACF,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IAC1B,OAAO,EAAE,CAAC;IACV,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,aAAa;IAC5B,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC,CAAC;AACtE,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,WAAW,CAAC,EAAU;IACrC,OAAO,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;AACrB,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,cAAc,CAAC,EAAU,EAAE,KAA4D;IACtG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IACzB,IAAI,CAAC,GAAG;QAAE,OAAO,SAAS,CAAC;IAC3B,MAAM,IAAI,GAAG,EAAE,GAAG,GAAG,EAAE,GAAG,KAAK,EAAE,CAAC;IAClC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,CAAC,CAAC;IACnB,OAAO,EAAE,CAAC;IACV,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,aAAa,CAAC,EAAU;IACvC,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAC5B,IAAI,GAAG;QAAE,OAAO,EAAE,CAAC;IACnB,OAAO,GAAG,CAAC;AACZ,CAAC;AAED,+BAA+B;AAC/B,MAAM,UAAU,kBAAkB;IACjC,IAAI,CAAC,KAAK,EAAE,CAAC;IACb,OAAO,GAAG,EAAE,CAAC;IACb,SAAS,GAAG,SAAS,CAAC;AACvB,CAAC"}