ouyangbo/hermes-agent
1
0
Fork 0
Code Issues Pull Requests Actions 12 Packages Projects Releases Wiki Activity

docs(google-chat): document per-profile scoping and ADC fail-closed under multiplex

Browse Source
This commit is contained in:
Teknium
2026-09-02 03:43:47 -07:00
parent 3245264668
commit 3fcfa647ed
1 changed files with 9 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
website/docs/user-guide/messaging/google_chat.md
+9
View File
@@ -166,6 +166,15 @@ GOOGLE_CHAT_MAX_BYTES=16777216 # 16 MiB — cap on in-flight me
The project ID also falls back to `GOOGLE_CLOUD_PROJECT`, and the SA path falls
back to `GOOGLE_APPLICATION_CREDENTIALS` — use whichever convention you prefer.
Under a [multi-profile gateway](../multi-profile-gateways.md), every
`GOOGLE_CHAT_*` setting is read from the routed profile's own `.env`; a
secondary profile never inherits the default profile's project, subscription,
or service account. If a profile has no SA configured while the process
environment carries one for another profile, the adapter refuses to fall back
to Application Default Credentials (which would authenticate as that other
profile) and logs an explicit error instead — put
`GOOGLE_CHAT_SERVICE_ACCOUNT_JSON` in that profile's `.env`.
Install the Google Chat adapter dependencies through its maintained installer.
It applies the same pinned security floors used by the runtime checks: