# Gmail Connected Mail Connector

This official L1 connector pack declares the Gmail connected-mail provider and
the callout-profile identity selected by the `sendRecordEmail` Catalog route.
It contains no OAuth client, token, encryption key, workload identity, or
environment URL override.

The provider definition is loaded only by the independently deployed
Integration service. `pack.json` binds its path and SHA-256 in
`extensions.connectedMailProviderDefinitions`, so a release renderer copies
the exact secret-free file while controlplane installs only the callout
profile. Runtime consumes the provider-neutral route and fixed completion
projection; the `sfcrm` AppService and frontend never receive provider
credentials. L2 selects the exact Integration workload and supplies runtime
secret references without copying secret values into pack metadata.