feat(sync): add Google Workspace inbox filtering for employee sync

[tofikwest]

Summary

• add Google Workspace employee sync filter options: all, exclude, include
• add configurable email lists for excluded/included inboxes
• apply filtering in Google Workspace employee sync before import/reactivation/deactivation
• keep default behavior backward-compatible (all)
• keep generated OpenAPI changes included

Behavior

• all: sync all users
• exclude: sync all except listed full emails
• include: sync only listed full emails
• safety fallback: include mode with empty list falls back to all

Validation

• prettier check passed for touched files
• typecheck passed for packages/integration-platform and apps/api

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

2 Skipped Deployments

Project	Deployment	Actions	Updated (UTC)
app	Skipped		Feb 23, 2026 7:10pm
portal	Skipped		Feb 23, 2026 7:10pm

[cursor]

PR Summary

Medium Risk
Changes affect employee import/reactivation/deactivation behavior for Google Workspace and introduce new matching logic, which could unintentionally include/exclude users or alter deactivation scope if misconfigured.

Overview
Adds configurable Google Workspace employee sync filtering with sync_user_filter_mode (all/exclude/include) plus include/exclude term lists, applied before import/reactivation and (with special-case handling) member deactivation; include-mode with an empty list now logs a warning and falls back to syncing all users.

Updates the integration configuration UI to normalize multi-select values, conditionally show include/exclude fields based on the selected mode, and make multi-select inputs generally creatable/placeholder-aware. The Google Workspace manifest now exposes these new variables, and the generated OpenAPI spec is updated with new Cloud Security scan endpoints.

^{Written by Cursor Bugbot for commit 23fd3a6. This will update automatically on new commits. Configure here.}

[cursor]

Cursor Bugbot has reviewed your changes and found 1 potential issue.

^{Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.}

[claudfuen]

🎉 This PR is included in version 1.85.0 🎉

The release is available on GitHub release

Your semantic-release bot 📦🚀